$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D833BBC2BDD011EA9702FC12C4F9AE02.roa File: D833BBC2BDD011EA9702FC12C4F9AE02.roa (raw, json) Hash identifier: 9ytWYUmuYklxSnMKYWXO+L4tnX+GJ4iVSGJWTx3vYbw= Subject key identifier: 88:B1:00:76:53:9E:50:BB:2D:8C:9D:8B:52:F1:29:99:4D:25:E7:20 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B50D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D833BBC2BDD011EA9702FC12C4F9AE02.roa Signing time: Thu 08 May 2025 16:11:30 +0000 ROA not before: Thu 08 May 2025 16:11:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138281 IP address blocks: 103.147.160.0/23 maxlen: 24 2001:df2:9a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 07:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46349 (0xb50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:11:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd7b2-7a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:fd:2c:bf:b4:4a:99:71:4a:e7:a5:b8:de: dc:16:31:1d:10:ad:31:99:aa:7b:90:33:c6:2e:e2: 43:46:bc:44:5b:0f:d0:20:5e:67:92:0f:34:25:e9: d4:9e:cf:16:1f:99:74:c7:ec:86:eb:3b:1c:70:e0: e2:40:2e:d9:64:ae:44:84:bd:0d:bf:87:40:97:e5: 89:b0:a6:e0:5b:df:aa:d3:db:11:f3:70:8f:b2:9c: fd:fd:58:ad:76:ec:b7:ce:8c:bd:71:29:ed:c1:c3: 37:b1:74:b3:bf:be:48:5a:0c:99:d0:d1:eb:a6:1f: 39:99:59:0a:f4:8a:be:68:1c:59:41:36:de:c5:7e: a9:ca:e2:24:fc:f1:8f:8d:8f:f7:5d:9d:04:e4:ad: b3:c4:7c:e8:ec:a9:02:ca:87:bd:e0:30:8f:a2:01: 86:41:eb:a0:ed:03:15:65:82:96:41:d9:4f:53:75: c0:db:c7:b3:61:88:a4:27:4a:ef:3b:6f:2b:32:6e: 14:6f:ee:ac:d3:85:a9:55:05:a6:83:49:08:aa:76: 27:62:78:58:08:49:26:88:3a:68:85:52:b8:8a:6d: 1f:a2:29:72:2f:98:36:d5:a4:cb:eb:f6:05:e1:94: 19:a7:7c:52:79:95:cb:51:a8:53:71:b8:6d:31:1f: d7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B1:00:76:53:9E:50:BB:2D:8C:9D:8B:52:F1:29:99:4D:25:E7:20 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D833BBC2BDD011EA9702FC12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.160.0/23 IPv6: 2001:df2:9a80::/48 Signature Algorithm: sha256WithRSAEncryption ab:23:7a:42:b1:af:4b:1e:9a:c5:72:2f:02:fe:2b:1d:27:16: cb:3c:3c:2d:3d:27:84:cf:4a:3e:ab:ca:5e:b9:c3:6b:3f:54: 59:32:ac:b0:d9:b1:49:14:a5:97:d3:aa:ba:9c:8a:81:21:8b: 3f:92:fa:e7:61:40:21:b7:2d:d8:8d:44:cb:40:0b:eb:c7:bc: 15:1c:e4:68:07:96:db:7b:67:5c:9f:83:e9:d2:93:33:0f:6a: bd:59:85:36:a4:68:f3:ec:48:a6:9e:f2:94:ba:a9:62:50:86: 51:57:b5:7c:6b:5e:71:1e:3e:e0:b1:0b:fe:67:b0:f0:c1:6e: 62:0c:e5:09:18:0a:07:81:15:a5:d1:3f:0b:3a:e0:a1:96:08: 4f:a5:f7:9b:75:70:dd:b6:5c:72:ea:a6:fb:75:9f:a6:04:92: 70:3a:f6:d3:0f:ca:77:8a:a4:e1:bd:cd:a3:eb:8d:50:4a:e5: 12:6a:b6:90:02:49:3e:59:0c:c0:c5:a2:0a:be:0d:ab:c5:6f: b8:5e:8e:19:8a:64:de:56:49:58:ce:a7:a7:63:63:8a:bc:32: 56:1f:86:23:97:37:21:e6:d3:64:6b:1b:de:79:3b:8d:96:4a: b9:af:0e:d2:f2:23:dc:8e:08:b3:6b:aa:60:e7:40:8b:71:26: 5b:fe:e9:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALUNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTEzMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3YjItN2E5ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrs/Sy/tEqZcUrnpbje3BYxHRCtMZmqe5Azxi7iQ0a8RFsP0CBeZ5IPNCXp 1J7PFh+ZdMfshus7HHDg4kAu2WSuRIS9Db+HQJflibCm4FvfqtPbEfNwj7Kc/f1Y rXbst86MvXEp7cHDN7F0s7++SFoMmdDR66YfOZlZCvSKvmgcWUE23sV+qcriJPzx j42P912dBOSts8R86OypAsqHveAwj6IBhkHroO0DFWWClkHZT1N1wNvHs2GIpCdK 7ztvKzJuFG/urNOFqVUFpoNJCKp2J2J4WAhJJog6aIVSuIptH6Ipci+YNtWky+v2 BeGUGad8UnmVy1GoU3G4bTEf1ykCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSIsQB2 U55Quy2MnYtS8SmZTSXnIDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q4MzNCQkMy QkREMDExRUE5NzAyRkMxMkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ5OgMA8EAgACMAkDBwAgAQ3ymoAwDQYJKoZIhvcNAQEL BQADggEBAKsjekKxr0semsVyLwL+Kx0nFss8PC09J4TPSj6ryl65w2s/VFkyrLDZ sUkUpZfTqrqcioEhiz+S+udhQCG3LdiNRMtAC+vHvBUc5GgHltt7Z1yfg+nSkzMP ar1ZhTakaPPsSKae8pS6qWJQhlFXtXxrXnEePuCxC/5nsPDBbmIM5QkYCgeBFaXR Pws64KGWCE+l95t1cN22XHLqpvt1n6YEknA69tMPyneKpOG9zaPrjVBK5RJqtpAC ST5ZDMDFogq+DavFb7hejhmKZN5WSVjOp6djY4q8MlYfhiOXNyHm02RrG955O42W SrmvDtLyI9yOCLNrqmDnQItxJlv+6SI= -----END CERTIFICATE-----Generated at Wed May 14 10:08:40 2025 by rpki-client