$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CAE728E615511EB9E96D333C4F9AE02.roa File: 5CAE728E615511EB9E96D333C4F9AE02.roa (raw, json) Hash identifier: 1zk42mUAOd7wc5F+YyRQ5OQJod9gOMvDD3dSy2NF8HI= Subject key identifier: C2:5A:DA:6D:F8:9C:54:16:24:5D:68:15:47:24:31:1E:9D:F1:67:7C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B179 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CAE728E615511EB9E96D333C4F9AE02.roa Signing time: Thu 08 May 2025 15:57:19 +0000 ROA not before: Thu 08 May 2025 15:57:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132962 IP address blocks: 103.56.29.0/24 maxlen: 24 103.56.175.0/24 maxlen: 24 103.254.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45433 (0xb179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:57:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd45f-3f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:b8:1b:f3:03:51:3c:82:28:68:d2:b5:d9: a7:96:2f:d4:a2:62:65:85:0e:57:bc:0a:00:9e:71: 67:ae:65:26:2b:18:69:dd:b3:88:e1:c1:66:07:53: 39:25:65:62:d5:d0:59:0e:d5:f2:95:ed:85:b2:3c: 8b:ef:65:e8:1b:4a:cb:6f:ec:df:96:5d:60:f6:ee: 8d:03:43:a7:ac:37:18:08:a0:c2:ac:be:6d:d0:37: 59:16:26:b4:80:38:47:d9:d9:77:41:ab:3a:31:07: ec:75:bf:5c:e2:bd:f9:13:c4:0a:91:ab:68:8c:f1: 69:c5:17:01:06:26:d8:5a:4f:45:a4:6d:8a:4c:c2: 97:12:35:6e:bb:c5:f6:26:e7:51:a2:d7:d6:72:4f: f4:dd:f9:af:88:f0:f0:33:06:cb:e0:5e:40:e1:ea: 45:c0:99:e3:e0:8c:75:d4:3c:f0:58:de:dc:bf:d8: ef:83:b1:56:17:fe:67:0a:eb:28:ae:89:72:e8:4b: cf:7d:54:fb:07:c4:23:45:5d:6c:4d:60:7e:31:e1: d4:39:9e:b4:c7:4b:79:87:1a:eb:fd:f2:b8:df:79: cc:b8:ca:f8:98:fc:0b:cd:a3:b8:a9:45:31:f3:61: 83:d5:9a:8b:28:b7:91:c9:a5:fc:6a:20:45:b7:2c: 4d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5A:DA:6D:F8:9C:54:16:24:5D:68:15:47:24:31:1E:9D:F1:67:7C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CAE728E615511EB9E96D333C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.56.29.0/24 103.56.175.0/24 103.254.230.0/24 Signature Algorithm: sha256WithRSAEncryption 94:cf:74:d4:da:d1:11:18:51:3b:e2:69:d3:fe:26:14:c3:56: 9d:d1:3c:44:05:86:82:12:fe:60:c5:7a:34:e6:f2:13:1b:ae: 74:be:91:9d:4e:0e:23:61:af:dd:8d:ae:f6:30:a6:d6:52:fa: 55:ce:53:10:96:e2:88:92:0c:f9:d3:a1:40:4d:e7:0a:4d:60: 01:82:7d:a3:f1:69:d2:27:bb:17:58:1f:15:bb:9b:3c:f8:20: 6f:f2:85:58:0d:b2:fc:44:ca:bd:78:35:de:26:89:d5:e0:90: 2e:da:af:c0:95:28:46:dd:68:df:98:50:a2:eb:42:7d:b7:bf: 6c:14:28:32:ac:33:30:8e:72:f7:8d:d7:2c:86:50:a8:40:07: 9a:81:21:9a:c6:12:c9:f0:98:3e:91:c6:2b:c7:68:ba:81:f0: 38:96:e2:55:42:91:25:1d:b6:04:a6:fc:68:f0:a9:9b:cc:71: d2:8c:17:ed:dd:03:f8:4b:b6:39:d5:13:ad:c1:f1:9d:2b:b1: 56:1a:37:32:52:34:a7:f8:78:94:97:1f:ee:f8:d1:3f:25:be: 45:f1:f4:30:9f:67:58:9e:32:45:78:1f:cc:c2:42:18:a0:9d: f3:36:02:7d:57:aa:6d:f6:be:70:47:70:1b:ac:ba:20:9d:92: f9:0a:37:b0 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIDALF5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTcxOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0NWYtM2Y4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0suBvzA1E8giho0rXZp5Yv1KJiZYUOV7wKAJ5xZ65lJisYad2ziOHBZgdT OSVlYtXQWQ7V8pXthbI8i+9l6BtKy2/s35ZdYPbujQNDp6w3GAigwqy+bdA3WRYm tIA4R9nZd0GrOjEH7HW/XOK9+RPECpGraIzxacUXAQYm2FpPRaRtikzClxI1brvF 9ibnUaLX1nJP9N35r4jw8DMGy+BeQOHqRcCZ4+CMddQ88Fje3L/Y74OxVhf+Zwrr KK6JcuhLz31U+wfEI0VdbE1gfjHh1DmetMdLeYca6/3yuN95zLjK+Jj8C82juKlF MfNhg9Waiyi3kcml/GogRbcsTaECAwEAAaOCAqEwggKdMB0GA1UdDgQWBBTCWtpt +JxUFiRdaBVHJDEenfFnfDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVDQUU3MjhF NjE1NTExRUI5RTk2RDMzM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCsGCCsGAQUFBwEHAQH/ BBwwGjAYBAIAATASAwQAZzgdAwQAZzivAwQAZ/7mMA0GCSqGSIb3DQEBCwUAA4IB AQCUz3TU2tERGFE74mnT/iYUw1ad0TxEBYaCEv5gxXo05vITG650vpGdTg4jYa/d ja72MKbWUvpVzlMQluKIkgz506FATecKTWABgn2j8WnSJ7sXWB8Vu5s8+CBv8oVY DbL8RMq9eDXeJonV4JAu2q/AlShG3WjfmFCi60J9t79sFCgyrDMwjnL3jdcshlCo QAeagSGaxhLJ8Jg+kcYrx2i6gfA4luJVQpElHbYEpvxo8KmbzHHSjBft3QP4S7Y5 1ROtwfGdK7FWGjcyUjSn+HiUlx/u+NE/Jb5F8fQwn2dYnjJFeB/MwkIYoJ3zNgJ9 V6pt9r5wR3AbrLognZL5Cjew -----END CERTIFICATE-----Generated at Tue May 13 00:10:39 2025 by rpki-client