$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935479A8F28011EAB3BD1D6BC4F9AE02.roa File: 935479A8F28011EAB3BD1D6BC4F9AE02.roa (raw, json) Hash identifier: VUBLFnFaxh8ql1Ym4u46A9bp3uMMZL2OFT/iANJa6Bc= Subject key identifier: C6:54:85:76:79:B3:99:A4:10:46:FE:B3:96:AB:0C:40:B4:6A:F1:59 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B5DF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935479A8F28011EAB3BD1D6BC4F9AE02.roa Signing time: Thu 08 May 2025 16:14:41 +0000 ROA not before: Thu 08 May 2025 16:14:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140181 IP address blocks: 103.155.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46559 (0xb5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:14:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd870-1560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0b:44:4b:ab:d7:88:49:b9:de:ef:32:92:4b: 46:16:b5:ae:85:99:df:d6:63:2a:98:46:d5:0e:a6: 82:5e:35:7b:ae:58:55:b6:ac:c7:88:5b:9c:14:5d: c6:2f:cc:38:2f:1b:ba:81:e8:af:bb:f4:65:d2:58: 4b:35:56:ce:a5:77:98:9d:9c:8b:3a:b6:6c:b0:b0: cd:e5:35:01:eb:29:5b:35:76:73:ad:de:8a:57:08: 6e:8e:5a:85:2c:f1:ff:5c:5f:ea:f9:aa:5d:4a:84: b6:7c:80:39:a9:10:f8:76:e4:16:88:d8:fe:5d:5a: 4d:ef:f9:5a:06:21:57:f7:5f:71:19:ee:4b:f7:cc: 0c:54:56:59:87:82:7d:2e:16:6b:4a:29:9d:fd:26: b7:97:3c:8a:d9:80:5b:0a:14:9e:cb:a7:34:4f:ec: 72:a6:e1:7e:64:a6:bf:9a:b8:27:60:5d:7d:d4:08: 9b:45:ef:32:7f:17:1c:10:cc:37:77:7f:45:f7:4b: 48:1b:55:4d:19:66:e5:ec:54:28:5b:8d:f7:ff:93: e8:ed:00:dd:c3:8f:42:c1:4f:79:a2:e5:4c:23:30: 5b:c3:a8:4f:79:e8:87:cf:fe:07:6e:86:5c:11:9c: ae:d5:ac:60:40:24:69:72:03:50:de:80:61:fe:02: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:54:85:76:79:B3:99:A4:10:46:FE:B3:96:AB:0C:40:B4:6A:F1:59 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/935479A8F28011EAB3BD1D6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.128.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:87:35:48:bf:ec:51:9f:b3:6d:11:e4:3a:9b:c3:f7:61:a9: bf:cd:93:2d:7c:7b:db:30:ae:33:94:a5:79:4d:11:3d:38:6c: 2d:cd:51:fd:fa:44:dd:f5:a1:ec:b5:f5:d2:0f:f0:97:fc:2c: 49:65:11:3f:9c:35:1a:a4:28:42:38:e3:1a:07:d9:e1:99:e0: 07:de:4f:ab:6b:fb:d7:be:a2:aa:6e:b7:e7:47:53:92:78:08: 16:8c:27:88:0d:07:a7:43:38:ab:dd:d2:24:80:08:e7:fb:39: 75:97:96:b8:2c:97:e2:f9:e3:f3:92:00:07:d1:bc:f0:4d:87: 62:d2:32:2d:59:bd:8b:0c:6d:c9:6e:23:b2:54:42:df:19:23: 98:8f:f6:b5:b3:a7:37:0a:00:f5:88:b7:9b:83:7f:e5:d3:04: b7:80:86:a2:7e:dd:0d:6d:28:b2:03:40:e1:f1:5b:d2:c2:f5: 77:fc:30:ae:46:43:48:64:fb:e2:ec:ce:d2:51:77:e0:a1:11: 7d:80:2e:60:ea:4a:07:21:db:da:c8:6c:a1:1c:23:f4:31:ba: b2:72:5d:00:19:c9:b0:f4:dc:90:ee:07:60:38:6d:fe:cc:6f: 7c:0f:a4:41:13:e3:cf:99:90:17:e0:e1:3c:87:d2:71:20:83: 10:7f:98:ef -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALXfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTQ0MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4NzAtMTU2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANILREur14hJud7vMpJLRha1roWZ39ZjKphG1Q6mgl41e65YVbasx4hbnBRd xi/MOC8buoHor7v0ZdJYSzVWzqV3mJ2cizq2bLCwzeU1AespWzV2c63eilcIbo5a hSzx/1xf6vmqXUqEtnyAOakQ+HbkFojY/l1aTe/5WgYhV/dfcRnuS/fMDFRWWYeC fS4Wa0opnf0mt5c8itmAWwoUnsunNE/scqbhfmSmv5q4J2BdfdQIm0XvMn8XHBDM N3d/RfdLSBtVTRlm5exUKFuN9/+T6O0A3cOPQsFPeaLlTCMwW8OoT3noh8/+B26G XBGcrtWsYEAkaXIDUN6AYf4CMScCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTGVIV2 ebOZpBBG/rOWqwxAtGrxWTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkzNTQ3OUE4 RjI4MDExRUFCM0JEMUQ2QkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ5uAMA0GCSqGSIb3DQEBCwUAA4IBAQB8hzVIv+xRn7Nt EeQ6m8P3Yam/zZMtfHvbMK4zlKV5TRE9OGwtzVH9+kTd9aHstfXSD/CX/CxJZRE/ nDUapChCOOMaB9nhmeAH3k+ra/vXvqKqbrfnR1OSeAgWjCeIDQenQzir3dIkgAjn +zl1l5a4LJfi+ePzkgAH0bzwTYdi0jItWb2LDG3JbiOyVELfGSOYj/a1s6c3CgD1 iLebg3/l0wS3gIaift0NbSiyA0Dh8VvSwvV3/DCuRkNIZPvi7M7SUXfgoRF9gC5g 6koHIdvayGyhHCP0Mbqycl0AGcmw9NyQ7gdgOG3+zG98D6RBE+PPmZAX4OE8h9Jx IIMQf5jv -----END CERTIFICATE-----Generated at Tue May 13 00:57:57 2025 by rpki-client