$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8645BF291A011EDA6B67334C4F9AE02.roa File: B8645BF291A011EDA6B67334C4F9AE02.roa (raw, json) Hash identifier: AVnESMzOf9Aophm/he8Bc53CSgID4PhWbreBAj8wYCo= Subject key identifier: 8B:47:7F:79:11:EB:A7:61:B3:CA:11:98:01:E3:4C:C0:BA:26:7A:CA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B887 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8645BF291A011EDA6B67334C4F9AE02.roa Signing time: Thu 08 May 2025 16:24:53 +0000 ROA not before: Thu 08 May 2025 16:24:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150562 IP address blocks: 103.85.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47239 (0xb887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:24:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdad4-e6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:62:94:e8:07:a4:e4:06:b5:81:73:8c:7a: d9:fe:51:67:da:f1:29:de:f9:d7:a2:09:0d:9f:e9: 86:c5:82:1e:24:2a:52:6f:b7:86:74:8a:b9:65:11: b1:5f:9f:79:11:03:02:09:a7:71:cd:13:d2:62:e1: 72:e2:fc:e4:fe:9f:d5:2c:ea:13:1c:be:f9:a7:46: 5b:11:ac:27:65:5e:45:7e:ce:28:37:2e:bd:98:a0: 4d:83:9e:2d:3e:b3:6a:ef:1b:71:98:b4:fb:5f:6c: 69:a3:c3:86:a0:0f:55:db:76:55:6c:28:e5:28:cb: 9a:9b:d6:91:98:b1:6f:f6:5f:a2:cf:df:2e:a2:a1: 07:73:ae:7c:3a:ba:8e:c3:fb:9c:3d:15:73:1e:f2: fd:e1:d0:2e:71:8f:a1:53:33:e5:78:a5:0c:a9:4c: cc:c7:34:0b:52:f8:86:78:80:ba:62:72:f6:0f:3c: e8:3c:74:01:6d:57:0c:6a:58:c1:2a:de:84:90:2c: e1:bc:9a:ea:f5:45:78:c4:7e:30:bf:32:d2:56:02: ba:65:06:67:14:d2:ce:46:fa:b1:0b:e8:4f:0b:a4: 57:e7:82:91:ec:73:62:cf:f4:34:fa:1f:16:9c:8b: e4:7e:c1:95:54:1c:d5:6a:49:96:9f:12:7b:00:a9: f4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:47:7F:79:11:EB:A7:61:B3:CA:11:98:01:E3:4C:C0:BA:26:7A:CA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8645BF291A011EDA6B67334C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.132.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:b8:21:67:11:1d:3f:98:9b:38:62:43:88:6b:c2:67:47:e8: 10:d7:53:a0:98:c3:c9:47:b6:14:0f:3b:28:c9:4f:9e:16:24: d9:3b:10:74:d8:13:26:29:41:db:2f:0d:cc:4e:83:18:94:ba: 01:d5:4b:36:f1:42:1d:64:cf:a3:02:82:1e:45:f3:ac:88:0f: 32:1c:bb:dd:74:66:af:b4:68:76:1b:d4:8d:00:4a:78:c3:0b: 23:9e:16:c3:8b:18:c4:27:4f:e6:46:d3:d8:04:7e:02:9f:48: 73:a1:20:4a:de:58:3b:00:1e:e0:df:f6:c5:0f:8c:c1:ab:7f: a0:05:86:d4:26:e4:65:f1:14:d0:16:81:01:b2:a3:3f:d7:a4: 26:35:83:e3:5b:76:b8:cd:89:8a:cd:61:19:72:21:42:70:67: 5f:fd:36:80:80:dd:65:cb:a7:9c:56:fa:56:13:cc:48:77:05: 19:55:25:55:d5:0a:d2:df:64:70:c3:60:f7:d8:03:b9:76:5d: 09:ab:d2:66:8c:e1:ba:71:34:61:c3:26:ba:e4:f8:92:7b:48: 4c:68:72:5c:3f:79:88:a8:34:88:76:3a:28:fc:47:04:e6:e8: ef:df:f5:82:5e:3c:03:30:1f:59:5b:13:a3:3b:b7:ac:ee:f6: b8:3b:9d:93 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALiHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjQ1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhZDQtZTZmZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMI1YpToB6TkBrWBc4x62f5RZ9rxKd7516IJDZ/phsWCHiQqUm+3hnSKuWUR sV+feREDAgmncc0T0mLhcuL85P6f1SzqExy++adGWxGsJ2VeRX7OKDcuvZigTYOe LT6zau8bcZi0+19saaPDhqAPVdt2VWwo5SjLmpvWkZixb/Zfos/fLqKhB3OufDq6 jsP7nD0Vcx7y/eHQLnGPoVMz5XilDKlMzMc0C1L4hniAumJy9g886Dx0AW1XDGpY wSrehJAs4bya6vVFeMR+ML8y0lYCumUGZxTSzkb6sQvoTwukV+eCkexzYs/0NPof FpyL5H7BlVQc1WpJlp8SewCp9HMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSLR395 EeunYbPKEZgB40zAuiZ6yjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I4NjQ1QkYy OTFBMDExRURBNkI2NzMzNEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ1WEMA0GCSqGSIb3DQEBCwUAA4IBAQBsuCFnER0/mJs4 YkOIa8JnR+gQ11OgmMPJR7YUDzsoyU+eFiTZOxB02BMmKUHbLw3MToMYlLoB1Us2 8UIdZM+jAoIeRfOsiA8yHLvddGavtGh2G9SNAEp4wwsjnhbDixjEJ0/mRtPYBH4C n0hzoSBK3lg7AB7g3/bFD4zBq3+gBYbUJuRl8RTQFoEBsqM/16QmNYPjW3a4zYmK zWEZciFCcGdf/TaAgN1ly6ecVvpWE8xIdwUZVSVV1QrS32Rww2D32AO5dl0Jq9Jm jOG6cTRhwya65PiSe0hMaHJcP3mIqDSIdjoo/EcE5ujv3/WCXjwDMB9ZWxOjO7es 7va4O52T -----END CERTIFICATE-----Generated at Tue May 13 01:58:21 2025 by rpki-client