$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9629C7C479511EC87308061C4F9AE02.roa File: B9629C7C479511EC87308061C4F9AE02.roa (raw, json) Hash identifier: fkqE0y3JHDNg1Q+kM1wD/c68esZE3Cd9vpZXMoHl1Nk= Subject key identifier: A9:1C:80:03:BC:F9:2C:4F:BC:DB:34:FB:19:71:06:C1:C1:DA:77:16 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BA65 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9629C7C479511EC87308061C4F9AE02.roa Signing time: Thu 08 May 2025 16:32:11 +0000 ROA not before: Thu 08 May 2025 16:32:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59178 IP address blocks: 103.132.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47717 (0xba65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:32:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdc8b-9fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:7f:00:67:d4:6e:ab:59:58:09:9b:9b:d2: a3:b6:7c:dc:98:c6:6f:ca:90:3a:31:8a:51:70:e5: 88:70:b9:4c:16:f3:62:bf:8d:90:c8:d2:5d:7c:17: e1:1b:33:6a:3c:e5:4e:22:42:68:ff:3c:93:9a:05: 38:40:96:bc:ec:8b:04:7f:be:40:cb:24:a3:ad:3d: 1d:a0:71:78:8b:65:22:de:1e:19:d8:46:1a:c0:dd: 45:9d:67:ad:7d:3b:db:f7:b5:59:60:68:2a:df:f3: a0:2b:21:10:c9:ed:66:7e:8a:e0:c4:46:94:43:cc: 22:a9:c4:20:61:e3:54:4e:dd:a4:a2:f4:c3:15:7f: 60:f7:1a:0d:f8:bd:b8:b4:4b:30:25:d7:d5:17:e7: 9f:6c:c7:5d:18:3d:ec:11:f7:22:46:d1:bd:bb:6b: 3e:3d:39:b0:98:e5:ac:33:a2:a8:ed:cf:61:6a:0b: ac:2d:51:d9:d6:18:27:61:76:f0:00:15:c7:ba:81: 1d:6b:66:68:13:05:bd:aa:68:e4:31:9e:d9:78:2c: 3a:99:d4:c3:a4:56:15:f1:f6:3e:36:05:69:a5:ce: 96:c4:bb:93:9f:50:0d:c2:b6:e3:81:47:f5:f3:21: d2:f8:9a:02:e4:7a:32:95:be:75:ef:53:98:74:a7: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1C:80:03:BC:F9:2C:4F:BC:DB:34:FB:19:71:06:C1:C1:DA:77:16 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9629C7C479511EC87308061C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.144.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:3c:fd:6b:1b:0f:50:f3:62:77:98:f5:ab:f8:56:b8:5b:13: 51:13:f8:22:9c:dc:6b:99:55:12:93:29:37:ca:84:ce:f0:ec: f1:43:db:e0:be:2c:9a:a1:fa:28:42:9b:83:84:91:85:f2:63: 8a:74:cf:68:9c:c0:80:f9:b6:fe:44:25:2c:7b:bf:7a:6e:c2: c8:c4:74:dd:27:27:16:b2:19:7b:24:d3:a8:fa:45:86:89:96: b7:85:89:e6:94:9a:0b:df:e4:a9:0e:ce:a4:f8:ef:fc:da:0b: 01:f1:5f:f5:71:43:78:e4:b7:d5:7e:d9:29:62:1d:b6:40:b4: 8c:4c:7a:ae:13:47:d3:85:e5:b7:08:d3:7f:d8:27:6e:b1:4d: 07:43:20:0c:f3:7c:49:7d:f6:d6:54:5f:55:df:93:4f:75:27: 33:44:db:0b:83:76:4e:c0:b4:02:5d:eb:b5:3e:c9:91:0e:f7: b7:a0:9d:cf:59:2e:45:42:ec:d0:e3:14:05:df:af:71:ca:f9: 5f:23:62:f8:f4:03:ab:ba:82:d2:58:53:60:c8:46:3a:d4:38: 84:0e:79:fe:5d:ca:40:6d:cf:94:22:01:97:bb:d7:cc:a4:19: 6b:3d:a9:43:44:e1:69:de:56:58:b6:6e:7c:1c:c4:e9:e4:55: 4c:47:da:52 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALplMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzIxMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RjOGItOWZlYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvlfwBn1G6rWVgJm5vSo7Z83JjGb8qQOjGKUXDliHC5TBbzYr+NkMjSXXwX 4RszajzlTiJCaP88k5oFOECWvOyLBH++QMsko609HaBxeItlIt4eGdhGGsDdRZ1n rX072/e1WWBoKt/zoCshEMntZn6K4MRGlEPMIqnEIGHjVE7dpKL0wxV/YPcaDfi9 uLRLMCXX1Rfnn2zHXRg97BH3IkbRvbtrPj05sJjlrDOiqO3PYWoLrC1R2dYYJ2F2 8AAVx7qBHWtmaBMFvapo5DGe2XgsOpnUw6RWFfH2PjYFaaXOlsS7k59QDcK244FH 9fMh0viaAuR6MpW+de9TmHSnZOkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSpHIAD vPksT7zbNPsZcQbBwdp3FjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I5NjI5QzdD NDc5NTExRUM4NzMwODA2MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ4SQMA0GCSqGSIb3DQEBCwUAA4IBAQBqPP1rGw9Q82J3 mPWr+Fa4WxNRE/ginNxrmVUSkyk3yoTO8OzxQ9vgviyaofooQpuDhJGF8mOKdM9o nMCA+bb+RCUse796bsLIxHTdJycWshl7JNOo+kWGiZa3hYnmlJoL3+SpDs6k+O/8 2gsB8V/1cUN45LfVftkpYh22QLSMTHquE0fTheW3CNN/2CdusU0HQyAM83xJffbW VF9V35NPdSczRNsLg3ZOwLQCXeu1PsmRDve3oJ3PWS5FQuzQ4xQF369xyvlfI2L4 9AOruoLSWFNgyEY61DiEDnn+XcpAbc+UIgGXu9fMpBlrPalDROFp3lZYtm58HMTp 5FVMR9pS -----END CERTIFICATE-----Generated at Tue May 13 01:08:43 2025 by rpki-client