$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24CEF602B3811F0ABB68D6EC4F9AE02.roa File: C24CEF602B3811F0ABB68D6EC4F9AE02.roa (raw, json) Hash identifier: wzkboprD4jMYmqxgpTnUs3wDFEkTnFkMvpfha9unvZw= Subject key identifier: 6E:42:F8:3D:0F:D9:93:85:F9:E6:E8:39:22:1F:B6:09:08:95:06:AB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B23A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24CEF602B3811F0ABB68D6EC4F9AE02.roa Signing time: Thu 08 May 2025 16:00:21 +0000 ROA not before: Thu 08 May 2025 16:00:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134022 IP address blocks: 45.115.184.0/24 maxlen: 24 45.115.185.0/24 maxlen: 24 45.115.186.0/24 maxlen: 24 45.115.187.0/24 maxlen: 24 103.44.48.0/22 maxlen: 24 103.66.212.0/22 maxlen: 24 103.121.240.0/24 maxlen: 24 103.121.241.0/24 maxlen: 24 103.121.242.0/24 maxlen: 24 103.121.243.0/24 maxlen: 24 103.131.93.0/24 maxlen: 24 103.181.8.0/23 maxlen: 24 103.182.140.0/23 maxlen: 24 2404:d9c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45626 (0xb23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:00:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd515-ab36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b1:d6:7a:6c:06:c8:71:5d:9b:28:d6:03:65: 5b:57:ca:cd:01:72:c6:38:b3:e9:f8:78:18:2b:34: aa:b5:7b:8e:e5:ca:42:77:de:48:88:a8:f3:62:ea: 84:ed:7f:eb:80:1a:a0:c1:75:47:aa:3c:06:96:5e: 27:c3:50:c4:0a:ac:2c:b9:a0:ce:56:b4:db:57:b9: 7f:15:2f:c8:44:88:a0:c2:cf:ee:bd:f0:11:5a:94: 35:75:82:74:f7:6e:68:4e:31:98:0d:56:81:67:79: 45:c4:58:87:fe:97:22:f9:4f:3b:4b:a2:42:d6:51: 41:d7:14:4a:ea:df:f1:15:7e:1c:fe:2f:89:72:36: a1:02:d3:4f:cd:e2:05:b6:67:0d:19:fa:04:3a:67: 08:10:03:0c:42:94:2f:0a:e9:69:63:4a:55:ce:07: ae:8a:0f:05:42:e8:af:58:6f:9a:94:0c:ee:f1:76: 16:d9:56:74:70:b6:6c:27:ac:9d:92:c4:4f:59:89: 98:b1:67:44:3d:e7:6c:d4:28:a7:0e:a9:8d:ea:9b: 3b:86:f1:47:39:13:01:61:b4:f0:aa:91:04:0d:23: 19:77:21:86:8e:8a:f7:7b:13:ca:6d:06:c6:32:02: 79:74:ba:64:59:13:d7:75:d6:65:c3:dd:6c:41:d0: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:42:F8:3D:0F:D9:93:85:F9:E6:E8:39:22:1F:B6:09:08:95:06:AB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C24CEF602B3811F0ABB68D6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.184.0/22 103.44.48.0/22 103.66.212.0/22 103.121.240.0/22 103.131.93.0/24 103.181.8.0/23 103.182.140.0/23 IPv6: 2404:d9c0::/32 Signature Algorithm: sha256WithRSAEncryption 02:43:0c:bb:6f:f9:eb:0f:9f:7d:bf:b3:0b:6b:f9:83:c0:d9: 86:2c:be:7a:d3:f8:18:72:e2:59:09:b8:e2:bc:9a:57:88:50: 50:52:12:20:d5:d2:5a:7a:1f:db:ba:df:81:ce:1b:5e:38:cb: 49:95:ca:df:84:45:9e:f8:1f:64:4f:52:8f:fd:ea:0f:cc:e9: c2:83:1c:12:75:e0:71:17:1f:32:90:a6:93:e9:32:fc:4d:54: d3:3a:51:8b:69:05:6d:b0:bf:ae:12:92:3e:40:3f:94:58:61: ae:03:ff:f8:88:ed:40:3f:f9:5f:37:58:05:98:22:48:af:24: 31:00:48:e8:0f:18:37:1f:cf:79:ce:13:39:17:f0:83:3d:85: df:7d:5f:fe:4e:6d:92:a4:a0:4c:4a:99:84:26:2b:f7:93:0e: fe:a3:67:d9:9a:ba:e1:a0:d5:fb:a7:0a:60:13:1d:0d:92:8c: 2d:8a:27:9e:3f:35:5b:73:89:b3:cb:28:5e:74:80:8c:6f:e1: e0:7e:96:5f:86:b3:29:db:17:0c:79:97:32:26:71:79:15:ae: 8c:e8:7e:2e:6e:15:ec:0f:34:c5:a6:48:78:3a:d2:ae:50:5d: 74:fc:3f:ae:e0:41:57:5c:67:97:cc:65:09:ff:b4:e6:15:f2: 76:fe:70:98 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgIDALI6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDAyMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1MTUtYWIzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGx1npsBshxXZso1gNlW1fKzQFyxjiz6fh4GCs0qrV7juXKQnfeSIio82Lq hO1/64AaoMF1R6o8BpZeJ8NQxAqsLLmgzla021e5fxUvyESIoMLP7r3wEVqUNXWC dPduaE4xmA1WgWd5RcRYh/6XIvlPO0uiQtZRQdcUSurf8RV+HP4viXI2oQLTT83i BbZnDRn6BDpnCBADDEKULwrpaWNKVc4HrooPBULor1hvmpQM7vF2FtlWdHC2bCes nZLET1mJmLFnRD3nbNQopw6pjeqbO4bxRzkTAWG08KqRBA0jGXchho6K93sTym0G xjICeXS6ZFkT13XWZcPdbEHQ1psCAwEAAaOCAsgwggLEMB0GA1UdDgQWBBRuQvg9 D9mThfnm6DkiH7YJCJUGqzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MyNENFRjYw MkIzODExRjBBQkI2OEQ2RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFIGCCsGAQUFBwEHAQH/ BEMwQTAwBAIAATAqAwQCLXO4AwQCZywwAwQCZ0LUAwQCZ3nwAwQAZ4NdAwQBZ7UI AwQBZ7aMMA0EAgACMAcDBQAkBNnAMA0GCSqGSIb3DQEBCwUAA4IBAQACQwy7b/nr D599v7MLa/mDwNmGLL560/gYcuJZCbjivJpXiFBQUhIg1dJaeh/but+BzhteOMtJ lcrfhEWe+B9kT1KP/eoPzOnCgxwSdeBxFx8ykKaT6TL8TVTTOlGLaQVtsL+uEpI+ QD+UWGGuA//4iO1AP/lfN1gFmCJIryQxAEjoDxg3H895zhM5F/CDPYXffV/+Tm2S pKBMSpmEJiv3kw7+o2fZmrrhoNX7pwpgEx0NkowtiieePzVbc4mzyyhedICMb+Hg fpZfhrMp2xcMeZcyJnF5Fa6M6H4ubhXsDzTFpkh4OtKuUF10/D+u4EFXXGeXzGUJ /7TmFfJ2/nCY -----END CERTIFICATE-----Generated at Tue May 13 00:11:30 2025 by rpki-client