$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939334320BC911EC97726684C4F9AE02.roa File: 939334320BC911EC97726684C4F9AE02.roa (raw, json) Hash identifier: ntzRoBs64awNwqTn6Noi7bewMxrWQGuwWy522sLAfEU= Subject key identifier: 7C:28:B0:AC:6D:71:B0:D6:14:53:B1:80:68:1B:1C:E1:D6:B7:47:95 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B6F0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939334320BC911EC97726684C4F9AE02.roa Signing time: Thu 08 May 2025 16:18:48 +0000 ROA not before: Thu 08 May 2025 16:18:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142479 IP address blocks: 103.170.162.0/23 maxlen: 24 2407:b3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 13:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46832 (0xb6f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:18:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd967-ee72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:30:d7:cf:a8:23:52:57:85:7a:7c:26:02:12: b2:06:a0:99:2f:7d:28:86:24:d4:c7:db:46:0a:30: fd:c6:89:3b:f8:cf:69:10:7e:e4:68:42:bb:26:6f: 9f:43:20:9d:c4:07:57:4f:43:07:38:26:5e:e9:46: ef:34:60:dd:ab:fa:f7:ca:4f:e4:c5:98:de:72:02: 36:f2:ff:fb:39:d4:56:91:0e:61:3c:96:e6:bc:74: 29:03:5f:f8:62:77:f8:cc:be:ab:05:c0:4c:43:4c: 7d:1b:96:21:d5:dc:df:43:35:09:e5:b4:3f:23:69: d6:31:49:d5:00:6f:78:a0:94:22:51:46:0d:37:3c: 7e:9f:ca:b0:8b:e1:a8:a3:8f:4d:62:2a:00:77:e0: 05:ca:94:eb:12:a5:ef:e5:8c:8c:de:93:07:76:4f: 25:a5:ef:a5:dd:9b:f3:ab:ca:ef:f0:10:f0:41:77: b9:70:d9:70:55:00:ac:7b:99:5b:ef:d7:db:8e:51: dd:4e:32:c2:36:ad:b9:43:22:f9:c2:62:2b:4f:94: 4e:d8:44:73:1f:1e:00:b8:73:f0:a9:bf:88:be:7b: a8:e2:88:6c:80:53:ed:a0:cc:e7:99:86:11:2e:0b: fa:61:46:b1:51:03:95:6d:fb:4b:f2:63:77:32:1b: 86:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:28:B0:AC:6D:71:B0:D6:14:53:B1:80:68:1B:1C:E1:D6:B7:47:95 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939334320BC911EC97726684C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.162.0/23 IPv6: 2407:b3c0::/32 Signature Algorithm: sha256WithRSAEncryption ac:c8:57:31:c7:b3:f0:f9:88:5a:a1:d1:90:9c:c2:41:7e:ae: 2e:1c:62:7f:0a:e5:e2:84:f5:fd:85:26:0a:9c:fb:1c:db:93: 6e:d0:b6:fe:be:7f:e5:e7:05:46:38:81:28:ce:94:b3:2a:9a: f0:50:b0:e8:ab:53:cc:6e:e5:df:44:bb:e8:a7:6b:d3:39:8a: 5f:dd:69:5f:c3:bb:37:b4:fc:ac:69:05:35:08:48:b1:96:1b: 95:0a:94:14:13:0d:9a:89:c2:39:ae:d3:48:a3:4b:8c:33:7e: ea:ce:7b:5b:8a:2f:5e:bb:ae:23:77:e2:ca:80:57:cc:1e:8d: ab:35:08:c5:24:51:55:f3:65:46:23:b9:5c:3c:c0:5f:e5:fe: 99:db:55:1d:04:05:b0:57:5e:1c:a6:10:27:27:30:11:20:0c: af:37:f4:9c:7f:ad:d7:61:69:c2:9b:66:53:0a:64:d7:3e:de: 4e:30:a7:2f:d8:5c:bb:fc:1e:63:41:85:d0:52:ee:03:4f:ea: 37:0c:16:d5:99:b5:50:9e:d1:41:d3:d1:02:2e:46:90:4f:a0: 71:07:33:4c:98:82:80:d8:d9:77:c3:8a:45:ff:41:9a:a1:39: e9:19:0a:0e:05:fa:b6:f8:b4:38:cd:6f:03:9f:48:8c:5d:3f: 70:e0:b0:29 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDALbwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTg0OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5NjctZWU3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcw18+oI1JXhXp8JgISsgagmS99KIYk1MfbRgow/caJO/jPaRB+5GhCuyZv n0MgncQHV09DBzgmXulG7zRg3av698pP5MWY3nICNvL/+znUVpEOYTyW5rx0KQNf +GJ3+My+qwXATENMfRuWIdXc30M1CeW0PyNp1jFJ1QBveKCUIlFGDTc8fp/KsIvh qKOPTWIqAHfgBcqU6xKl7+WMjN6TB3ZPJaXvpd2b86vK7/AQ8EF3uXDZcFUArHuZ W+/X245R3U4ywjatuUMi+cJiK0+UTthEcx8eALhz8Km/iL57qOKIbIBT7aDM55mG ES4L+mFGsVEDlW37S/JjdzIbhpkCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBR8KLCs bXGw1hRTsYBoGxzh1rdHlTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkzOTMzNDMy MEJDOTExRUM5NzcyNjY4NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBZ6qiMA0EAgACMAcDBQAkB7PAMA0GCSqGSIb3DQEBCwUA A4IBAQCsyFcxx7Pw+YhaodGQnMJBfq4uHGJ/CuXihPX9hSYKnPsc25Nu0Lb+vn/l 5wVGOIEozpSzKprwULDoq1PMbuXfRLvop2vTOYpf3Wlfw7s3tPysaQU1CEixlhuV CpQUEw2aicI5rtNIo0uMM37qzntbii9eu64jd+LKgFfMHo2rNQjFJFFV82VGI7lc PMBf5f6Z21UdBAWwV14cphAnJzARIAyvN/Scf63XYWnCm2ZTCmTXPt5OMKcv2Fy7 /B5jQYXQUu4DT+o3DBbVmbVQntFB09ECLkaQT6BxBzNMmIKA2Nl3w4pF/0GaoTnp GQoOBfq2+LQ4zW8Dn0iMXT9w4LAp -----END CERTIFICATE-----Generated at Tue May 13 22:21:51 2025 by rpki-client