$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/641635E8D47111EDB09EB877C4F9AE02.roa File: 641635E8D47111EDB09EB877C4F9AE02.roa (raw, json) Hash identifier: F1MEsXEFxCiGIJKXcxEue3MK8JcxHo01ot6z6E1TB9o= Subject key identifier: 9B:7E:6A:C0:80:E9:AD:39:36:5D:FA:D0:BE:99:5B:84:10:81:33:14 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B816 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/641635E8D47111EDB09EB877C4F9AE02.roa Signing time: Thu 08 May 2025 16:23:12 +0000 ROA not before: Thu 08 May 2025 16:23:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149578 IP address blocks: 103.122.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 08:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47126 (0xb816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:23:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cda70-bf45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:f3:e5:18:af:30:19:bf:7d:68:57:7e:9c: 83:91:af:3b:5b:07:e1:b3:a1:b9:4c:6a:58:5d:d3: fe:9b:6c:07:fb:55:1b:9c:ba:06:87:44:45:5c:30: 75:86:59:d2:3d:6c:44:8d:48:94:4b:72:f1:2f:1d: 69:d4:0b:0e:bb:9f:9d:8a:62:6a:3c:d0:5b:29:2e: 69:3a:ef:c8:36:89:95:30:d9:4c:b0:22:4b:48:47: 47:b8:2b:48:61:91:94:cf:c6:8c:0b:c5:ca:ab:8a: 8d:93:32:52:48:59:f2:d9:0c:0a:5b:6d:5d:05:dc: 11:89:86:ac:91:fc:63:fc:cd:89:f5:75:8f:5e:e3: ff:8f:a9:53:a9:ae:2b:af:d5:cb:e6:24:ac:5f:4d: ec:56:93:99:fe:33:03:93:03:78:a1:35:6e:2f:9d: 6a:76:e1:e1:36:a9:f3:fc:ec:4a:e4:0a:ed:7a:9f: d9:12:a5:a3:ea:6c:95:65:09:95:3c:61:e5:ae:0a: 77:97:21:85:1d:33:e4:44:2d:0a:3f:bd:64:20:4b: 0d:2f:dc:24:88:60:51:f7:28:5a:62:c7:96:e3:11: 63:2f:df:40:d5:d6:3a:43:3a:f7:4c:d8:5b:93:91: e1:76:cf:72:23:27:38:a8:ea:0d:da:dc:53:be:a2: 1b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7E:6A:C0:80:E9:AD:39:36:5D:FA:D0:BE:99:5B:84:10:81:33:14 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/641635E8D47111EDB09EB877C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.146.0/23 Signature Algorithm: sha256WithRSAEncryption 67:85:5b:46:12:7b:f6:2d:fd:21:55:3c:cc:8f:77:6a:d1:24: 58:52:08:25:07:4c:62:ae:32:d5:0e:51:99:50:53:2a:28:be: 34:56:78:e1:5f:8f:bc:36:c0:a6:7a:40:32:7c:29:68:d1:e5: af:a0:84:1a:d9:d6:53:05:a3:fd:27:b3:41:56:a0:e6:7f:02: 1b:36:e9:c4:f2:56:2e:16:f1:e2:f9:a3:ae:00:ff:d8:99:05: 1d:81:51:94:62:b3:da:e0:d2:bd:77:c4:b7:1e:a4:ee:51:03: cc:6e:21:eb:cf:f8:e6:9d:7b:0b:79:9d:0c:87:81:05:20:6d: 0a:71:3f:7d:c1:af:44:26:3f:f7:2a:d1:f9:f2:d5:3f:dd:46: 05:38:aa:87:15:0f:b8:3d:78:66:7c:76:55:84:e8:45:fc:dc: 64:a3:a8:a4:60:84:44:02:b2:f6:92:07:d7:0f:2d:48:d6:55: d9:8e:b9:1a:25:7e:bc:8b:79:9b:ce:83:b5:37:65:56:92:7a: a6:59:3d:08:09:ec:be:df:2b:ea:96:20:ac:e8:3c:34:ed:4c: 50:66:f5:41:91:ad:80:f2:03:8a:6b:e9:fa:76:70:be:15:5b: d9:26:97:cb:61:84:3e:ad:fb:6a:42:f9:d7:7e:21:a7:82:75: e8:1c:84:8c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALgWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjMxMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhNzAtYmY0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALci8+UYrzAZv31oV36cg5GvO1sH4bOhuUxqWF3T/ptsB/tVG5y6BodERVww dYZZ0j1sRI1IlEty8S8dadQLDrufnYpiajzQWykuaTrvyDaJlTDZTLAiS0hHR7gr SGGRlM/GjAvFyquKjZMyUkhZ8tkMClttXQXcEYmGrJH8Y/zNifV1j17j/4+pU6mu K6/Vy+YkrF9N7FaTmf4zA5MDeKE1bi+danbh4Tap8/zsSuQK7Xqf2RKlo+pslWUJ lTxh5a4Kd5chhR0z5EQtCj+9ZCBLDS/cJIhgUfcoWmLHluMRYy/fQNXWOkM690zY W5OR4XbPciMnOKjqDdrcU76iGx8CAwEAAaOCApUwggKRMB0GA1UdDgQWBBSbfmrA gOmtOTZd+tC+mVuEEIEzFDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY0MTYzNUU4 RDQ3MTExRURCMDlFQjg3N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ3qSMA0GCSqGSIb3DQEBCwUAA4IBAQBnhVtGEnv2Lf0h VTzMj3dq0SRYUgglB0xirjLVDlGZUFMqKL40VnjhX4+8NsCmekAyfClo0eWvoIQa 2dZTBaP9J7NBVqDmfwIbNunE8lYuFvHi+aOuAP/YmQUdgVGUYrPa4NK9d8S3HqTu UQPMbiHrz/jmnXsLeZ0Mh4EFIG0KcT99wa9EJj/3KtH58tU/3UYFOKqHFQ+4PXhm fHZVhOhF/Nxko6ikYIREArL2kgfXDy1I1lXZjrkaJX68i3mbzoO1N2VWknqmWT0I Cey+3yvqliCs6Dw07UxQZvVBka2A8gOKa+n6dnC+FVvZJpfLYYQ+rftqQvnXfiGn gnXoHISM -----END CERTIFICATE-----Generated at Tue May 13 11:59:52 2025 by rpki-client