$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa File: A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa (raw, json) Hash identifier: k+IhcpPsUQ6p3dKXTznBFMj6dI3yvQTOuWhJqoeXRl4= Subject key identifier: 18:39:4D:39:FB:2B:32:0F:09:2A:A8:27:42:0B:F3:A7:E9:24:B3:49 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B7CB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa Signing time: Thu 08 May 2025 16:22:05 +0000 ROA not before: Thu 08 May 2025 16:22:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149232 IP address blocks: 103.181.232.0/23 maxlen: 24 2001:df3:8dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47051 (0xb7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:22:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cda2d-92f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:9f:88:8f:f2:a3:eb:09:43:07:5c:05:f7: f5:25:a3:0f:13:a7:09:55:54:91:3a:35:bb:d0:bd: 9c:fa:e7:92:25:01:ba:95:29:5f:a8:68:60:6a:c2: 59:94:ab:97:49:84:ca:06:c2:e3:7f:7a:7d:36:ce: ec:98:be:70:b4:78:26:63:04:50:9a:49:3d:59:23: 7c:20:e7:1d:d7:6c:ba:81:1c:56:f5:74:ed:1b:ff: 26:02:95:67:3c:44:e6:f0:e4:74:c4:ba:33:e1:8d: 7d:84:98:9f:99:f2:97:a8:a4:37:d6:58:33:36:91: 76:d9:ee:a9:30:da:35:61:b9:96:b6:5d:9a:e1:cf: 7f:35:4f:9b:cc:08:3f:b9:ef:24:52:91:38:34:72: 79:b6:24:b4:60:08:c3:b3:4b:29:a6:bd:ed:a5:33: 60:6a:33:ea:a6:aa:1f:52:72:cc:0b:2d:0b:7e:ad: 22:22:54:66:35:8e:a8:ec:cc:8b:13:59:f7:92:60: 06:33:b1:69:1f:4d:bf:da:83:a5:a3:e7:9a:85:27: ef:87:fc:38:04:71:f0:6d:b8:b7:c0:b6:89:30:e6: 00:4a:9a:07:78:36:4a:77:2e:8a:a4:3b:06:7a:91: e9:5c:bb:d5:a8:41:c0:87:d5:e2:dc:ef:71:04:4c: e0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:39:4D:39:FB:2B:32:0F:09:2A:A8:27:42:0B:F3:A7:E9:24:B3:49 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A63B1E5A92F711EC9FF3AC2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.232.0/23 IPv6: 2001:df3:8dc0::/48 Signature Algorithm: sha256WithRSAEncryption 22:4c:86:d4:cf:59:ec:f9:d3:9b:b7:db:f3:61:f3:10:da:72: 75:54:db:eb:62:5f:61:e5:d1:7f:bd:0f:f4:85:8b:91:67:9b: d5:cf:ba:52:57:91:ba:ca:00:2e:2e:57:21:b6:ca:55:c1:0c: cd:1f:f0:de:5e:48:22:61:1c:b6:0a:7c:a7:7c:3d:32:3b:3f: 5c:72:e7:ee:42:90:72:4f:59:41:13:3f:6d:2b:8e:fd:55:20: 1a:6f:c3:54:4f:de:7c:2a:19:32:cf:23:c5:1b:da:28:d3:7d: 89:c3:b4:24:b2:c5:d0:66:1a:4b:9e:cd:83:ac:2b:22:73:4e: 99:7c:1d:a0:c4:9a:7e:a8:ad:00:59:bd:f2:69:a3:eb:e6:14: cc:4e:b8:19:1a:70:e5:9e:1d:da:d2:44:bf:5c:a8:d4:2c:b0: 58:bf:3f:d5:ca:1d:56:ef:52:e8:00:f9:e7:36:b2:8a:3f:66: 01:12:56:c9:98:82:1f:c7:16:ad:5e:25:aa:ce:6d:63:78:de: 3e:db:8d:31:70:ff:31:3b:21:9e:a2:5f:cf:f7:1b:b1:ad:ec: 82:9d:8f:f7:31:a3:e9:fa:97:64:00:02:ef:12:2e:74:22:5c: e9:93:77:39:6e:e0:d0:4f:e4:a3:0b:9a:1b:de:94:01:46:b9: a3:7d:86:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALfLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjIwNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhMmQtOTJmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTOn4iP8qPrCUMHXAX39SWjDxOnCVVUkTo1u9C9nPrnkiUBupUpX6hoYGrC WZSrl0mEygbC4396fTbO7Ji+cLR4JmMEUJpJPVkjfCDnHddsuoEcVvV07Rv/JgKV ZzxE5vDkdMS6M+GNfYSYn5nyl6ikN9ZYMzaRdtnuqTDaNWG5lrZdmuHPfzVPm8wI P7nvJFKRODRyebYktGAIw7NLKaa97aUzYGoz6qaqH1JyzAstC36tIiJUZjWOqOzM ixNZ95JgBjOxaR9Nv9qDpaPnmoUn74f8OARx8G24t8C2iTDmAEqaB3g2SncuiqQ7 BnqR6Vy71ahBwIfV4tzvcQRM4LECAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQYOU05 +ysyDwkqqCdCC/On6SSzSTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E2M0IxRTVB OTJGNzExRUM5RkYzQUMyQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7XoMA8EAgACMAkDBwAgAQ3zjcAwDQYJKoZIhvcNAQEL BQADggEBACJMhtTPWez505u32/Nh8xDacnVU2+tiX2Hl0X+9D/SFi5Fnm9XPulJX kbrKAC4uVyG2ylXBDM0f8N5eSCJhHLYKfKd8PTI7P1xy5+5CkHJPWUETP20rjv1V IBpvw1RP3nwqGTLPI8Ub2ijTfYnDtCSyxdBmGkuezYOsKyJzTpl8HaDEmn6orQBZ vfJpo+vmFMxOuBkacOWeHdrSRL9cqNQssFi/P9XKHVbvUugA+ec2soo/ZgESVsmY gh/HFq1eJarObWN43j7bjTFw/zE7IZ6iX8/3G7Gt7IKdj/cxo+n6l2QAAu8SLnQi XOmTdzlu4NBP5KMLmhvelAFGuaN9hqs= -----END CERTIFICATE-----Generated at Tue May 13 06:36:24 2025 by rpki-client