$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A4D2EE0DB3311EA90433080C4F9AE02.roa File: 8A4D2EE0DB3311EA90433080C4F9AE02.roa (raw, json) Hash identifier: jjqYMtMY66JJU6UIEuduGTNr2BP+NjppY7GmI/5cxhY= Subject key identifier: BA:FC:B5:EB:A1:41:77:98:7E:A4:C2:07:B5:51:62:B9:D6:68:34:21 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B4C0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A4D2EE0DB3311EA90433080C4F9AE02.roa Signing time: Thu 08 May 2025 16:10:20 +0000 ROA not before: Thu 08 May 2025 16:10:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137636 IP address blocks: 103.124.108.0/24 maxlen: 24 103.160.121.0/24 maxlen: 24 2001:df7:1900::/48 maxlen: 48 2400:b460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 13:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46272 (0xb4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:10:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd76c-2fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:82:c1:15:ae:3c:e3:d7:f2:b2:c1:72:52: 11:ce:51:e3:05:58:86:7f:e7:3a:a6:e1:3f:12:3a: 5b:e0:78:4c:0f:2e:d2:aa:da:d5:a4:40:d2:f2:23: 7a:e9:e5:2b:2c:00:b0:a5:fe:64:60:56:34:7e:6c: 12:43:00:14:62:db:4a:93:15:97:55:32:99:24:ce: a1:9c:53:89:8d:b2:ce:5e:55:76:98:96:55:1c:52: 71:0d:db:de:d7:fb:c6:63:af:d8:6c:55:6f:80:8f: ea:6a:81:c1:ae:8d:24:cd:b2:a5:17:18:3a:62:20: 36:51:60:e1:17:bf:36:2e:3b:a7:2c:f5:dd:eb:c7: 22:37:b4:0f:f2:fc:63:37:bd:8a:89:20:fb:0c:a8: 62:98:85:58:cc:8e:ff:19:59:67:7e:28:b4:6a:68: 5d:c8:91:dc:66:a2:f6:3a:7b:ed:a2:eb:70:5f:fb: 35:b3:32:1f:e0:95:e7:77:c9:ff:5e:3c:79:28:aa: e8:06:50:fc:03:89:32:3e:c4:32:dc:1f:ab:db:b8: ba:54:60:9b:e6:15:0a:e9:94:0d:d0:04:55:70:a2: 81:a8:0b:a1:aa:79:eb:42:f6:4c:f5:d2:5b:bf:c5: 12:9d:b0:b1:f9:6e:4f:59:6a:17:7f:a2:b5:4d:22: 81:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FC:B5:EB:A1:41:77:98:7E:A4:C2:07:B5:51:62:B9:D6:68:34:21 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A4D2EE0DB3311EA90433080C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.108.0/24 103.160.121.0/24 IPv6: 2001:df7:1900::/48 2400:b460::/32 Signature Algorithm: sha256WithRSAEncryption 66:42:fe:cb:03:21:24:e7:42:4e:b5:f6:e8:61:e1:0b:94:88: af:ef:e4:51:d4:39:35:de:b7:40:37:57:70:9d:09:d1:c8:a5: 68:e0:79:66:4c:dc:ad:4e:3c:d3:98:3b:97:a4:85:28:d6:eb: 2b:36:17:62:6c:2c:d7:5e:bd:0d:9a:ea:41:66:e7:c6:eb:f1: b2:db:7e:d7:2c:6e:8c:1d:14:51:8d:de:a8:cd:ed:a4:09:fd: f5:60:5d:1b:c3:0d:d0:a4:60:5f:63:4b:93:93:30:70:bc:19: b7:e5:ce:56:03:98:36:fe:79:c1:85:a1:bc:8b:64:da:5b:66: d2:9a:1f:44:60:ae:3e:20:0b:37:24:e8:bf:26:1c:1e:16:3a: bb:35:f2:dd:8c:07:e3:82:5f:ca:7a:d2:e1:5c:97:1e:c4:a6: d6:9b:b9:fc:34:2a:2f:75:19:91:c6:70:95:13:13:63:72:d0: 30:99:0b:0b:48:dd:7e:2d:2d:6d:f5:7b:c2:dd:3c:c7:3c:65: bb:25:b9:7d:19:0d:96:6d:00:8f:62:ad:d5:7e:83:4e:b6:68: d0:c8:9e:29:8b:d4:b9:07:99:9b:d1:48:09:e6:22:7c:23:cf: e8:85:ae:83:42:2c:3b:5a:1b:4d:3d:94:f5:11:e2:12:d6:95: 58:55:99:80 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIDALTAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTAyMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3NmMtMmZiZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANORgsEVrjzj1/KywXJSEc5R4wVYhn/nOqbhPxI6W+B4TA8u0qra1aRA0vIj eunlKywAsKX+ZGBWNH5sEkMAFGLbSpMVl1UymSTOoZxTiY2yzl5VdpiWVRxScQ3b 3tf7xmOv2GxVb4CP6mqBwa6NJM2ypRcYOmIgNlFg4Re/Ni47pyz13evHIje0D/L8 Yze9iokg+wyoYpiFWMyO/xlZZ34otGpoXciR3Gai9jp77aLrcF/7NbMyH+CV53fJ /148eSiq6AZQ/AOJMj7EMtwfq9u4ulRgm+YVCumUDdAEVXCigagLoap560L2TPXS W7/FEp2wsfluT1lqF3+itU0igdkCAwEAAaOCArMwggKvMB0GA1UdDgQWBBS6/LXr oUF3mH6kwge1UWK51mg0ITAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhBNEQyRUUw REIzMzExRUE5MDQzMzA4MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMD0GCCsGAQUFBwEHAQH/ BC4wLDASBAIAATAMAwQAZ3xsAwQAZ6B5MBYEAgACMBADBwAgAQ33GQADBQAkALRg MA0GCSqGSIb3DQEBCwUAA4IBAQBmQv7LAyEk50JOtfboYeELlIiv7+RR1Dk13rdA N1dwnQnRyKVo4HlmTNytTjzTmDuXpIUo1usrNhdibCzXXr0NmupBZufG6/Gy237X LG6MHRRRjd6oze2kCf31YF0bww3QpGBfY0uTkzBwvBm35c5WA5g2/nnBhaG8i2Ta W2bSmh9EYK4+IAs3JOi/JhweFjq7NfLdjAfjgl/KetLhXJcexKbWm7n8NCovdRmR xnCVExNjctAwmQsLSN1+LS1t9XvC3TzHPGW7Jbl9GQ2WbQCPYq3VfoNOtmjQyJ4p i9S5B5mb0UgJ5iJ8I8/oha6DQiw7WhtNPZT1EeIS1pVYVZmA -----END CERTIFICATE-----Generated at Wed May 14 01:29:42 2025 by rpki-client