$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24A6928F50611EB8BF98975C4F9AE02.roa File: C24A6928F50611EB8BF98975C4F9AE02.roa (raw, json) Hash identifier: PSGexD9+gLclsGjhZPYYNAXk+pAaw39aKo+7IbvEtck= Subject key identifier: 54:9A:8C:DD:80:F1:0C:5F:FA:38:7A:CB:45:25:12:C4:28:A5:E1:69 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B6F4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24A6928F50611EB8BF98975C4F9AE02.roa Signing time: Thu 08 May 2025 16:18:52 +0000 ROA not before: Thu 08 May 2025 16:18:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142487 IP address blocks: 103.168.177.0/24 maxlen: 24 103.176.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46836 (0xb6f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:18:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd96b-2a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:f1:f1:c3:01:34:20:be:8f:b7:fc:b8:fd: 98:7d:67:88:0a:fe:f4:a0:cd:a7:6a:e1:08:03:c4: 13:e0:87:a6:d4:3f:86:43:7d:6a:40:ac:1f:66:11: b0:d2:fe:9b:79:17:49:80:cb:70:2d:c5:09:03:3d: ba:c0:c4:12:e2:86:2a:bf:23:ac:12:bf:c5:dc:5a: 0a:6f:ed:e9:dc:f2:07:e7:20:91:bd:3b:8c:be:c7: d2:8c:0b:cf:54:54:ec:ea:32:fd:af:54:04:3d:e4: a6:07:25:9c:b6:c2:a0:ba:5e:36:d8:f6:62:c7:e8: fe:47:30:51:39:40:e0:6a:99:25:bf:08:83:60:82: fb:77:28:02:55:c4:95:83:1b:10:36:79:2a:0d:68: 57:79:21:b7:0e:a6:28:7f:79:b3:cd:66:64:7d:f6: 37:56:d0:74:76:36:ad:ad:16:6b:68:b9:fc:ab:26: e9:85:b7:b8:d1:2b:b6:dd:6c:87:a7:fd:c2:6b:f6: 5d:cd:87:b6:6e:a1:83:0e:44:73:1e:e6:34:24:6f: 05:93:88:66:51:72:79:64:ef:d6:24:eb:8d:8f:99: 70:30:0d:ba:1f:51:65:8b:b0:18:13:9f:84:70:94: ef:4f:b1:90:6c:f3:36:25:f1:00:3a:fd:26:b8:cd: 7d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9A:8C:DD:80:F1:0C:5F:FA:38:7A:CB:45:25:12:C4:28:A5:E1:69 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24A6928F50611EB8BF98975C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.177.0/24 103.176.176.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:bc:2b:f1:b8:1b:60:bf:08:c7:57:3c:f2:a1:ab:72:16:13: f3:24:14:15:ef:cb:26:7d:9e:fc:b9:00:4e:db:b6:14:a7:41: 1e:d3:d1:a6:25:66:e8:2a:26:9e:4a:44:71:c9:36:fd:b3:01: 55:3c:33:be:de:96:aa:81:79:87:37:76:ba:c5:06:90:43:34: c3:70:c7:3c:93:22:57:9e:ed:1e:c2:c6:42:c6:92:77:34:0e: bd:a7:d7:b0:31:a8:48:a3:e8:be:56:6f:d8:49:61:7e:da:3c: 31:98:db:60:06:40:a8:db:2f:c8:04:e7:ab:17:89:c4:81:3a: b0:16:e6:a0:44:19:8b:9a:e2:d9:a5:88:a4:3d:88:6b:e0:bb: ca:31:fc:84:98:02:66:9d:7d:82:73:86:9f:01:95:b5:e3:58: f3:dc:cb:70:89:b5:dc:28:a6:bd:55:2a:bc:99:76:a6:c5:f0: b1:cf:5d:01:b9:cd:a0:5d:71:4b:ca:bd:07:9e:87:08:40:80: 22:9a:b7:ec:c3:5a:dd:48:97:ff:7d:fc:8b:58:f6:ad:1b:61: 92:d9:24:72:1f:bd:39:40:c2:aa:bf:8c:b9:14:0d:ba:01:4a: e0:f0:32:02:c4:2c:f5:d7:63:d0:ac:3f:0e:73:2f:df:42:eb: 7c:ca:5b:45 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALb0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTg1MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5NmItMmE2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK88fHDATQgvo+3/Lj9mH1niAr+9KDNp2rhCAPEE+CHptQ/hkN9akCsH2YR sNL+m3kXSYDLcC3FCQM9usDEEuKGKr8jrBK/xdxaCm/t6dzyB+cgkb07jL7H0owL z1RU7Ooy/a9UBD3kpgclnLbCoLpeNtj2Ysfo/kcwUTlA4GqZJb8Ig2CC+3coAlXE lYMbEDZ5Kg1oV3khtw6mKH95s81mZH32N1bQdHY2ra0Wa2i5/Ksm6YW3uNErtt1s h6f9wmv2Xc2Htm6hgw5Ecx7mNCRvBZOIZlFyeWTv1iTrjY+ZcDANuh9RZYuwGBOf hHCU70+xkGzzNiXxADr9JrjNfWkCAwEAAaOCApswggKXMB0GA1UdDgQWBBRUmozd gPEMX/o4estFJRLEKKXhaTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MyNEE2OTI4 RjUwNjExRUI4QkY5ODk3NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQAZ6ixAwQAZ7CwMA0GCSqGSIb3DQEBCwUAA4IBAQCOvCvx uBtgvwjHVzzyoatyFhPzJBQV78smfZ78uQBO27YUp0Ee09GmJWboKiaeSkRxyTb9 swFVPDO+3paqgXmHN3a6xQaQQzTDcMc8kyJXnu0ewsZCxpJ3NA69p9ewMahIo+i+ Vm/YSWF+2jwxmNtgBkCo2y/IBOerF4nEgTqwFuagRBmLmuLZpYikPYhr4LvKMfyE mAJmnX2Cc4afAZW141jz3MtwibXcKKa9VSq8mXamxfCxz10Buc2gXXFLyr0HnocI QIAimrfsw1rdSJf/ffyLWPatG2GS2SRyH705QMKqv4y5FA26AUrg8DICxCz112PQ rD8Ocy/fQut8yltF -----END CERTIFICATE-----Generated at Tue May 13 02:28:26 2025 by rpki-client