$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BA353180D6111EC8818287CC4F9AE02.roa File: 7BA353180D6111EC8818287CC4F9AE02.roa (raw, json) Hash identifier: zP+AYwdmsWFYufDO4hvAl6lqdciNDS6w+GGm39HBo+s= Subject key identifier: 5F:96:77:9E:A0:AA:9C:D2:3C:4B:87:86:E6:6A:2C:3F:7A:F8:CF:C8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B28B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BA353180D6111EC8818287CC4F9AE02.roa Signing time: Thu 08 May 2025 16:01:35 +0000 ROA not before: Thu 08 May 2025 16:01:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134335 IP address blocks: 103.201.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 13:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45707 (0xb28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:01:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd55e-1097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:8b:c3:71:98:ff:09:e7:c4:94:9e:7b:d2: d4:52:a7:f6:9d:86:34:39:93:31:31:ec:24:e1:57: 13:91:38:c2:3d:04:e5:fe:4f:0e:43:02:3d:95:2c: ac:af:e0:48:43:24:39:8b:a9:86:20:73:95:74:a2: 36:78:fb:ef:27:f4:c2:e0:a8:bb:46:83:cf:01:b4: eb:72:d6:bd:99:6c:76:c0:f9:62:8f:52:bb:ec:07: f5:2b:27:3a:2e:9d:82:ea:57:ab:89:9b:a2:21:6c: 86:69:3f:84:c3:ee:bd:5b:49:13:31:38:8d:f1:ed: 75:19:47:10:7f:4f:2b:b3:9e:7b:c3:58:75:fe:4a: 17:c1:1e:30:72:91:bf:cd:6d:d9:12:3e:0f:ab:39: fa:d1:b8:49:69:3c:53:ad:b5:b5:20:36:55:6e:13: db:82:aa:9d:5e:c7:ec:c4:0f:18:6a:d5:1a:51:7b: 4f:61:7d:85:f9:8e:52:c4:70:f5:48:35:b8:33:65: 6d:50:7e:b8:73:4f:97:11:48:65:5c:21:ad:3c:65: 71:c2:f5:ed:31:72:b5:c3:05:a1:56:0b:b3:90:13: 15:9b:de:8c:b0:67:e1:42:10:74:8e:2c:d5:f3:18: 75:5d:90:68:34:90:5a:2a:57:3f:c4:68:65:cf:d6: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:96:77:9E:A0:AA:9C:D2:3C:4B:87:86:E6:6A:2C:3F:7A:F8:CF:C8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BA353180D6111EC8818287CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.201.132.0/22 Signature Algorithm: sha256WithRSAEncryption ae:a0:3e:f4:b3:93:8e:df:9d:ff:1f:fd:a7:df:57:bd:3c:c4: 49:74:66:53:59:f0:d9:07:98:29:ae:45:f7:d0:c5:42:79:4b: 8f:2f:e7:ec:55:6b:d6:2b:16:72:b9:c4:4c:ad:0c:74:27:06: 7e:f1:65:0c:9a:bd:de:e3:2d:01:a8:1a:bc:88:77:60:a8:43: d0:bf:3d:89:23:04:3a:a3:ee:71:10:45:6d:ae:15:b2:4a:e2: 3d:73:85:42:18:d8:0a:54:c4:5e:a6:e0:92:38:df:50:8c:4d: 4f:50:e3:d7:ed:87:58:10:77:fb:01:15:2c:88:41:54:60:c4: a4:44:28:24:bb:23:36:4f:01:27:9d:cc:c7:3a:47:e7:20:6e: 99:25:cf:16:84:4d:ad:76:17:ea:be:be:65:c1:1c:b2:eb:5a: 65:63:84:86:fd:52:17:45:d4:ab:87:83:24:e4:44:14:f6:cc: 8b:18:0b:b5:92:fe:41:af:9b:f1:a9:42:3e:23:3c:f6:d1:31: 69:db:13:4e:1b:f2:da:9a:4f:2a:13:8b:d5:04:a1:6f:8f:97: 3c:09:68:48:bb:89:e3:23:37:2a:48:e3:2f:ae:b0:fc:87:a2: 30:2c:35:59:33:30:a2:14:e7:71:2c:fb:e8:b5:14:d2:5f:f2: 37:42:5b:e3 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALKLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDEzNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1NWUtMTA5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQDi8NxmP8J58SUnnvS1FKn9p2GNDmTMTHsJOFXE5E4wj0E5f5PDkMCPZUs rK/gSEMkOYuphiBzlXSiNnj77yf0wuCou0aDzwG063LWvZlsdsD5Yo9Su+wH9Ssn Oi6dgupXq4mboiFshmk/hMPuvVtJEzE4jfHtdRlHEH9PK7Oee8NYdf5KF8EeMHKR v81t2RI+D6s5+tG4SWk8U621tSA2VW4T24KqnV7H7MQPGGrVGlF7T2F9hfmOUsRw 9Ug1uDNlbVB+uHNPlxFIZVwhrTxlccL17TFytcMFoVYLs5ATFZvejLBn4UIQdI4s 1fMYdV2QaDSQWipXP8RoZc/Wl80CAwEAAaOCApUwggKRMB0GA1UdDgQWBBRflnee oKqc0jxLh4bmaiw/evjPyDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdCQTM1MzE4 MEQ2MTExRUM4ODE4Mjg3Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ8mEMA0GCSqGSIb3DQEBCwUAA4IBAQCuoD70s5OO353/ H/2n31e9PMRJdGZTWfDZB5gprkX30MVCeUuPL+fsVWvWKxZyucRMrQx0JwZ+8WUM mr3e4y0BqBq8iHdgqEPQvz2JIwQ6o+5xEEVtrhWySuI9c4VCGNgKVMRepuCSON9Q jE1PUOPX7YdYEHf7ARUsiEFUYMSkRCgkuyM2TwEnnczHOkfnIG6ZJc8WhE2tdhfq vr5lwRyy61plY4SG/VIXRdSrh4Mk5EQU9syLGAu1kv5Br5vxqUI+Izz20TFp2xNO G/Lamk8qE4vVBKFvj5c8CWhIu4njIzcqSOMvrrD8h6IwLDVZMzCiFOdxLPvotRTS X/I3Qlvj -----END CERTIFICATE-----Generated at Tue May 13 19:31:20 2025 by rpki-client