$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8DD3FAAF72611EAAECC253FC4F9AE02.roa File: D8DD3FAAF72611EAAECC253FC4F9AE02.roa (raw, json) Hash identifier: atu7+eVUvJGinqy6jbAm4T4e3L8RhNNLfvAqFurqa1o= Subject key identifier: 8F:F2:70:9C:E4:22:02:CE:08:DA:2B:CB:91:8A:91:28:78:AA:32:57 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B5AE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8DD3FAAF72611EAAECC253FC4F9AE02.roa Signing time: Thu 08 May 2025 16:13:54 +0000 ROA not before: Thu 08 May 2025 16:13:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139572 IP address blocks: 103.111.158.0/23 maxlen: 24 103.127.100.0/22 maxlen: 24 103.144.114.0/23 maxlen: 24 2001:df2:1bc0::/48 maxlen: 48 2001:df2:71c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46510 (0xb5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:13:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd841-6834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:ec:01:7e:4d:ec:4b:5b:21:d5:8b:f8:cc: 21:5a:30:9e:1e:a6:1a:aa:d9:d3:28:d2:53:f6:40: c3:07:9c:a4:be:07:93:db:a5:e4:da:24:4f:70:7d: 72:1c:53:1b:9c:d5:77:68:da:92:9c:ff:7c:c9:9c: b6:23:fa:21:f7:6e:3d:c9:29:07:61:8e:b5:b4:ba: 6d:37:c9:08:e7:e9:e2:cb:b6:91:27:15:29:7d:5a: 6b:1c:2b:80:00:28:11:5f:96:96:49:a4:db:ec:86: 3b:69:8a:36:f6:27:8b:28:97:64:dd:db:8c:00:64: 76:3a:bd:ec:5f:94:28:a3:9b:7b:8e:36:c8:01:2f: 81:a2:4a:81:03:54:d1:7b:b6:81:c0:06:52:15:64: f5:f6:04:f5:fe:78:e4:83:14:b8:17:4e:f5:f7:4d: 53:50:a8:20:1c:16:fe:64:dc:d0:0c:c2:89:c3:63: 14:e2:dc:f6:1d:33:75:51:87:cc:be:d7:49:23:80: 46:df:65:0f:43:1a:eb:9f:aa:09:08:fb:0f:89:ee: 91:4b:a0:dd:4b:f8:d6:93:14:b3:38:57:f9:7d:cb: fc:23:b8:9c:87:e3:49:d8:38:90:40:ec:7b:e5:2c: 82:c5:73:ec:d8:55:fc:69:84:ab:91:ed:5c:76:f2: 43:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F2:70:9C:E4:22:02:CE:08:DA:2B:CB:91:8A:91:28:78:AA:32:57 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8DD3FAAF72611EAAECC253FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.158.0/23 103.127.100.0/22 103.144.114.0/23 IPv6: 2001:df2:1bc0::/48 2001:df2:71c0::/48 Signature Algorithm: sha256WithRSAEncryption 0c:e3:78:2b:94:1b:04:09:48:c9:96:ed:01:18:94:8b:8e:51: ba:6c:63:cf:85:4a:20:7c:13:0a:b3:73:3e:33:85:45:0d:38: 1e:f2:78:5a:7f:ff:88:c5:14:0b:c9:fd:d3:8a:85:cb:bd:d2: ab:b5:2d:6d:61:55:a3:eb:ce:55:e0:45:9c:a1:62:5e:f1:da: 7b:32:af:fc:bf:fa:b3:51:d2:8d:43:ec:d9:db:e9:ab:3f:70: a5:76:a4:91:7a:cf:4f:77:80:30:2f:60:07:76:2d:65:f1:1c: 32:a5:0a:54:b2:a2:38:3c:22:27:46:73:b2:5a:0c:21:ab:4b: 6f:a4:f2:b1:07:78:db:b6:2d:4b:38:90:8b:b7:08:99:87:c9: ec:85:67:03:d6:40:02:48:07:08:d6:ef:0c:49:66:3f:3e:d8: c1:2c:7e:09:e9:92:71:e6:13:90:a4:5e:90:31:45:cb:57:91: ad:a0:08:16:16:99:6a:ea:ad:3c:65:12:e1:fb:7a:10:20:0b: d0:8e:63:30:89:78:26:90:d9:96:90:7c:07:ac:ee:49:9c:e7: ed:64:6d:ce:57:7e:03:02:de:db:66:17:fb:61:10:0c:7a:8e: 99:04:bb:45:b7:ef:ff:ad:23:94:b6:27:ff:57:bf:54:cd:e7: 6f:49:67:62 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIDALWuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTM1NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4NDEtNjgzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJ/7AF+TexLWyHVi/jMIVownh6mGqrZ0yjSU/ZAwwecpL4Hk9ul5NokT3B9 chxTG5zVd2jakpz/fMmctiP6IfduPckpB2GOtbS6bTfJCOfp4su2kScVKX1aaxwr gAAoEV+Wlkmk2+yGO2mKNvYniyiXZN3bjABkdjq97F+UKKObe442yAEvgaJKgQNU 0Xu2gcAGUhVk9fYE9f545IMUuBdO9fdNU1CoIBwW/mTc0AzCicNjFOLc9h0zdVGH zL7XSSOARt9lD0Ma65+qCQj7D4nukUug3Uv41pMUszhX+X3L/CO4nIfjSdg4kEDs e+UsgsVz7NhV/GmEq5HtXHbyQ5MCAwEAAaOCArswggK3MB0GA1UdDgQWBBSP8nCc 5CICzgjaK8uRipEoeKoyVzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q4REQzRkFB RjcyNjExRUFBRUNDMjUzRkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEUGCCsGAQUFBwEHAQH/ BDYwNDAYBAIAATASAwQBZ2+eAwQCZ39kAwQBZ5ByMBgEAgACMBIDBwAgAQ3yG8AD BwAgAQ3yccAwDQYJKoZIhvcNAQELBQADggEBAAzjeCuUGwQJSMmW7QEYlIuOUbps Y8+FSiB8Ewqzcz4zhUUNOB7yeFp//4jFFAvJ/dOKhcu90qu1LW1hVaPrzlXgRZyh Yl7x2nsyr/y/+rNR0o1D7Nnb6as/cKV2pJF6z093gDAvYAd2LWXxHDKlClSyojg8 IidGc7JaDCGrS2+k8rEHeNu2LUs4kIu3CJmHyeyFZwPWQAJIBwjW7wxJZj8+2MEs fgnpknHmE5CkXpAxRctXka2gCBYWmWrqrTxlEuH7ehAgC9COYzCJeCaQ2ZaQfAes 7kmc5+1kbc5XfgMC3ttmF/thEAx6jpkEu0W37/+tI5S2J/9Xv1TN529JZ2I= -----END CERTIFICATE-----Generated at Tue May 13 00:47:42 2025 by rpki-client