$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa File: D28A5F86771411EE957B4716C4F9AE02.roa (raw, json) Hash identifier: wEQTHbpFkoELxix4MtR+YSLMs97WVJic1qj+rS6WL2k= Subject key identifier: 75:29:E1:AD:7C:AB:F4:1E:E1:22:FD:8D:77:E2:C4:28:03:B8:20:C7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B6FD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa Signing time: Thu 08 May 2025 16:19:01 +0000 ROA not before: Thu 08 May 2025 16:19:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142502 IP address blocks: 27.0.253.0/24 maxlen: 24 43.246.104.0/24 maxlen: 24 45.249.124.0/22 maxlen: 22 45.249.124.0/23 maxlen: 24 45.249.236.0/22 maxlen: 24 45.251.244.0/22 maxlen: 24 45.251.252.0/22 maxlen: 24 103.66.116.0/22 maxlen: 24 103.66.144.0/24 maxlen: 24 103.68.50.0/24 maxlen: 24 103.68.51.0/24 maxlen: 24 103.70.96.0/20 maxlen: 24 137.59.128.0/20 maxlen: 24 2407:ca40::/32 maxlen: 32 2407:ca40:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 12:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46845 (0xb6fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:19:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd974-22d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:22:d5:af:1f:d8:70:5d:56:47:4b:04:88:ee: 47:a0:03:32:d6:54:de:80:eb:6b:f0:e0:dd:80:60: 86:96:49:07:5b:e9:dc:a6:3d:28:08:97:20:74:75: be:48:40:fd:1f:4d:fc:8d:d6:a8:85:89:eb:7d:f0: 5a:ac:d5:d1:07:c3:d5:c9:af:1a:dc:0b:5e:2d:cd: 9f:e7:1c:06:39:e4:b5:40:ef:66:2a:47:5c:0d:73: ca:c1:28:2a:0a:43:c7:8d:b9:97:9c:a0:31:80:dd: 63:87:3a:1d:b0:15:8e:34:6e:4e:66:2f:12:ec:cc: 04:56:bb:a3:f6:37:eb:f2:3e:b1:a4:40:a1:5b:9f: fc:54:34:f8:ef:de:de:60:8f:36:32:8f:c5:e4:71: 96:73:63:0f:43:31:5d:88:a8:70:13:77:91:cc:99: 77:d1:45:1a:c6:82:c5:ec:6b:9c:95:b8:af:9e:ce: 97:0c:47:ba:9e:00:5e:e3:18:12:ad:a5:1b:ae:df: 8d:67:5e:47:56:cd:1c:93:62:86:19:b3:4e:09:19: 9d:42:7a:4d:17:27:79:fd:18:a3:f0:b8:14:72:d1: c5:fb:06:73:93:3f:21:7f:33:5e:0d:d2:fa:e2:75: a7:a0:7f:b1:6f:6b:9b:3c:56:5a:36:e8:72:80:96: c5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:29:E1:AD:7C:AB:F4:1E:E1:22:FD:8D:77:E2:C4:28:03:B8:20:C7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D28A5F86771411EE957B4716C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.0.253.0/24 43.246.104.0/24 45.249.124.0/22 45.249.236.0/22 45.251.244.0/22 45.251.252.0/22 103.66.116.0/22 103.66.144.0/24 103.68.50.0/23 103.70.96.0/20 137.59.128.0/20 IPv6: 2407:ca40::/32 Signature Algorithm: sha256WithRSAEncryption 74:9f:65:e9:53:bc:05:81:1f:51:b2:de:ee:39:d2:08:c3:7a: e5:e2:e5:c7:b6:e5:95:78:67:4d:af:08:2b:e4:b7:16:c9:2d: e5:84:48:40:12:fa:63:1f:68:7d:96:f8:eb:c5:90:1f:1a:22: df:73:0b:79:a8:98:84:d0:9e:76:d4:3e:fb:a4:10:48:44:ce: 4c:6b:40:b4:81:e4:82:f2:12:f7:41:63:6c:59:34:e8:29:d5: b5:85:d6:d3:6f:1a:d8:03:44:b3:a7:54:2c:22:89:93:19:33: 4c:b4:18:64:c5:80:cd:c0:85:8f:af:e1:2e:f4:f8:5a:29:bf: b4:6d:48:76:c7:b1:2a:f1:34:15:09:f7:da:e8:d7:90:92:44: 94:a2:6d:52:32:b4:76:76:31:ec:52:e4:d1:9d:25:3d:b9:d4: c2:45:4c:73:f7:86:e3:93:22:ae:95:09:92:59:35:7d:b2:8c: 85:b8:d8:67:56:0e:56:1f:04:3f:ab:fa:05:ff:7d:ee:7a:b4: e5:04:24:90:13:35:23:c1:9d:16:a5:b2:ca:87:5b:2e:80:c1: bc:fd:b2:17:cb:ba:bb:db:a3:4c:b4:00:f0:a3:01:a3:ec:d9: ed:0e:bb:cd:27:07:6e:2d:d6:cb:ce:ce:85:5d:75:41:51:fb: 06:e9:d4:fe -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIDALb9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTkwMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5NzQtMjJkNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOsi1a8f2HBdVkdLBIjuR6ADMtZU3oDra/Dg3YBghpZJB1vp3KY9KAiXIHR1 vkhA/R9N/I3WqIWJ633wWqzV0QfD1cmvGtwLXi3Nn+ccBjnktUDvZipHXA1zysEo KgpDx425l5ygMYDdY4c6HbAVjjRuTmYvEuzMBFa7o/Y36/I+saRAoVuf/FQ0+O/e 3mCPNjKPxeRxlnNjD0MxXYiocBN3kcyZd9FFGsaCxexrnJW4r57OlwxHup4AXuMY Eq2lG67fjWdeR1bNHJNihhmzTgkZnUJ6TRcnef0Yo/C4FHLRxfsGc5M/IX8zXg3S +uJ1p6B/sW9rmzxWWjbocoCWxUkCAwEAAaOCAuAwggLcMB0GA1UdDgQWBBR1KeGt fKv0HuEi/Y134sQoA7ggxzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0QyOEE1Rjg2 NzcxNDExRUU5NTdCNDcxNkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGoGCCsGAQUFBwEHAQH/ BFswWTBIBAIAATBCAwQAGwD9AwQAK/ZoAwQCLfl8AwQCLfnsAwQCLfv0AwQCLfv8 AwQCZ0J0AwQAZ0KQAwQBZ0QyAwQEZ0ZgAwQEiTuAMA0EAgACMAcDBQAkB8pAMA0G CSqGSIb3DQEBCwUAA4IBAQB0n2XpU7wFgR9Rst7uOdIIw3rl4uXHtuWVeGdNrwgr 5LcWyS3lhEhAEvpjH2h9lvjrxZAfGiLfcwt5qJiE0J521D77pBBIRM5Ma0C0geSC 8hL3QWNsWTToKdW1hdbTbxrYA0Szp1QsIomTGTNMtBhkxYDNwIWPr+Eu9PhaKb+0 bUh2x7Eq8TQVCffa6NeQkkSUom1SMrR2djHsUuTRnSU9udTCRUxz94bjkyKulQmS WTV9soyFuNhnVg5WHwQ/q/oF/33uerTlBCSQEzUjwZ0WpbLKh1sugMG8/bIXy7q7 26NMtADwowGj7NntDrvNJwduLdbLzs6FXXVBUfsG6dT+ -----END CERTIFICATE-----Generated at Fri May 16 14:57:16 2025 by rpki-client