$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA9FA6E6AB7111ED8ADF062BC4F9AE02.roa File: DA9FA6E6AB7111ED8ADF062BC4F9AE02.roa (raw, json) Hash identifier: E008w3hX/RGRlpOL/DQHTMYn1O/zaCJ2yooDpQca41w= Subject key identifier: 72:29:54:4E:52:25:41:DC:B9:E5:94:51:A3:FE:CA:90:FD:97:F0:11 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B88D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA9FA6E6AB7111ED8ADF062BC4F9AE02.roa Signing time: Thu 08 May 2025 16:24:58 +0000 ROA not before: Thu 08 May 2025 16:24:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150571 IP address blocks: 103.159.99.0/24 maxlen: 24 2001:df2:3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47245 (0xb88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:24:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdada-88fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:d6:4e:82:76:a5:13:8f:69:fe:8b:13:bf: 7f:35:03:c7:58:ff:8c:d8:d6:89:68:08:1b:08:d4: e9:f3:c1:88:4c:24:b6:9f:f7:0a:91:a7:c3:96:18: 4d:9c:04:11:87:7e:ad:83:8e:66:65:fc:23:50:b6: 15:c2:b9:4c:81:d1:10:e0:59:1e:78:a9:44:3a:61: d8:75:ee:cf:41:3a:ad:77:3d:99:5b:a7:6b:c1:94: 16:72:83:32:e7:4b:66:bc:8f:8e:a9:46:8e:f3:8e: d8:15:01:7a:9a:df:4a:d0:cd:d5:81:f0:76:90:b4: 1a:b2:0c:eb:50:a0:36:64:b9:b5:0e:13:d1:8a:e3: 90:81:0d:c0:5b:7e:dc:46:07:87:99:78:36:5c:48: 34:ed:74:1a:cf:bc:76:6d:72:6a:c5:c0:32:bd:d7: 61:db:c0:76:69:7e:80:32:1c:8a:15:50:c7:11:5f: 35:92:fb:4d:d6:00:e4:94:6d:83:79:10:0d:af:9a: 0e:58:bf:97:4c:0b:2a:2d:cd:c2:47:78:80:e7:75: 33:30:ff:1c:cb:9f:11:88:53:ac:48:43:3e:4a:8b: 36:8b:86:bc:f6:3f:13:c7:3a:3a:a8:cb:b7:14:50: cb:d8:4a:8f:60:3e:92:43:79:5d:ad:72:fa:3a:6d: e5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:29:54:4E:52:25:41:DC:B9:E5:94:51:A3:FE:CA:90:FD:97:F0:11 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DA9FA6E6AB7111ED8ADF062BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.99.0/24 IPv6: 2001:df2:3c0::/48 Signature Algorithm: sha256WithRSAEncryption 22:b3:85:8d:6d:c0:ce:f0:0f:4b:e2:4a:b2:38:8f:13:8f:29: 54:46:48:bd:b2:fc:82:81:da:0d:86:14:ca:76:d5:b6:49:8c: 7a:d5:0c:3d:7d:1c:19:01:4f:e5:fd:1e:fb:3e:28:9d:31:b5: 78:2b:5a:66:d9:63:c6:52:14:0d:3a:29:bf:c7:cb:c1:26:7e: 75:16:ae:7a:4b:7f:7e:44:ba:66:b4:b7:45:9b:81:06:4c:21: db:1c:3d:cd:ca:8b:12:71:05:ce:e9:e7:6c:ee:9d:a3:bd:e8: f2:41:b4:15:e2:7b:57:2d:23:d5:6f:29:c8:aa:a9:05:59:91: 0f:5a:cf:8f:8b:5a:e9:74:6f:12:80:ae:0e:6f:07:e7:c5:3a: cf:7d:7a:df:4d:4d:5b:8b:07:6f:30:8c:16:2b:5d:86:07:77: dc:3d:88:e2:4c:ac:00:60:63:3f:be:7a:3f:52:27:4b:41:8b: 55:d1:ea:6d:0e:4e:ff:6a:c6:3f:a1:ee:3b:a8:97:08:f9:03: c7:81:db:51:10:25:14:8b:f2:93:79:29:76:09:a1:f5:01:08: 1b:57:de:54:84:ca:5f:53:ce:df:8a:5e:fb:37:ef:42:78:1b: af:3a:98:07:ba:65:cd:70:52:97:89:3e:f0:dc:0d:73:63:9c: bf:1e:a8:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALiNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjQ1OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhZGEtODhmYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx/1k6CdqUTj2n+ixO/fzUDx1j/jNjWiWgIGwjU6fPBiEwktp/3CpGnw5YY TZwEEYd+rYOOZmX8I1C2FcK5TIHREOBZHnipRDph2HXuz0E6rXc9mVuna8GUFnKD MudLZryPjqlGjvOO2BUBeprfStDN1YHwdpC0GrIM61CgNmS5tQ4T0YrjkIENwFt+ 3EYHh5l4NlxINO10Gs+8dm1yasXAMr3XYdvAdml+gDIcihVQxxFfNZL7TdYA5JRt g3kQDa+aDli/l0wLKi3Nwkd4gOd1MzD/HMufEYhTrEhDPkqLNouGvPY/E8c6OqjL txRQy9hKj2A+kkN5Xa1y+jpt5dECAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRyKVRO UiVB3LnllFGj/sqQ/ZfwETAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RBOUZBNkU2 QUI3MTExRUQ4QURGMDYyQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQAZ59jMA8EAgACMAkDBwAgAQ3yA8AwDQYJKoZIhvcNAQEL BQADggEBACKzhY1twM7wD0viSrI4jxOPKVRGSL2y/IKB2g2GFMp21bZJjHrVDD19 HBkBT+X9Hvs+KJ0xtXgrWmbZY8ZSFA06Kb/Hy8EmfnUWrnpLf35Euma0t0WbgQZM IdscPc3KixJxBc7p52zunaO96PJBtBXie1ctI9VvKciqqQVZkQ9az4+LWul0bxKA rg5vB+fFOs99et9NTVuLB28wjBYrXYYHd9w9iOJMrABgYz++ej9SJ0tBi1XR6m0O Tv9qxj+h7juolwj5A8eB21EQJRSL8pN5KXYJofUBCBtX3lSEyl9Tzt+KXvs370J4 G686mAe6Zc1wUpeJPvDcDXNjnL8eqCM= -----END CERTIFICATE-----Generated at Tue May 13 00:02:55 2025 by rpki-client