$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C08AF654049B11EBB02DF865C4F9AE02.roa File: C08AF654049B11EBB02DF865C4F9AE02.roa (raw, json) Hash identifier: tIBfXvr6DJEE5Cw+uNH+IxBJUbVAVSCivehLhrFI9ws= Subject key identifier: 90:5D:B1:5A:F3:EB:E8:27:2E:D1:1C:62:CA:80:36:AE:9C:1F:FB:E1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B2C5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C08AF654049B11EBB02DF865C4F9AE02.roa Signing time: Thu 08 May 2025 16:02:27 +0000 ROA not before: Thu 08 May 2025 16:02:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134912 IP address blocks: 103.69.168.0/22 maxlen: 24 103.156.122.0/23 maxlen: 24 103.177.180.0/24 maxlen: 24 103.181.209.0/24 maxlen: 24 103.190.97.0/24 maxlen: 24 103.217.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45765 (0xb2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:02:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd593-cce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:5d:14:f8:05:c7:20:f0:6e:f2:82:24:60: c1:14:8f:18:cc:09:16:22:26:0c:53:57:04:cd:2a: ea:32:97:c2:e9:1e:0f:21:66:4b:cd:4d:09:39:5a: c7:11:eb:e4:af:84:dc:b1:55:3c:f2:7c:3b:0f:62: 5e:e2:33:40:cf:c1:b4:6e:45:0b:63:bf:f4:b6:47: 13:5f:91:32:cf:0e:38:ca:0c:6f:55:7e:18:6a:e0: bf:d6:c3:1a:a8:dc:99:73:36:f2:ba:56:8a:4e:8d: 60:00:cb:81:d6:56:28:ac:26:a0:f3:57:f9:44:8c: 43:4f:4e:b2:5c:cb:fd:df:e5:45:d2:75:1f:20:9e: 77:0b:d8:b3:b9:d0:e4:ef:e0:5d:73:d1:ca:67:d9: 91:9f:a3:81:a6:b3:e4:84:76:37:c0:12:b3:e9:62: 73:8e:60:64:e0:29:30:5a:29:5a:85:2c:8d:13:40: 97:e1:98:dd:8c:4e:67:fa:da:a3:ff:ed:13:6a:d8: 3c:f1:6e:52:b7:5b:c5:43:23:ed:3d:ea:cf:86:a5: 73:b0:4d:3a:ab:77:89:4a:ba:c8:98:ec:07:a3:ab: 45:f3:84:f9:4d:ce:5d:8f:a8:b2:b4:1a:f5:97:c8: 3c:ba:f0:1c:c5:cf:21:a0:32:98:97:f2:46:9c:f0: e9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5D:B1:5A:F3:EB:E8:27:2E:D1:1C:62:CA:80:36:AE:9C:1F:FB:E1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C08AF654049B11EBB02DF865C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.69.168.0/22 103.156.122.0/23 103.177.180.0/24 103.181.209.0/24 103.190.97.0/24 103.217.66.0/23 Signature Algorithm: sha256WithRSAEncryption 27:9b:ec:04:4b:93:9e:04:0e:1e:04:08:87:25:2c:5b:3c:15: 21:68:3a:95:cb:44:54:ea:0f:6f:73:d2:a6:ed:bf:d9:12:1e: 6f:09:f3:e5:19:28:97:c0:22:2f:33:b7:c2:5c:6e:e6:f7:d0: 92:2b:f7:75:e2:5a:80:bd:b4:68:4d:bb:b2:cc:22:79:61:6f: 26:84:d6:c4:41:ee:5b:3f:f3:b9:a3:0e:2b:7e:d8:a1:c6:7b: ea:ff:f5:07:1b:d6:50:c0:fc:0a:40:a0:15:9d:ad:36:a2:e1: af:cd:02:b6:04:a8:76:b0:2a:ed:be:41:0f:fc:d4:a4:a1:50: 8a:9b:e5:ee:04:0e:3d:b8:f3:75:dc:1b:a0:19:84:39:83:31: c3:c3:19:fc:b0:00:28:1c:da:a9:17:4d:f5:3d:4c:14:0e:ae: 9c:56:9f:94:c8:46:6f:60:5d:65:48:5f:41:10:31:6f:c1:2c: 09:cb:a8:3d:50:45:07:67:2e:3e:4d:dd:e2:12:90:74:9e:20: 7b:b8:d3:56:0e:66:23:c0:87:66:6f:31:37:2a:cd:7a:03:34: 66:6a:16:db:b5:2a:31:96:25:f2:91:fe:72:0f:2a:7d:68:6f: 3a:d0:1e:b1:cb:17:6a:2e:c1:91:3c:11:9e:af:b2:b6:58:2b: 07:54:0f:bd -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIDALLFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDIyN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1OTMtY2NlMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSsXRT4Bccg8G7ygiRgwRSPGMwJFiImDFNXBM0q6jKXwukeDyFmS81NCTla xxHr5K+E3LFVPPJ8Ow9iXuIzQM/BtG5FC2O/9LZHE1+RMs8OOMoMb1V+GGrgv9bD GqjcmXM28rpWik6NYADLgdZWKKwmoPNX+USMQ09OslzL/d/lRdJ1HyCedwvYs7nQ 5O/gXXPRymfZkZ+jgaaz5IR2N8ASs+lic45gZOApMFopWoUsjRNAl+GY3YxOZ/ra o//tE2rYPPFuUrdbxUMj7T3qz4alc7BNOqt3iUq6yJjsB6OrRfOE+U3OXY+osrQa 9ZfIPLrwHMXPIaAymJfyRpzw6TkCAwEAAaOCArMwggKvMB0GA1UdDgQWBBSQXbFa 8+voJy7RHGLKgDaunB/74TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MwOEFGNjU0 MDQ5QjExRUJCMDJERjg2NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMD0GCCsGAQUFBwEHAQH/ BC4wLDAqBAIAATAkAwQCZ0WoAwQBZ5x6AwQAZ7G0AwQAZ7XRAwQAZ75hAwQBZ9lC MA0GCSqGSIb3DQEBCwUAA4IBAQAnm+wES5OeBA4eBAiHJSxbPBUhaDqVy0RU6g9v c9Km7b/ZEh5vCfPlGSiXwCIvM7fCXG7m99CSK/d14lqAvbRoTbuyzCJ5YW8mhNbE Qe5bP/O5ow4rftihxnvq//UHG9ZQwPwKQKAVna02ouGvzQK2BKh2sCrtvkEP/NSk oVCKm+XuBA49uPN13BugGYQ5gzHDwxn8sAAoHNqpF031PUwUDq6cVp+UyEZvYF1l SF9BEDFvwSwJy6g9UEUHZy4+Td3iEpB0niB7uNNWDmYjwIdmbzE3Ks16AzRmahbb tSoxliXykf5yDyp9aG860B6xyxdqLsGRPBGer7K2WCsHVA+9 -----END CERTIFICATE-----Generated at Tue May 13 00:21:04 2025 by rpki-client