$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B80EC38A36411EC823BE516C4F9AE02.roa File: 9B80EC38A36411EC823BE516C4F9AE02.roa (raw, json) Hash identifier: EpvR7ihUzY4ybD8mefNrUUtCUK9tjLBC/H0pEQ9Q9+g= Subject key identifier: 98:63:91:3A:AE:4C:E3:56:49:50:11:92:75:62:97:65:CE:8A:CD:99 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B501 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B80EC38A36411EC823BE516C4F9AE02.roa Signing time: Thu 08 May 2025 16:11:20 +0000 ROA not before: Thu 08 May 2025 16:11:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138267 IP address blocks: 103.133.28.0/24 maxlen: 24 103.133.29.0/24 maxlen: 24 103.133.30.0/24 maxlen: 24 103.133.31.0/24 maxlen: 24 103.182.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 12:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46337 (0xb501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:11:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd7a7-12eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:a6:a4:cb:c3:13:78:51:27:cb:c2:52:36: f3:e4:bc:ce:82:4c:9b:d4:d8:13:18:c0:31:be:3c: ee:f9:75:0e:67:3c:97:04:fb:35:05:3c:13:74:38: 2e:af:83:3e:c3:9e:ef:bb:b9:e0:d0:d9:cd:bd:1e: 67:69:ed:57:00:18:a3:f6:8e:7e:00:a5:2e:a1:0a: 2e:d6:e6:17:2c:02:1b:c7:19:0d:8c:61:9c:8a:be: dd:2e:92:1e:81:d9:71:84:4c:7b:b4:13:1c:2b:51: 24:a3:80:5e:6c:95:e5:8f:f6:51:60:c2:d5:bf:dc: 3a:a4:9a:16:5f:2b:41:9f:02:3a:a9:7f:84:50:f0: 5c:60:ef:80:4c:4c:0f:d4:fe:fc:e8:90:59:af:69: ad:16:bb:54:87:e2:01:26:cd:1c:5c:1e:01:e2:34: 30:4d:dd:39:42:e1:c7:1a:1f:8c:c6:68:8c:c0:b3: 67:03:b7:09:87:f6:79:99:97:46:aa:a2:37:8f:40: f8:f6:00:0c:df:d0:0e:a2:38:05:c3:8f:93:64:d3: 5b:bc:0e:15:b3:1b:14:51:f2:3c:12:50:23:f9:e7: 87:10:38:81:b7:7b:89:45:90:6c:a1:c8:ca:6f:c1: 07:91:45:5f:74:ce:84:89:4a:3f:f1:4d:31:b9:71: cc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:63:91:3A:AE:4C:E3:56:49:50:11:92:75:62:97:65:CE:8A:CD:99 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B80EC38A36411EC823BE516C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.28.0/22 103.182.128.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:4f:fe:88:1a:a6:c5:dd:fc:56:30:1b:cc:39:ee:9a:e3:87: 76:53:14:a4:27:6c:c6:f7:9b:9f:d7:9d:7f:5e:0e:e6:1d:54: e3:10:9e:0c:2d:04:72:c6:29:3a:1d:d9:cd:a2:d9:84:7b:53: 58:d2:4b:5c:8a:b6:e8:16:c6:73:4b:3f:90:4a:c2:9f:9a:a2: d4:35:b4:bb:ff:25:af:0e:90:78:3d:61:68:b3:39:04:46:85: fb:12:68:ab:32:2c:2b:64:86:1a:f6:e9:2e:ab:2c:d1:df:58: 56:a0:1b:57:65:5c:63:70:a6:16:7d:99:ce:9c:a5:ba:aa:12: 73:f8:10:37:02:5b:38:06:fe:da:27:2c:3a:a3:2a:40:07:4d: 23:bb:1e:98:b7:f4:9e:e1:e7:3f:0c:16:fa:59:be:8e:a8:16: 8e:6f:3d:6e:dd:f0:4d:80:94:23:a9:9a:78:49:7f:2a:3b:bb: e6:52:4e:cf:5d:4c:0a:77:f8:9d:b6:7f:10:04:a1:bf:6d:06: 2c:1b:2f:e9:a0:e5:15:d5:f9:c0:76:1c:6f:d2:5a:5b:6b:d3: 1a:00:2d:93:3e:91:5f:04:d5:7b:a9:9c:8d:b7:96:c8:fd:f5: b1:44:27:be:f9:37:aa:f7:ef:b1:06:b4:b3:de:4a:b0:61:1d: 18:a2:3b:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALUBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTEyMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3YTctMTJlYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALejpqTLwxN4USfLwlI28+S8zoJMm9TYExjAMb487vl1Dmc8lwT7NQU8E3Q4 Lq+DPsOe77u54NDZzb0eZ2ntVwAYo/aOfgClLqEKLtbmFywCG8cZDYxhnIq+3S6S HoHZcYRMe7QTHCtRJKOAXmyV5Y/2UWDC1b/cOqSaFl8rQZ8COql/hFDwXGDvgExM D9T+/OiQWa9prRa7VIfiASbNHFweAeI0ME3dOULhxxofjMZojMCzZwO3CYf2eZmX RqqiN49A+PYADN/QDqI4BcOPk2TTW7wOFbMbFFHyPBJQI/nnhxA4gbd7iUWQbKHI ym/BB5FFX3TOhIlKP/FNMblxzI0CAwEAAaOCApswggKXMB0GA1UdDgQWBBSYY5E6 rkzjVklQEZJ1YpdlzorNmTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlCODBFQzM4 QTM2NDExRUM4MjNCRTUxNkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCZ4UcAwQBZ7aAMA0GCSqGSIb3DQEBCwUAA4IBAQAaT/6I GqbF3fxWMBvMOe6a44d2UxSkJ2zG95uf151/Xg7mHVTjEJ4MLQRyxik6HdnNotmE e1NY0ktcirboFsZzSz+QSsKfmqLUNbS7/yWvDpB4PWFoszkERoX7EmirMiwrZIYa 9ukuqyzR31hWoBtXZVxjcKYWfZnOnKW6qhJz+BA3Als4Bv7aJyw6oypAB00jux6Y t/Se4ec/DBb6Wb6OqBaObz1u3fBNgJQjqZp4SX8qO7vmUk7PXUwKd/idtn8QBKG/ bQYsGy/poOUV1fnAdhxv0lpba9MaAC2TPpFfBNV7qZyNt5bI/fWxRCe++Teq9++x BrSz3kqwYR0YojvZ -----END CERTIFICATE-----Generated at Wed May 14 15:23:49 2025 by rpki-client