$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2E45C64051B11EEA9671C47C4F9AE02.roa File: C2E45C64051B11EEA9671C47C4F9AE02.roa (raw, json) Hash identifier: xv0xX9BMB4a0VuOuAT9FFPUrTxPhC6JvcDE8/hr7eJ0= Subject key identifier: C9:45:1F:72:7B:36:12:2F:FA:31:CF:DE:0A:64:1D:7A:4B:EC:17:21 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B7C6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2E45C64051B11EEA9671C47C4F9AE02.roa Signing time: Thu 08 May 2025 16:21:59 +0000 ROA not before: Thu 08 May 2025 16:21:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149226 IP address blocks: 103.123.172.0/23 maxlen: 24 103.169.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 13:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47046 (0xb7c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:21:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cda27-29d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:25:0c:59:5c:23:f1:1d:3d:93:ba:f4:a6: a5:1e:11:07:ac:56:16:22:d2:49:b9:01:32:51:f0: ab:a6:a7:f3:ae:45:c4:49:1f:f5:e0:6b:4b:63:56: f7:56:80:19:ab:58:7a:cf:c7:b5:32:64:a2:a3:c6: 42:c3:20:a3:15:da:3d:84:28:e5:11:d9:c6:1a:4b: fe:ca:0f:5a:51:4d:d0:8e:ac:f7:31:f8:6f:8f:74: be:50:ab:d2:a4:65:b8:68:af:5f:c4:8e:d8:b0:a0: c1:b7:1c:6c:24:92:f3:ca:aa:f0:1a:d1:a7:32:78: 58:90:6d:10:90:ee:73:9d:c3:f3:08:34:83:04:64: bb:ae:6b:78:e1:f5:a0:ae:af:2e:24:50:07:77:49: 33:ed:75:1c:b2:f4:f3:67:49:d9:e3:f6:0a:16:61: 17:62:ae:a9:2c:bf:ef:8f:28:c9:27:75:5e:a8:78: 6a:68:7c:92:f9:9f:e2:08:84:fc:0e:ab:43:1a:b6: 9e:5f:65:62:fa:87:13:e4:ab:f0:5c:fe:8a:6e:97: 83:31:6c:29:63:c3:a0:68:bf:c9:39:eb:c0:ef:7d: e9:36:73:9c:3a:a8:6c:50:3d:f2:2f:18:bf:51:6c: 2d:69:19:58:45:ef:28:ac:be:d5:12:e7:33:8a:57: 1b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:45:1F:72:7B:36:12:2F:FA:31:CF:DE:0A:64:1D:7A:4B:EC:17:21 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2E45C64051B11EEA9671C47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.172.0/23 103.169.178.0/23 Signature Algorithm: sha256WithRSAEncryption 01:cc:fe:b6:5e:e0:60:16:89:e5:10:16:1c:ac:d9:87:69:87: f0:0b:2a:24:56:71:43:02:0a:b3:fb:58:66:44:75:1c:d4:86: ff:26:6e:e1:40:85:b0:36:75:88:49:d7:a2:b2:46:8c:48:6e: 1b:7c:2d:8e:d1:05:c9:ae:28:18:e3:b2:f8:4b:03:2d:e9:63: b8:25:06:7d:62:aa:1c:9a:2a:90:23:18:39:df:3d:8a:5a:41: 22:13:0d:f5:44:b5:fc:d3:70:47:02:41:68:dc:7a:68:73:72: 55:e3:65:5c:fe:11:61:21:8b:e4:43:00:29:12:be:d8:ad:de: 87:64:37:42:06:26:3c:1a:cc:71:08:2f:46:77:f3:af:41:5e: eb:70:39:b6:00:d2:07:a6:8b:bb:84:82:f7:c4:bd:0b:d9:b2: fa:80:1f:32:74:75:3f:5c:90:42:8f:0c:4c:75:97:3b:fa:1c: 23:40:c7:8c:92:5e:7b:5b:7d:f1:7c:5a:a4:58:94:1b:f2:8a: 0c:56:d0:f5:4a:8f:73:d3:f8:80:ce:95:d6:6c:e4:94:6f:ed: 1c:9d:8c:a8:1b:dd:33:f9:6d:30:9b:c7:a7:0a:91:b4:72:a0: f0:df:1b:40:6d:77:0c:78:38:ca:70:8a:2a:81:e5:24:31:6f: 01:24:d1:c1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALfGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjE1OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhMjctMjlkNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrjJQxZXCPxHT2TuvSmpR4RB6xWFiLSSbkBMlHwq6an865FxEkf9eBrS2NW 91aAGatYes/HtTJkoqPGQsMgoxXaPYQo5RHZxhpL/soPWlFN0I6s9zH4b490vlCr 0qRluGivX8SO2LCgwbccbCSS88qq8BrRpzJ4WJBtEJDuc53D8wg0gwRku65reOH1 oK6vLiRQB3dJM+11HLL082dJ2eP2ChZhF2KuqSy/748oySd1Xqh4amh8kvmf4giE /A6rQxq2nl9lYvqHE+Sr8Fz+im6XgzFsKWPDoGi/yTnrwO996TZznDqobFA98i8Y v1FsLWkZWEXvKKy+1RLnM4pXG6kCAwEAAaOCApswggKXMB0GA1UdDgQWBBTJRR9y ezYSL/oxz94KZB16S+wXITAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MyRTQ1QzY0 MDUxQjExRUVBOTY3MUM0N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQBZ3usAwQBZ6myMA0GCSqGSIb3DQEBCwUAA4IBAQABzP62 XuBgFonlEBYcrNmHaYfwCyokVnFDAgqz+1hmRHUc1Ib/Jm7hQIWwNnWISdeiskaM SG4bfC2O0QXJrigY47L4SwMt6WO4JQZ9YqocmiqQIxg53z2KWkEiEw31RLX803BH AkFo3Hpoc3JV42Vc/hFhIYvkQwApEr7Yrd6HZDdCBiY8GsxxCC9Gd/OvQV7rcDm2 ANIHpou7hIL3xL0L2bL6gB8ydHU/XJBCjwxMdZc7+hwjQMeMkl57W33xfFqkWJQb 8ooMVtD1So9z0/iAzpXWbOSUb+0cnYyoG90z+W0wm8enCpG0cqDw3xtAbXcMeDjK cIoqgeUkMW8BJNHB -----END CERTIFICATE-----Generated at Wed May 14 05:18:49 2025 by rpki-client