$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/70407CCAF4C711EFBC675C87C4F9AE02.roa File: 70407CCAF4C711EFBC675C87C4F9AE02.roa (raw, json) Hash identifier: GBXQYklI67/TndML8ADgewaSMgyOdGYR58G1b8cy/ew= Subject key identifier: E4:1E:49:6F:B9:21:1B:D3:63:87:41:9C:19:80:E8:A4:DB:33:3F:36 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BE14 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/70407CCAF4C711EFBC675C87C4F9AE02.roa Signing time: Mon 16 Jun 2025 05:29:21 +0000 ROA not before: Mon 16 Jun 2025 05:29:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140641 IP address blocks: 103.93.94.0/24 maxlen: 24 103.95.50.0/23 maxlen: 24 103.97.104.0/24 maxlen: 24 103.97.105.0/24 maxlen: 24 103.97.106.0/24 maxlen: 24 103.97.107.0/24 maxlen: 24 103.117.212.0/24 maxlen: 24 103.119.170.0/23 maxlen: 24 103.131.26.0/24 maxlen: 24 103.139.7.0/24 maxlen: 24 103.140.72.0/24 maxlen: 24 103.152.79.0/24 maxlen: 24 103.171.44.0/24 maxlen: 24 103.171.45.0/24 maxlen: 24 103.251.150.0/24 maxlen: 24 103.253.70.0/24 maxlen: 24 163.227.186.0/24 maxlen: 24 163.227.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 12:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48660 (0xbe14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 16 05:29:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=684fabb1-87f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:16:8f:c8:6a:cc:06:2c:a4:09:94:c3:10: 37:5f:e3:b7:b1:d0:51:b1:eb:93:1b:80:4e:68:14: c6:4e:89:bb:ad:a9:c9:eb:a8:8f:ee:c0:ee:2e:5a: c3:d3:04:c9:63:99:e1:e8:b1:ad:a3:36:26:c1:45: 0f:16:23:67:e1:e2:77:c9:1f:29:aa:60:2b:7d:9e: b5:04:d1:7b:00:70:b5:8d:b3:dc:92:f4:0d:c3:e9: 0e:cb:8e:0c:c3:1a:22:10:e9:7b:0d:5a:a5:08:4a: c8:3a:f8:3d:03:02:52:d2:af:d4:7e:f0:0e:c9:43: e8:35:61:5a:c8:ac:a6:67:19:21:8f:8d:ac:3c:42: ec:f5:35:35:cd:ed:42:6d:09:a1:bd:99:3b:a1:57: 97:37:35:07:85:c3:3c:ee:60:b1:a8:27:de:b2:f2: 47:25:53:9e:ae:71:a3:3b:f7:4a:d9:85:84:6a:92: 9a:9d:bf:84:aa:01:26:02:a4:17:28:74:7f:04:09: f2:46:e6:c4:c8:46:59:5c:bd:9d:ed:01:ea:c3:93: 3f:56:54:e2:e6:56:49:cc:3b:13:b8:bc:44:ee:4f: 71:48:b0:33:7d:89:c6:5a:64:2d:9b:e9:07:b8:9c: d8:7b:01:1d:8a:cc:45:79:f0:71:66:b2:66:89:17: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:49:6F:B9:21:1B:D3:63:87:41:9C:19:80:E8:A4:DB:33:3F:36 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/70407CCAF4C711EFBC675C87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.93.94.0/24 103.95.50.0/23 103.97.104.0/22 103.117.212.0/24 103.119.170.0/23 103.131.26.0/24 103.139.7.0/24 103.140.72.0/24 103.152.79.0/24 103.171.44.0/23 103.251.150.0/24 103.253.70.0/24 163.227.186.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:47:79:91:d2:be:e6:aa:11:bb:f8:5d:e5:d5:45:f3:c7:ea: a5:e6:5f:a4:0e:28:ba:8a:49:91:1e:89:fa:da:8d:40:a1:e0: 9d:49:14:9b:09:c0:3b:fb:70:a3:19:57:6e:a4:ac:38:9f:42: 66:fd:3c:57:e4:80:31:3d:40:a1:d3:3e:10:ef:a3:88:f5:a9: 21:1c:86:a5:a5:55:f9:90:91:c4:47:56:6e:46:4d:e2:5e:35: b7:04:57:31:90:2f:f8:83:db:9c:f6:ad:23:60:97:b3:4e:be: c7:4d:ec:6d:4e:6f:e2:ac:55:8c:8d:d8:24:22:e6:19:63:c5: 7e:cc:c6:c5:93:a9:87:1e:b8:db:70:8f:84:51:8c:b8:0d:83: 80:68:c8:86:c4:97:37:44:4a:d1:19:75:c2:5e:f3:63:16:ce: 28:f8:49:1d:1c:28:f8:62:b4:0b:c3:cf:27:da:58:de:0a:52: 05:12:88:17:1c:e3:99:ee:0f:84:b3:8b:51:36:d5:d3:60:9e: 8c:c3:49:d5:24:6b:ce:fe:31:3a:80:14:4e:a0:f6:00:54:89: 35:13:aa:d6:bd:bd:e8:14:f5:7a:49:10:7d:b4:f4:c0:70:50: 15:f3:24:a6:00:93:ef:ae:88:f9:02:41:ed:bc:b2:2c:d2:74: ea:10:cf:bc -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIDAL4UMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYxNjA1MjkyMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg0ZmFiYjEtODdmOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJxxFo/IaswGLKQJlMMQN1/jt7HQUbHrkxuATmgUxk6Ju62pyeuoj+7A7i5a w9MEyWOZ4eixraM2JsFFDxYjZ+Hid8kfKapgK32etQTRewBwtY2z3JL0DcPpDsuO DMMaIhDpew1apQhKyDr4PQMCUtKv1H7wDslD6DVhWsispmcZIY+NrDxC7PU1Nc3t Qm0Job2ZO6FXlzc1B4XDPO5gsagn3rLyRyVTnq5xozv3StmFhGqSmp2/hKoBJgKk Fyh0fwQJ8kbmxMhGWVy9ne0B6sOTP1ZU4uZWScw7E7i8RO5PcUiwM32JxlpkLZvp B7ic2HsBHYrMRXnwcWayZokXspMCAwEAAaOCAt0wggLZMB0GA1UdDgQWBBTkHklv uSEb02OHQZwZgOik2zM/NjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcwNDA3Q0NB RjRDNzExRUZCQzY3NUM4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGcGCCsGAQUFBwEHAQH/ BFgwVjBUBAIAATBOAwQAZ11eAwQBZ18yAwQCZ2FoAwQAZ3XUAwQBZ3eqAwQAZ4Ma AwQAZ4sHAwQAZ4xIAwQAZ5hPAwQBZ6ssAwQAZ/uWAwQAZ/1GAwQBo+O6MA0GCSqG SIb3DQEBCwUAA4IBAQCLR3mR0r7mqhG7+F3l1UXzx+ql5l+kDii6ikmRHon62o1A oeCdSRSbCcA7+3CjGVdupKw4n0Jm/TxX5IAxPUCh0z4Q76OI9akhHIalpVX5kJHE R1ZuRk3iXjW3BFcxkC/4g9uc9q0jYJezTr7HTextTm/irFWMjdgkIuYZY8V+zMbF k6mHHrjbcI+EUYy4DYOAaMiGxJc3RErRGXXCXvNjFs4o+EkdHCj4YrQLw88n2lje ClIFEogXHOOZ7g+Es4tRNtXTYJ6Mw0nVJGvO/jE6gBROoPYAVIk1E6rWvb3oFPV6 SRB9tPTAcFAV8ySmAJPvroj5AkHtvLIs0nTqEM+8 -----END CERTIFICATE-----Generated at Wed Jul 2 16:18:15 2025 by rpki-client