$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8148D968913A11EFA48AB64CC4F9AE02.roa File: 8148D968913A11EFA48AB64CC4F9AE02.roa (raw, json) Hash identifier: 0ziHoZtruWXuvGJ2hSN9mFEFiayeMov2tLJCX7LIrh4= Subject key identifier: 4F:68:42:EE:11:92:1F:CE:E5:82:0C:BB:10:3A:01:FE:15:73:A7:74 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BA0F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8148D968913A11EFA48AB64CC4F9AE02.roa Signing time: Thu 08 May 2025 16:30:50 +0000 ROA not before: Thu 08 May 2025 16:30:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45194 IP address blocks: 43.249.180.0/22 maxlen: 22 43.249.180.0/24 maxlen: 24 43.249.181.0/24 maxlen: 24 43.249.182.0/24 maxlen: 24 43.249.183.0/24 maxlen: 24 45.124.48.0/22 maxlen: 24 103.49.166.0/23 maxlen: 24 103.51.152.0/22 maxlen: 24 103.58.4.0/22 maxlen: 24 103.97.180.0/22 maxlen: 24 103.183.25.0/24 maxlen: 24 103.185.237.0/24 maxlen: 24 103.199.136.0/22 maxlen: 24 103.209.36.0/24 maxlen: 24 103.209.37.0/24 maxlen: 24 103.231.0.0/22 maxlen: 24 137.59.64.0/22 maxlen: 24 137.59.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47631 (0xba0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:30:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdc3a-a021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:75:8c:81:6c:d6:29:6e:b2:10:b8:07:85:ad: dd:4e:de:1e:6b:4f:50:48:25:33:53:8b:ad:83:fe: 5b:80:41:b4:67:14:be:8a:bb:ac:4f:97:20:1b:2a: c9:75:d7:3c:a7:c2:3c:38:fe:1b:58:04:ec:9c:ca: 37:ed:7e:92:e9:51:4d:5b:2a:6e:61:ff:56:66:8e: 47:7f:62:be:14:0a:b9:21:7c:59:b2:1b:2c:f9:7c: 81:aa:f7:60:56:ae:db:d8:0a:73:be:44:95:10:31: 95:ff:a3:24:60:f4:4e:db:ed:75:bd:52:07:5a:b5: 52:14:9b:c5:3a:8c:81:fc:01:07:41:93:32:4a:03: 41:47:9e:9d:4e:80:13:04:44:d5:5e:3d:42:e5:39: 9a:82:16:5e:23:d4:45:ca:b9:0b:87:19:51:a8:ce: 2e:30:0b:e0:01:64:91:3c:52:ec:90:b3:07:2e:08: 77:5a:a3:8f:c3:b8:a8:35:fd:1a:02:03:a5:e9:93: 24:dd:58:6c:22:04:b5:29:cf:3f:ce:8c:1f:64:7e: 21:bd:e9:37:80:4e:01:26:d5:0b:2c:e7:96:2d:83: d8:b5:2e:50:e1:49:0b:b3:0a:2e:82:81:db:c6:c5: 16:83:61:f0:5f:cb:d3:8c:a1:46:b0:e0:cc:e0:c0: 01:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:68:42:EE:11:92:1F:CE:E5:82:0C:BB:10:3A:01:FE:15:73:A7:74 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8148D968913A11EFA48AB64CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.180.0/22 45.124.48.0/22 103.49.166.0/23 103.51.152.0/22 103.58.4.0/22 103.97.180.0/22 103.183.25.0/24 103.185.237.0/24 103.199.136.0/22 103.209.36.0/23 103.231.0.0/22 137.59.64.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:1e:ec:ae:3e:62:84:bd:ca:fa:ae:c3:80:1b:d1:66:14:d5: a0:c9:98:18:10:9a:9c:f4:a7:fa:f9:b6:b6:c0:e5:b5:ca:61: fb:cb:d8:8a:d0:42:b7:b8:6f:0c:ee:af:b8:32:55:0d:c6:0c: 2b:f3:0b:8b:bf:6c:b9:bc:ea:f7:f8:28:3e:dd:46:8a:23:0d: 64:ec:72:7b:67:86:aa:da:ac:53:df:d0:e7:a2:2f:66:f9:ac: e5:07:3b:5d:f6:b5:c1:8c:21:94:6f:23:fc:36:e0:4a:b0:0c: 8a:15:25:f8:1f:87:2e:af:8c:cd:f4:c7:5b:ba:f5:f0:c7:cd: e2:57:e9:f2:9c:9f:1c:0e:09:5d:6f:b7:37:01:1e:ee:39:a2: 27:3e:ca:c7:ae:e5:5f:b9:8a:64:4c:58:11:88:17:94:24:60: 7f:08:26:36:4d:61:04:4d:c1:3f:59:78:21:89:d2:ca:fe:63: 9d:35:39:c9:11:f1:12:99:73:f9:9f:47:39:eb:00:2a:54:ed: ef:11:df:06:28:84:48:af:3c:99:06:c1:a0:f3:29:e9:b7:02: 4f:45:c5:d2:cd:7e:14:c1:d4:56:df:82:20:f3:c4:ae:1a:65: 12:21:ca:1f:aa:7b:c9:e9:01:b6:23:e0:cd:24:ce:cc:cd:50: b5:ae:c5:e7 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIDALoPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzA1MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RjM2EtYTAyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOF1jIFs1ilushC4B4Wt3U7eHmtPUEglM1OLrYP+W4BBtGcUvoq7rE+XIBsq yXXXPKfCPDj+G1gE7JzKN+1+kulRTVsqbmH/VmaOR39ivhQKuSF8WbIbLPl8gar3 YFau29gKc75ElRAxlf+jJGD0Ttvtdb1SB1q1UhSbxTqMgfwBB0GTMkoDQUeenU6A EwRE1V49QuU5moIWXiPURcq5C4cZUajOLjAL4AFkkTxS7JCzBy4Id1qjj8O4qDX9 GgIDpemTJN1YbCIEtSnPP86MH2R+Ib3pN4BOASbVCyznli2D2LUuUOFJC7MKLoKB 28bFFoNh8F/L04yhRrDgzODAAW8CAwEAAaOCAtcwggLTMB0GA1UdDgQWBBRPaELu EZIfzuWCDLsQOgH+FXOndDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgxNDhEOTY4 OTEzQTExRUZBNDhBQjY0Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGEGCCsGAQUFBwEHAQH/ BFIwUDBOBAIAATBIAwQCK/m0AwQCLXwwAwQBZzGmAwQCZzOYAwQCZzoEAwQCZ2G0 AwQAZ7cZAwQAZ7ntAwQCZ8eIAwQBZ9EkAwQCZ+cAAwQDiTtAMA0GCSqGSIb3DQEB CwUAA4IBAQCPHuyuPmKEvcr6rsOAG9FmFNWgyZgYEJqc9Kf6+ba2wOW1ymH7y9iK 0EK3uG8M7q+4MlUNxgwr8wuLv2y5vOr3+Cg+3UaKIw1k7HJ7Z4aq2qxT39Dnoi9m +azlBztd9rXBjCGUbyP8NuBKsAyKFSX4H4cur4zN9MdbuvXwx83iV+nynJ8cDgld b7c3AR7uOaInPsrHruVfuYpkTFgRiBeUJGB/CCY2TWEETcE/WXghidLK/mOdNTnJ EfESmXP5n0c56wAqVO3vEd8GKIRIrzyZBsGg8ynptwJPRcXSzX4UwdRW34Ig88Su GmUSIcofqnvJ6QG2I+DNJM7MzVC1rsXn -----END CERTIFICATE-----Generated at Tue May 13 09:17:29 2025 by rpki-client