$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E6E402624BA11F0BFC88644C4F9AE02.roa File: 6E6E402624BA11F0BFC88644C4F9AE02.roa (raw, json) Hash identifier: SuDi+BK5jpjtjPHWO8fmDwq1DXMf3fzgYSbAg9X6Unw= Subject key identifier: 58:B1:E4:A7:9B:9A:51:50:6A:CA:F9:E0:1A:C6:45:5A:1E:D7:DB:7A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B39F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E6E402624BA11F0BFC88644C4F9AE02.roa Signing time: Thu 08 May 2025 16:05:51 +0000 ROA not before: Thu 08 May 2025 16:05:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135848 IP address blocks: 45.127.200.0/22 maxlen: 24 103.81.156.0/22 maxlen: 24 103.158.148.0/23 maxlen: 24 103.196.132.0/22 maxlen: 24 103.214.230.0/23 maxlen: 24 103.215.96.0/23 maxlen: 24 2001:df2:3500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 13:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45983 (0xb39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:05:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd65f-1641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:06:46:34:24:5e:00:19:2f:25:08:e0:de: 12:ca:0d:5d:d7:31:d8:71:77:d0:22:d4:a7:6f:43: 8b:6a:67:0a:75:43:25:1a:57:73:58:68:1a:37:4b: 84:1c:89:12:b9:36:3c:6f:ad:75:89:a1:8c:3b:df: 2c:5b:11:9c:65:21:9e:f1:f1:b5:60:f1:fa:55:86: 1e:9e:29:b9:0f:74:4e:a9:c5:1b:35:63:dd:d3:5f: 53:81:3c:44:db:1e:f6:d7:76:2a:a7:63:bb:d0:97: 7f:fe:4f:89:da:10:aa:a1:d2:c4:2c:db:36:08:14: ca:b1:2b:54:7c:57:5c:26:47:6b:c3:4f:01:8e:ae: 9a:04:b3:3f:82:3f:99:50:c3:64:77:74:e8:76:0a: 33:85:04:62:ff:72:cb:96:21:f7:18:e9:fd:aa:b2: 72:c6:6d:bd:d7:5e:b3:86:0c:57:30:a0:13:47:7c: 0b:72:b8:1e:6f:58:44:0b:48:b3:f0:53:ba:88:31: 1c:42:0c:35:a6:6f:72:5f:fd:14:c4:04:d9:1b:40: 9e:2e:5d:44:e9:c9:0a:ac:9c:97:5a:1e:41:6b:eb: 13:3f:bf:0b:c7:e7:6e:bf:bd:30:ab:68:b7:02:14: f0:57:87:7b:02:12:4d:cb:4a:4b:39:9d:dc:78:4e: 49:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B1:E4:A7:9B:9A:51:50:6A:CA:F9:E0:1A:C6:45:5A:1E:D7:DB:7A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E6E402624BA11F0BFC88644C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.127.200.0/22 103.81.156.0/22 103.158.148.0/23 103.196.132.0/22 103.214.230.0/23 103.215.96.0/23 IPv6: 2001:df2:3500::/48 Signature Algorithm: sha256WithRSAEncryption 9e:32:81:37:7b:73:9f:5f:0e:09:8c:f6:c6:4f:ab:eb:48:0e: 48:bb:21:ab:20:1e:96:a3:ef:a6:9b:2a:c7:57:1c:7a:06:62: f8:83:f3:4e:a3:e5:f6:f2:fd:13:49:4a:93:b1:6a:b6:60:0b: 47:c2:85:7d:67:3b:fa:47:d4:4d:0a:7f:45:45:54:65:3c:31: 01:f7:ee:cd:b1:49:77:11:7b:5a:80:21:31:46:bc:e2:de:90: ba:32:65:94:72:1e:67:9a:e1:8f:88:e0:8a:11:b5:c6:5b:2f: d4:e2:79:96:ca:a7:3f:89:bf:5f:ed:0a:a9:5e:38:01:86:82: e0:a2:e9:d7:ad:04:7e:c2:c2:99:58:2a:01:dd:7c:9e:a4:39: f6:b6:8b:30:a5:48:5a:42:32:d5:3b:77:9f:5f:3e:b4:82:9e: 6e:e4:5a:83:47:a1:7d:b1:f2:73:a2:47:af:c0:fe:f9:47:15: ef:b3:4a:0f:83:b8:33:33:e2:78:5f:3e:2a:93:bf:e8:bc:3f: 95:60:a5:44:15:33:d3:19:97:85:1c:2b:2e:89:95:88:d7:66: 47:a4:33:c0:5e:83:95:ef:58:f7:f6:cd:fb:f0:17:7c:2c:af: 04:9c:1f:1d:24:04:8e:ca:93:37:9f:16:f0:86:77:54:fd:c7: c4:aa:de:0b -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgIDALOfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDU1MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2NWYtMTY0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKaaBkY0JF4AGS8lCODeEsoNXdcx2HF30CLUp29Di2pnCnVDJRpXc1hoGjdL hByJErk2PG+tdYmhjDvfLFsRnGUhnvHxtWDx+lWGHp4puQ90TqnFGzVj3dNfU4E8 RNse9td2Kqdju9CXf/5PidoQqqHSxCzbNggUyrErVHxXXCZHa8NPAY6umgSzP4I/ mVDDZHd06HYKM4UEYv9yy5Yh9xjp/aqycsZtvddes4YMVzCgE0d8C3K4Hm9YRAtI s/BTuogxHEIMNaZvcl/9FMQE2RtAni5dROnJCqycl1oeQWvrEz+/C8fnbr+9MKto twIU8FeHewISTctKSzmd3HhOSYkCAwEAAaOCAsQwggLAMB0GA1UdDgQWBBRYseSn m5pRUGrK+eAaxkVaHtfbejAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZFNkU0MDI2 MjRCQTExRjBCRkM4ODY0NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sME4GCCsGAQUFBwEHAQH/ BD8wPTAqBAIAATAkAwQCLX/IAwQCZ1GcAwQBZ56UAwQCZ8SEAwQBZ9bmAwQBZ9dg MA8EAgACMAkDBwAgAQ3yNQAwDQYJKoZIhvcNAQELBQADggEBAJ4ygTd7c59fDgmM 9sZPq+tIDki7IasgHpaj76abKsdXHHoGYviD806j5fby/RNJSpOxarZgC0fChX1n O/pH1E0Kf0VFVGU8MQH37s2xSXcRe1qAITFGvOLekLoyZZRyHmea4Y+I4IoRtcZb L9TieZbKpz+Jv1/tCqleOAGGguCi6detBH7CwplYKgHdfJ6kOfa2izClSFpCMtU7 d59fPrSCnm7kWoNHoX2x8nOiR6/A/vlHFe+zSg+DuDMz4nhfPiqTv+i8P5VgpUQV M9MZl4UcKy6JlYjXZkekM8Beg5XvWPf2zfvwF3wsrwScHx0kBI7KkzefFvCGd1T9 x8Sq3gs= -----END CERTIFICATE-----Generated at Wed May 14 04:32:32 2025 by rpki-client