$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94226178C82E11EF9C2E137CC4F9AE02.roa File: 94226178C82E11EF9C2E137CC4F9AE02.roa (raw, json) Hash identifier: Nu6NuKZaWEQrv8U2PWgj6KGRGHyzeX4PXru/imD/s/A= Subject key identifier: F4:13:26:46:32:83:1B:3D:4D:02:81:94:9F:DC:04:9E:D9:8D:D5:46 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B678 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94226178C82E11EF9C2E137CC4F9AE02.roa Signing time: Thu 08 May 2025 16:16:59 +0000 ROA not before: Thu 08 May 2025 16:16:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141549 IP address blocks: 103.66.76.0/22 maxlen: 24 103.74.136.0/22 maxlen: 24 103.119.178.0/23 maxlen: 24 103.163.112.0/23 maxlen: 24 2407:2640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 08:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46712 (0xb678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:16:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd8fb-b050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:68:5f:a7:fe:f3:00:a4:10:19:9f:41:7e:9f: f6:f1:e5:85:61:13:d9:3f:1c:72:98:6f:03:c7:25: 75:90:54:fa:29:12:30:51:17:45:fc:aa:8e:67:ab: c3:25:36:e6:68:1f:57:13:b4:1e:ff:ee:1c:df:d6: bd:71:28:36:f7:0d:0a:c5:5b:73:df:b6:67:fc:ef: 44:77:4c:ce:5f:69:36:11:96:bb:9b:66:4b:d9:97: b1:ce:79:e2:bd:48:e0:85:89:ae:4b:ff:02:d2:90: 8a:4d:f1:8c:49:8d:20:93:2e:68:a5:3c:91:e2:c4: f6:33:cf:79:18:0c:8b:86:da:e7:a7:f1:37:91:45: 7c:ea:43:75:de:ec:3c:d3:c0:0c:52:59:cd:27:f1: 91:8d:0d:58:90:51:b6:78:f5:d7:18:83:49:e5:e9: 76:97:83:f1:80:a9:21:30:37:91:ac:23:1f:3f:b5: 4a:a1:45:c6:cc:ed:56:27:17:24:41:f5:70:99:bd: 88:37:b5:3b:3e:95:e8:82:7e:b7:46:32:35:ff:13: 53:15:a4:da:66:e7:31:79:fd:28:fc:c2:82:3b:40: e1:81:ec:25:86:ef:e6:50:f7:2c:9a:ad:a2:00:f9: ef:55:9c:0d:14:42:e2:43:d7:34:f2:76:39:7c:21: b2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:13:26:46:32:83:1B:3D:4D:02:81:94:9F:DC:04:9E:D9:8D:D5:46 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/94226178C82E11EF9C2E137CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.76.0/22 103.74.136.0/22 103.119.178.0/23 103.163.112.0/23 IPv6: 2407:2640::/32 Signature Algorithm: sha256WithRSAEncryption 86:b8:ba:cb:ee:3c:7d:1d:c5:56:b0:8d:86:35:7a:e9:fe:24: b8:b5:e0:5b:ac:7b:3c:40:77:fc:2b:fc:a3:09:2d:ae:08:23: ef:2f:05:71:1a:b6:51:67:ff:78:82:cf:83:37:a7:06:f9:3b: 35:d2:fc:92:22:f0:45:e7:2a:8e:2a:e3:6c:a7:fa:e5:c4:a8: 3b:32:27:8b:d5:1d:9b:6c:66:20:bc:f0:22:ef:f4:0c:80:ef: 74:96:90:dc:37:74:2c:61:de:38:69:dd:2d:54:7e:b5:b2:bb: f0:a1:52:b3:63:bd:d9:03:2c:31:22:d4:f4:7a:5b:68:2d:b7: a2:87:9c:ed:d2:b8:3b:f4:2e:49:5c:90:0e:e4:23:84:b1:23: 47:89:fd:76:54:82:56:40:43:b1:fb:0b:3e:7a:1b:31:49:df: 6d:71:ff:f7:e0:e5:1d:bc:f4:bb:a6:a8:e3:04:71:27:5b:d4: d1:01:95:30:b1:cc:56:cb:11:1f:06:69:ed:f9:ed:15:0f:11: 68:22:f2:c0:c7:7d:ec:49:26:35:29:61:43:97:e5:20:ec:6d: 6b:33:b1:1e:ba:a7:ed:07:b8:0b:1d:68:a1:f3:aa:80:91:90: c1:db:de:23:4a:a3:6c:3c:f7:31:fc:3c:20:1c:8f:29:d4:2c: d3:9d:40:ff -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgIDALZ4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTY1OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4ZmItYjA1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5oX6f+8wCkEBmfQX6f9vHlhWET2T8ccphvA8cldZBU+ikSMFEXRfyqjmer wyU25mgfVxO0Hv/uHN/WvXEoNvcNCsVbc9+2Z/zvRHdMzl9pNhGWu5tmS9mXsc55 4r1I4IWJrkv/AtKQik3xjEmNIJMuaKU8keLE9jPPeRgMi4ba56fxN5FFfOpDdd7s PNPADFJZzSfxkY0NWJBRtnj11xiDSeXpdpeD8YCpITA3kawjHz+1SqFFxsztVicX JEH1cJm9iDe1Oz6V6IJ+t0YyNf8TUxWk2mbnMXn9KPzCgjtA4YHsJYbv5lD3LJqt ogD571WcDRRC4kPXNPJ2OXwhstsCAwEAAaOCArYwggKyMB0GA1UdDgQWBBT0EyZG MoMbPU0CgZSf3ASe2Y3VRjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk0MjI2MTc4 QzgyRTExRUY5QzJFMTM3Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEAGCCsGAQUFBwEHAQH/ BDEwLzAeBAIAATAYAwQCZ0JMAwQCZ0qIAwQBZ3eyAwQBZ6NwMA0EAgACMAcDBQAk ByZAMA0GCSqGSIb3DQEBCwUAA4IBAQCGuLrL7jx9HcVWsI2GNXrp/iS4teBbrHs8 QHf8K/yjCS2uCCPvLwVxGrZRZ/94gs+DN6cG+Ts10vySIvBF5yqOKuNsp/rlxKg7 MieL1R2bbGYgvPAi7/QMgO90lpDcN3QsYd44ad0tVH61srvwoVKzY73ZAywxItT0 eltoLbeih5zt0rg79C5JXJAO5COEsSNHif12VIJWQEOx+ws+ehsxSd9tcf/34OUd vPS7pqjjBHEnW9TRAZUwscxWyxEfBmnt+e0VDxFoIvLAx33sSSY1KWFDl+Ug7G1r M7EeuqftB7gLHWih86qAkZDB294jSqNsPPcx/DwgHI8p1CzTnUD/ -----END CERTIFICATE-----Generated at Tue May 13 11:33:41 2025 by rpki-client