$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B70EEB82049411F08DF3FC11C4F9AE02.roa File: B70EEB82049411F08DF3FC11C4F9AE02.roa (raw, json) Hash identifier: BgXlqRR9wH/z/Q/wKV9JBqp8kzlx1+yZg/TMs3CUOhw= Subject key identifier: 4C:C2:41:9D:E3:B6:98:3D:47:5A:81:ED:DE:0A:30:DA:94:F8:B3:20 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B12E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B70EEB82049411F08DF3FC11C4F9AE02.roa Signing time: Thu 08 May 2025 15:56:09 +0000 ROA not before: Thu 08 May 2025 15:56:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132208 IP address blocks: 103.7.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45358 (0xb12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:56:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd419-5c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7b:fa:e3:ac:b8:41:8f:01:33:fe:5f:69:94: 5b:72:0d:2a:15:46:f4:cc:6c:1d:3a:5c:5c:69:b0: 81:36:bc:e2:e6:e4:65:22:4a:6a:3d:0d:97:c2:44: 09:0c:cf:dc:38:be:62:ef:63:5b:44:53:e1:04:2c: 11:1c:fc:51:ea:72:92:eb:5f:0d:49:e2:95:c6:06: 65:76:dd:b5:75:70:f8:e2:ca:f3:d1:f0:7a:08:c6: da:41:3b:a9:2b:3e:29:ec:a4:6f:b3:db:12:ed:86: 74:4c:24:f2:e1:b3:b7:d5:70:e8:df:6e:03:e1:b2: 14:98:0d:9f:68:39:5c:a5:09:05:00:2c:81:80:69: 74:0d:67:cf:fc:42:a8:90:d4:26:3c:01:4c:f6:14: 58:59:92:43:d6:8f:f7:17:87:8d:04:ad:38:b6:cc: b9:bc:c8:cb:6e:ad:19:73:aa:f1:ba:1a:f0:5b:78: e2:f9:d6:cc:3a:b1:d1:35:e5:ca:ef:12:28:92:b8: d5:f6:b7:0b:26:e1:9e:62:b7:58:f2:58:51:af:96: dd:17:07:da:0a:5c:6c:e0:4d:fd:fd:3c:12:89:ac: 64:36:63:7a:bf:ca:3e:31:ea:fa:d2:9c:64:e3:c2: ad:ed:9a:89:26:e5:b2:b1:7d:6a:9f:ec:76:ad:e3: 78:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C2:41:9D:E3:B6:98:3D:47:5A:81:ED:DE:0A:30:DA:94:F8:B3:20 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B70EEB82049411F08DF3FC11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.7.64.0/24 Signature Algorithm: sha256WithRSAEncryption 50:16:78:2b:dc:f1:4a:8f:66:0d:13:23:62:db:de:ce:d9:0b: ea:ae:ca:65:69:50:2d:4a:1b:2d:23:9c:d1:a6:b5:db:24:e5: b1:7b:ba:56:23:fd:0f:4f:92:55:7b:07:ad:6f:c1:1b:cd:fb: 01:52:c1:04:95:4d:f8:3c:45:01:0f:6e:96:31:96:37:61:02: ff:ce:29:87:a1:8c:c2:d1:31:f3:3b:50:a6:5a:49:96:bc:d9: 3f:ce:86:21:55:3a:6c:d5:70:48:13:61:a1:dd:95:f7:84:67: 76:1b:62:0e:69:9f:10:8d:e0:9d:04:73:8a:ba:61:b0:c9:c6: 09:86:3a:af:22:30:c6:33:43:61:bc:44:91:42:66:9a:d6:b6: 1d:c1:a2:e5:09:2a:2f:ec:e4:ac:46:53:9b:e6:f4:ef:eb:71: 0d:28:4f:56:29:54:1e:90:0f:62:5c:42:f7:8f:cc:03:10:30: 8b:1c:0e:b8:74:4f:5b:88:11:68:fa:88:54:a7:18:ba:5a:79: 84:9b:63:7f:66:5a:d1:3b:2b:f8:59:89:08:37:24:6e:0c:22: 78:78:91:f1:6e:bb:65:35:fb:9e:a9:fb:47:f2:80:35:e2:98: d3:97:4a:b8:30:08:98:d5:64:24:02:83:be:6b:bb:9b:89:d8: 92:2b:a6:79 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALEuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTYwOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0MTktNWM3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALd7+uOsuEGPATP+X2mUW3INKhVG9MxsHTpcXGmwgTa84ubkZSJKaj0Nl8JE CQzP3Di+Yu9jW0RT4QQsERz8UepykutfDUnilcYGZXbdtXVw+OLK89HwegjG2kE7 qSs+Keykb7PbEu2GdEwk8uGzt9Vw6N9uA+GyFJgNn2g5XKUJBQAsgYBpdA1nz/xC qJDUJjwBTPYUWFmSQ9aP9xeHjQStOLbMubzIy26tGXOq8boa8Ft44vnWzDqx0TXl yu8SKJK41fa3CybhnmK3WPJYUa+W3RcH2gpcbOBN/f08EomsZDZjer/KPjHq+tKc ZOPCre2aiSblsrF9ap/sdq3jeHcCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRMwkGd 47aYPUdage3eCjDalPizIDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I3MEVFQjgy MDQ5NDExRjA4REYzRkMxMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZwdAMA0GCSqGSIb3DQEBCwUAA4IBAQBQFngr3PFKj2YN EyNi297O2QvqrsplaVAtShstI5zRprXbJOWxe7pWI/0PT5JVewetb8EbzfsBUsEE lU34PEUBD26WMZY3YQL/zimHoYzC0THzO1CmWkmWvNk/zoYhVTps1XBIE2Gh3ZX3 hGd2G2IOaZ8QjeCdBHOKumGwycYJhjqvIjDGM0NhvESRQmaa1rYdwaLlCSov7OSs RlOb5vTv63ENKE9WKVQekA9iXEL3j8wDEDCLHA64dE9biBFo+ohUpxi6WnmEm2N/ ZlrROyv4WYkINyRuDCJ4eJHxbrtlNfueqftH8oA14pjTl0q4MAiY1WQkAoO+a7ub idiSK6Z5 -----END CERTIFICATE-----Generated at Tue May 13 00:14:05 2025 by rpki-client