$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72422FF6360C11EB89D30139C4F9AE02.roa File: 72422FF6360C11EB89D30139C4F9AE02.roa (raw, json) Hash identifier: qdko6/nM1miX44cqYQVHN9brP9+Qf9RHVaZ7lgnfsPI= Subject key identifier: 5D:DE:69:A5:11:9C:63:8C:FA:35:8D:9E:4A:D0:96:9C:E2:96:2A:4A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B61A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72422FF6360C11EB89D30139C4F9AE02.roa Signing time: Thu 08 May 2025 16:15:35 +0000 ROA not before: Thu 08 May 2025 16:15:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141290 IP address blocks: 103.159.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 13:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46618 (0xb61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:15:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd8a7-8ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:67:52:4b:ef:ea:da:51:33:af:a3:08:4e: 28:16:d5:3e:34:b2:a5:6c:50:36:ff:86:dd:71:a7: 8d:8e:eb:b6:c1:ac:58:0b:48:56:22:c4:ba:cf:c9: 08:a8:44:cb:91:6e:fb:eb:37:22:e7:19:d1:fd:5a: 64:08:c0:4a:de:d3:c9:ba:09:4d:60:03:24:2f:d7: 84:7c:3a:ff:b4:2d:50:23:a7:96:be:a5:eb:76:05: 75:ca:50:f7:06:91:e3:a6:7d:05:f1:db:3f:df:14: c1:9d:5b:ef:1c:d3:7f:92:1a:74:e4:02:59:45:eb: e0:9c:f6:fb:00:84:47:c4:c8:35:85:15:be:ac:bf: 26:31:83:5c:4d:09:59:de:32:64:fc:5e:4a:b6:7f: a0:14:5a:fc:6e:bf:78:92:6a:6f:d9:90:79:f1:87: 61:e1:08:22:d0:a2:89:a2:12:39:17:da:a7:58:2e: d3:fa:81:d4:10:c6:8c:ed:3e:a0:cb:a0:aa:fd:8e: 3f:35:3e:2f:28:e8:0c:d6:08:99:c7:5d:e3:b4:a9: 6e:30:21:1f:6d:c6:61:26:2e:9c:a2:1c:4f:66:fc: 37:10:c2:15:f0:10:6c:48:31:ec:2f:54:24:2c:15: 21:6e:64:82:ae:c9:3c:00:24:35:84:7d:67:80:6a: 51:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DE:69:A5:11:9C:63:8C:FA:35:8D:9E:4A:D0:96:9C:E2:96:2A:4A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72422FF6360C11EB89D30139C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.164.0/23 Signature Algorithm: sha256WithRSAEncryption a2:c8:75:3c:7e:61:65:bb:76:95:2f:e5:7e:b1:97:39:82:26: bd:1c:c7:5c:8c:ba:35:2c:68:12:27:7d:68:36:d0:90:b1:28: 40:ab:33:9a:5e:50:20:1b:e0:58:f9:15:98:cb:03:77:62:8b: cc:c6:2a:cf:41:ef:06:58:40:d3:a6:e6:e7:a5:f4:42:e7:9e: 7c:40:8c:b9:d1:0c:36:f1:f7:67:f8:9d:e5:aa:32:da:91:83: 13:42:13:82:b2:39:db:06:33:45:38:4e:f9:3e:e8:53:02:81: ab:ab:7e:69:8a:f3:38:b1:d2:2c:53:e3:6c:1b:65:98:1e:f2: 7e:0a:de:c3:70:1e:b9:1f:f6:0e:44:12:37:51:45:8f:f3:ec: e2:ae:94:5f:4f:22:19:77:ee:e7:01:8a:4e:3d:e5:c0:7d:61: b6:2e:60:df:e2:7d:fa:4b:e6:d5:a2:db:4f:37:1b:2c:fd:8b: fb:10:33:57:63:95:6c:7c:94:7c:15:5a:85:23:39:8b:cf:4b: 6a:ba:35:8d:b6:1a:7a:68:a4:7a:1c:fe:d5:e7:b1:f7:44:8f: 60:b6:65:2e:94:96:23:f5:96:6e:ee:53:fa:34:c9:15:9d:00: 37:77:b1:8a:43:42:0a:cc:d0:e8:59:11:58:f5:f8:51:32:3f: 99:9f:45:b4 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALYaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTUzNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4YTctOGZmNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVaZ1JL7+raUTOvowhOKBbVPjSypWxQNv+G3XGnjY7rtsGsWAtIViLEus/J CKhEy5Fu++s3IucZ0f1aZAjASt7TyboJTWADJC/XhHw6/7QtUCOnlr6l63YFdcpQ 9waR46Z9BfHbP98UwZ1b7xzTf5IadOQCWUXr4Jz2+wCER8TINYUVvqy/JjGDXE0J Wd4yZPxeSrZ/oBRa/G6/eJJqb9mQefGHYeEIItCiiaISORfap1gu0/qB1BDGjO0+ oMugqv2OPzU+LyjoDNYImcdd47SpbjAhH23GYSYunKIcT2b8NxDCFfAQbEgx7C9U JCwVIW5kgq7JPAAkNYR9Z4BqUa0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBRd3mml EZxjjPo1jZ5K0Jac4pYqSjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcyNDIyRkY2 MzYwQzExRUI4OUQzMDEzOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ5+kMA0GCSqGSIb3DQEBCwUAA4IBAQCiyHU8fmFlu3aV L+V+sZc5gia9HMdcjLo1LGgSJ31oNtCQsShAqzOaXlAgG+BY+RWYywN3YovMxirP Qe8GWEDTpubnpfRC5558QIy50Qw28fdn+J3lqjLakYMTQhOCsjnbBjNFOE75PuhT AoGrq35pivM4sdIsU+NsG2WYHvJ+Ct7DcB65H/YORBI3UUWP8+zirpRfTyIZd+7n AYpOPeXAfWG2LmDf4n36S+bVottPNxss/Yv7EDNXY5VsfJR8FVqFIzmLz0tqujWN thp6aKR6HP7V57H3RI9gtmUulJYj9ZZu7lP6NMkVnQA3d7GKQ0IKzNDoWRFY9fhR Mj+Zn0W0 -----END CERTIFICATE-----Generated at Wed May 14 01:12:09 2025 by rpki-client