$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B73CE85E8C6E11EBAEA8EF79C4F9AE02.roa File: B73CE85E8C6E11EBAEA8EF79C4F9AE02.roa (raw, json) Hash identifier: 3IA2U8+yx5frzXFZ4DrZHGbdppijOcQwlm23Ty1+ed0= Subject key identifier: 9A:A3:70:6C:72:9D:C0:D0:53:31:9A:81:4F:91:EA:51:A8:C2:9E:04 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B9CF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B73CE85E8C6E11EBAEA8EF79C4F9AE02.roa Signing time: Thu 08 May 2025 16:29:48 +0000 ROA not before: Thu 08 May 2025 16:29:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17426 IP address blocks: 45.112.52.0/22 maxlen: 24 103.51.116.0/22 maxlen: 24 103.91.88.0/24 maxlen: 24 103.91.89.0/24 maxlen: 24 103.91.90.0/24 maxlen: 24 103.91.91.0/24 maxlen: 24 110.173.176.0/20 maxlen: 24 203.115.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47567 (0xb9cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:29:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdbfc-8a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:05:9e:f8:b9:af:a2:16:3c:e6:e1:6d:fb: 2e:d1:53:ba:6c:10:41:fc:3a:be:fb:cd:f8:92:cc: e8:a6:d8:a2:2b:86:7a:b5:87:2f:9b:d5:01:76:56: b3:88:ea:a1:43:c3:74:6e:a2:55:6b:5a:7f:ec:70: bc:52:13:a7:01:0d:f4:74:3d:33:11:d3:79:4c:9a: a2:20:8e:57:eb:f7:fa:47:83:35:f1:75:0b:b6:07: 95:26:24:fb:30:18:7b:a3:87:1a:e4:c1:a1:34:92: a5:bf:ec:f2:20:bf:b2:b2:df:b6:a4:91:2d:82:9a: 35:a6:c5:43:d9:ba:c0:25:b3:23:d4:58:21:f7:e9: e2:c4:76:e6:05:1e:76:64:e3:0b:86:08:68:b9:4b: 17:9c:93:15:93:c9:6e:a6:72:94:4a:9d:1a:f9:dc: 95:22:a3:22:52:ea:7b:02:12:58:1f:99:2d:ef:15: 41:50:8c:14:c6:55:a8:e8:db:cc:f4:0d:4a:1f:ac: 36:9e:98:a8:77:1c:09:c2:d3:88:46:f1:0e:25:3f: 58:7a:89:41:50:17:b3:47:98:9b:a2:35:d0:ad:42: 3a:c2:31:24:e5:bd:26:53:59:5d:bc:93:17:85:f0: 09:a8:9f:c0:3e:14:a4:db:91:13:96:58:7d:91:a2: 0e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A3:70:6C:72:9D:C0:D0:53:31:9A:81:4F:91:EA:51:A8:C2:9E:04 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B73CE85E8C6E11EBAEA8EF79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.112.52.0/22 103.51.116.0/22 103.91.88.0/22 110.173.176.0/20 203.115.96.0/19 Signature Algorithm: sha256WithRSAEncryption 36:b1:5d:aa:8f:49:47:7f:48:bb:bb:b3:12:15:37:0e:03:86: 9a:52:ba:01:48:6b:1c:ad:da:93:9b:ef:5c:b1:e6:a4:70:79: 37:b9:04:f4:bc:9c:5f:21:b9:1d:fa:53:e9:75:a0:9f:56:de: 0d:e7:a8:fe:b5:8a:d3:0e:8e:65:72:45:8c:f4:f4:30:6d:c6: ca:25:5b:b8:f6:76:38:87:09:a4:79:b8:82:d6:c5:bd:d0:09: ee:2c:6a:84:d2:48:d9:e9:74:0f:1a:23:cc:4a:4f:b8:e1:95: 93:d0:d7:cb:f2:72:7d:05:f8:a0:2d:91:fa:bd:fb:4f:6e:67: 6d:6b:cf:cc:9e:ad:14:a3:6f:46:43:21:11:7d:b9:00:43:9c: 84:24:6c:4f:21:62:81:3e:3f:a1:03:f6:6e:39:24:c4:63:0c: aa:55:cb:d7:9d:38:5e:90:a1:5a:f4:27:6d:58:b7:73:6c:3e: ab:93:79:a7:3e:54:10:c2:2f:fd:1c:2f:2f:a5:6a:f1:a9:e2: a5:d9:9f:2c:4d:a2:9b:86:7e:2e:bb:ae:41:34:2c:83:28:fe: 18:2c:13:8c:35:92:b5:7a:10:64:60:87:37:20:42:6b:6a:b5: 02:af:99:32:46:a6:11:76:46:c5:2b:4a:54:16:22:11:80:c8: 89:9a:f2:c2 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDALnPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2Mjk0OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiZmMtOGE3ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZYBZ74ua+iFjzm4W37LtFTumwQQfw6vvvN+JLM6KbYoiuGerWHL5vVAXZW s4jqoUPDdG6iVWtaf+xwvFITpwEN9HQ9MxHTeUyaoiCOV+v3+keDNfF1C7YHlSYk +zAYe6OHGuTBoTSSpb/s8iC/srLftqSRLYKaNabFQ9m6wCWzI9RYIffp4sR25gUe dmTjC4YIaLlLF5yTFZPJbqZylEqdGvnclSKjIlLqewISWB+ZLe8VQVCMFMZVqOjb zPQNSh+sNp6YqHccCcLTiEbxDiU/WHqJQVAXs0eYm6I10K1COsIxJOW9JlNZXbyT F4XwCaifwD4UpNuRE5ZYfZGiDpcCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBSao3Bs cp3A0FMxmoFPkepRqMKeBDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I3M0NFODVF OEM2RTExRUJBRUE4RUY3OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDcGCCsGAQUFBwEHAQH/ BCgwJjAkBAIAATAeAwQCLXA0AwQCZzN0AwQCZ1tYAwQEbq2wAwQFy3NgMA0GCSqG SIb3DQEBCwUAA4IBAQA2sV2qj0lHf0i7u7MSFTcOA4aaUroBSGscrdqTm+9cseak cHk3uQT0vJxfIbkd+lPpdaCfVt4N56j+tYrTDo5lckWM9PQwbcbKJVu49nY4hwmk ebiC1sW90AnuLGqE0kjZ6XQPGiPMSk+44ZWT0NfL8nJ9BfigLZH6vftPbmdta8/M nq0Uo29GQyERfbkAQ5yEJGxPIWKBPj+hA/ZuOSTEYwyqVcvXnThekKFa9CdtWLdz bD6rk3mnPlQQwi/9HC8vpWrxqeKl2Z8sTaKbhn4uu65BNCyDKP4YLBOMNZK1ehBk YIc3IEJrarUCr5kyRqYRdkbFK0pUFiIRgMiJmvLC -----END CERTIFICATE-----Generated at Tue May 13 02:22:32 2025 by rpki-client