$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B442252AB6CF11EB82602650C4F9AE02.roa File: B442252AB6CF11EB82602650C4F9AE02.roa (raw, json) Hash identifier: kLvjJjJsL5J0nepiYnh1YfHzAOE9AdaMHpZZJYRxsF0= Subject key identifier: 9D:C7:44:F9:D8:52:46:34:3E:88:C9:60:93:35:01:C2:AB:54:AC:7E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B651 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B442252AB6CF11EB82602650C4F9AE02.roa Signing time: Thu 08 May 2025 16:16:24 +0000 ROA not before: Thu 08 May 2025 16:16:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141501 IP address blocks: 43.239.60.0/23 maxlen: 24 45.124.184.0/22 maxlen: 24 103.58.120.0/24 maxlen: 24 103.58.121.0/24 maxlen: 24 103.58.121.0/26 maxlen: 26 103.59.16.0/24 maxlen: 24 103.59.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 08:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46673 (0xb651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:16:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd8d8-9d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:98:1d:a5:f4:10:d1:b5:64:a0:d8:04:3f: 70:a5:b5:14:38:eb:55:0b:83:9c:2d:26:30:cf:47: 13:f3:1c:30:f6:6c:4f:d5:a3:5a:ae:0f:b1:4d:e6: 86:d5:df:35:30:79:c0:9e:8a:d4:ac:de:25:0d:6a: 33:d6:18:ac:27:9f:4a:6a:5f:fa:17:24:44:f7:74: de:1a:fd:99:9b:a0:ab:6c:98:50:ee:70:e4:f6:67: 5c:7f:4e:34:f8:6f:3e:aa:bc:6e:3b:0b:e3:ab:d9: 4c:85:eb:74:56:03:1b:55:1e:91:ca:1c:19:cc:5e: 64:39:3a:29:10:a8:65:84:bd:38:e0:76:db:80:bc: d0:2c:4b:0a:24:ea:c7:bc:88:d7:e4:10:73:c1:f2: e6:51:80:b3:3d:66:00:35:c7:09:62:7b:ea:e4:a2: a7:ad:6b:0c:94:2f:cb:c0:dc:f4:eb:9c:56:de:d5: 17:d3:be:19:8d:a8:58:ec:7e:12:0c:47:c9:4f:2d: 11:79:d5:cb:2e:91:cf:93:22:b9:e1:ae:b6:10:82: 34:22:17:31:03:db:05:bd:af:75:f3:21:70:98:ad: 95:25:1e:91:ec:29:bc:49:ee:11:40:d3:e7:38:de: 82:d6:47:c9:37:13:6c:81:83:95:81:7b:3e:5f:cb: e1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C7:44:F9:D8:52:46:34:3E:88:C9:60:93:35:01:C2:AB:54:AC:7E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B442252AB6CF11EB82602650C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.60.0/23 45.124.184.0/22 103.58.120.0/23 103.59.16.0/24 103.59.64.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:3d:25:18:c3:cd:60:08:32:28:62:3f:f2:c1:55:94:b5:41: 95:85:14:34:e0:59:d1:35:18:36:bb:bc:70:e8:53:e6:14:2a: ca:94:79:83:bf:50:90:3e:da:fd:b7:18:5b:32:cb:a5:74:b1: f1:a2:89:83:39:fa:18:40:54:90:74:a1:ec:f8:fa:12:c1:e1: 7c:7d:7d:da:6f:74:81:05:ad:fe:b2:d3:32:5d:1e:75:e0:ec: 24:d4:4b:fa:8c:c6:ca:c1:03:38:81:3d:5f:6d:5d:c7:eb:82: d4:0f:84:ca:25:e1:7d:48:ce:59:bd:bf:70:08:d8:8a:6c:f0: 6a:16:d5:c9:c4:1b:d9:98:36:62:59:3c:e9:9c:fb:61:76:df: 29:19:31:54:de:83:de:aa:ce:4e:9c:86:db:78:51:f6:6e:df: f6:c4:d0:34:ed:87:70:7d:33:80:47:85:5d:4a:00:85:d1:8c: 51:6d:00:1f:90:ec:34:17:4e:e8:f7:53:ee:a4:2a:d4:fd:02: 48:8c:8e:d1:6a:40:21:47:a2:57:2a:87:d7:12:e9:ef:ca:5b: 94:de:d1:76:a5:8e:04:7a:d8:a1:3f:9a:2e:ce:ec:61:9a:60: 71:08:80:9e:14:41:f7:7f:a1:d7:76:02:1f:e0:58:7a:ac:af: 1b:37:ba:0e -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDALZRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTYyNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4ZDgtOWQ0ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKLzmB2l9BDRtWSg2AQ/cKW1FDjrVQuDnC0mMM9HE/McMPZsT9WjWq4PsU3m htXfNTB5wJ6K1KzeJQ1qM9YYrCefSmpf+hckRPd03hr9mZugq2yYUO5w5PZnXH9O NPhvPqq8bjsL46vZTIXrdFYDG1UekcocGcxeZDk6KRCoZYS9OOB224C80CxLCiTq x7yI1+QQc8Hy5lGAsz1mADXHCWJ76uSip61rDJQvy8Dc9OucVt7VF9O+GY2oWOx+ EgxHyU8tEXnVyy6Rz5MiueGuthCCNCIXMQPbBb2vdfMhcJitlSUekewpvEnuEUDT 5zjegtZHyTcTbIGDlYF7Pl/L4R8CAwEAAaOCAq0wggKpMB0GA1UdDgQWBBSdx0T5 2FJGND6IyWCTNQHCq1SsfjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I0NDIyNTJB QjZDRjExRUI4MjYwMjY1MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDcGCCsGAQUFBwEHAQH/ BCgwJjAkBAIAATAeAwQBK+88AwQCLXy4AwQBZzp4AwQAZzsQAwQBZztAMA0GCSqG SIb3DQEBCwUAA4IBAQAaPSUYw81gCDIoYj/ywVWUtUGVhRQ04FnRNRg2u7xw6FPm FCrKlHmDv1CQPtr9txhbMsuldLHxoomDOfoYQFSQdKHs+PoSweF8fX3ab3SBBa3+ stMyXR514Owk1Ev6jMbKwQM4gT1fbV3H64LUD4TKJeF9SM5Zvb9wCNiKbPBqFtXJ xBvZmDZiWTzpnPthdt8pGTFU3oPeqs5OnIbbeFH2bt/2xNA07YdwfTOAR4VdSgCF 0YxRbQAfkOw0F07o91PupCrU/QJIjI7RakAhR6JXKofXEunvyluU3tF2pY4Eetih P5ouzuxhmmBxCICeFEH3f6HXdgIf4Fh6rK8bN7oO -----END CERTIFICATE-----Generated at Tue May 13 15:14:00 2025 by rpki-client