$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B46715A105511F09E97F973C4F9AE02.roa File: 9B46715A105511F09E97F973C4F9AE02.roa (raw, json) Hash identifier: ACL2bxAWRadAUVgSX7mQtYGz8qb9xujbDoQkpYIXY8w= Subject key identifier: 02:FF:3C:F5:62:78:E0:B0:06:D9:03:A4:A7:09:30:45:92:17:CA:02 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B29D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B46715A105511F09E97F973C4F9AE02.roa Signing time: Thu 08 May 2025 16:01:50 +0000 ROA not before: Thu 08 May 2025 16:01:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134858 IP address blocks: 103.39.116.0/22 maxlen: 24 103.80.22.0/23 maxlen: 24 103.105.96.0/23 maxlen: 24 103.127.224.0/22 maxlen: 24 103.157.52.0/23 maxlen: 24 103.158.239.0/24 maxlen: 24 2407:8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 07:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45725 (0xb29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:01:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd56e-7c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:9d:bf:ae:df:0b:37:32:88:a4:30:a5:7d: 6d:78:38:2c:7e:3f:b4:91:61:99:31:a7:26:15:8a: 40:85:34:4b:80:37:7e:3c:4a:83:02:64:fb:4a:55: b0:eb:35:51:15:49:aa:48:1c:46:53:e6:32:ab:c6: 9f:d7:5e:88:5b:b2:79:00:ba:e1:31:22:7d:b5:19: 83:71:87:cc:de:74:1d:f2:a9:55:5e:4c:8b:bb:ba: 13:2b:e1:64:a7:fe:03:56:80:98:e0:c4:44:a8:2e: 9a:69:9a:21:af:10:55:ff:0b:e5:de:0d:b1:cf:c6: 53:99:bb:a5:2b:4a:22:ab:3f:96:3f:fc:63:94:4f: b0:c0:80:c4:11:9c:b7:bf:39:26:0e:2e:43:36:1c: f2:e9:45:4e:c2:46:37:bd:e5:8f:a6:40:cf:c0:63: 28:e4:be:a1:b9:98:bf:10:61:0c:8b:a2:96:64:ce: 96:26:3c:ca:f1:5b:d3:d0:53:66:27:e8:1d:75:2c: df:af:2d:6a:dc:7f:6f:87:6f:1c:42:62:af:a5:c6: de:ef:26:7f:79:c0:d7:28:cf:85:2c:65:0f:43:76: 6c:e1:79:1b:50:26:04:f4:ad:ed:0c:09:cb:e7:dc: 28:f6:07:ac:fb:28:44:aa:7e:4c:1e:d4:1c:1e:ba: 58:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FF:3C:F5:62:78:E0:B0:06:D9:03:A4:A7:09:30:45:92:17:CA:02 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B46715A105511F09E97F973C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.116.0/22 103.80.22.0/23 103.105.96.0/23 103.127.224.0/22 103.157.52.0/23 103.158.239.0/24 IPv6: 2407:8c0::/32 Signature Algorithm: sha256WithRSAEncryption 73:0a:26:53:27:e4:c5:10:f6:15:03:ee:b3:a9:46:37:08:68: ea:a1:aa:f7:0e:d6:9c:fb:de:e0:4f:ac:d8:35:9d:83:25:39: a6:5c:8b:7e:b4:82:99:10:e5:42:2b:36:31:40:1c:0f:43:49: 62:65:6f:2b:a7:a0:3e:35:16:bc:4e:25:66:d7:3b:5d:36:bd: 34:1c:b9:e9:25:ed:84:12:77:b8:32:f4:de:19:54:a3:87:2a: b7:a9:58:62:2c:33:f9:9a:da:2d:45:bf:4f:b9:c4:0d:6c:0a: f1:32:60:5c:9f:a5:f9:c5:3a:ec:44:4c:6f:e2:f6:5b:19:73: 3b:f2:40:13:be:57:3b:d8:ff:c2:a3:97:3f:41:1b:dc:3b:61: d0:01:2f:b6:11:0a:4b:4c:5e:74:ba:2a:98:d7:0c:be:87:e4: 85:91:1c:4a:c7:12:ae:4e:fd:0b:5e:6b:f5:fb:0c:56:9f:e4: c8:08:fb:9c:91:31:0a:10:7f:b7:6e:d7:25:c2:67:53:36:f5: 07:75:92:68:2c:59:4a:8a:98:84:3d:27:b9:0b:16:31:35:91: f1:8d:74:90:1c:fd:5d:26:51:90:df:25:47:47:17:8c:18:f0: f4:75:e4:ab:66:58:86:e4:19:d9:fc:91:6b:e4:54:9b:70:54: da:65:c7:79 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIDALKdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDE1MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1NmUtN2M5YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWOnb+u3ws3MoikMKV9bXg4LH4/tJFhmTGnJhWKQIU0S4A3fjxKgwJk+0pV sOs1URVJqkgcRlPmMqvGn9deiFuyeQC64TEifbUZg3GHzN50HfKpVV5Mi7u6Eyvh ZKf+A1aAmODERKgummmaIa8QVf8L5d4Nsc/GU5m7pStKIqs/lj/8Y5RPsMCAxBGc t785Jg4uQzYc8ulFTsJGN73lj6ZAz8BjKOS+obmYvxBhDIuilmTOliY8yvFb09BT ZifoHXUs368tatx/b4dvHEJir6XG3u8mf3nA1yjPhSxlD0N2bOF5G1AmBPSt7QwJ y+fcKPYHrPsoRKp+TB7UHB66WJ8CAwEAAaOCAsIwggK+MB0GA1UdDgQWBBQC/zz1 YnjgsAbZA6SnCTBFkhfKAjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlCNDY3MTVB MTA1NTExRjA5RTk3Rjk3M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEwGCCsGAQUFBwEHAQH/ BD0wOzAqBAIAATAkAwQCZyd0AwQBZ1AWAwQBZ2lgAwQCZ3/gAwQBZ500AwQAZ57v MA0EAgACMAcDBQAkBwjAMA0GCSqGSIb3DQEBCwUAA4IBAQBzCiZTJ+TFEPYVA+6z qUY3CGjqoar3Dtac+97gT6zYNZ2DJTmmXIt+tIKZEOVCKzYxQBwPQ0liZW8rp6A+ NRa8TiVm1ztdNr00HLnpJe2EEne4MvTeGVSjhyq3qVhiLDP5mtotRb9PucQNbArx MmBcn6X5xTrsRExv4vZbGXM78kATvlc72P/Co5c/QRvcO2HQAS+2EQpLTF50uiqY 1wy+h+SFkRxKxxKuTv0LXmv1+wxWn+TICPuckTEKEH+3btclwmdTNvUHdZJoLFlK ipiEPSe5CxYxNZHxjXSQHP1dJlGQ3yVHRxeMGPD0deSrZliG5BnZ/JFr5FSbcFTa Zcd5 -----END CERTIFICATE-----Generated at Wed May 14 10:40:44 2025 by rpki-client