$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa File: 8152D222387B11EB85E94170C4F9AE02.roa (raw, json) Hash identifier: NhIgr0rNybjlrnWxty8x+vfrxAoCgu6DWbKWu/jqOZg= Subject key identifier: 41:A6:DD:D3:BF:30:29:25:98:6C:FA:EB:15:5D:3D:79:77:EC:C9:EE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B472 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa Signing time: Thu 08 May 2025 16:09:08 +0000 ROA not before: Thu 08 May 2025 16:09:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137128 IP address blocks: 103.112.106.0/24 maxlen: 24 2001:df1:cec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46194 (0xb472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:09:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd723-121c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ee:7f:cc:68:1b:94:5d:ef:b1:a5:f8:95:ff: 21:f8:8a:12:db:08:a6:58:5e:b3:53:96:f6:d7:04: 5d:0c:66:28:c3:4d:8a:40:78:5c:a0:75:a5:18:59: 74:6b:ff:33:d8:19:74:69:23:d3:57:92:0c:b5:6d: 94:f4:c9:1a:13:dc:65:8c:b8:8a:ce:d7:f9:b0:2e: af:63:79:35:ef:a9:5b:15:c9:64:cd:d0:d3:d4:f7: 8f:bc:0f:87:98:d8:1f:b5:64:0c:d1:05:b3:8c:a8: 71:e0:ae:26:d5:a9:e7:76:cf:cb:44:59:70:95:1f: de:02:72:94:c5:f3:81:b1:0e:88:d3:f1:4f:32:d1: 95:4a:74:7f:67:94:5a:5c:e4:06:d5:b2:d7:75:da: 47:e4:a5:e1:17:85:4c:c6:71:a6:36:41:d4:2d:d5: 2a:c4:40:f0:c8:6a:5e:5e:1f:a4:fe:aa:ce:d7:77: 87:41:8d:49:c1:07:ea:70:19:ab:70:3c:3b:3b:d8: 6e:3a:53:1e:d7:d1:4f:d4:7b:00:f7:5d:98:67:e1: b7:31:e5:97:74:65:ff:1c:96:9c:50:3c:4a:80:d4: 89:e4:e3:5e:80:ac:d4:05:ae:eb:26:6d:ae:a2:92: 14:d4:bd:7c:f3:28:d4:87:0c:e2:70:a3:32:9b:71: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A6:DD:D3:BF:30:29:25:98:6C:FA:EB:15:5D:3D:79:77:EC:C9:EE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8152D222387B11EB85E94170C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.106.0/24 IPv6: 2001:df1:cec0::/48 Signature Algorithm: sha256WithRSAEncryption b5:ff:ff:77:de:3f:31:52:af:9f:0d:a6:5e:31:4d:76:28:50: 15:5e:ad:ec:e9:e5:4c:3a:4e:80:8c:2e:f5:c0:13:64:b4:48: 9e:ee:dd:f6:f2:7c:3e:01:81:8f:5b:3e:6c:f0:2a:87:8a:50: 5d:93:88:57:87:df:f4:06:f2:87:29:93:f0:ce:0c:66:42:33: 52:e6:0d:61:e7:7e:52:79:d6:12:4b:d6:f9:e8:e2:c9:87:50: 4a:f9:37:ca:55:63:88:62:3f:f8:78:a5:15:57:46:16:b0:82: 90:3b:e6:15:f1:86:03:3a:b8:5e:0c:0c:2d:2a:87:05:d5:52: c5:c6:bd:06:d9:20:02:f2:f4:d4:35:3d:b3:11:42:61:bb:71: 9f:66:c0:f0:9b:02:36:4d:3b:b5:a8:c5:a0:bd:5f:1f:2b:74: 81:20:b5:ec:86:7a:ac:28:78:ca:ca:2b:22:55:01:48:52:f5: 3f:77:d4:8e:01:3c:b8:e3:d8:ab:b3:6c:53:ff:d4:f7:b2:29: 00:0b:30:26:a6:99:6b:27:10:b8:b0:d2:af:71:a3:2f:c4:6e: 5b:30:8d:14:bb:fc:75:5d:9c:7e:8c:3a:4e:12:d9:c7:78:f8: 62:5b:b6:f0:2f:3e:96:27:11:26:40:d0:4e:ff:97:b7:27:f3: 17:35:65:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALRyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDkwOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3MjMtMTIxYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjuf8xoG5Rd77Gl+JX/IfiKEtsIplhes1OW9tcEXQxmKMNNikB4XKB1pRhZ dGv/M9gZdGkj01eSDLVtlPTJGhPcZYy4is7X+bAur2N5Ne+pWxXJZM3Q09T3j7wP h5jYH7VkDNEFs4yoceCuJtWp53bPy0RZcJUf3gJylMXzgbEOiNPxTzLRlUp0f2eU WlzkBtWy13XaR+Sl4ReFTMZxpjZB1C3VKsRA8MhqXl4fpP6qztd3h0GNScEH6nAZ q3A8OzvYbjpTHtfRT9R7APddmGfhtzHll3Rl/xyWnFA8SoDUieTjXoCs1AWu6yZt rqKSFNS9fPMo1IcM4nCjMptxu2sCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRBpt3T vzApJZhs+usVXT15d+zJ7jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgxNTJEMjIy Mzg3QjExRUI4NUU5NDE3MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQAZ3BqMA8EAgACMAkDBwAgAQ3xzsAwDQYJKoZIhvcNAQEL BQADggEBALX//3fePzFSr58Npl4xTXYoUBVerezp5Uw6ToCMLvXAE2S0SJ7u3fby fD4BgY9bPmzwKoeKUF2TiFeH3/QG8ocpk/DODGZCM1LmDWHnflJ51hJL1vno4smH UEr5N8pVY4hiP/h4pRVXRhawgpA75hXxhgM6uF4MDC0qhwXVUsXGvQbZIALy9NQ1 PbMRQmG7cZ9mwPCbAjZNO7WoxaC9Xx8rdIEgteyGeqwoeMrKKyJVAUhS9T931I4B PLjj2KuzbFP/1PeyKQALMCammWsnELiw0q9xoy/EblswjRS7/HVdnH6MOk4S2cd4 +GJbtvAvPpYnESZA0E7/l7cn8xc1ZX0= -----END CERTIFICATE-----Generated at Tue May 13 02:27:14 2025 by rpki-client