$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71B8C8A6C4411EFA8DA2776C4F9AE02.roa File: C71B8C8A6C4411EFA8DA2776C4F9AE02.roa (raw, json) Hash identifier: o9pwmXM3vQEi5ct5mtXwtSgWcBIeApzCJxsXl0Ar4D0= Subject key identifier: D2:15:16:52:DB:F6:C9:7D:50:95:85:42:78:E3:66:48:BA:58:C0:EE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BA79 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71B8C8A6C4411EFA8DA2776C4F9AE02.roa Signing time: Thu 08 May 2025 16:32:29 +0000 ROA not before: Thu 08 May 2025 16:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9498 IP address blocks: 45.121.44.0/22 maxlen: 24 45.124.224.0/22 maxlen: 24 45.124.228.0/22 maxlen: 24 45.124.232.0/22 maxlen: 24 45.124.236.0/22 maxlen: 24 103.29.197.0/24 maxlen: 24 103.61.132.0/22 maxlen: 24 103.68.220.0/23 maxlen: 24 103.209.96.0/23 maxlen: 24 192.12.109.0/24 maxlen: 24 202.53.87.0/24 maxlen: 24 202.58.102.0/23 maxlen: 24 202.65.141.0/24 maxlen: 24 202.65.142.0/24 maxlen: 24 2405:a700::/32 maxlen: 32 2405:a700:14::/48 maxlen: 48 2405:a700:15::/48 maxlen: 48 2405:a700:1b::/48 maxlen: 48 2405:a700:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47737 (0xba79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdc9d-6b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:41:38:e5:0c:38:1c:be:74:e3:5f:c3:6e: 73:43:55:85:10:dd:e4:22:a7:e4:b4:25:8b:84:9c: 7d:8c:47:c2:37:ad:18:70:04:ff:7b:f2:8d:42:0c: 9d:d9:b9:fd:02:48:20:e7:b4:80:c9:7c:77:fc:6a: d4:a7:59:b2:ad:4d:05:81:84:c2:91:8f:d6:21:61: 9d:a2:93:24:d2:d6:86:75:8e:55:a2:c4:c3:20:71: 9e:6a:24:87:74:0d:23:e3:54:e6:b0:09:28:3a:a7: 39:e7:7a:ef:7b:f0:d8:d8:f5:3c:4b:c2:2d:66:d9: f2:de:a8:57:f4:d7:2f:52:22:78:ee:93:e1:4f:7b: d2:34:74:aa:18:64:d2:9b:f8:12:f3:1f:22:45:7c: 53:a9:6e:7e:8f:9c:96:39:85:9a:21:f1:25:c3:55: 97:eb:37:fc:b1:9a:59:d7:34:b1:0f:73:0a:f0:b0: db:b4:eb:5a:0e:f6:cc:a1:ee:93:7a:53:fd:87:26: 3a:fd:5a:ed:f1:9e:f2:ea:74:b3:3f:60:69:33:cd: 57:fa:d7:af:42:00:5a:86:22:ce:3b:a5:1d:09:1d: 38:cd:58:b8:41:b0:d5:a1:e8:57:67:62:d4:83:a7: e8:10:0c:fb:03:4e:59:66:d1:25:88:39:81:d4:fe: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:15:16:52:DB:F6:C9:7D:50:95:85:42:78:E3:66:48:BA:58:C0:EE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C71B8C8A6C4411EFA8DA2776C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.44.0/22 45.124.224.0/20 103.29.197.0/24 103.61.132.0/22 103.68.220.0/23 103.209.96.0/23 192.12.109.0/24 202.53.87.0/24 202.58.102.0/23 202.65.141.0-202.65.142.255 IPv6: 2405:a700::/32 Signature Algorithm: sha256WithRSAEncryption 30:03:d6:d0:93:ef:cc:8d:22:1f:62:18:a4:94:e8:c0:99:20: 62:7f:90:de:04:69:d3:f2:92:2b:26:2c:0d:ce:f6:04:c7:7c: 64:c6:e9:b3:03:bb:c6:09:48:8d:b2:e5:2b:50:a2:73:bf:5e: f1:8f:98:44:93:bf:be:6d:35:a0:8a:70:b7:c1:2e:b5:73:e7: fe:c0:ae:14:2d:9d:19:32:07:69:a4:da:b4:3f:47:71:1e:d2: 3c:eb:fb:fe:df:7a:3e:55:87:78:a5:26:c7:3f:69:5a:93:7d: d9:d2:26:ff:11:fa:bd:08:80:5f:59:c5:ef:c3:d1:8c:35:20: 4a:9c:37:f5:d8:18:5f:d3:90:44:de:a5:6b:8a:3d:0a:00:48: 00:14:f3:86:47:7c:a5:24:d7:f7:b4:5c:33:cf:41:ea:b1:74: 9d:f5:e0:b2:38:a8:9f:4b:24:68:1e:db:1e:40:22:71:a2:92: d5:8d:57:df:95:a3:ad:0c:f6:35:92:fe:f1:9c:39:c7:e0:8a: b4:a0:93:5c:ba:5a:af:b2:3b:0c:15:5c:d1:9e:b0:d6:67:21: 6d:94:55:76:ac:3f:10:8d:e4:f7:b7:a5:e0:fd:64:9c:3e:e9: 69:3f:d6:28:e8:79:ff:b5:b7:bc:e8:2e:37:dc:3d:b7:0e:24: c2:d9:6b:aa -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIDALp5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzIyOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RjOWQtNmIwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMt+QTjlDDgcvnTjX8Nuc0NVhRDd5CKn5LQli4ScfYxHwjetGHAE/3vyjUIM ndm5/QJIIOe0gMl8d/xq1KdZsq1NBYGEwpGP1iFhnaKTJNLWhnWOVaLEwyBxnmok h3QNI+NU5rAJKDqnOed673vw2Nj1PEvCLWbZ8t6oV/TXL1IieO6T4U970jR0qhhk 0pv4EvMfIkV8U6lufo+cljmFmiHxJcNVl+s3/LGaWdc0sQ9zCvCw27TrWg72zKHu k3pT/YcmOv1a7fGe8up0sz9gaTPNV/rXr0IAWoYizjulHQkdOM1YuEGw1aHoV2di 1IOn6BAM+wNOWWbRJYg5gdT+lRECAwEAAaOCAuIwggLeMB0GA1UdDgQWBBTSFRZS 2/bJfVCVhUJ442ZIuljA7jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M3MUI4QzhB NkM0NDExRUZBOERBMjc3NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGwGCCsGAQUFBwEHAQH/ BF0wWzBKBAIAATBEAwQCLXksAwQELXzgAwQAZx3FAwQCZz2EAwQBZ0TcAwQBZ9Fg AwQAwAxtAwQAyjVXAwQByjpmMAwDBADKQY0DBADKQY4wDQQCAAIwBwMFACQFpwAw DQYJKoZIhvcNAQELBQADggEBADAD1tCT78yNIh9iGKSU6MCZIGJ/kN4EadPykism LA3O9gTHfGTG6bMDu8YJSI2y5StQonO/XvGPmESTv75tNaCKcLfBLrVz5/7ArhQt nRkyB2mk2rQ/R3Ee0jzr+/7fej5Vh3ilJsc/aVqTfdnSJv8R+r0IgF9Zxe/D0Yw1 IEqcN/XYGF/TkETepWuKPQoASAAU84ZHfKUk1/e0XDPPQeqxdJ314LI4qJ9LJGge 2x5AInGiktWNV9+Vo60M9jWS/vGcOcfgirSgk1y6Wq+yOwwVXNGesNZnIW2UVXas PxCN5Pe3peD9ZJw+6Wk/1ijoef+1t7zoLjfcPbcOJMLZa6o= -----END CERTIFICATE-----Generated at Sun May 11 03:52:52 2025 by rpki-client