$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CBA3FF27D1111EC8D94E43BC4F9AE02.roa File: 8CBA3FF27D1111EC8D94E43BC4F9AE02.roa (raw, json) Hash identifier: XH3AtdqxMd9vChzk7PPZAl9Nb/mwCpjWne9VidDKNWk= Subject key identifier: 2D:C3:F3:B2:E9:B1:5B:37:29:74:96:77:B0:81:6E:4C:D6:11:85:38 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B76C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CBA3FF27D1111EC8D94E43BC4F9AE02.roa Signing time: Thu 08 May 2025 16:20:41 +0000 ROA not before: Thu 08 May 2025 16:20:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147216 IP address blocks: 103.175.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46956 (0xb76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:20:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9d9-4124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:49:4a:eb:6f:c7:1c:4d:f4:e1:93:a6:a4: 21:27:c4:0a:f4:78:b9:18:d6:cb:e2:39:47:68:88: 5e:ec:7f:c4:bc:9c:8a:88:84:32:d4:c7:bc:f9:40: cc:bb:64:ac:67:0e:11:4f:79:34:88:82:ab:b6:63: 3d:f9:be:9b:67:c8:ed:a6:49:0c:f9:5c:bf:f9:3e: 58:98:d6:70:6a:01:bb:cb:15:53:b6:ee:50:5f:c3: 17:07:a2:4c:b7:9e:26:9d:b6:b7:e9:62:3a:e6:93: 7f:1a:e7:48:d6:21:63:3a:d4:92:61:79:44:5f:01: 5f:9f:1c:98:96:50:fc:ce:3d:23:a8:12:9f:97:9a: c9:0d:e0:2b:e7:a4:15:02:f2:78:39:56:48:52:08: 50:8d:46:ac:8d:d6:4d:02:f5:f5:73:52:64:d3:b3: bb:87:83:6b:1d:fe:40:76:b3:f6:b7:e5:d8:40:fb: 37:d3:d7:9b:dd:0e:68:f2:bb:43:82:d4:52:ad:5f: 8d:bf:af:80:c5:70:13:e6:4a:74:b6:44:9e:dd:00: 65:1c:aa:a5:cd:9c:4e:08:66:85:97:08:cd:7c:a0: 9e:53:f7:3e:68:c9:18:8c:d9:6c:10:a5:8a:5d:e5: ed:d6:54:4f:7b:13:5d:e2:ab:47:06:e8:2b:f9:d5: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C3:F3:B2:E9:B1:5B:37:29:74:96:77:B0:81:6E:4C:D6:11:85:38 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CBA3FF27D1111EC8D94E43BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.32.0/23 Signature Algorithm: sha256WithRSAEncryption 96:fd:94:f6:56:26:d9:e3:49:fe:fc:67:37:f5:9a:45:9e:7d: da:5c:f3:b0:1a:97:39:f9:7a:5d:a1:cd:07:32:15:bb:d2:7d: 1c:5a:a1:45:ff:7a:82:99:84:de:a1:46:6e:34:93:0b:61:e2: 3d:27:2a:f8:13:04:db:58:2c:9c:de:22:82:f5:46:a5:50:0c: 65:22:7c:ca:15:2d:3b:73:16:6e:75:dc:e8:25:17:78:f6:92: f5:ef:c2:65:53:0d:51:6a:81:0c:bf:07:25:7f:02:6d:d2:a8: 76:de:c6:d8:eb:aa:cc:5f:ad:b3:11:ab:44:ac:73:09:b7:76: c9:8d:1a:e1:28:87:c9:d7:9a:6f:35:b3:91:05:b6:9a:4b:ed: 4f:6d:88:2c:49:b3:98:42:fb:d6:9b:84:b7:c8:51:8d:1b:d1: 72:bb:73:90:29:1c:60:c2:75:f0:26:21:51:0f:31:3b:5c:25: c1:2c:25:5e:ca:d6:f3:b5:7b:0a:b4:98:4b:0c:ea:0f:63:f5: 27:03:84:28:b5:16:84:e7:01:42:f7:d1:ac:a4:c5:84:a9:0f: fa:9e:ec:41:c5:97:75:3c:3a:9c:e7:07:7a:1a:ee:11:3c:5f: 0c:5b:98:bc:ae:35:1b:80:09:85:1c:9a:3f:6b:cf:ff:89:ce: 6a:60:e2:ba -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALdsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjA0MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5ZDktNDEyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANL5SUrrb8ccTfThk6akISfECvR4uRjWy+I5R2iIXux/xLycioiEMtTHvPlA zLtkrGcOEU95NIiCq7ZjPfm+m2fI7aZJDPlcv/k+WJjWcGoBu8sVU7buUF/DFwei TLeeJp22t+liOuaTfxrnSNYhYzrUkmF5RF8BX58cmJZQ/M49I6gSn5eayQ3gK+ek FQLyeDlWSFIIUI1GrI3WTQL19XNSZNOzu4eDax3+QHaz9rfl2ED7N9PXm90OaPK7 Q4LUUq1fjb+vgMVwE+ZKdLZEnt0AZRyqpc2cTghmhZcIzXygnlP3PmjJGIzZbBCl il3l7dZUT3sTXeKrRwboK/nVN7MCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQtw/Oy 6bFbNyl0lnewgW5M1hGFODAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhDQkEzRkYy N0QxMTExRUM4RDk0RTQzQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ68gMA0GCSqGSIb3DQEBCwUAA4IBAQCW/ZT2VibZ40n+ /Gc39ZpFnn3aXPOwGpc5+Xpdoc0HMhW70n0cWqFF/3qCmYTeoUZuNJMLYeI9Jyr4 EwTbWCyc3iKC9UalUAxlInzKFS07cxZuddzoJRd49pL178JlUw1RaoEMvwclfwJt 0qh23sbY66rMX62zEatErHMJt3bJjRrhKIfJ15pvNbORBbaaS+1PbYgsSbOYQvvW m4S3yFGNG9Fyu3OQKRxgwnXwJiFRDzE7XCXBLCVeytbztXsKtJhLDOoPY/UnA4Qo tRaE5wFC99GspMWEqQ/6nuxBxZd1PDqc5wd6Gu4RPF8MW5i8rjUbgAmFHJo/a8// ic5qYOK6 -----END CERTIFICATE-----Generated at Tue May 13 00:06:06 2025 by rpki-client