$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E741FEE886511EE9428F93DC4F9AE02.roa File: 5E741FEE886511EE9428F93DC4F9AE02.roa (raw, json) Hash identifier: a3XBXIbwa+0FjNz/rMBeFomoloR6xKPOacvSxhEJZ2Q= Subject key identifier: 08:68:84:E0:23:2D:6E:A7:F7:33:74:25:09:74:05:BE:F6:29:53:4C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B447 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E741FEE886511EE9428F93DC4F9AE02.roa Signing time: Thu 08 May 2025 16:08:27 +0000 ROA not before: Thu 08 May 2025 16:08:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136720 IP address blocks: 103.104.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46151 (0xb447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:08:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd6fa-0414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d9:27:89:3e:1b:31:ca:8b:28:c1:97:f1:64: 96:1b:95:80:eb:fc:4d:bb:84:11:6a:60:3d:a6:a6: 0a:7d:4d:be:0f:f1:f2:1b:a6:4b:2e:db:b5:15:ef: 26:e0:9e:3e:42:dd:18:30:2c:f5:e1:a5:49:ff:a4: bb:c4:fb:04:04:b4:cf:d8:cb:65:a4:68:03:b9:0d: e3:f7:62:a3:76:d4:71:bc:66:69:7a:ba:b0:5b:3c: 44:2a:69:6f:b9:ee:0f:49:77:58:59:6c:a6:26:8e: bf:f1:1c:8b:3f:64:23:24:97:0e:b4:ea:8e:4c:4d: b6:a9:bf:58:a2:9b:b2:aa:fb:13:d0:9a:98:37:f7: ac:c1:b6:d9:38:c9:df:fd:bb:30:5e:85:f9:7f:f5: 5c:49:e1:cd:56:5a:9a:3f:f7:29:53:97:88:c6:84: 46:cb:e4:7c:51:d1:d5:92:fd:df:fb:c4:4a:77:e4: d3:ce:9e:8f:c1:5b:1e:45:c4:ff:45:76:5b:8e:a3: de:8d:20:63:49:da:a7:23:c6:91:2e:b0:a6:a8:25: 49:33:09:44:00:e0:e1:c9:38:79:2f:a1:5f:6d:93: 62:db:36:f9:4a:76:62:99:3a:81:9a:01:96:8d:c0: 94:d5:ee:84:5f:7c:e3:e8:d9:ef:15:a4:bc:4a:e1: 09:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:68:84:E0:23:2D:6E:A7:F7:33:74:25:09:74:05:BE:F6:29:53:4C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E741FEE886511EE9428F93DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.208.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:cc:4e:54:3b:c4:55:65:ac:1a:19:df:34:fb:8d:38:54:e0: 5c:97:53:fb:15:e0:63:ab:80:f6:90:a7:89:89:55:4d:da:51: 58:35:15:08:0f:4c:df:4d:63:eb:b3:58:a4:dc:a1:e5:aa:5e: d1:90:4c:6c:29:de:fc:b8:97:33:d4:f6:5b:c1:45:0d:00:03: 8d:be:aa:66:a6:b3:77:ea:21:df:e5:08:87:d0:89:3a:9f:c8: a6:3e:f0:80:df:71:2d:80:c2:83:bb:6c:e3:c6:a5:c0:29:02: 83:c6:6d:1e:cf:99:2d:e7:4a:84:a8:b8:d9:8e:23:32:6b:4c: da:3e:a0:45:62:4e:72:28:e3:3a:0e:45:94:bb:32:4f:d9:bc: 53:11:2f:00:61:2d:1e:0a:00:ca:9a:32:80:e3:cc:e9:5c:31: 7e:14:ef:aa:e3:f9:87:54:dd:86:75:18:d5:c7:19:7d:23:0a: 0b:48:41:11:fb:6a:89:d9:9c:82:d4:d3:37:13:b1:75:04:3d: ad:e7:08:9c:3f:20:28:69:ad:0b:f4:fe:37:48:d0:b4:b9:80: 59:88:50:e5:22:5c:f8:43:2e:6c:a8:ee:5b:be:e5:58:f0:78: dc:2c:ee:32:22:b6:a8:a2:30:ee:fe:f7:16:80:c0:2b:3f:02: 85:fe:6b:83 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALRHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDgyN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2ZmEtMDQxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfZJ4k+GzHKiyjBl/FklhuVgOv8TbuEEWpgPaamCn1Nvg/x8humSy7btRXv JuCePkLdGDAs9eGlSf+ku8T7BAS0z9jLZaRoA7kN4/dio3bUcbxmaXq6sFs8RCpp b7nuD0l3WFlspiaOv/Eciz9kIySXDrTqjkxNtqm/WKKbsqr7E9CamDf3rMG22TjJ 3/27MF6F+X/1XEnhzVZamj/3KVOXiMaERsvkfFHR1ZL93/vESnfk086ej8FbHkXE /0V2W46j3o0gY0napyPGkS6wpqglSTMJRADg4ck4eS+hX22TYts2+Up2Ypk6gZoB lo3AlNXuhF984+jZ7xWkvErhCaUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQIaITg Iy1up/czdCUJdAW+9ilTTDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVFNzQxRkVF ODg2NTExRUU5NDI4RjkzREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ2jQMA0GCSqGSIb3DQEBCwUAA4IBAQB6zE5UO8RVZawa Gd80+404VOBcl1P7FeBjq4D2kKeJiVVN2lFYNRUID0zfTWPrs1ik3KHlql7RkExs Kd78uJcz1PZbwUUNAAONvqpmprN36iHf5QiH0Ik6n8imPvCA33EtgMKDu2zjxqXA KQKDxm0ez5kt50qEqLjZjiMya0zaPqBFYk5yKOM6DkWUuzJP2bxTES8AYS0eCgDK mjKA48zpXDF+FO+q4/mHVN2GdRjVxxl9IwoLSEER+2qJ2ZyC1NM3E7F1BD2t5wic PyAoaa0L9P43SNC0uYBZiFDlIlz4Qy5sqO5bvuVY8HjcLO4yIraoojDu/vcWgMAr PwKF/muD -----END CERTIFICATE-----Generated at Tue May 13 06:38:36 2025 by rpki-client