$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7E947D6E52111EFB7B0E36DC4F9AE02.roa File: D7E947D6E52111EFB7B0E36DC4F9AE02.roa (raw, json) Hash identifier: LMoJ+u48Xmgdc54zZkfiUMLpEKbDnXwJvWnpRMkw/sk= Subject key identifier: D7:28:A9:52:26:B1:E3:AD:A4:4B:0F:81:BB:78:27:A8:26:EE:2B:B9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BA34 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7E947D6E52111EFB7B0E36DC4F9AE02.roa Signing time: Thu 08 May 2025 16:31:27 +0000 ROA not before: Thu 08 May 2025 16:31:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55507 IP address blocks: 45.114.144.0/22 maxlen: 24 45.119.88.0/22 maxlen: 24 103.23.118.0/23 maxlen: 24 103.87.168.0/22 maxlen: 24 103.226.20.0/23 maxlen: 24 103.229.78.0/23 maxlen: 24 103.243.88.0/23 maxlen: 24 180.200.240.0/22 maxlen: 24 182.237.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47668 (0xba34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:31:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdc5e-977d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:08:86:c4:db:f1:8a:7b:e5:3e:2b:f1:d7:c0: e7:1c:c2:19:28:0f:c5:f2:29:df:71:c6:43:14:9e: af:1f:28:5d:97:d7:95:12:86:e8:d5:b5:2c:96:83: 8f:f1:4f:39:d4:8e:c1:0c:24:09:f9:80:6b:7c:ea: c6:56:01:0d:a5:19:d6:14:f5:6f:11:08:1e:2e:f3: a2:4f:06:43:b2:dc:51:a5:17:9a:07:4c:9f:79:c4: dc:f0:63:7b:23:e0:a5:02:79:bf:e3:e1:df:89:9c: 47:39:71:0e:40:5e:69:0a:a4:d1:ac:7c:64:86:e5: db:03:8e:81:71:67:16:2e:55:0e:fd:e0:d4:48:45: 9e:fa:70:f8:aa:db:58:76:9a:6c:0b:26:fa:2b:b5: a4:04:63:b3:46:c0:b7:51:4b:47:5c:cb:75:38:f8: e9:60:35:ed:11:32:c7:be:6e:d5:69:7f:da:b1:be: 61:46:eb:77:b3:10:8b:9b:96:20:79:41:ca:53:58: 5e:a6:b4:68:15:4e:a4:d4:99:82:b4:1a:fe:c3:70: 1b:cf:1e:33:e9:0f:41:da:e1:ff:58:c8:cb:a1:70: 72:cb:7c:69:61:b9:3e:38:13:38:37:4b:04:58:3a: a1:e5:99:00:f1:57:cb:9b:d3:3c:68:24:0a:f1:b0: 31:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:28:A9:52:26:B1:E3:AD:A4:4B:0F:81:BB:78:27:A8:26:EE:2B:B9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7E947D6E52111EFB7B0E36DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.144.0/22 45.119.88.0/22 103.23.118.0/23 103.87.168.0/22 103.226.20.0/23 103.229.78.0/23 103.243.88.0/23 180.200.240.0/22 182.237.16.0/22 Signature Algorithm: sha256WithRSAEncryption b4:22:1b:6b:33:7f:8a:0d:12:94:bf:ba:0d:ce:16:3e:bd:af: a9:2b:a1:0f:c4:10:17:6d:ba:6b:c7:ac:9f:fc:ac:2a:97:fd: 1f:e8:45:e3:0d:2f:58:17:50:a9:27:81:0b:02:0f:07:9a:05: ae:ef:ef:50:e8:d5:9d:35:80:70:e8:de:80:a4:0a:fb:8b:ab: 31:2b:46:b9:a7:7a:af:6c:47:05:eb:dd:72:d5:97:10:3a:da: 4d:3e:21:82:6b:30:df:b3:b0:9e:a6:6d:4e:a7:f6:0d:47:2b: c3:c1:46:50:5a:6c:a0:43:60:4e:1f:52:16:cb:4d:dd:19:e4: af:d6:fd:dd:44:4a:b0:c4:77:b0:8b:26:f7:24:eb:67:c3:c8: e8:9f:eb:cd:4b:39:d0:a1:16:ef:af:a1:f1:52:31:e6:e2:99: 02:7e:c1:d2:d4:52:ea:10:af:1a:3a:67:ec:47:d3:83:7b:23: 2a:11:5e:dc:21:ba:da:60:8d:c4:e5:30:d6:f9:47:5a:63:58: 1e:8a:44:87:3b:df:7b:f0:fa:d7:21:80:88:e2:66:88:21:af: 4f:5d:da:ab:bb:8f:23:e8:5d:d1:86:d7:ae:d3:d1:55:f4:31: 0a:d8:67:d1:76:d1:df:be:74:5a:0d:26:0f:0f:f7:8a:f7:e8: f4:a2:be:73 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIDALo0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzEyN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RjNWUtOTc3ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMIhsTb8Yp75T4r8dfA5xzCGSgPxfIp33HGQxSerx8oXZfXlRKG6NW1LJaD j/FPOdSOwQwkCfmAa3zqxlYBDaUZ1hT1bxEIHi7zok8GQ7LcUaUXmgdMn3nE3PBj eyPgpQJ5v+Ph34mcRzlxDkBeaQqk0ax8ZIbl2wOOgXFnFi5VDv3g1EhFnvpw+Krb WHaabAsm+iu1pARjs0bAt1FLR1zLdTj46WA17REyx75u1Wl/2rG+YUbrd7MQi5uW IHlBylNYXqa0aBVOpNSZgrQa/sNwG88eM+kPQdrh/1jIy6Fwcst8aWG5PjgTODdL BFg6oeWZAPFXy5vTPGgkCvGwMZ8CAwEAAaOCAsUwggLBMB0GA1UdDgQWBBTXKKlS JrHjraRLD4G7eCeoJu4ruTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q3RTk0N0Q2 RTUyMTExRUZCN0IwRTM2REM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sME8GCCsGAQUFBwEHAQH/ BEAwPjA8BAIAATA2AwQCLXKQAwQCLXdYAwQBZxd2AwQCZ1eoAwQBZ+IUAwQBZ+VO AwQBZ/NYAwQCtMjwAwQCtu0QMA0GCSqGSIb3DQEBCwUAA4IBAQC0IhtrM3+KDRKU v7oNzhY+va+pK6EPxBAXbbprx6yf/Kwql/0f6EXjDS9YF1CpJ4ELAg8HmgWu7+9Q 6NWdNYBw6N6ApAr7i6sxK0a5p3qvbEcF691y1ZcQOtpNPiGCazDfs7Cepm1Op/YN RyvDwUZQWmygQ2BOH1IWy03dGeSv1v3dREqwxHewiyb3JOtnw8jon+vNSznQoRbv r6HxUjHm4pkCfsHS1FLqEK8aOmfsR9ODeyMqEV7cIbraYI3E5TDW+UdaY1geikSH O9978PrXIYCI4maIIa9PXdqru48j6F3Rhteu09FV9DEK2GfRdtHfvnRaDSYPD/eK 9+j0or5z -----END CERTIFICATE-----Generated at Tue May 13 00:45:43 2025 by rpki-client