$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99F8026ECBD711EE93CFAF5AC4F9AE02.roa File: 99F8026ECBD711EE93CFAF5AC4F9AE02.roa (raw, json) Hash identifier: 5oxBWBJB0L53f63y8KzeLLEEoOpAV/XiAzucW+6ktZc= Subject key identifier: 0A:69:BF:67:35:CF:1E:C3:D8:DB:5C:75:54:4D:11:97:8C:0E:60:81 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B790 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99F8026ECBD711EE93CFAF5AC4F9AE02.roa Signing time: Thu 08 May 2025 16:21:14 +0000 ROA not before: Thu 08 May 2025 16:21:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147265 IP address blocks: 103.137.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 08:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46992 (0xb790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:21:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9fa-542a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:45:9b:fb:af:bd:74:ce:d5:28:ec:86:82: b6:30:c7:e3:8a:00:db:c3:71:59:32:25:88:ae:e3: 6d:d7:0a:fa:c3:61:27:b8:04:68:14:b8:c5:d2:8f: f3:ac:91:89:8d:28:f6:c3:5e:32:5d:68:89:8a:5f: 8c:08:72:f4:c2:cf:6a:86:03:06:06:75:76:32:c6: 72:cd:ab:49:aa:bc:72:11:f5:18:29:8f:d0:ff:03: 3b:d9:7e:32:ac:57:3f:7a:99:71:a5:8c:52:24:4c: eb:a6:ac:a5:83:75:c7:c7:d1:a0:95:c3:76:85:3b: 26:a9:98:5f:43:79:7c:28:b8:5f:c6:82:e1:47:37: a7:f4:82:50:39:0d:b5:14:6e:66:c8:3f:62:d3:4b: 11:06:34:96:b9:9d:76:a0:4e:7b:2c:5a:21:84:c0: 43:1d:73:20:87:30:0f:cf:0c:69:83:59:4d:90:8d: 15:f6:59:f8:b1:b5:eb:8e:74:69:86:0d:6b:23:a3: f6:7f:73:c1:da:4c:ad:ef:fa:9f:79:25:d3:3a:34: bb:29:9c:57:d5:6c:c2:96:5f:ad:ef:74:61:4a:6e: f5:28:07:ce:67:64:6b:00:e9:e7:02:34:3c:f7:57: a3:ce:47:9e:ee:fb:b3:c7:07:8a:cf:73:d4:d5:63: 9b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:69:BF:67:35:CF:1E:C3:D8:DB:5C:75:54:4D:11:97:8C:0E:60:81 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99F8026ECBD711EE93CFAF5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.94.0/24 Signature Algorithm: sha256WithRSAEncryption 40:f6:2a:b5:f4:d6:61:63:22:26:de:74:91:ab:e0:15:ca:21: 83:3f:7b:5d:ad:d5:85:e9:32:b3:d2:41:9c:eb:37:1f:83:de: fc:c2:8a:7b:01:d3:c0:5d:c5:68:ee:94:4b:ac:21:13:34:00: 14:3e:95:53:c4:b2:08:1c:1d:9a:8c:d3:ab:87:b3:da:5b:ea: 76:a3:18:f8:62:f3:38:bc:6a:b1:62:98:10:7a:e9:3a:53:c4: 69:62:96:25:be:e6:8b:bc:1d:00:d7:32:a7:e7:04:d7:b6:cb: 32:20:6b:5e:bc:8e:4c:41:1b:09:97:68:4a:b0:83:97:b2:b9: b5:16:af:50:34:fb:13:a3:9d:c1:52:d4:68:e1:40:3b:4b:a5: 96:0c:90:ed:d1:2a:09:b6:0a:7d:a4:61:0b:fc:e8:ad:0e:47: df:0a:b2:94:23:f5:01:c1:bd:14:fc:82:44:52:fc:c0:36:9c: a8:14:a2:14:6a:01:75:e8:96:8a:1b:f0:7e:bb:88:55:98:b1: b6:e9:73:89:5a:91:ad:3f:67:d6:14:8b:b0:c8:a2:8e:42:6f: 52:9a:f5:3e:51:67:d3:de:fd:a3:43:9e:d0:97:a9:6d:84:15: e0:3b:1d:84:ac:ac:15:71:82:72:07:8f:90:09:c1:ff:cd:34: 50:ad:5b:69 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALeQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjExNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5ZmEtNTQyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4MRZv7r710ztUo7IaCtjDH44oA28NxWTIliK7jbdcK+sNhJ7gEaBS4xdKP 86yRiY0o9sNeMl1oiYpfjAhy9MLPaoYDBgZ1djLGcs2rSaq8chH1GCmP0P8DO9l+ MqxXP3qZcaWMUiRM66aspYN1x8fRoJXDdoU7JqmYX0N5fCi4X8aC4Uc3p/SCUDkN tRRuZsg/YtNLEQY0lrmddqBOeyxaIYTAQx1zIIcwD88MaYNZTZCNFfZZ+LG16450 aYYNayOj9n9zwdpMre/6n3kl0zo0uymcV9VswpZfre90YUpu9SgHzmdkawDp5wI0 PPdXo85Hnu77s8cHis9z1NVjmxUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQKab9n Nc8ew9jbXHVUTRGXjA5ggTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk5RjgwMjZF Q0JENzExRUU5M0NGQUY1QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ4leMA0GCSqGSIb3DQEBCwUAA4IBAQBA9iq19NZhYyIm 3nSRq+AVyiGDP3tdrdWF6TKz0kGc6zcfg978wop7AdPAXcVo7pRLrCETNAAUPpVT xLIIHB2ajNOrh7PaW+p2oxj4YvM4vGqxYpgQeuk6U8RpYpYlvuaLvB0A1zKn5wTX tssyIGtevI5MQRsJl2hKsIOXsrm1Fq9QNPsTo53BUtRo4UA7S6WWDJDt0SoJtgp9 pGEL/OitDkffCrKUI/UBwb0U/IJEUvzANpyoFKIUagF16JaKG/B+u4hVmLG26XOJ WpGtP2fWFIuwyKKOQm9SmvU+UWfT3v2jQ57Ql6lthBXgOx2ErKwVcYJyB4+QCcH/ zTRQrVtp -----END CERTIFICATE-----Generated at Tue May 13 11:31:20 2025 by rpki-client