$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6DC2614943011EE9C932E82C4F9AE02.roa File: B6DC2614943011EE9C932E82C4F9AE02.roa (raw, json) Hash identifier: J6yjzySqPGypbqtr6AWXw3YFnELNlbxMgOiKYAvPfMo= Subject key identifier: 3A:02:20:F4:D0:19:3F:95:FD:40:1F:EA:90:73:7A:48:AC:D2:E6:DF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B227 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6DC2614943011EE9C932E82C4F9AE02.roa Signing time: Thu 08 May 2025 16:00:01 +0000 ROA not before: Thu 08 May 2025 16:00:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133993 IP address blocks: 103.175.116.0/24 maxlen: 24 103.175.117.0/24 maxlen: 24 103.185.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45607 (0xb227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:00:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd501-cf3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:40:e0:19:7c:dd:64:12:85:e4:8c:8c:db:7b: b1:8d:f0:3a:99:6f:f6:88:fa:42:31:83:7f:f2:72: eb:1c:6f:8b:5a:10:3a:fe:55:10:68:d8:a2:5f:4d: a4:82:ec:0e:47:49:c9:15:cd:23:d6:aa:de:86:ce: ae:ba:be:9f:29:32:6e:00:1f:6f:22:70:d6:e9:81: cb:bb:70:5a:12:8e:40:8b:f0:dc:56:ed:1e:72:f8: 93:ee:8d:02:c5:4f:9c:da:0e:41:a0:2e:38:aa:4f: 55:79:19:12:65:e8:35:f0:68:87:30:12:9d:e4:eb: 4a:30:f1:63:81:22:02:d2:55:47:a7:f6:77:6d:e5: 7b:56:8f:02:1f:4c:aa:24:98:4b:73:21:d0:b7:02: 5e:4b:38:6a:fc:f3:f2:bf:58:82:3e:5c:31:58:c4: d4:5a:31:4f:01:99:4b:08:88:89:44:7e:48:47:75: 58:fc:bc:ea:61:00:b3:e2:32:7d:a8:5a:53:3e:94: 68:4f:4b:8f:7f:db:29:88:1c:6c:bf:16:81:44:bc: 87:2b:bd:c4:19:af:c4:31:85:48:2b:fd:96:a9:07: fa:9f:2e:95:26:af:a9:2c:57:ba:71:92:79:39:03: 97:00:78:5f:63:7e:6f:59:e4:ce:b4:8f:3f:43:82: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:02:20:F4:D0:19:3F:95:FD:40:1F:EA:90:73:7A:48:AC:D2:E6:DF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6DC2614943011EE9C932E82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.116.0/23 103.185.10.0/24 Signature Algorithm: sha256WithRSAEncryption 73:28:a1:ad:79:5d:da:76:8d:7f:0a:bd:87:c0:9d:72:3d:de: ff:d0:da:f6:5e:ae:d2:7f:dd:b7:83:57:b2:8d:17:11:4e:6e: c9:50:d8:ea:1d:5a:10:48:5a:43:00:b5:bd:2d:d4:a3:c9:46: 63:63:33:f5:93:3a:10:85:c1:c4:5d:ad:44:f1:1a:d1:e6:4f: bb:ad:3a:85:66:b2:54:e2:6f:45:c8:d0:af:0c:b7:de:e3:04: 62:0a:25:17:37:9c:33:02:84:a9:ae:1f:4b:10:0a:39:60:be: d5:f0:e6:91:85:43:e7:b5:f8:c2:36:5c:14:cd:0f:2f:45:ef: 89:c1:cd:17:f2:f8:a4:96:92:fe:30:84:4a:25:47:cf:1b:2e: fa:34:8a:62:7d:d5:0c:c5:3a:f0:47:14:23:72:ca:19:b2:a9: 51:9d:ae:ab:2d:d1:db:11:69:60:ca:25:ee:ea:83:0f:47:8a: 34:1a:35:ec:63:90:b7:20:5c:60:80:2e:ee:57:e2:a2:9f:28: ef:7b:cd:72:46:e8:79:8d:56:71:ad:2c:f3:2c:62:56:e3:17: ef:39:43:ca:8d:ea:f8:65:41:22:52:1f:3c:d4:65:0d:22:98: e2:c6:2f:76:18:0a:00:70:14:54:80:05:b3:7c:8f:05:f7:e8: f1:62:95:b6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALInMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDAwMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1MDEtY2YzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPdA4Bl83WQSheSMjNt7sY3wOplv9oj6QjGDf/Jy6xxvi1oQOv5VEGjYol9N pILsDkdJyRXNI9aq3obOrrq+nykybgAfbyJw1umBy7twWhKOQIvw3FbtHnL4k+6N AsVPnNoOQaAuOKpPVXkZEmXoNfBohzASneTrSjDxY4EiAtJVR6f2d23le1aPAh9M qiSYS3Mh0LcCXks4avzz8r9Ygj5cMVjE1FoxTwGZSwiIiUR+SEd1WPy86mEAs+Iy fahaUz6UaE9Lj3/bKYgcbL8WgUS8hyu9xBmvxDGFSCv9lqkH+p8ulSavqSxXunGS eTkDlwB4X2N+b1nkzrSPP0OCqb0CAwEAAaOCApswggKXMB0GA1UdDgQWBBQ6AiD0 0Bk/lf1AH+qQc3pIrNLm3zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I2REMyNjE0 OTQzMDExRUU5QzkzMkU4MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQBZ690AwQAZ7kKMA0GCSqGSIb3DQEBCwUAA4IBAQBzKKGt eV3ado1/Cr2HwJ1yPd7/0Nr2Xq7Sf923g1eyjRcRTm7JUNjqHVoQSFpDALW9LdSj yUZjYzP1kzoQhcHEXa1E8RrR5k+7rTqFZrJU4m9FyNCvDLfe4wRiCiUXN5wzAoSp rh9LEAo5YL7V8OaRhUPntfjCNlwUzQ8vRe+Jwc0X8viklpL+MIRKJUfPGy76NIpi fdUMxTrwRxQjcsoZsqlRna6rLdHbEWlgyiXu6oMPR4o0GjXsY5C3IFxggC7uV+Ki nyjve81yRuh5jVZxrSzzLGJW4xfvOUPKjer4ZUEiUh881GUNIpjixi92GAoAcBRU gAWzfI8F9+jxYpW2 -----END CERTIFICATE-----Generated at Tue May 13 01:07:22 2025 by rpki-client