$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB92CAB6120911EB9B02DB3AC4F9AE02.roa File: BB92CAB6120911EB9B02DB3AC4F9AE02.roa (raw, json) Hash identifier: CS7X17WbuBibPg/3FKAVot/9v+LKF7K+t4nMwaV0lm0= Subject key identifier: C3:22:53:EC:34:E9:E5:15:79:A0:2C:9D:2C:22:4D:83:DA:5F:3A:75 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B5E6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB92CAB6120911EB9B02DB3AC4F9AE02.roa Signing time: Thu 08 May 2025 16:14:46 +0000 ROA not before: Thu 08 May 2025 16:14:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140195 IP address blocks: 103.156.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46566 (0xb5e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:14:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd876-78f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:78:7f:a6:2c:aa:2c:f1:a4:f9:bb:9b:66:9a: 02:bd:5c:6f:6e:ff:fd:cb:d7:4e:ee:bf:50:9f:09: 22:24:ec:e3:8a:e1:34:a0:99:ff:1e:fc:08:99:86: 32:ed:c0:fb:f6:f1:28:27:46:9a:a6:b4:01:63:01: 6c:0f:9c:5f:bd:4e:0a:81:05:57:53:58:03:36:c7: 7b:2f:43:a2:c1:70:ea:ac:bd:f3:40:f6:2b:76:82: 65:0c:48:fa:9d:04:cb:06:17:07:7a:5a:66:f3:ed: 0b:7b:6a:17:fc:c0:86:e2:70:7c:b6:73:07:32:df: a4:23:67:30:61:c6:06:4c:64:43:db:3d:a7:a9:52: 7c:a8:cf:8a:c6:4f:8f:de:dc:45:37:76:a4:94:6c: 71:df:54:9e:2d:3e:79:16:dd:4b:72:b5:bb:f7:42: 5e:b5:df:ea:5b:bc:ea:e9:76:34:54:dc:7b:ae:eb: e8:c9:7d:af:6f:73:88:bf:d7:b0:cd:5a:a3:6e:f7: 06:24:c8:e7:ee:d0:d5:5d:a9:64:72:50:24:00:e2: f7:93:3c:ac:b3:73:3b:a5:dd:ba:c3:eb:be:76:4a: 78:4e:b4:44:30:5f:7d:ca:ee:53:ab:41:54:51:03: 55:1a:7b:6a:d7:37:d2:fd:c5:79:70:7d:ad:2a:c3: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:22:53:EC:34:E9:E5:15:79:A0:2C:9D:2C:22:4D:83:DA:5F:3A:75 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB92CAB6120911EB9B02DB3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.121.0/24 Signature Algorithm: sha256WithRSAEncryption 63:d1:f8:8e:b1:db:2e:42:2d:b4:01:fb:c8:41:ee:4b:b7:d3: 5c:21:b6:7e:56:59:79:81:10:45:1b:3f:c1:ca:27:99:ce:0d: 7e:9c:de:0f:55:41:e4:6b:80:c9:cd:e5:79:2e:62:24:5c:6e: 6b:87:1e:e5:c7:fd:44:dd:e1:be:61:24:73:aa:a1:65:c8:15: 43:a5:67:99:09:ef:90:3b:db:aa:4b:52:4c:a1:98:26:1c:ba: 2b:52:21:4e:ce:31:a7:79:95:8f:11:20:63:f2:29:d8:e7:d6: 42:3b:db:3e:e9:62:37:35:84:3b:65:6c:f0:08:36:0b:f8:d7: b4:2b:fe:ac:bd:0f:17:c2:a8:50:55:e7:d8:20:f4:fc:5f:35: 69:93:16:0b:ef:85:7b:fc:6a:85:03:d0:9c:c3:7c:cf:e7:38: 7f:12:69:1c:7b:81:ce:f8:b4:02:d0:90:89:c4:92:52:c0:d0: 4a:fe:62:91:a2:37:c9:49:1b:b0:b3:8c:82:5d:43:9c:a4:aa: d5:d2:ff:f8:e5:df:0e:26:22:44:e4:73:42:10:64:f0:60:77: f5:43:47:ad:17:b8:b3:37:6e:94:95:a7:ac:21:25:02:2d:0f: d9:09:c1:b3:98:ad:df:d6:e9:36:4b:60:67:fe:9d:26:a7:ca: 2a:68:f3:d9 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALXmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTQ0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4NzYtNzhmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM94f6YsqizxpPm7m2aaAr1cb27//cvXTu6/UJ8JIiTs44rhNKCZ/x78CJmG Mu3A+/bxKCdGmqa0AWMBbA+cX71OCoEFV1NYAzbHey9DosFw6qy980D2K3aCZQxI +p0EywYXB3paZvPtC3tqF/zAhuJwfLZzBzLfpCNnMGHGBkxkQ9s9p6lSfKjPisZP j97cRTd2pJRscd9Uni0+eRbdS3K1u/dCXrXf6lu86ul2NFTce67r6Ml9r29ziL/X sM1ao273BiTI5+7Q1V2pZHJQJADi95M8rLNzO6XdusPrvnZKeE60RDBffcruU6tB VFEDVRp7atc30v3FeXB9rSrDECcCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTDIlPs NOnlFXmgLJ0sIk2D2l86dTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JCOTJDQUI2 MTIwOTExRUI5QjAyREIzQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ5x5MA0GCSqGSIb3DQEBCwUAA4IBAQBj0fiOsdsuQi20 AfvIQe5Lt9NcIbZ+Vll5gRBFGz/ByieZzg1+nN4PVUHka4DJzeV5LmIkXG5rhx7l x/1E3eG+YSRzqqFlyBVDpWeZCe+QO9uqS1JMoZgmHLorUiFOzjGneZWPESBj8inY 59ZCO9s+6WI3NYQ7ZWzwCDYL+Ne0K/6svQ8XwqhQVefYIPT8XzVpkxYL74V7/GqF A9Ccw3zP5zh/Emkce4HO+LQC0JCJxJJSwNBK/mKRojfJSRuws4yCXUOcpKrV0v/4 5d8OJiJE5HNCEGTwYHf1Q0etF7izN26UlaesISUCLQ/ZCcGzmK3f1uk2S2Bn/p0m p8oqaPPZ -----END CERTIFICATE-----Generated at Tue May 13 00:55:04 2025 by rpki-client