$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A75C22CCC6F211ED908FCE6FC4F9AE02.roa File: A75C22CCC6F211ED908FCE6FC4F9AE02.roa (raw, json) Hash identifier: 6/5Je/gJyPMmUJjuvAZL2RWRUpvTFuuzYkMtcdPnfh4= Subject key identifier: DB:19:7D:4D:04:E1:4D:68:A2:87:5A:57:63:8E:0E:41:AC:03:D4:97 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B879 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A75C22CCC6F211ED908FCE6FC4F9AE02.roa Signing time: Thu 08 May 2025 16:24:40 +0000 ROA not before: Thu 08 May 2025 16:24:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150090 IP address blocks: 103.174.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47225 (0xb879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:24:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdac8-4dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:49:e1:78:9a:0e:8c:6c:f0:23:1d:c9:c3: 98:0c:bb:18:e5:1d:b0:1c:50:1a:b2:ee:fe:00:a3: 99:3c:59:b7:fd:58:39:89:4c:78:6b:97:1a:5b:85: 83:98:c2:37:02:50:e6:10:15:86:a7:21:95:4d:54: cb:d8:68:20:0f:63:19:2c:93:36:6a:e5:25:2c:b0: 8c:ad:02:7b:18:ca:9c:ab:b9:30:6b:37:9d:eb:63: 4b:fe:ab:53:a8:25:69:d3:4c:0a:7b:ca:56:7f:c1: 0b:af:5e:62:4e:dd:22:50:de:d6:67:ca:6a:3a:ee: b4:5a:91:4b:24:5b:2e:dc:22:2e:4a:e5:97:f4:37: be:38:d7:2f:f9:ef:43:9b:fa:e5:c9:90:2f:b9:1f: b2:33:78:d9:d0:e6:54:25:6d:ca:35:18:a4:3c:35: 20:9d:06:7e:87:31:bd:ae:7e:e4:41:f6:50:f3:c8: 7b:1b:e7:97:e2:e2:ba:e0:0e:6c:27:ce:cd:98:27: 38:03:40:1f:ff:c3:b5:9d:72:b0:cc:77:dd:d3:9d: d0:29:ed:c6:20:8d:69:78:07:c9:2f:8e:19:60:72: 3d:ff:61:92:b4:50:f7:cd:08:e4:82:d0:1f:a9:54: 9e:38:ff:15:ca:5f:0b:65:7a:e4:fc:ea:bb:aa:4e: 86:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:19:7D:4D:04:E1:4D:68:A2:87:5A:57:63:8E:0E:41:AC:03:D4:97 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A75C22CCC6F211ED908FCE6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.246.0/24 Signature Algorithm: sha256WithRSAEncryption 07:7b:96:a2:aa:9a:90:d9:13:28:08:f6:67:19:e3:8d:5e:fc: bb:43:36:44:c0:f4:04:a7:2c:21:d4:a3:56:df:9a:cc:c4:35: 02:07:96:ee:c5:94:f8:22:3d:a6:d4:94:68:01:f3:bb:d5:00: ec:35:0f:41:8f:7b:15:c6:6d:b3:57:16:a2:1b:22:15:c5:e5: c7:2a:ee:1b:16:12:83:a3:22:81:de:e7:90:ec:19:18:49:72: fa:99:61:ed:26:7d:12:a1:64:96:92:48:dc:5b:c8:47:29:2c: 91:f3:f6:c7:1a:60:b2:1a:59:00:b7:4a:fa:6d:cd:63:64:44: 1d:24:f0:10:02:1f:59:20:f5:e9:ac:e2:c9:bd:99:95:8b:6b: e4:bf:14:03:a2:81:f7:27:fd:3d:68:67:f8:59:c1:07:26:08: 31:74:c9:df:e9:50:e8:61:4c:85:a4:cb:5f:19:66:64:48:fb: 4e:32:ee:55:c3:0a:5f:ca:4d:61:3e:9f:f6:66:5a:30:fa:f5: ef:67:a6:2a:2d:35:6e:01:11:6f:a9:d4:b2:9d:6d:24:44:53: 73:74:30:fc:f1:72:b1:e4:30:46:6c:00:84:e3:58:30:88:85: 19:56:9c:fc:9c:73:b7:f2:c9:67:2e:a8:93:b8:52:8c:b7:5d: 9f:50:91:74 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALh5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjQ0MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhYzgtNGRjMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbwSeF4mg6MbPAjHcnDmAy7GOUdsBxQGrLu/gCjmTxZt/1YOYlMeGuXGluF g5jCNwJQ5hAVhqchlU1Uy9hoIA9jGSyTNmrlJSywjK0CexjKnKu5MGs3netjS/6r U6gladNMCnvKVn/BC69eYk7dIlDe1mfKajrutFqRSyRbLtwiLkrll/Q3vjjXL/nv Q5v65cmQL7kfsjN42dDmVCVtyjUYpDw1IJ0Gfocxva5+5EH2UPPIexvnl+LiuuAO bCfOzZgnOANAH//DtZ1ysMx33dOd0CntxiCNaXgHyS+OGWByPf9hkrRQ980I5ILQ H6lUnjj/FcpfC2V65Pzqu6pOhvcCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTbGX1N BOFNaKKHWldjjg5BrAPUlzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E3NUMyMkND QzZGMjExRUQ5MDhGQ0U2RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ672MA0GCSqGSIb3DQEBCwUAA4IBAQAHe5aiqpqQ2RMo CPZnGeONXvy7QzZEwPQEpywh1KNW35rMxDUCB5buxZT4Ij2m1JRoAfO71QDsNQ9B j3sVxm2zVxaiGyIVxeXHKu4bFhKDoyKB3ueQ7BkYSXL6mWHtJn0SoWSWkkjcW8hH KSyR8/bHGmCyGlkAt0r6bc1jZEQdJPAQAh9ZIPXprOLJvZmVi2vkvxQDooH3J/09 aGf4WcEHJggxdMnf6VDoYUyFpMtfGWZkSPtOMu5Vwwpfyk1hPp/2Zlow+vXvZ6Yq LTVuARFvqdSynW0kRFNzdDD88XKx5DBGbACE41gwiIUZVpz8nHO38slnLqiTuFKM t12fUJF0 -----END CERTIFICATE-----Generated at Tue May 13 00:11:27 2025 by rpki-client