$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7A673C8A7DE11EBB197BF39C4F9AE02.roa File: C7A673C8A7DE11EBB197BF39C4F9AE02.roa (raw, json) Hash identifier: 6sCduWliLV1LVx3NmJz+9P8wyf2ik2XHQbQZjsfRTd0= Subject key identifier: F7:01:FD:B2:26:62:94:49:47:55:8D:3D:F0:AD:F2:EC:85:18:1E:F6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B6C5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7A673C8A7DE11EBB197BF39C4F9AE02.roa Signing time: Thu 08 May 2025 16:18:10 +0000 ROA not before: Thu 08 May 2025 16:18:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141863 IP address blocks: 103.163.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 13:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46789 (0xb6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:18:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd942-95c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:0b:2f:da:0f:ed:71:ee:b0:03:98:1a:37: 36:c2:b7:b7:49:48:f4:85:de:55:73:a9:b4:05:83: 78:04:73:c3:72:40:62:03:d2:23:55:7f:31:84:5b: 3d:4b:2f:fd:6b:13:fe:9f:f3:ca:ed:ee:18:32:a2: 8c:2e:62:db:e8:43:54:e2:c0:5d:8c:f1:89:fa:00: f9:82:13:c6:d3:0d:da:2d:cf:4a:fe:d7:ed:1e:00: 67:44:43:9d:eb:f8:b3:76:a1:fe:98:bc:41:d7:13: 8f:6a:d1:42:ab:59:a5:fb:a5:35:e5:8c:84:3b:62: 7c:31:d3:7a:c8:c2:4b:ea:50:ee:5a:0e:03:60:3c: f5:c1:e9:20:1a:f4:ff:76:06:af:72:a8:f3:f6:aa: 4f:e3:b3:98:8f:fd:32:17:9a:ab:2e:62:c0:ad:52: 10:85:0d:d3:ae:00:e2:4b:6b:60:02:c2:38:56:00: 1e:ab:2b:95:bf:8d:97:8b:b6:6e:b9:17:85:52:14: 6c:f9:c7:d7:31:e6:a9:54:9d:93:a1:53:c5:39:48: e8:a9:10:1e:d7:ac:0c:e5:e9:37:33:70:e3:10:d1: 0c:e5:b9:5e:43:11:1f:8d:07:35:61:62:72:60:d6: 97:f0:a9:ed:fe:5f:b1:5e:f9:a3:89:8f:94:bb:9a: c7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:01:FD:B2:26:62:94:49:47:55:8D:3D:F0:AD:F2:EC:85:18:1E:F6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7A673C8A7DE11EBB197BF39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.194.0/23 Signature Algorithm: sha256WithRSAEncryption 63:79:9d:7f:ce:17:75:88:5d:92:d7:9a:c2:82:fc:98:d8:fd: 34:ef:e4:74:29:43:58:f7:02:47:a5:c4:fa:9c:03:a3:ae:0f: f2:46:18:ee:67:10:05:8e:f4:54:a3:cd:25:a6:f1:c3:ec:e0: 3e:d9:d9:b4:9d:2e:d0:b0:f1:97:40:de:91:ae:d4:20:22:90: 0f:8e:7c:f3:f6:57:35:70:68:74:dc:92:7e:15:bd:47:60:8c: 64:82:99:d8:7d:17:46:1d:5d:a0:2a:78:45:8f:ad:13:1a:16: bf:b8:aa:f5:fa:0c:76:30:e9:8b:22:37:22:71:7e:aa:dd:15: 88:cc:b2:81:e3:65:f2:60:03:b1:ab:2d:ce:77:a4:06:8f:92: 73:65:86:ff:0e:91:54:f8:7d:1b:a6:41:61:4e:49:52:7a:0b: 09:15:cd:32:7b:51:e2:d9:19:59:8a:8d:77:5c:e9:aa:31:f2: 28:65:f7:56:35:23:3b:d7:53:88:d0:9f:b6:d7:d9:63:80:06: d6:4f:bf:7c:d1:42:2a:39:10:c3:c2:63:93:af:19:ff:4c:dc: 8a:1a:af:46:7f:23:8c:68:3a:a0:cd:68:d6:e7:29:0f:50:21: 4d:07:0a:a7:a8:2f:b4:e2:39:13:8b:f9:e7:59:89:9d:ad:ff: b3:97:c9:27 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALbFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTgxMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5NDItOTVjMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9+Cy/aD+1x7rADmBo3NsK3t0lI9IXeVXOptAWDeARzw3JAYgPSI1V/MYRb PUsv/WsT/p/zyu3uGDKijC5i2+hDVOLAXYzxifoA+YITxtMN2i3PSv7X7R4AZ0RD nev4s3ah/pi8QdcTj2rRQqtZpfulNeWMhDtifDHTesjCS+pQ7loOA2A89cHpIBr0 /3YGr3Ko8/aqT+OzmI/9Mheaqy5iwK1SEIUN064A4ktrYALCOFYAHqsrlb+Nl4u2 brkXhVIUbPnH1zHmqVSdk6FTxTlI6KkQHtesDOXpNzNw4xDRDOW5XkMRH40HNWFi cmDWl/Cp7f5fsV75o4mPlLuax3MCAwEAAaOCApUwggKRMB0GA1UdDgQWBBT3Af2y JmKUSUdVjT3wrfLshRge9jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M3QTY3M0M4 QTdERTExRUJCMTk3QkYzOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ6PCMA0GCSqGSIb3DQEBCwUAA4IBAQBjeZ1/zhd1iF2S 15rCgvyY2P007+R0KUNY9wJHpcT6nAOjrg/yRhjuZxAFjvRUo80lpvHD7OA+2dm0 nS7QsPGXQN6RrtQgIpAPjnzz9lc1cGh03JJ+Fb1HYIxkgpnYfRdGHV2gKnhFj60T Gha/uKr1+gx2MOmLIjcicX6q3RWIzLKB42XyYAOxqy3Od6QGj5JzZYb/DpFU+H0b pkFhTklSegsJFc0ye1Hi2RlZio13XOmqMfIoZfdWNSM711OI0J+219ljgAbWT798 0UIqORDDwmOTrxn/TNyKGq9GfyOMaDqgzWjW5ykPUCFNBwqnqC+04jkTi/nnWYmd rf+zl8kn -----END CERTIFICATE-----Generated at Wed May 14 17:25:53 2025 by rpki-client