$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5C3EE88C114111EC8333C36EC4F9AE02.roa File: 5C3EE88C114111EC8333C36EC4F9AE02.roa (raw, json) Hash identifier: tLh9HSKZtLmSmjXyC+tDf9K9vBWSD0uHCBfWpjcvBKc= Subject key identifier: A6:3D:DA:38:31:79:61:EF:89:49:F5:1B:61:B0:27:DD:1E:D9:C0:7E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B4ED Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5C3EE88C114111EC8333C36EC4F9AE02.roa Signing time: Thu 08 May 2025 16:10:58 +0000 ROA not before: Thu 08 May 2025 16:10:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138232 IP address blocks: 103.124.141.0/24 maxlen: 24 103.124.142.0/24 maxlen: 24 103.124.143.0/24 maxlen: 24 2001:df0:b2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46317 (0xb4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:10:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd792-73dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:60:19:ff:ac:8d:a2:dd:bb:d5:a5:5e:6d: 0b:0d:6e:30:e6:e6:6c:76:69:c1:07:4d:84:bf:64: 68:97:75:5b:c1:29:d2:d0:d0:94:e0:f0:70:c5:32: b3:d7:f3:4a:20:fd:22:89:14:19:a9:e6:72:1d:db: de:2f:5d:e3:e1:c2:79:ee:7b:31:07:bf:bf:e8:bc: cf:8f:4f:19:53:0b:ad:49:b6:b1:ec:55:39:b0:f9: 02:91:fe:f3:7e:b3:a4:0a:e3:2d:59:a2:bc:c0:a9: 07:a9:70:b7:30:0f:32:84:28:80:f8:97:9a:d0:87: f5:e3:03:a7:16:a7:75:f2:37:29:a1:40:f1:63:2d: 8f:4e:48:c6:d1:bc:0b:69:28:56:5f:3f:fb:65:a7: e0:9a:a8:7b:b6:de:e0:18:30:14:bb:32:94:84:64: 0f:f7:69:cf:44:ac:4a:c6:b6:8b:cd:2e:df:7f:91: 25:f0:08:a4:e8:80:b4:19:6e:c8:38:e3:ef:f3:3c: 9d:d3:a9:62:4e:19:4e:73:db:d4:0e:ef:61:30:27: ac:9c:99:41:5f:d9:7d:ad:6e:f9:3a:fc:e7:c6:61: 4c:2d:68:66:39:df:04:be:2d:e3:3c:8e:2a:63:7c: 4b:f9:b9:c9:42:91:58:30:fe:0b:de:a4:0f:d1:67: c2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3D:DA:38:31:79:61:EF:89:49:F5:1B:61:B0:27:DD:1E:D9:C0:7E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5C3EE88C114111EC8333C36EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.141.0-103.124.143.255 IPv6: 2001:df0:b2c0::/48 Signature Algorithm: sha256WithRSAEncryption 3f:32:20:83:0e:3e:e7:ee:3d:5b:09:18:b8:2e:17:da:c3:ec: 68:df:5a:6d:18:01:cf:f9:c8:21:d5:5c:78:27:d9:dc:da:90: be:c0:90:f4:13:8a:ba:bf:75:b3:c6:90:a2:02:26:57:8a:92: c8:8f:44:68:90:22:5f:91:10:7e:1f:33:d2:f2:27:59:e8:76: 05:ae:4b:47:11:ab:13:f8:76:23:8b:55:2c:09:13:ce:83:f2: 10:ba:ad:51:b8:76:78:da:27:46:6d:e7:ea:36:28:32:b5:0d: 78:9b:bd:7a:f6:1c:f3:dc:f5:1d:20:5b:91:97:fd:72:74:a8: e7:71:9d:33:07:d8:67:19:06:56:1a:1c:b9:b0:9d:b6:f8:87: 45:a5:66:7f:e2:76:2c:a3:b0:5f:9d:be:88:af:82:13:57:04: 53:dd:4c:f7:e3:4d:cc:d0:51:31:af:c1:14:39:c6:0c:c2:27: 37:1b:b7:d4:30:9f:e4:c4:d9:7b:a5:b6:04:20:06:2d:6f:a3: ab:a6:bb:74:e7:30:0b:0f:54:a4:41:88:ed:2e:89:73:c8:27: a1:40:99:f0:12:24:c1:ce:7a:55:9b:c1:d7:f9:30:d7:0f:a6: 8e:da:fd:a1:cc:80:6a:2e:21:cf:75:f2:aa:4e:94:07:50:90: 50:00:67:54 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIDALTtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTA1OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3OTItNzNkYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPBYBn/rI2i3bvVpV5tCw1uMObmbHZpwQdNhL9kaJd1W8Ep0tDQlODwcMUy s9fzSiD9IokUGanmch3b3i9d4+HCee57MQe/v+i8z49PGVMLrUm2sexVObD5ApH+ 836zpArjLVmivMCpB6lwtzAPMoQogPiXmtCH9eMDpxandfI3KaFA8WMtj05IxtG8 C2koVl8/+2Wn4Jqoe7be4BgwFLsylIRkD/dpz0SsSsa2i80u33+RJfAIpOiAtBlu yDjj7/M8ndOpYk4ZTnPb1A7vYTAnrJyZQV/Zfa1u+Tr858ZhTC1oZjnfBL4t4zyO KmN8S/m5yUKRWDD+C96kD9FnwvUCAwEAAaOCAq4wggKqMB0GA1UdDgQWBBSmPdo4 MXlh74lJ9RthsCfdHtnAfjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVDM0VFODhD MTE0MTExRUM4MzMzQzM2RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDgGCCsGAQUFBwEHAQH/ BCkwJzAUBAIAATAOMAwDBABnfI0DBARnfIAwDwQCAAIwCQMHACABDfCywDANBgkq hkiG9w0BAQsFAAOCAQEAPzIggw4+5+49WwkYuC4X2sPsaN9abRgBz/nIIdVceCfZ 3NqQvsCQ9BOKur91s8aQogImV4qSyI9EaJAiX5EQfh8z0vInWeh2Ba5LRxGrE/h2 I4tVLAkTzoPyELqtUbh2eNonRm3n6jYoMrUNeJu9evYc89z1HSBbkZf9cnSo53Gd MwfYZxkGVhocubCdtviHRaVmf+J2LKOwX52+iK+CE1cEU91M9+NNzNBRMa/BFDnG DMInNxu31DCf5MTZe6W2BCAGLW+jq6a7dOcwCw9UpEGI7S6Jc8gnoUCZ8BIkwc56 VZvB1/kw1w+mjtr9ocyAai4hz3Xyqk6UB1CQUABnVA== -----END CERTIFICATE-----Generated at Tue May 13 02:18:27 2025 by rpki-client