$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6210BCC958411EDA12D8A18C4F9AE02.roa File: C6210BCC958411EDA12D8A18C4F9AE02.roa (raw, json) Hash identifier: vs9A9owlrBVO6W6TLIwWVeerNxSncPhGd1HR4+RIcLM= Subject key identifier: 9D:0A:8C:21:DE:3F:4B:9C:78:0F:6C:33:6E:15:23:51:B5:14:A5:D5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B8BD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6210BCC958411EDA12D8A18C4F9AE02.roa Signing time: Thu 08 May 2025 16:25:43 +0000 ROA not before: Thu 08 May 2025 16:25:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150626 IP address blocks: 103.139.91.0/24 maxlen: 24 2001:df2:1e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47293 (0xb8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:25:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb07-8746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:48:2e:0b:d5:9f:c1:b6:c5:97:dc:f7:f6:61: 2b:56:48:97:f9:a5:e5:4c:12:90:76:4b:83:73:59: 85:9e:a0:8c:a4:4c:00:72:5c:d2:06:f7:ee:fc:3b: f2:30:76:fc:a1:95:7c:4f:cf:32:6a:fa:34:7b:e3: 7f:e6:5a:22:85:ed:74:70:a0:14:49:45:f5:ef:03: 3c:7d:63:eb:29:b3:1b:f5:68:12:60:31:f0:48:5b: ff:bf:50:5b:27:61:c2:56:95:a0:e8:90:3f:25:72: a6:aa:99:e2:53:ac:af:ff:13:e3:42:69:2b:58:d2: 8e:64:33:7b:3e:a9:0b:96:db:31:ff:6d:51:f3:5a: 9a:51:cc:11:d9:ae:06:a9:fb:2d:68:a2:9d:a2:1f: 62:17:e3:e8:c1:df:51:b0:09:44:32:da:28:f9:eb: f4:72:61:bc:ed:09:0a:ce:94:c0:eb:2f:33:43:d1: 82:fe:cf:68:56:0b:e8:83:14:b5:1a:98:da:b0:2a: 76:2a:55:1a:3e:d3:fc:ea:27:b0:c8:79:b9:3e:b3: 01:68:4a:3f:90:45:57:9f:c0:3f:32:f0:97:3b:47: 57:05:78:70:19:5b:46:c0:f3:e8:2e:03:df:32:19: 2c:c2:54:69:fa:b5:ba:37:49:fd:23:81:a6:03:f0: 6b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0A:8C:21:DE:3F:4B:9C:78:0F:6C:33:6E:15:23:51:B5:14:A5:D5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6210BCC958411EDA12D8A18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.91.0/24 IPv6: 2001:df2:1e40::/48 Signature Algorithm: sha256WithRSAEncryption 50:60:83:24:52:50:ea:0f:d3:cc:93:d4:7d:61:e8:59:48:39: 02:28:b5:44:e8:99:b6:e3:cf:e8:86:fa:87:ef:67:5a:c7:2b: ec:85:3b:0f:87:0e:e9:19:83:b8:a4:27:8d:ca:2f:e3:ca:6e: d8:eb:65:43:35:02:b0:68:be:62:1e:59:1b:da:e7:76:2a:74: 6e:a6:07:56:59:3c:5c:52:21:27:f1:07:fd:81:af:13:97:e9: 74:4f:a6:5a:c1:9c:28:cc:dd:d9:a3:85:6b:eb:c7:29:7b:7c: 7d:ed:3f:3d:7b:9b:1c:c3:21:c3:68:de:5b:b8:df:6b:83:e1: 17:da:bf:03:a7:5c:31:d3:cf:e2:5e:00:c9:58:64:32:f8:83: 8e:13:d3:14:56:24:a9:91:27:dd:0d:6a:81:f6:ea:d5:0b:72: 74:55:50:d8:1b:de:1b:54:1b:63:90:6b:84:13:f7:83:53:a3: e9:84:a1:94:3a:f4:25:9c:06:84:7f:53:21:28:37:39:03:f8: f7:22:d4:47:0e:e2:65:6a:b0:10:61:3f:db:7a:e5:39:35:0f: b5:9e:a3:c2:b9:1f:e1:97:af:31:69:cf:96:64:c5:16:2a:07: 85:8a:6c:32:cc:e6:a5:b6:f9:e0:f2:a6:53:a2:53:1e:39:27: 87:10:13:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALi9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjU0M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiMDctODc0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVILgvVn8G2xZfc9/ZhK1ZIl/ml5UwSkHZLg3NZhZ6gjKRMAHJc0gb37vw7 8jB2/KGVfE/PMmr6NHvjf+ZaIoXtdHCgFElF9e8DPH1j6ymzG/VoEmAx8Ehb/79Q WydhwlaVoOiQPyVypqqZ4lOsr/8T40JpK1jSjmQzez6pC5bbMf9tUfNamlHMEdmu Bqn7LWiinaIfYhfj6MHfUbAJRDLaKPnr9HJhvO0JCs6UwOsvM0PRgv7PaFYL6IMU tRqY2rAqdipVGj7T/OonsMh5uT6zAWhKP5BFV5/APzLwlztHVwV4cBlbRsDz6C4D 3zIZLMJUafq1ujdJ/SOBpgPwa2kCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSdCowh 3j9LnHgPbDNuFSNRtRSl1TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M2MjEwQkND OTU4NDExRURBMTJEOEExOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQAZ4tbMA8EAgACMAkDBwAgAQ3yHkAwDQYJKoZIhvcNAQEL BQADggEBAFBggyRSUOoP08yT1H1h6FlIOQIotUTombbjz+iG+ofvZ1rHK+yFOw+H DukZg7ikJ43KL+PKbtjrZUM1ArBovmIeWRva53YqdG6mB1ZZPFxSISfxB/2BrxOX 6XRPplrBnCjM3dmjhWvrxyl7fH3tPz17mxzDIcNo3lu432uD4RfavwOnXDHTz+Je AMlYZDL4g44T0xRWJKmRJ90NaoH26tULcnRVUNgb3htUG2OQa4QT94NTo+mEoZQ6 9CWcBoR/UyEoNzkD+Pci1EcO4mVqsBBhP9t65Tk1D7Weo8K5H+GXrzFpz5ZkxRYq B4WKbDLM5qW2+eDyplOiUx45J4cQEyM= -----END CERTIFICATE-----Generated at Tue May 13 01:00:23 2025 by rpki-client