$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D8E7BCAE8D411ED8D0FAD45C4F9AE02.roa File: 8D8E7BCAE8D411ED8D0FAD45C4F9AE02.roa (raw, json) Hash identifier: Il+r81QmaYBo15gPk7t7m5pQa7Fwv3YC6CgoqevylgE= Subject key identifier: 69:0E:28:1B:BB:DE:EC:7B:4E:4E:B6:08:54:79:51:E1:20:0F:CE:B0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B90A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D8E7BCAE8D411ED8D0FAD45C4F9AE02.roa Signing time: Thu 08 May 2025 16:26:55 +0000 ROA not before: Thu 08 May 2025 16:26:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151148 IP address blocks: 103.90.205.0/24 maxlen: 24 103.90.206.0/24 maxlen: 24 103.90.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 07:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47370 (0xb90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:26:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb4f-4de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:be:eb:29:21:5f:24:71:41:73:c8:53:4f: 78:74:18:e6:aa:ac:c1:dd:7c:2b:7e:c2:4d:87:a8: 2b:92:8a:53:c9:bf:44:96:2a:f6:0e:9e:b2:6e:64: 48:3f:d1:7e:f6:31:bc:0e:c6:cd:71:c2:c8:2e:a8: e8:ad:55:bb:3d:dc:83:85:fb:95:04:a4:03:1e:3b: f0:ef:45:8b:8a:94:a9:77:a4:56:e9:7b:64:49:71: f7:29:2c:7c:64:01:92:1e:95:5a:97:f3:46:e2:a3: 96:3b:d9:22:7d:c3:48:55:ce:42:22:f3:ec:62:14: cb:bf:72:62:cd:b6:48:32:18:a7:df:bb:77:3a:3f: ff:75:08:63:b2:01:ed:9e:81:30:56:45:46:cc:2f: 12:fe:d6:70:13:aa:fc:ad:3a:90:b1:81:38:a3:bd: e3:95:59:c8:ec:7d:1f:93:82:85:6b:8c:1b:61:59: fe:2f:cd:8f:71:95:de:07:aa:2b:37:87:82:06:97: 14:86:74:b4:2d:51:55:bc:b6:4d:cb:fe:c4:2e:9c: 4f:48:06:4b:5b:91:7a:dc:e3:84:d6:ec:2d:6a:99: d5:53:00:0d:86:9c:a9:dd:d6:6a:a9:00:2e:fe:1e: 7f:9a:10:3b:0a:14:2d:bd:14:3d:d3:cf:c9:40:9d: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0E:28:1B:BB:DE:EC:7B:4E:4E:B6:08:54:79:51:E1:20:0F:CE:B0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8D8E7BCAE8D411ED8D0FAD45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.90.205.0-103.90.207.255 Signature Algorithm: sha256WithRSAEncryption b0:25:03:e9:4e:a0:f1:72:3b:7d:f8:03:7a:16:bb:48:96:38: a5:ea:69:8c:48:ab:2c:30:75:45:a2:82:4a:a0:14:b6:02:8d: 03:cc:05:9a:6f:bc:db:f9:c3:f5:bc:1e:1b:bd:89:9c:5c:bf: d2:e5:1a:aa:70:36:25:47:a8:fa:67:a9:39:f2:c3:87:5d:4b: 25:ff:37:01:7b:e6:64:ad:36:36:4d:2e:42:23:44:95:ee:ec: d6:1a:e7:6b:8e:60:12:96:be:21:9e:fa:a0:87:35:43:e3:ae: 5a:27:74:59:f8:fa:0e:be:cc:c3:65:2c:52:d6:0d:59:86:87: 2f:8d:5f:9f:bd:ed:b0:81:ef:5a:b7:7d:1c:f0:ef:f0:45:ee: 51:24:23:ee:bf:db:be:4d:27:8e:1f:58:db:29:3a:5f:03:c8: 6f:76:bd:92:e5:c4:9c:8a:4e:9c:59:3a:3f:1a:08:fc:fd:da: 15:ba:a6:4c:4a:62:21:7b:80:09:ba:f2:09:b6:f1:ea:c0:ef: bc:5f:ee:af:7a:6e:78:50:3d:04:8f:3e:07:5b:4a:e2:c1:cf: a4:34:ed:9b:fd:51:92:b0:2f:1d:b5:29:b8:36:40:5b:6e:50: 2e:45:3f:69:58:19:3f:ad:eb:d8:a2:ae:00:ae:e7:54:2f:d4: 54:ab:ee:d7 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIDALkKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjY1NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiNGYtNGRlMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWtvuspIV8kcUFzyFNPeHQY5qqswd18K37CTYeoK5KKU8m/RJYq9g6esm5k SD/RfvYxvA7GzXHCyC6o6K1Vuz3cg4X7lQSkAx478O9Fi4qUqXekVul7ZElx9yks fGQBkh6VWpfzRuKjljvZIn3DSFXOQiLz7GIUy79yYs22SDIYp9+7dzo//3UIY7IB 7Z6BMFZFRswvEv7WcBOq/K06kLGBOKO945VZyOx9H5OChWuMG2FZ/i/Nj3GV3geq KzeHggaXFIZ0tC1RVby2Tcv+xC6cT0gGS1uRetzjhNbsLWqZ1VMADYacqd3WaqkA Lv4ef5oQOwoULb0UPdPPyUCdXIcCAwEAAaOCAp0wggKZMB0GA1UdDgQWBBRpDigb u97se05OtghUeVHhIA/OsDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhEOEU3QkNB RThENDExRUQ4RDBGQUQ0NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCcGCCsGAQUFBwEHAQH/ BBgwFjAUBAIAATAOMAwDBABnWs0DBARnWsAwDQYJKoZIhvcNAQELBQADggEBALAl A+lOoPFyO334A3oWu0iWOKXqaYxIqywwdUWigkqgFLYCjQPMBZpvvNv5w/W8Hhu9 iZxcv9LlGqpwNiVHqPpnqTnyw4ddSyX/NwF75mStNjZNLkIjRJXu7NYa52uOYBKW viGe+qCHNUPjrlondFn4+g6+zMNlLFLWDVmGhy+NX5+97bCB71q3fRzw7/BF7lEk I+6/275NJ44fWNspOl8DyG92vZLlxJyKTpxZOj8aCPz92hW6pkxKYiF7gAm68gm2 8erA77xf7q96bnhQPQSPPgdbSuLBz6Q07Zv9UZKwLx21Kbg2QFtuUC5FP2lYGT+t 69iirgCu51Qv1FSr7tc= -----END CERTIFICATE-----Generated at Wed May 14 10:08:57 2025 by rpki-client