$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E7CA820E2DE11EF90C38A14C4F9AE02.roa File: 9E7CA820E2DE11EF90C38A14C4F9AE02.roa (raw, json) Hash identifier: R5ZDawxeMwqkWyIcA30wGUZEohNQn89MkMjBvIY+0p8= Subject key identifier: 86:72:AA:A9:C8:3F:1D:0D:2F:7D:11:B7:0E:1F:EE:DB:59:98:EA:04 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B1E1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E7CA820E2DE11EF90C38A14C4F9AE02.roa Signing time: Thu 08 May 2025 15:58:57 +0000 ROA not before: Thu 08 May 2025 15:58:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133652 IP address blocks: 45.118.164.0/22 maxlen: 24 103.47.64.0/22 maxlen: 24 103.87.49.0/24 maxlen: 24 103.87.50.0/23 maxlen: 24 103.214.116.0/22 maxlen: 24 2401:df80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 07:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45537 (0xb1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:58:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd4c1-17c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:74:80:6f:c6:c2:b3:65:fb:8e:02:46:2c: 7b:f8:f9:71:55:3b:b6:91:bd:52:f1:2c:52:e9:12: b6:06:e4:af:76:9f:c0:26:e1:8f:e4:e8:1e:ff:35: d3:44:a7:b1:be:10:25:52:fa:77:46:52:11:31:94: cd:e6:94:77:02:23:b0:b3:8b:3d:a0:d9:b2:c9:6f: 81:ac:ae:d5:f8:94:5c:dd:3c:47:8d:32:b4:90:b5: bc:ae:fb:70:9a:43:f7:bc:6a:db:d9:df:75:eb:19: 0a:9c:bf:03:a4:e4:3f:77:55:be:0b:01:e7:f9:08: 2d:e3:90:b6:c8:e4:c1:eb:92:d4:3e:5c:cc:5d:1d: 03:f2:6e:b6:dc:2c:1f:74:ae:0a:85:45:69:08:01: 28:6e:4b:e5:7b:dd:c7:7d:69:55:3f:cd:1a:e3:13: 54:e7:e0:70:04:a0:3d:2b:bd:40:0c:9e:e5:5b:fa: d9:8c:64:9b:70:7d:86:71:87:8e:24:f1:16:96:a3: f2:a7:50:31:15:0b:64:b1:4a:11:38:f1:84:4e:72: 9c:c0:07:89:9b:c7:91:d9:9a:c4:5a:8b:e2:b1:c6: f8:38:d0:b8:29:b1:ea:b7:93:f7:bf:17:33:c1:93: 73:91:1a:a6:02:69:2f:ea:91:c0:fe:3e:51:91:cf: f7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:72:AA:A9:C8:3F:1D:0D:2F:7D:11:B7:0E:1F:EE:DB:59:98:EA:04 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E7CA820E2DE11EF90C38A14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.164.0/22 103.47.64.0/22 103.87.49.0-103.87.51.255 103.214.116.0/22 IPv6: 2401:df80::/32 Signature Algorithm: sha256WithRSAEncryption 9a:74:58:9d:09:94:72:44:0e:24:d0:f7:c2:c0:cd:14:a0:03: b1:2b:8d:23:7b:f1:40:de:68:6e:ac:bd:ec:f7:74:d5:bd:b8: 29:95:7b:f3:df:a9:87:bf:3b:5d:ac:44:b2:0f:43:f2:8a:33: ba:fc:f6:74:12:d9:fe:19:73:a0:c2:50:46:3d:77:cd:a8:91: 88:09:ce:f7:74:d5:1f:61:79:80:d2:86:a7:df:75:47:63:20: 11:34:8a:11:e3:22:3d:60:a6:86:1f:de:0e:92:ab:3d:ff:15: fe:c5:c2:cc:88:9a:09:ed:2a:f4:18:7c:0e:64:6b:92:89:2b: 10:15:cd:f8:e9:d7:26:db:a3:96:de:dc:9f:16:cf:36:e3:03: 1f:cb:a0:0e:0a:8f:99:06:c1:32:26:d8:3f:11:be:52:ce:ee: 2a:0b:b7:b2:2e:c1:98:60:5d:90:f4:0c:47:fb:41:93:59:3d: 70:f8:02:9f:fc:be:2a:50:4c:f9:a2:f4:91:8b:56:0e:25:20: 13:3c:b2:ab:e0:1e:e1:21:25:5d:d1:f9:71:66:ab:ef:b9:f8: 36:0b:f1:c0:15:81:ba:5b:a9:be:d3:72:cc:fe:51:d2:14:94: 00:49:51:e7:5c:e0:0c:7d:17:78:bc:29:cc:5f:ae:a6:b9:71: 96:3d:66:30 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIDALHhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTg1N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0YzEtMTdjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALW2dIBvxsKzZfuOAkYse/j5cVU7tpG9UvEsUukStgbkr3afwCbhj+ToHv81 00Snsb4QJVL6d0ZSETGUzeaUdwIjsLOLPaDZsslvgayu1fiUXN08R40ytJC1vK77 cJpD97xq29nfdesZCpy/A6TkP3dVvgsB5/kILeOQtsjkweuS1D5czF0dA/Juttws H3SuCoVFaQgBKG5L5Xvdx31pVT/NGuMTVOfgcASgPSu9QAye5Vv62Yxkm3B9hnGH jiTxFpaj8qdQMRULZLFKETjxhE5ynMAHiZvHkdmaxFqL4rHG+DjQuCmx6reT978X M8GTc5EapgJpL+qRwP4+UZHP9+0CAwEAAaOCAr4wggK6MB0GA1UdDgQWBBSGcqqp yD8dDS99EbcOH+7bWZjqBDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlFN0NBODIw RTJERTExRUY5MEMzOEExNEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEgGCCsGAQUFBwEHAQH/ BDkwNzAmBAIAATAgAwQCLXakAwQCZy9AMAwDBABnVzEDBAJnVzADBAJn1nQwDQQC AAIwBwMFACQB34AwDQYJKoZIhvcNAQELBQADggEBAJp0WJ0JlHJEDiTQ98LAzRSg A7ErjSN78UDeaG6svez3dNW9uCmVe/PfqYe/O12sRLIPQ/KKM7r89nQS2f4Zc6DC UEY9d82okYgJzvd01R9heYDShqffdUdjIBE0ihHjIj1gpoYf3g6Sqz3/Ff7FwsyI mgntKvQYfA5ka5KJKxAVzfjp1ybbo5be3J8WzzbjAx/LoA4Kj5kGwTIm2D8RvlLO 7ioLt7IuwZhgXZD0DEf7QZNZPXD4Ap/8vipQTPmi9JGLVg4lIBM8sqvgHuEhJV3R +XFmq++5+DYL8cAVgbpbqb7Tcsz+UdIUlABJUedc4Ax9F3i8Kcxfrqa5cZY9ZjA= -----END CERTIFICATE-----Generated at Wed May 14 11:44:47 2025 by rpki-client