$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/733FFA3203B211EBB4CD2E58C4F9AE02.roa File: 733FFA3203B211EBB4CD2E58C4F9AE02.roa (raw, json) Hash identifier: m50+4NHWz2LG5QjJyZosBsLbbMCJS8wv0m1Ay9qMzdw= Subject key identifier: 0E:BC:18:C3:5D:AC:92:14:00:92:2B:25:E8:1B:12:7B:47:93:D5:94 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B128 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/733FFA3203B211EBB4CD2E58C4F9AE02.roa Signing time: Thu 08 May 2025 15:56:02 +0000 ROA not before: Thu 08 May 2025 15:56:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 131473 IP address blocks: 103.4.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45352 (0xb128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:56:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd411-c370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:ef:06:1a:45:0a:5c:e2:fd:8a:96:95:0f: 1f:36:0d:b3:bc:98:c7:de:e7:82:12:86:19:05:d3: 8f:91:c9:5a:e2:23:2f:ce:e9:21:11:a5:fc:be:ec: db:91:29:8b:c5:a6:11:b0:70:c4:99:ef:79:dd:78: 6f:a5:bf:e7:95:d6:15:f7:3c:d8:44:9c:8f:32:90: d1:a5:c2:ec:c7:38:3f:2b:64:2e:58:ff:00:5a:20: 54:cb:25:01:e8:5a:b6:4f:45:fa:6a:5a:b7:9c:52: ea:a5:20:10:fc:64:ae:fc:d1:c9:6b:0d:f7:8e:9d: f7:d9:a6:9d:81:26:04:2c:e9:b3:bf:26:41:9d:03: 80:db:d7:3b:2a:97:13:7c:f4:0f:37:4f:ae:6a:db: de:f1:b6:13:03:d6:03:e8:93:76:99:75:3e:0d:be: 1a:7a:6f:ee:dd:6e:7a:e3:01:3f:ab:ad:62:cc:1a: a4:97:61:2b:45:8d:68:b8:46:17:2c:70:62:ce:4a: 4e:50:3c:c9:88:53:f2:30:da:f6:5d:9c:e4:5a:b0: 4f:05:5b:a0:4c:25:c7:eb:6d:ff:2e:30:7a:6d:f6: b3:2e:47:2d:8d:6b:9c:29:08:53:a3:f9:55:38:71: f4:ed:76:e1:61:a3:39:18:f0:86:b3:af:24:4f:92: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BC:18:C3:5D:AC:92:14:00:92:2B:25:E8:1B:12:7B:47:93:D5:94 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/733FFA3203B211EBB4CD2E58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.4.220.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:d7:12:03:aa:8b:a9:6c:a7:6d:e3:b7:c5:04:74:bf:63:b0: 18:c6:51:b9:16:eb:11:b9:63:74:d9:17:68:09:53:e0:a4:fc: 7b:32:f0:7c:84:ed:62:a0:cf:e6:b9:0c:08:c3:10:74:ce:9c: a2:33:2f:2b:b1:cd:f7:c7:05:9c:0b:3d:00:b5:a3:1c:7b:30: 39:a5:35:13:b2:08:3d:1e:b7:b3:58:65:31:1b:38:3e:b4:aa: 24:74:fb:93:fc:31:1f:7e:3a:eb:b0:a8:9c:dc:05:93:cc:f2: de:34:73:88:63:c9:8b:62:31:4a:9d:52:f2:60:b0:78:74:ea: b2:6f:fb:9b:1a:2d:61:c8:a3:b2:77:fd:c3:64:06:c8:d7:72: 08:1c:0e:d0:83:11:af:de:d8:9f:d4:f6:a7:e4:cb:a7:d1:3a: 72:af:40:1b:3b:3e:cf:06:f4:bb:7d:79:a7:c2:45:8c:fd:eb: cf:89:d6:cb:66:cf:4a:81:82:41:4a:6c:f3:a4:78:f9:f0:15: 57:ad:22:ba:64:bb:5a:5b:9d:f9:ad:4b:d3:45:0b:0f:eb:8c: d1:f2:ea:2c:65:d1:c7:19:20:54:7f:ff:fd:e7:fe:b7:d4:57: 0c:99:e1:12:a3:f9:c9:90:30:69:3a:75:b1:18:02:05:0d:85: 1f:27:d1:7a -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALEoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTYwMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0MTEtYzM3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQn7wYaRQpc4v2KlpUPHzYNs7yYx97nghKGGQXTj5HJWuIjL87pIRGl/L7s 25Epi8WmEbBwxJnved14b6W/55XWFfc82EScjzKQ0aXC7Mc4PytkLlj/AFogVMsl Aehatk9F+mpat5xS6qUgEPxkrvzRyWsN946d99mmnYEmBCzps78mQZ0DgNvXOyqX E3z0DzdPrmrb3vG2EwPWA+iTdpl1Pg2+Gnpv7t1ueuMBP6utYswapJdhK0WNaLhG FyxwYs5KTlA8yYhT8jDa9l2c5FqwTwVboEwlx+tt/y4wem32sy5HLY1rnCkIU6P5 VThx9O124WGjORjwhrOvJE+SCHkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQOvBjD XaySFACSKyXoGxJ7R5PVlDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzczM0ZGQTMy MDNCMjExRUJCNENEMkU1OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZwTcMA0GCSqGSIb3DQEBCwUAA4IBAQBL1xIDqoupbKdt 47fFBHS/Y7AYxlG5FusRuWN02RdoCVPgpPx7MvB8hO1ioM/muQwIwxB0zpyiMy8r sc33xwWcCz0AtaMcezA5pTUTsgg9HrezWGUxGzg+tKokdPuT/DEffjrrsKic3AWT zPLeNHOIY8mLYjFKnVLyYLB4dOqyb/ubGi1hyKOyd/3DZAbI13IIHA7QgxGv3tif 1Pan5Mun0Tpyr0AbOz7PBvS7fXmnwkWM/evPidbLZs9KgYJBSmzzpHj58BVXrSK6 ZLtaW535rUvTRQsP64zR8uosZdHHGSBUf//95/631FcMmeESo/nJkDBpOnWxGAIF DYUfJ9F6 -----END CERTIFICATE-----Generated at Wed May 14 19:43:21 2025 by rpki-client