$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa File: AEF723E4413B11EC87AB0687C4F9AE02.roa (raw, json) Hash identifier: pCZ2kk5q1XfnqDMTvZ8e5McYqWlCo9RHwB3IEjwY2og= Subject key identifier: 86:2B:27:9B:00:B5:A3:63:32:60:58:3A:53:2D:B8:8D:78:B8:DA:02 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B34C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa Signing time: Thu 08 May 2025 16:04:35 +0000 ROA not before: Thu 08 May 2025 16:04:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135731 IP address blocks: 103.174.76.0/23 maxlen: 24 2400:10a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45900 (0xb34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:04:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd612-7cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:35:be:7a:f6:2e:2e:b5:7c:5a:ee:76:d6:f1: 78:ef:2f:de:e7:28:66:4b:60:df:ad:55:c9:3b:81: 47:93:a4:25:4c:0f:50:3e:a1:2b:48:ab:ef:55:99: 5a:0e:e6:7c:44:45:79:36:45:8a:4e:83:67:38:af: 81:8b:1b:65:75:6d:5c:fe:5a:6d:39:b6:a3:bf:24: 5b:df:57:20:45:93:c8:0d:a7:72:98:70:10:d1:b4: 56:28:73:c9:8f:08:30:5e:4b:d6:e4:68:b3:7d:39: 27:93:96:64:23:3d:b3:fe:d7:b6:9b:4c:06:a6:69: 4b:bd:c0:16:05:9c:ab:36:55:98:40:81:6a:20:e5: ec:8e:f0:3b:56:a9:7f:0e:88:d8:29:ad:5b:bc:5e: 89:8c:1c:b2:fd:66:ce:9c:ac:f5:ad:e3:2f:a1:67: b7:a3:0d:b8:7e:39:9c:7a:a0:96:51:0f:e6:77:29: f2:2a:8f:7b:5f:05:76:1f:35:92:01:ef:de:2d:a7: 38:98:1b:0c:53:ab:90:c5:d8:de:d8:45:40:e4:55: f5:2d:52:f9:c6:28:c0:be:02:d4:73:8e:15:e9:37: c4:43:cc:b6:b5:6f:ab:de:c0:66:a6:3a:7c:42:34: 2e:6f:33:6f:55:1e:d5:7e:2e:3e:5d:d4:cc:0c:b1: 68:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2B:27:9B:00:B5:A3:63:32:60:58:3A:53:2D:B8:8D:78:B8:DA:02 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AEF723E4413B11EC87AB0687C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.76.0/23 IPv6: 2400:10a0::/32 Signature Algorithm: sha256WithRSAEncryption 74:c5:69:1c:6c:40:57:6c:64:dd:4e:5c:e9:b6:f3:80:33:1f: 6d:69:c0:bb:33:71:3a:07:84:53:cf:17:fa:50:d2:a6:3c:e5: 5a:d9:43:1b:82:47:9f:31:f0:cb:7d:cf:70:80:88:26:45:b3: 29:97:df:67:3c:28:37:d2:18:d5:47:db:d6:a9:71:2c:03:32: 47:ca:cb:c6:66:8c:5b:bf:4c:83:b3:90:57:8e:b8:aa:43:f6: 46:db:42:cb:c1:fb:6c:cd:03:bc:b5:18:12:06:33:35:3a:5f: 88:00:3e:23:9c:01:c7:34:fd:f6:b7:b1:5f:c0:e0:72:38:6e: 36:c5:1a:68:7c:0c:96:ca:70:b9:ea:ba:10:6e:10:32:bd:97: f1:29:6e:06:fb:f6:5a:85:ef:f1:d9:0c:69:f6:9b:0a:0a:04: 4c:52:87:1e:cb:cf:ec:6c:f8:d1:01:43:a4:ed:c1:1d:54:0c: 0d:0b:ab:20:7a:bc:55:c6:e7:1a:f4:9e:37:c9:5e:f9:ef:f6: 40:81:d0:2b:a4:4c:f8:76:c8:ec:4d:74:9f:48:8b:99:35:cd: fe:ec:77:05:f7:ed:e9:d0:16:6f:c7:34:47:10:13:88:42:e6: 31:aa:eb:2a:3b:77:d5:e9:02:7d:f9:67:4e:53:01:74:f9:f0: 82:d1:28:99 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDALNMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDQzNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2MTItN2NjMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPA1vnr2Li61fFrudtbxeO8v3ucoZktg361VyTuBR5OkJUwPUD6hK0ir71WZ Wg7mfERFeTZFik6DZzivgYsbZXVtXP5abTm2o78kW99XIEWTyA2ncphwENG0Vihz yY8IMF5L1uRos305J5OWZCM9s/7XtptMBqZpS73AFgWcqzZVmECBaiDl7I7wO1ap fw6I2CmtW7xeiYwcsv1mzpys9a3jL6Fnt6MNuH45nHqgllEP5ncp8iqPe18Fdh81 kgHv3i2nOJgbDFOrkMXY3thFQORV9S1S+cYowL4C1HOOFek3xEPMtrVvq97AZqY6 fEI0Lm8zb1Ue1X4uPl3UzAyxaPECAwEAAaOCAqQwggKgMB0GA1UdDgQWBBSGKyeb ALWjYzJgWDpTLbiNeLjaAjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FFRjcyM0U0 NDEzQjExRUM4N0FCMDY4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBZ65MMA0EAgACMAcDBQAkABCgMA0GCSqGSIb3DQEBCwUA A4IBAQB0xWkcbEBXbGTdTlzptvOAMx9tacC7M3E6B4RTzxf6UNKmPOVa2UMbgkef MfDLfc9wgIgmRbMpl99nPCg30hjVR9vWqXEsAzJHysvGZoxbv0yDs5BXjriqQ/ZG 20LLwftszQO8tRgSBjM1Ol+IAD4jnAHHNP32t7FfwOByOG42xRpofAyWynC56roQ bhAyvZfxKW4G+/Zahe/x2Qxp9psKCgRMUocey8/sbPjRAUOk7cEdVAwNC6sgerxV xuca9J43yV757/ZAgdArpEz4dsjsTXSfSIuZNc3+7HcF9+3p0BZvxzRHEBOIQuYx qusqO3fV6QJ9+WdOUwF0+fCC0SiZ -----END CERTIFICATE-----Generated at Tue May 13 02:11:28 2025 by rpki-client