$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A8700C60B95F11ECA3F5DE81C4F9AE02.roa File: A8700C60B95F11ECA3F5DE81C4F9AE02.roa (raw, json) Hash identifier: CQeqXoiAgbYBPAe5ij8Wt7f3kKgI9yvIgUuFgm9+q+I= Subject key identifier: FB:51:EA:A8:1A:1F:7E:C4:51:26:BA:1F:D7:1B:7F:6C:A9:5C:81:8D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B604 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A8700C60B95F11ECA3F5DE81C4F9AE02.roa Signing time: Thu 08 May 2025 16:15:15 +0000 ROA not before: Thu 08 May 2025 16:15:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141259 IP address blocks: 103.183.52.0/23 maxlen: 24 2001:df0:8540::/48 maxlen: 48 2400:5ca0::/32 maxlen: 32 2400:5ca0::/48 maxlen: 48 2400:5ca0:1::/48 maxlen: 48 2400:5ca0:2::/48 maxlen: 48 2400:5ca0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 08:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46596 (0xb604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:15:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd893-4837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:70:70:cb:bf:27:84:5b:f6:26:c4:cd:33:68: 8e:0d:9a:1c:f9:82:1e:8f:a0:dd:7a:91:ce:b4:e2: 22:f4:1e:48:1b:ce:40:f1:1f:35:a4:c0:a6:6b:85: eb:c9:59:bf:e2:85:dc:65:fa:d3:e4:46:89:fa:3c: 23:11:9f:46:0a:8f:90:85:5f:96:e8:29:c4:c6:4c: 37:7b:d2:d6:0f:d6:b6:6c:46:86:d3:44:59:73:c7: 7e:73:f9:7b:b1:b1:c1:4f:44:24:b0:b0:25:42:97: 79:92:e4:76:12:82:50:17:21:21:74:ce:b8:cd:93: 2c:6f:20:4b:dd:94:40:74:9a:84:2b:88:30:93:08: 35:2a:92:07:2b:ea:51:c7:8d:8c:c1:89:ce:eb:7f: e9:5b:8f:0a:ff:da:c2:cf:78:28:61:10:bc:83:02: fe:a3:5c:db:93:8a:44:10:00:11:3e:3f:da:3c:36: bb:fa:69:a6:5f:54:00:6c:85:c4:45:fb:91:16:98: 82:18:67:63:2c:04:1f:e7:3c:51:b2:2e:43:0f:09: b9:fb:01:8f:0f:57:fd:28:ca:e9:c6:bb:55:07:96: 06:4f:b3:7b:a1:4a:f8:31:4f:bf:c7:d3:7e:bb:fa: 5e:fe:30:b9:0a:eb:4b:c1:1c:97:0e:59:3e:a5:f7: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:51:EA:A8:1A:1F:7E:C4:51:26:BA:1F:D7:1B:7F:6C:A9:5C:81:8D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A8700C60B95F11ECA3F5DE81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.183.52.0/23 IPv6: 2001:df0:8540::/48 2400:5ca0::/32 Signature Algorithm: sha256WithRSAEncryption 1a:f0:ae:fd:8e:86:9d:4f:ca:95:fc:c9:ab:16:d8:a0:2e:70: ec:f2:ce:5d:4a:44:c8:9f:e2:59:2c:29:c5:85:b5:36:99:1d: cc:4d:8d:db:56:b5:1a:75:e1:28:b0:b1:b5:83:f9:a5:5b:80: 5f:d8:18:42:17:6e:a0:9a:1c:84:ac:f0:0c:10:65:2e:79:8f: 0d:75:56:ba:91:1b:da:4d:b3:ea:dc:78:e6:c6:d0:96:cb:a7: a3:e3:fb:d5:dd:08:17:97:2a:3b:de:7c:c1:c0:45:f6:a3:af: a5:04:d2:4e:dd:7c:87:96:d2:80:54:3c:1c:75:8e:3e:5f:e7: fc:6a:4d:64:84:e9:b7:f4:a4:1d:52:1e:48:b9:ba:a4:3e:a4: c4:d7:e6:81:e4:2d:a9:bb:e2:20:c6:08:2a:a8:45:5f:18:bc: b4:00:1d:a7:47:3e:95:3b:d2:43:cc:5b:90:22:5c:8b:a5:1b: bb:a7:19:00:53:6a:10:38:ff:e2:c0:8c:22:06:f3:35:52:7d: b3:40:a7:be:88:8a:d8:55:f3:44:ad:68:9a:8e:5e:39:81:ac: 24:d8:98:53:ce:64:1d:b1:c9:ef:d2:2b:49:58:06:4e:9d:de: 2e:02:5b:7c:13:4a:82:aa:a6:a6:87:f4:be:0d:28:0a:8d:27: f6:4c:78:a3 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDALYEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTUxNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4OTMtNDgzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJJwcMu/J4Rb9ibEzTNojg2aHPmCHo+g3XqRzrTiIvQeSBvOQPEfNaTApmuF 68lZv+KF3GX60+RGifo8IxGfRgqPkIVflugpxMZMN3vS1g/WtmxGhtNEWXPHfnP5 e7GxwU9EJLCwJUKXeZLkdhKCUBchIXTOuM2TLG8gS92UQHSahCuIMJMINSqSByvq UceNjMGJzut/6VuPCv/aws94KGEQvIMC/qNc25OKRBAAET4/2jw2u/pppl9UAGyF xEX7kRaYghhnYywEH+c8UbIuQw8JufsBjw9X/SjK6ca7VQeWBk+ze6FK+DFPv8fT frv6Xv4wuQrrS8Eclw5ZPqX36BkCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBT7Ueqo Gh9+xFEmuh/XG39sqVyBjTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E4NzAwQzYw Qjk1RjExRUNBM0Y1REU4MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDcGCCsGAQUFBwEHAQH/ BCgwJjAMBAIAATAGAwQBZ7c0MBYEAgACMBADBwAgAQ3whUADBQAkAFygMA0GCSqG SIb3DQEBCwUAA4IBAQAa8K79joadT8qV/MmrFtigLnDs8s5dSkTIn+JZLCnFhbU2 mR3MTY3bVrUadeEosLG1g/mlW4Bf2BhCF26gmhyErPAMEGUueY8NdVa6kRvaTbPq 3HjmxtCWy6ej4/vV3QgXlyo73nzBwEX2o6+lBNJO3XyHltKAVDwcdY4+X+f8ak1k hOm39KQdUh5IubqkPqTE1+aB5C2pu+IgxggqqEVfGLy0AB2nRz6VO9JDzFuQIlyL pRu7pxkAU2oQOP/iwIwiBvM1Un2zQKe+iIrYVfNErWiajl45gawk2JhTzmQdscnv 0itJWAZOnd4uAlt8E0qCqqamh/S+DSgKjSf2THij -----END CERTIFICATE-----Generated at Tue May 13 12:39:25 2025 by rpki-client