$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E23445400C1711EEA6897210C4F9AE02.roa File: E23445400C1711EEA6897210C4F9AE02.roa (raw, json) Hash identifier: aiSdtSrE005aWXzi+qCCHnNTbS3PdG/D75JghSpXNNg= Subject key identifier: D0:65:19:F1:65:F2:6A:26:FA:86:B8:A6:50:82:67:9C:6A:72:16:7C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B8E7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E23445400C1711EEA6897210C4F9AE02.roa Signing time: Thu 08 May 2025 16:26:24 +0000 ROA not before: Thu 08 May 2025 16:26:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151101 IP address blocks: 103.136.189.0/24 maxlen: 24 103.209.172.0/24 maxlen: 24 103.221.238.0/23 maxlen: 24 2001:df1:c940::/48 maxlen: 48 2001:df2:94c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 13:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47335 (0xb8e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:26:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb30-0b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:fc:42:62:99:1c:d0:5d:62:83:04:79:ea: 64:3e:bd:fd:d4:9e:69:06:2e:ed:12:f8:1a:89:15: 66:ff:93:27:fa:09:64:e1:cf:55:a6:36:cc:8d:8c: b7:fa:df:5b:09:52:89:aa:49:22:e3:ac:7f:32:d0: 95:fa:c1:8f:2f:7e:4b:16:ad:fe:22:12:16:fb:5f: cb:9b:c2:37:5d:aa:bf:43:46:30:e7:2c:e3:3c:3b: 94:15:4a:48:bd:60:71:06:5c:d7:03:98:37:7a:9f: 5c:b1:a4:1d:ef:6c:4b:4c:1d:1b:f5:4f:df:50:82: 8b:de:06:44:c9:79:a0:12:09:d5:4b:e0:11:35:ef: 73:b0:49:06:6f:4a:0f:bc:d7:04:52:d2:25:8c:28: bf:c8:14:2e:51:a7:f8:99:1f:fd:a3:e0:3c:89:f5: ea:d9:c5:1a:6d:8a:89:ef:43:a1:83:d8:5a:b3:bd: 30:67:82:a5:58:11:83:4d:75:6d:a8:bd:b5:fb:a5: 0e:54:04:b1:36:93:88:fa:dc:22:f2:54:13:f0:14: 81:ad:c0:d3:a7:fc:7c:09:a7:05:72:ce:4a:5c:ce: d8:00:af:39:df:e8:1a:03:5f:4d:03:5d:bc:d7:7a: 01:52:55:b9:8b:8e:19:7e:58:bf:6f:ef:61:0f:13: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:65:19:F1:65:F2:6A:26:FA:86:B8:A6:50:82:67:9C:6A:72:16:7C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E23445400C1711EEA6897210C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.189.0/24 103.209.172.0/24 103.221.238.0/23 IPv6: 2001:df1:c940::/48 2001:df2:94c0::/48 Signature Algorithm: sha256WithRSAEncryption 79:5f:ce:2a:c3:34:e3:f2:ae:d6:9f:d1:40:b3:81:06:af:e1: 5e:e3:46:f2:0e:da:f4:ce:a0:d8:9f:3e:b5:6d:0d:61:cd:43: 9c:f5:2e:95:96:ea:ce:c0:93:ea:8c:8b:70:4e:23:c8:86:87: 32:f6:b3:93:ab:90:f6:f5:aa:d0:3a:9f:3f:83:87:13:89:b8: 4d:2a:d5:71:5d:6d:0a:fb:7d:fc:27:15:2f:24:5a:91:9f:42: 1f:d7:7c:7a:37:8c:f5:23:2f:22:fd:fc:95:f0:c4:85:0f:0f: 71:50:f6:e7:32:48:43:bd:3c:6f:5f:80:c6:c7:a4:ab:b2:de: 3c:f5:b5:8c:df:5e:3a:fe:79:a6:12:20:6f:73:9c:68:6d:78: 1a:a0:63:59:23:c3:0d:52:25:dc:59:76:51:bd:8d:af:dc:0b: 0d:5e:e7:b0:94:40:04:fe:4a:01:c2:ac:82:1a:19:99:16:02: ed:f6:e1:70:25:eb:20:a6:a2:0a:74:72:71:77:2e:2f:31:d8: ea:fb:ff:e4:8c:c4:03:58:14:05:07:cd:81:5f:de:10:31:29: 62:98:1e:bf:ae:be:f8:ee:85:ce:54:25:25:64:ad:f9:f8:ca: 4d:3a:07:b2:ab:67:29:bb:8c:f4:47:1c:f6:be:8c:60:5a:aa: 43:27:18:cc -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIDALjnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjYyNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiMzAtMGIyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9//EJimRzQXWKDBHnqZD69/dSeaQYu7RL4GokVZv+TJ/oJZOHPVaY2zI2M t/rfWwlSiapJIuOsfzLQlfrBjy9+Sxat/iISFvtfy5vCN12qv0NGMOcs4zw7lBVK SL1gcQZc1wOYN3qfXLGkHe9sS0wdG/VP31CCi94GRMl5oBIJ1UvgETXvc7BJBm9K D7zXBFLSJYwov8gULlGn+Jkf/aPgPIn16tnFGm2Kie9DoYPYWrO9MGeCpVgRg011 bai9tfulDlQEsTaTiPrcIvJUE/AUga3A06f8fAmnBXLOSlzO2ACvOd/oGgNfTQNd vNd6AVJVuYuOGX5Yv2/vYQ8T/TUCAwEAAaOCArswggK3MB0GA1UdDgQWBBTQZRnx ZfJqJvqGuKZQgmecanIWfDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UyMzQ0NTQw MEMxNzExRUVBNjg5NzIxMEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEUGCCsGAQUFBwEHAQH/ BDYwNDAYBAIAATASAwQAZ4i9AwQAZ9GsAwQBZ93uMBgEAgACMBIDBwAgAQ3xyUAD BwAgAQ3ylMAwDQYJKoZIhvcNAQELBQADggEBAHlfzirDNOPyrtaf0UCzgQav4V7j RvIO2vTOoNifPrVtDWHNQ5z1LpWW6s7Ak+qMi3BOI8iGhzL2s5OrkPb1qtA6nz+D hxOJuE0q1XFdbQr7ffwnFS8kWpGfQh/XfHo3jPUjLyL9/JXwxIUPD3FQ9ucySEO9 PG9fgMbHpKuy3jz1tYzfXjr+eaYSIG9znGhteBqgY1kjww1SJdxZdlG9ja/cCw1e 57CUQAT+SgHCrIIaGZkWAu324XAl6yCmogp0cnF3Li8x2Or7/+SMxANYFAUHzYFf 3hAxKWKYHr+uvvjuhc5UJSVkrfn4yk06B7KrZym7jPRHHPa+jGBaqkMnGMw= -----END CERTIFICATE-----Generated at Wed May 14 16:52:40 2025 by rpki-client