$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa File: 6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa (raw, json) Hash identifier: CF/jqWvNeypMS1YKusiz5tw4kDc0bbsToKuN2DQ21mY= Subject key identifier: 16:1F:68:80:45:F2:33:93:F8:57:07:43:D8:7D:F1:A1:1A:C1:60:B7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B154 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa Signing time: Thu 08 May 2025 15:56:44 +0000 ROA not before: Thu 08 May 2025 15:56:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132761 IP address blocks: 43.247.160.0/22 maxlen: 24 103.249.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45396 (0xb154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:56:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd43b-4029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:1d:f1:bc:ed:fc:a1:68:87:d0:c6:59:66: 65:76:b6:de:35:d8:23:5d:c8:d2:fd:35:80:de:df: 94:6a:07:80:b1:14:f8:29:f7:10:cb:09:4e:b0:6f: 17:fc:dd:c2:0a:66:62:4e:cd:6e:2e:dc:48:7d:1b: 7b:43:86:d3:56:b8:da:79:47:5b:09:c2:ea:02:53: c4:c6:dd:0b:d7:cb:c1:7d:1e:57:37:c2:65:98:03: 7b:a5:cc:3e:78:d6:c8:28:f6:2b:74:c8:45:d4:5d: e8:2d:7f:c2:12:9a:a0:49:a2:4a:12:7d:c0:54:55: ce:c0:a0:50:c7:50:c3:e5:f5:10:58:be:35:c0:ba: 40:d4:07:f7:9f:5b:17:21:cc:56:03:3e:bb:28:1c: cf:08:96:a8:ae:67:7d:5a:69:04:3b:e9:5a:6b:9f: ec:df:e3:55:62:a0:00:41:be:f0:83:7d:fe:cd:45: eb:aa:57:c3:1c:d3:80:d4:ac:95:36:61:57:d2:a5: 42:77:1e:b6:34:d3:ef:1a:54:92:57:67:b4:f2:5b: 84:e4:86:8b:8d:a5:aa:e3:85:67:09:72:46:03:f5: da:1d:b8:f5:37:dd:81:61:10:c2:30:44:a7:92:1b: 1b:1d:44:5c:e9:b8:a8:02:f7:7b:c6:f8:83:48:b8: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1F:68:80:45:F2:33:93:F8:57:07:43:D8:7D:F1:A1:1A:C1:60:B7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DACEE0C11EC11EBA84A3E3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.160.0/22 103.249.24.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:72:f8:5c:d9:4e:22:1d:d6:20:f1:c7:47:3b:33:88:b8:6e: dc:e8:73:d4:19:c8:fb:0f:4a:48:67:0d:82:7c:f0:75:3c:fb: 4a:21:4d:13:c8:4c:3b:8e:11:81:6c:5a:f2:28:e2:de:85:c2: 41:31:1d:7e:eb:d5:c5:41:d1:73:8d:50:79:fc:db:da:8d:9b: b7:16:e3:b2:71:fd:6f:e6:83:95:f7:36:6a:e5:a6:96:d7:22: 8e:91:f3:e7:97:1c:7b:87:e4:67:32:57:9c:04:09:34:91:1e: 73:31:a1:27:d0:3b:60:2c:f7:53:dd:16:e4:ac:c0:1c:07:86: be:1f:af:e0:fb:11:73:74:5e:be:86:46:48:3b:25:a8:ac:4f: 42:2a:aa:3e:d9:fc:d5:9f:64:55:46:14:dd:06:14:d0:bf:04: 9f:5d:5a:99:dd:d4:0d:29:2b:ca:13:5c:62:93:78:ab:22:56: 6e:62:97:bf:30:46:37:cb:61:ec:ea:20:ce:84:96:e5:bb:e8: 1b:9e:6e:b7:57:fd:6a:c2:2a:29:4c:e6:28:26:80:f2:d8:f9: dd:6a:e4:04:3f:27:48:0e:b6:0f:4c:79:2e:a6:25:b6:65:49: 4e:c3:02:2a:aa:80:80:2e:3b:e4:15:e0:ad:82:5b:81:57:83: 40:1a:49:29 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALFUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTY0NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0M2ItNDAyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgjHfG87fyhaIfQxllmZXa23jXYI13I0v01gN7flGoHgLEU+Cn3EMsJTrBv F/zdwgpmYk7Nbi7cSH0be0OG01a42nlHWwnC6gJTxMbdC9fLwX0eVzfCZZgDe6XM PnjWyCj2K3TIRdRd6C1/whKaoEmiShJ9wFRVzsCgUMdQw+X1EFi+NcC6QNQH959b FyHMVgM+uygczwiWqK5nfVppBDvpWmuf7N/jVWKgAEG+8IN9/s1F66pXwxzTgNSs lTZhV9KlQncetjTT7xpUkldntPJbhOSGi42lquOFZwlyRgP12h249TfdgWEQwjBE p5IbGx1EXOm4qAL3e8b4g0i4cpMCAwEAAaOCApswggKXMB0GA1UdDgQWBBQWH2iA RfIzk/hXB0PYffGhGsFgtzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZEQUNFRTBD MTFFQzExRUJBODRBM0UzRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCK/egAwQCZ/kYMA0GCSqGSIb3DQEBCwUAA4IBAQBdcvhc 2U4iHdYg8cdHOzOIuG7c6HPUGcj7D0pIZw2CfPB1PPtKIU0TyEw7jhGBbFryKOLe hcJBMR1+69XFQdFzjVB5/NvajZu3FuOycf1v5oOV9zZq5aaW1yKOkfPnlxx7h+Rn MlecBAk0kR5zMaEn0DtgLPdT3RbkrMAcB4a+H6/g+xFzdF6+hkZIOyWorE9CKqo+ 2fzVn2RVRhTdBhTQvwSfXVqZ3dQNKSvKE1xik3irIlZuYpe/MEY3y2Hs6iDOhJbl u+gbnm63V/1qwiopTOYoJoDy2PndauQEPydIDrYPTHkupiW2ZUlOwwIqqoCALjvk FeCtgluBV4NAGkkp -----END CERTIFICATE-----Generated at Tue May 13 00:54:47 2025 by rpki-client