$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBE26A2E171111EDA8F31731C4F9AE02.roa File: DBE26A2E171111EDA8F31731C4F9AE02.roa (raw, json) Hash identifier: 4lGbbfbR865v6wgCrnRlETlKukKhQ7XzxcsExwQ1MS0= Subject key identifier: CD:82:4E:FF:01:3C:FC:55:55:73:C7:41:CA:93:CA:48:39:DC:A1:4A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B867 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBE26A2E171111EDA8F31731C4F9AE02.roa Signing time: Thu 08 May 2025 16:24:25 +0000 ROA not before: Thu 08 May 2025 16:24:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150058 IP address blocks: 103.35.114.0/23 maxlen: 24 2001:df2:13c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47207 (0xb867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:24:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdab8-aa5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0f:a8:38:5e:60:4d:9e:d0:e1:49:3a:5b:84: 7b:20:32:da:b5:d7:ed:48:39:f0:c8:d9:c6:fe:14: cf:2c:55:cf:8e:90:5d:29:47:22:79:fc:fa:be:c8: ea:e7:17:21:45:a6:eb:c5:39:1e:8f:e1:bd:15:fd: d3:fc:83:76:8d:93:e1:c2:f8:f1:55:66:d3:4e:e7: 92:b8:7c:ac:0f:54:69:da:ac:5b:5e:c1:d4:61:63: 81:20:93:7c:71:ea:4c:26:30:e3:de:d1:81:95:68: 81:ff:bf:15:09:3c:ed:de:7b:3d:a5:fe:ab:10:d8: 78:8d:21:30:a7:15:9c:ac:f4:74:e9:cd:9d:b7:f1: 05:9a:18:60:2d:b4:11:e5:e8:63:28:d6:ea:78:5d: 6d:ad:88:30:a0:75:b9:4d:0f:dd:cc:44:1e:b6:bc: 25:99:de:b8:6c:27:7a:05:18:7c:f6:a1:31:05:71: 10:0c:ca:d6:2c:ed:4b:41:dd:a6:71:e9:0a:1f:18: 67:36:8b:06:db:92:0e:fa:29:d6:d6:1e:df:f4:f4: c5:2d:3a:45:2c:ff:3a:d1:74:3e:e7:38:9e:7c:44: 73:3e:c5:d5:15:35:2b:1e:2f:37:3a:08:c3:79:bf: 18:6e:38:c5:22:ae:b5:a3:43:1d:40:db:0a:d9:3a: a0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:82:4E:FF:01:3C:FC:55:55:73:C7:41:CA:93:CA:48:39:DC:A1:4A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBE26A2E171111EDA8F31731C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.35.114.0/23 IPv6: 2001:df2:13c0::/48 Signature Algorithm: sha256WithRSAEncryption 44:d5:1f:df:04:50:68:5e:65:92:b2:01:35:ca:74:8e:bb:54: bf:83:c3:19:e7:0d:61:1b:d0:95:ad:b2:ed:a0:3f:c3:d3:cd: c4:85:20:cf:8f:01:8d:a6:ee:f2:09:24:4c:49:69:af:07:96: 3f:75:36:63:bd:bc:d1:ac:76:c3:ee:d0:5b:65:4f:b7:66:1f: 74:22:b5:7b:e0:36:e6:a5:07:ee:59:b5:c0:9c:1a:0b:f1:c3: dc:8a:a0:9a:e4:e7:1b:fa:a9:45:d3:82:33:6e:bc:f9:0d:c9: 42:bb:2c:60:cb:34:6d:3c:fb:07:8c:bb:61:97:32:11:76:4b: ff:50:ae:5e:10:bb:06:75:ef:2c:7d:c4:46:fd:d1:fb:00:74: 37:af:43:27:bf:6a:df:54:1a:76:0f:6c:a3:fa:fd:bd:20:f1: b0:78:91:dc:45:44:46:78:06:04:e4:8f:35:89:5e:cc:f9:ee: 27:95:1c:e8:dc:63:26:e4:34:31:52:10:e3:a5:80:90:b7:0c: 80:32:f9:fb:5f:54:be:59:46:d9:64:19:ae:f0:fb:c2:65:db: 43:d4:dd:86:f2:88:16:8d:ac:ba:21:ee:fe:e0:da:fe:ac:9d: 72:d0:3a:9d:c4:33:6f:08:6e:33:c3:85:93:71:a6:54:d7:f6: 62:77:08:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALhnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjQyNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhYjgtYWE1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPIPqDheYE2e0OFJOluEeyAy2rXX7Ug58MjZxv4UzyxVz46QXSlHInn8+r7I 6ucXIUWm68U5Ho/hvRX90/yDdo2T4cL48VVm007nkrh8rA9UadqsW17B1GFjgSCT fHHqTCYw497RgZVogf+/FQk87d57PaX+qxDYeI0hMKcVnKz0dOnNnbfxBZoYYC20 EeXoYyjW6nhdba2IMKB1uU0P3cxEHra8JZneuGwnegUYfPahMQVxEAzK1iztS0Hd pnHpCh8YZzaLBtuSDvop1tYe3/T0xS06RSz/OtF0Puc4nnxEcz7F1RU1Kx4vNzoI w3m/GG44xSKutaNDHUDbCtk6oJsCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTNgk7/ ATz8VVVzx0HKk8pIOdyhSjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCRTI2QTJF MTcxMTExRURBOEYzMTczMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZyNyMA8EAgACMAkDBwAgAQ3yE8AwDQYJKoZIhvcNAQEL BQADggEBAETVH98EUGheZZKyATXKdI67VL+DwxnnDWEb0JWtsu2gP8PTzcSFIM+P AY2m7vIJJExJaa8Hlj91NmO9vNGsdsPu0FtlT7dmH3QitXvgNualB+5ZtcCcGgvx w9yKoJrk5xv6qUXTgjNuvPkNyUK7LGDLNG08+weMu2GXMhF2S/9Qrl4QuwZ17yx9 xEb90fsAdDevQye/at9UGnYPbKP6/b0g8bB4kdxFREZ4BgTkjzWJXsz57ieVHOjc YybkNDFSEOOlgJC3DIAy+ftfVL5ZRtlkGa7w+8Jl20PU3YbyiBaNrLoh7v7g2v6s nXLQOp3EM28IbjPDhZNxplTX9mJ3CB0= -----END CERTIFICATE-----Generated at Tue May 13 06:29:45 2025 by rpki-client