$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB260F28329611EDB48BD746C4F9AE02.roa File: DB260F28329611EDB48BD746C4F9AE02.roa (raw, json) Hash identifier: dQ5vd8mbEEDEkwt1aUBPPcl8ZIsR4h7SiPQRG7mcGqU= Subject key identifier: C0:F6:A6:F4:DC:B6:45:D2:79:C8:1B:CF:9E:3F:0C:D6:78:CF:8D:AC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B4B0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB260F28329611EDB48BD746C4F9AE02.roa Signing time: Thu 08 May 2025 16:10:07 +0000 ROA not before: Thu 08 May 2025 16:10:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137616 IP address blocks: 103.114.220.0/22 maxlen: 24 2001:df1:7440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46256 (0xb4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:10:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd75e-4b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:49:25:da:17:52:1e:62:76:40:44:32:19: c0:71:73:6f:0f:9a:f7:62:a5:83:3a:a8:a0:a4:7e: 3f:6c:40:b7:f1:b6:76:d1:bc:e2:86:dd:dc:29:54: ed:4d:a2:55:31:f8:05:84:8d:a3:a3:67:ea:d2:b4: b0:0d:31:ea:cc:2c:61:03:59:19:c3:bc:0c:1f:a0: 45:fb:ca:6a:67:6f:2d:fa:65:53:e7:07:23:3f:58: 9e:53:f7:f0:59:1e:fa:ba:4f:b9:5e:af:22:4e:43: 06:b6:79:9c:28:f8:d4:58:dc:44:ac:8b:e9:6c:6f: b4:e7:97:be:ef:ae:94:f7:23:8e:df:59:58:18:fd: 75:87:13:44:a0:46:a1:9e:4b:37:b7:01:57:02:cf: 31:0f:ea:ba:b1:e3:1f:17:f4:fe:c8:47:e3:df:27: 1b:c2:7f:1b:9e:8c:27:6d:0e:2d:59:d7:54:a4:d3: ec:f7:4f:2d:2e:db:30:fc:d4:6a:34:50:4e:8e:6c: 90:92:63:eb:dc:06:4f:57:df:3a:14:3f:9b:8f:86: 64:49:b4:af:89:a1:e8:1c:49:00:b9:13:34:ad:ac: 05:68:1c:31:61:f4:20:aa:c9:75:37:95:15:21:8a: 14:0c:3c:a4:90:d8:84:10:a5:59:2f:e8:ce:7d:db: e3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F6:A6:F4:DC:B6:45:D2:79:C8:1B:CF:9E:3F:0C:D6:78:CF:8D:AC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DB260F28329611EDB48BD746C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.220.0/22 IPv6: 2001:df1:7440::/48 Signature Algorithm: sha256WithRSAEncryption 54:bc:9a:8d:4a:50:2d:ac:7a:f7:06:fa:8d:c0:1e:b0:81:26: b9:b9:f4:da:2b:b9:b2:88:b5:fa:2d:a4:c9:9f:e5:84:bc:e3: b3:08:13:c3:8b:9c:9d:45:91:59:2d:00:76:9b:28:42:3f:8b: ed:7b:91:e3:ec:86:93:e1:b0:df:4c:64:6c:8e:39:d0:e6:3f: 01:b6:9c:77:e0:ff:9f:ba:f2:80:8b:88:79:28:a4:5f:c0:8c: 25:89:c7:34:21:36:f2:be:6f:8b:c1:fc:c4:11:1b:3d:92:81: fb:e8:2d:d9:95:a9:af:b8:9f:8d:56:34:2b:bb:7b:db:fd:a6: 74:24:b0:5a:32:39:8b:93:50:8c:d7:de:34:6f:9f:1f:db:82: 68:b7:af:9f:5e:2b:48:ab:28:1f:c0:8c:63:24:67:ab:9d:b7: a2:07:8c:42:48:d9:99:98:6c:41:6d:63:7b:f6:51:4b:6e:ca: 63:87:ac:17:74:73:64:90:50:78:c3:39:cf:ab:1f:56:b1:f9: 6d:43:c6:b1:a8:6c:16:0f:a4:ce:0a:11:2b:f6:de:ce:fa:dc: 3c:d4:8d:cb:9e:d8:13:aa:69:31:4a:26:b1:26:f3:a2:f4:7e: 03:18:f0:fa:2f:44:88:a8:2e:fe:42:20:5f:32:3b:ad:7e:07: 35:0c:8d:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALSwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTAwN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3NWUtNGI5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMemSSXaF1IeYnZARDIZwHFzbw+a92KlgzqooKR+P2xAt/G2dtG84obd3ClU 7U2iVTH4BYSNo6Nn6tK0sA0x6swsYQNZGcO8DB+gRfvKamdvLfplU+cHIz9YnlP3 8Fke+rpPuV6vIk5DBrZ5nCj41FjcRKyL6WxvtOeXvu+ulPcjjt9ZWBj9dYcTRKBG oZ5LN7cBVwLPMQ/qurHjHxf0/shH498nG8J/G56MJ20OLVnXVKTT7PdPLS7bMPzU ajRQTo5skJJj69wGT1ffOhQ/m4+GZEm0r4mh6BxJALkTNK2sBWgcMWH0IKrJdTeV FSGKFAw8pJDYhBClWS/ozn3b470CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTA9qb0 3LZF0nnIG8+ePwzWeM+NrDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCMjYwRjI4 MzI5NjExRURCNDhCRDc0NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQCZ3LcMA8EAgACMAkDBwAgAQ3xdEAwDQYJKoZIhvcNAQEL BQADggEBAFS8mo1KUC2sevcG+o3AHrCBJrm59NorubKItfotpMmf5YS847MIE8OL nJ1FkVktAHabKEI/i+17kePshpPhsN9MZGyOOdDmPwG2nHfg/5+68oCLiHkopF/A jCWJxzQhNvK+b4vB/MQRGz2SgfvoLdmVqa+4n41WNCu7e9v9pnQksFoyOYuTUIzX 3jRvnx/bgmi3r59eK0irKB/AjGMkZ6udt6IHjEJI2ZmYbEFtY3v2UUtuymOHrBd0 c2SQUHjDOc+rH1ax+W1DxrGobBYPpM4KESv23s763DzUjcue2BOqaTFKJrEm86L0 fgMY8PovRIioLv5CIF8yO61+BzUMjaw= -----END CERTIFICATE-----Generated at Tue May 13 01:51:33 2025 by rpki-client