$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/70407CCAF4C711EFBC675C87C4F9AE02.roa File: 70407CCAF4C711EFBC675C87C4F9AE02.roa (raw, json) Hash identifier: DVw7J/klHVUZ6tVVThW4CwARAx7FVoVMlt4vT0MZ/fo= Subject key identifier: 28:A7:D8:39:EB:B2:A3:8A:1F:33:0B:16:52:D0:C2:97:5B:0F:71:C4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BA86 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/70407CCAF4C711EFBC675C87C4F9AE02.roa Signing time: Fri 09 May 2025 06:30:54 +0000 ROA not before: Fri 09 May 2025 06:30:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140641 IP address blocks: 103.93.94.0/24 maxlen: 24 103.95.50.0/23 maxlen: 24 103.97.104.0/24 maxlen: 24 103.97.105.0/24 maxlen: 24 103.97.106.0/24 maxlen: 24 103.97.107.0/24 maxlen: 24 103.117.212.0/24 maxlen: 24 103.119.170.0/23 maxlen: 24 103.139.7.0/24 maxlen: 24 103.140.72.0/24 maxlen: 24 103.152.79.0/24 maxlen: 24 103.171.44.0/24 maxlen: 24 103.171.45.0/24 maxlen: 24 103.251.150.0/24 maxlen: 24 103.253.70.0/24 maxlen: 24 163.227.186.0/24 maxlen: 24 163.227.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47750 (0xba86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 9 06:30:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681da11e-5486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dc:fa:92:75:3a:ae:9b:36:15:d8:cc:9a:c0: bf:08:60:d8:f8:3e:34:80:7e:c8:62:6a:0e:90:fb: a4:6b:ef:55:8f:77:a4:10:b4:b3:ca:39:4f:e5:51: c0:0e:fd:1e:21:5a:55:d6:4f:1c:37:37:10:31:2c: 6f:ab:a4:08:c6:4c:56:b7:46:f2:5d:ef:d8:27:07: 6c:1a:2a:5d:b0:2f:3b:fb:f6:30:64:e6:a3:ec:95: 3a:02:03:0a:6b:c7:8b:ed:75:cc:00:17:ff:c4:dc: 62:9b:0e:f5:e4:87:10:0e:8b:6f:51:03:f2:80:cb: f6:33:6a:f5:21:45:da:7d:61:4f:b4:d1:94:8e:13: 1f:4d:4e:67:25:c6:a0:d9:2f:8d:dc:c4:3d:4f:7a: 76:32:1f:42:e5:f9:ec:30:3d:51:97:50:33:f8:96: 06:6d:88:6f:bd:6a:18:cc:b2:53:12:ed:35:ac:dd: 42:56:d3:21:d9:f3:1d:2c:88:d4:d0:58:54:48:ac: f0:9c:e1:24:70:55:9f:86:fc:7f:95:98:5b:48:27: b0:05:af:ab:5d:87:56:66:92:6f:8c:2e:0a:51:22: 41:d2:90:95:54:9f:5f:c8:a1:e5:24:10:84:9f:51: 8d:3f:86:aa:e2:70:11:98:81:32:b7:c0:3f:69:df: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A7:D8:39:EB:B2:A3:8A:1F:33:0B:16:52:D0:C2:97:5B:0F:71:C4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/70407CCAF4C711EFBC675C87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.93.94.0/24 103.95.50.0/23 103.97.104.0/22 103.117.212.0/24 103.119.170.0/23 103.139.7.0/24 103.140.72.0/24 103.152.79.0/24 103.171.44.0/23 103.251.150.0/24 103.253.70.0/24 163.227.186.0/23 Signature Algorithm: sha256WithRSAEncryption 26:fa:df:4e:d6:65:ca:3d:80:0d:43:30:78:b5:f7:93:d7:c8: b6:b9:3c:b2:e9:56:79:71:c6:63:97:6c:d3:be:e0:61:1f:da: b3:8d:5b:ec:78:9a:d0:8a:80:7c:f4:3f:ba:16:ba:5e:3a:38: e9:19:b2:c8:08:0b:df:18:af:42:83:0f:95:11:d3:f7:bb:a0: 9d:f7:67:9b:bc:18:bf:ba:ea:f1:9f:09:3e:50:80:f6:d8:82: 9e:8d:c1:67:c3:bc:8b:47:b3:a4:61:43:ae:20:13:10:69:e5: db:fe:e4:f3:36:9b:eb:8a:ef:27:3d:0e:36:f3:01:fe:a1:50: 35:3e:36:ea:13:bf:0c:64:33:bc:f5:d8:5f:5f:3b:72:aa:a0: 9b:97:8c:0e:f5:2e:86:2e:bf:5b:48:0e:c5:92:a4:4c:9e:e8: 0c:ab:33:8c:8f:f8:2e:78:1c:27:ad:e6:69:83:ae:76:97:57: 38:e3:5d:6b:ee:0d:02:77:9f:c6:a9:68:f4:0a:4c:8b:06:86: 8f:f7:49:cb:cc:e9:c2:fa:30:b8:a2:05:0f:19:f1:02:f4:37: 64:66:74:d1:8c:c8:09:ca:a9:62:64:8e:76:8f:83:52:a9:ac: 9b:42:c2:d8:2e:65:81:8e:6c:4f:3f:82:b1:f9:f8:12:fe:6c: fc:fc:1b:b4 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIDALqGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwOTA2MzA1NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxZGExMWUtNTQ4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODc+pJ1Oq6bNhXYzJrAvwhg2Pg+NIB+yGJqDpD7pGvvVY93pBC0s8o5T+VR wA79HiFaVdZPHDc3EDEsb6ukCMZMVrdG8l3v2CcHbBoqXbAvO/v2MGTmo+yVOgID CmvHi+11zAAX/8TcYpsO9eSHEA6Lb1ED8oDL9jNq9SFF2n1hT7TRlI4TH01OZyXG oNkvjdzEPU96djIfQuX57DA9UZdQM/iWBm2Ib71qGMyyUxLtNazdQlbTIdnzHSyI 1NBYVEis8JzhJHBVn4b8f5WYW0gnsAWvq12HVmaSb4wuClEiQdKQlVSfX8ih5SQQ hJ9RjT+GquJwEZiBMrfAP2nf/pkCAwEAAaOCAtcwggLTMB0GA1UdDgQWBBQop9g5 67Kjih8zCxZS0MKXWw9xxDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcwNDA3Q0NB RjRDNzExRUZCQzY3NUM4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGEGCCsGAQUFBwEHAQH/ BFIwUDBOBAIAATBIAwQAZ11eAwQBZ18yAwQCZ2FoAwQAZ3XUAwQBZ3eqAwQAZ4sH AwQAZ4xIAwQAZ5hPAwQBZ6ssAwQAZ/uWAwQAZ/1GAwQBo+O6MA0GCSqGSIb3DQEB CwUAA4IBAQAm+t9O1mXKPYANQzB4tfeT18i2uTyy6VZ5ccZjl2zTvuBhH9qzjVvs eJrQioB89D+6FrpeOjjpGbLICAvfGK9Cgw+VEdP3u6Cd92ebvBi/uurxnwk+UID2 2IKejcFnw7yLR7OkYUOuIBMQaeXb/uTzNpvriu8nPQ428wH+oVA1PjbqE78MZDO8 9dhfXztyqqCbl4wO9S6GLr9bSA7FkqRMnugMqzOMj/gueBwnreZpg652l1c4411r 7g0Cd5/GqWj0CkyLBoaP90nLzOnC+jC4ogUPGfEC9DdkZnTRjMgJyqliZI52j4NS qaybQsLYLmWBjmxPP4Kx+fgS/mz8/Bu0 -----END CERTIFICATE-----Generated at Tue May 13 01:20:08 2025 by rpki-client