$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/933FBE12FA4811EFA3D5E847C4F9AE02.roa File: 933FBE12FA4811EFA3D5E847C4F9AE02.roa (raw, json) Hash identifier: CqmzNdWRnZ7rTKp1mJnYRv1rhkGv6JVJGLiBghAaQh0= Subject key identifier: 19:58:3D:3B:B7:C9:4F:15:2B:27:3B:2D:EB:A5:07:96:E6:B4:56:B2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B6DD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/933FBE12FA4811EFA3D5E847C4F9AE02.roa Signing time: Thu 08 May 2025 16:18:31 +0000 ROA not before: Thu 08 May 2025 16:18:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142450 IP address blocks: 103.171.40.0/23 maxlen: 24 2407:bf40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46813 (0xb6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:18:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd957-1fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:9c:c9:a1:db:b7:9b:18:6c:a0:d7:fe:83: 76:9e:6c:3d:43:53:2f:35:2e:7f:00:06:71:87:78: 0a:1f:f3:01:45:ac:f1:74:44:94:79:0a:e7:c8:e0: 25:b5:b8:46:f6:2e:e4:b2:ef:77:b7:a5:18:45:b2: d7:82:6c:1c:2e:ac:db:f9:1e:3e:48:99:08:82:b4: 19:72:78:93:2d:a1:e3:29:65:78:43:7b:66:50:07: 62:81:25:39:88:e9:78:76:e1:c3:1d:4e:02:4d:3d: d4:24:eb:fb:a7:56:99:7c:0c:f2:71:70:e2:e2:ca: 41:90:d0:fe:e2:52:b2:4a:bf:76:f3:60:1f:f3:a0: e9:2e:a3:0e:5f:d2:27:ee:b2:75:68:6e:93:91:7e: a1:24:3b:ca:29:59:0a:e6:6c:27:68:d4:d6:cd:d7: 76:98:03:fd:52:b6:ed:8c:98:d6:ab:b2:01:1a:da: c5:31:43:d9:fd:2d:41:a0:0e:e0:0f:dd:0c:11:aa: 8e:52:57:c0:c8:bf:10:64:4c:02:b6:1c:57:01:7d: ec:5f:00:d4:50:0f:68:01:89:f2:4c:29:e0:2f:90: d2:00:81:7e:00:20:20:9b:69:3a:84:5e:97:cf:da: 27:76:ec:32:76:c2:4e:22:4a:c6:0c:bf:65:36:ed: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:58:3D:3B:B7:C9:4F:15:2B:27:3B:2D:EB:A5:07:96:E6:B4:56:B2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/933FBE12FA4811EFA3D5E847C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.40.0/23 IPv6: 2407:bf40::/32 Signature Algorithm: sha256WithRSAEncryption 5e:e9:2a:9a:92:80:d6:6a:51:dc:23:81:c5:33:8d:36:68:23: 13:3a:2f:dc:7d:96:ad:e5:2a:d5:34:c1:7f:35:6f:70:af:2b: e8:81:37:9a:90:74:f6:cb:f4:76:99:03:dd:06:d2:99:3b:54: f6:83:13:88:52:65:c9:f7:fc:fb:5a:40:31:a3:75:17:b4:1a: 7b:e9:4d:46:7d:4f:18:8b:09:9b:d0:da:43:44:5a:3e:41:e0: c4:cf:a3:2a:e7:fd:ee:d9:f9:25:42:7f:13:1b:dc:96:88:cb: 3f:5b:8f:fd:5f:2f:d9:05:b9:be:ea:3e:5d:f2:22:92:37:2b: f1:1f:17:b4:4b:ec:19:e4:b5:fa:a6:ee:f8:bb:45:d4:20:e2: f5:6d:18:a0:c6:da:e8:d8:22:87:88:7f:cb:b6:17:05:17:a2: 83:ed:66:3c:e4:a8:32:07:d7:f6:5f:f4:54:11:ef:3a:aa:e4: ad:20:0a:13:ed:9b:9c:93:1d:c7:56:0d:8e:89:ff:b3:a2:e2: 15:42:b0:30:2a:db:d6:ed:4f:56:88:59:f7:96:c9:4f:07:8c: 03:4e:ed:08:25:be:77:39:ae:6f:7c:99:80:59:c1:ed:04:c3: 0c:2f:d5:c0:43:cd:9f:c6:03:cb:c9:1e:48:5d:18:2f:bb:28: 9b:9a:f2:15 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDALbdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTgzMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5NTctMWZlOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0HnMmh27ebGGyg1/6Ddp5sPUNTLzUufwAGcYd4Ch/zAUWs8XRElHkK58jg JbW4RvYu5LLvd7elGEWy14JsHC6s2/kePkiZCIK0GXJ4ky2h4ylleEN7ZlAHYoEl OYjpeHbhwx1OAk091CTr+6dWmXwM8nFw4uLKQZDQ/uJSskq/dvNgH/Og6S6jDl/S J+6ydWhuk5F+oSQ7yilZCuZsJ2jU1s3XdpgD/VK27YyY1quyARraxTFD2f0tQaAO 4A/dDBGqjlJXwMi/EGRMArYcVwF97F8A1FAPaAGJ8kwp4C+Q0gCBfgAgIJtpOoRe l8/aJ3bsMnbCTiJKxgy/ZTbtXbcCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQZWD07 t8lPFSsnOy3rpQeW5rRWsjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkzM0ZCRTEy RkE0ODExRUZBM0Q1RTg0N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBZ6soMA0EAgACMAcDBQAkB79AMA0GCSqGSIb3DQEBCwUA A4IBAQBe6SqakoDWalHcI4HFM402aCMTOi/cfZat5SrVNMF/NW9wryvogTeakHT2 y/R2mQPdBtKZO1T2gxOIUmXJ9/z7WkAxo3UXtBp76U1GfU8Yiwmb0NpDRFo+QeDE z6Mq5/3u2fklQn8TG9yWiMs/W4/9Xy/ZBbm+6j5d8iKSNyvxHxe0S+wZ5LX6pu74 u0XUIOL1bRigxtro2CKHiH/LthcFF6KD7WY85KgyB9f2X/RUEe86quStIAoT7Zuc kx3HVg2Oif+zouIVQrAwKtvW7U9WiFn3lslPB4wDTu0IJb53Oa5vfJmAWcHtBMMM L9XAQ82fxgPLyR5IXRgvuyibmvIV -----END CERTIFICATE-----Generated at Tue May 13 00:13:01 2025 by rpki-client