$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87960B42FFE811EBA7C9A476C4F9AE02.roa File: 87960B42FFE811EBA7C9A476C4F9AE02.roa (raw, json) Hash identifier: QrucjqG5bECmQcaiAsjlV2u68eRzdbazupQnJoWS0e8= Subject key identifier: 45:BE:A8:EC:85:09:C4:2C:9C:AC:16:A0:AA:35:0E:44:C5:3C:CB:9F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B6E1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87960B42FFE811EBA7C9A476C4F9AE02.roa Signing time: Thu 08 May 2025 16:18:34 +0000 ROA not before: Thu 08 May 2025 16:18:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142454 IP address blocks: 103.142.164.0/23 maxlen: 24 103.171.120.0/23 maxlen: 24 2407:c3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 09:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46817 (0xb6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:18:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd95a-ba31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:50:be:f1:1f:46:ff:97:84:0b:26:84:d8: d1:6f:31:27:d6:81:c7:b8:f8:f5:32:8f:5f:50:d3: a5:55:98:01:95:be:48:f3:09:37:c8:3e:53:50:f4: 8a:eb:5a:20:67:c8:c9:c3:01:ee:ae:04:ba:ca:95: 97:12:36:15:23:03:f2:7e:26:44:43:f7:de:23:9f: 09:c5:c3:e6:09:42:3d:f8:55:d8:db:60:b0:c8:f6: 79:26:88:fc:03:8e:b2:7b:83:15:bf:45:ca:d7:36: 29:ea:14:97:e2:6a:bb:9c:32:b6:25:95:5c:64:10: 92:2e:17:6a:57:8f:a4:20:05:f5:40:93:17:7c:e9: b1:a4:30:e7:f7:1b:b8:bc:e3:f9:63:9b:24:f5:00: e2:27:c8:4f:70:2f:6f:4b:85:b9:e6:30:8e:12:6d: a1:b4:c1:ab:3c:02:e8:31:bc:5a:50:5a:c1:e0:73: 18:99:2c:ad:b3:c4:60:59:0c:4c:6f:5b:9e:1b:d2: c9:fb:0f:27:d0:b7:7d:d7:5a:2c:78:80:3e:59:04: ec:25:3d:40:f0:87:f3:10:30:87:af:e4:9c:28:ff: d4:10:f5:68:09:7e:e5:85:07:6a:a7:7b:24:f1:69: 50:7c:d3:0a:7a:37:80:be:9f:20:e7:50:46:9f:1e: 26:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BE:A8:EC:85:09:C4:2C:9C:AC:16:A0:AA:35:0E:44:C5:3C:CB:9F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87960B42FFE811EBA7C9A476C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.164.0/23 103.171.120.0/23 IPv6: 2407:c3c0::/32 Signature Algorithm: sha256WithRSAEncryption 28:10:31:f5:a1:3e:89:05:eb:06:6d:4e:42:4d:fb:99:bf:1d: 61:99:f3:5e:7a:dc:68:24:b2:ab:ba:6c:82:ec:9e:d0:ce:98: 0b:39:81:7f:2e:99:a5:62:1c:88:0a:f8:81:16:85:47:8e:c4: 89:81:94:30:d1:29:a7:15:14:13:e4:ac:46:0f:22:13:28:10: f6:db:6a:44:6a:e8:8b:e9:b0:5e:c1:fe:1b:87:4a:4b:07:7d: 54:31:02:c5:26:9b:13:4d:6b:75:1e:e8:90:28:e1:03:98:11: 44:19:a8:06:0c:77:c2:e8:0d:fc:4b:78:7d:fc:e8:04:60:a3: 7a:6f:85:99:e6:67:b0:63:6f:25:92:fa:e4:8a:2d:aa:47:eb: db:e1:cc:4c:55:53:f4:9a:ee:aa:76:0d:a6:84:c3:b1:bf:37: 1f:96:41:22:b3:fe:53:f5:69:cd:96:28:0b:3c:73:93:73:db: e5:59:2f:fc:6f:be:d8:7b:a2:9f:6f:21:43:9d:eb:da:69:b8: 21:7d:c2:24:9e:a1:a4:83:c1:a8:e4:11:d9:ff:06:09:8a:37: c7:b9:8c:5f:94:d4:c0:bb:c0:11:4d:d2:c2:de:e2:b5:67:ff: cb:39:0c:a2:8b:51:3d:59:f3:73:d3:bf:97:eb:cf:c7:28:63: 8a:a5:2d:9d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIDALbhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTgzNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5NWEtYmEzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMcdUL7xH0b/l4QLJoTY0W8xJ9aBx7j49TKPX1DTpVWYAZW+SPMJN8g+U1D0 iutaIGfIycMB7q4EusqVlxI2FSMD8n4mREP33iOfCcXD5glCPfhV2NtgsMj2eSaI /AOOsnuDFb9Fytc2KeoUl+Jqu5wytiWVXGQQki4XalePpCAF9UCTF3zpsaQw5/cb uLzj+WObJPUA4ifIT3Avb0uFueYwjhJtobTBqzwC6DG8WlBaweBzGJksrbPEYFkM TG9bnhvSyfsPJ9C3fddaLHiAPlkE7CU9QPCH8xAwh6/knCj/1BD1aAl+5YUHaqd7 JPFpUHzTCno3gL6fIOdQRp8eJlMCAwEAAaOCAqowggKmMB0GA1UdDgQWBBRFvqjs hQnELJysFqCqNQ5ExTzLnzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg3OTYwQjQy RkZFODExRUJBN0M5QTQ3NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDQGCCsGAQUFBwEHAQH/ BCUwIzASBAIAATAMAwQBZ46kAwQBZ6t4MA0EAgACMAcDBQAkB8PAMA0GCSqGSIb3 DQEBCwUAA4IBAQAoEDH1oT6JBesGbU5CTfuZvx1hmfNeetxoJLKrumyC7J7QzpgL OYF/LpmlYhyICviBFoVHjsSJgZQw0SmnFRQT5KxGDyITKBD222pEauiL6bBewf4b h0pLB31UMQLFJpsTTWt1HuiQKOEDmBFEGagGDHfC6A38S3h9/OgEYKN6b4WZ5mew Y28lkvrkii2qR+vb4cxMVVP0mu6qdg2mhMOxvzcflkEis/5T9WnNligLPHOTc9vl WS/8b77Ye6KfbyFDnevaabghfcIknqGkg8Go5BHZ/wYJijfHuYxflNTAu8ARTdLC 3uK1Z//LOQyii1E9WfNz07+X68/HKGOKpS2d -----END CERTIFICATE-----Generated at Wed May 14 14:11:32 2025 by rpki-client