$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E59FBE328DB211ED91240187C4F9AE02.roa File: E59FBE328DB211ED91240187C4F9AE02.roa (raw, json) Hash identifier: /DeCPz9nIjt2MBXgpFENPyQGgj9X4AWN8P4lv3gQhjo= Subject key identifier: 5E:A2:7F:06:54:90:3D:AA:C6:20:CF:96:0F:59:2C:06:10:47:14:59 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B7FA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E59FBE328DB211ED91240187C4F9AE02.roa Signing time: Thu 08 May 2025 16:22:46 +0000 ROA not before: Thu 08 May 2025 16:22:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149541 IP address blocks: 103.181.148.0/23 maxlen: 24 2001:df1:d840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47098 (0xb7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:22:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cda56-ba24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:19:68:10:68:b8:99:e8:34:e5:88:a7:9f:a8: 5c:a8:ff:b7:a0:2f:9f:2d:9e:fd:d9:6e:54:34:c1: f0:fa:56:d2:3b:4c:19:5f:e7:7b:db:14:a4:c3:10: 43:a4:5d:21:47:2d:52:13:64:b3:40:51:68:17:fa: c7:6d:53:95:c3:a2:9c:6f:7a:2f:19:3b:c0:40:86: 65:56:00:1d:2c:a3:c9:7d:3a:9e:49:fa:d1:1f:d5: c5:69:01:4c:49:2b:16:83:3a:7f:1f:db:bc:cf:de: 2f:21:82:44:2e:0b:dd:fa:7f:b6:87:eb:1a:23:fa: 41:e8:95:cc:cb:30:95:c7:4b:09:ac:c7:90:8d:c7: e8:a3:ac:1f:3f:ce:31:0e:33:77:51:7a:7c:29:1a: 12:6e:0a:1a:01:27:57:ff:1e:60:36:80:2f:df:0f: 48:d2:07:b8:61:4f:d4:34:20:f2:c8:f8:c3:85:ee: b7:96:f5:9f:e3:d3:77:e5:cc:d3:96:ac:a4:0f:92: a0:59:39:a5:b9:4a:f7:87:32:89:15:40:22:b4:ac: da:ae:04:a8:ca:07:8c:29:ce:23:6b:3b:fc:15:c5: be:53:dc:eb:55:40:39:4a:a7:b0:d4:60:59:da:fa: d7:5f:e7:f2:ee:f3:c5:00:cb:87:17:48:cf:79:c0: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A2:7F:06:54:90:3D:AA:C6:20:CF:96:0F:59:2C:06:10:47:14:59 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E59FBE328DB211ED91240187C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.148.0/23 IPv6: 2001:df1:d840::/48 Signature Algorithm: sha256WithRSAEncryption 08:82:17:1f:51:f7:84:e6:a3:72:d5:83:b7:c8:a8:08:93:aa: cd:08:95:fa:d9:3d:0e:65:aa:ca:b0:cc:a5:79:00:7e:21:c9: 83:e1:c5:24:47:1a:74:46:07:f8:56:1d:62:3f:ae:86:3e:23: be:05:2c:24:47:20:0f:58:9f:c8:4a:89:22:e0:37:1b:c9:47: fa:d0:8d:b6:7f:37:28:88:a2:25:70:f4:7f:3d:14:fa:8b:e4: 6c:2e:aa:f2:23:1c:1a:8d:53:05:cb:70:0a:0d:b5:34:d9:b6: b9:29:07:57:6d:66:a4:38:40:c8:e4:37:cc:16:0c:28:f1:69: ca:80:a8:bc:d8:3f:dd:21:e0:48:46:b7:e2:8e:64:23:e4:15: c7:e7:a1:7c:e8:ff:dc:96:6e:ae:4c:2f:6a:68:de:a5:c5:1c: 65:ca:c1:08:10:a0:6a:5e:ac:76:a5:d2:0a:00:0f:cf:7c:6c: 4c:45:ca:7a:50:5c:d9:aa:e5:7e:08:f4:bc:d0:11:db:81:20: 94:95:7d:83:98:f0:28:23:71:4a:ae:be:4b:34:9f:04:2a:5d: fb:49:81:d2:a8:cd:b4:6d:18:a4:2f:3d:6d:7a:2a:96:c6:c6: 12:ea:f7:41:39:9f:e7:da:25:e4:9a:57:df:87:1b:74:7f:aa: 7c:36:f7:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALf6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjI0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhNTYtYmEyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOIZaBBouJnoNOWIp5+oXKj/t6Avny2e/dluVDTB8PpW0jtMGV/ne9sUpMMQ Q6RdIUctUhNks0BRaBf6x21TlcOinG96Lxk7wECGZVYAHSyjyX06nkn60R/VxWkB TEkrFoM6fx/bvM/eLyGCRC4L3fp/tofrGiP6QeiVzMswlcdLCazHkI3H6KOsHz/O MQ4zd1F6fCkaEm4KGgEnV/8eYDaAL98PSNIHuGFP1DQg8sj4w4Xut5b1n+PTd+XM 05aspA+SoFk5pblK94cyiRVAIrSs2q4EqMoHjCnOI2s7/BXFvlPc61VAOUqnsNRg Wdr611/n8u7zxQDLhxdIz3nAPhECAwEAAaOCAqYwggKiMB0GA1UdDgQWBBReon8G VJA9qsYgz5YPWSwGEEcUWTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U1OUZCRTMy OERCMjExRUQ5MTI0MDE4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7WUMA8EAgACMAkDBwAgAQ3x2EAwDQYJKoZIhvcNAQEL BQADggEBAAiCFx9R94Tmo3LVg7fIqAiTqs0IlfrZPQ5lqsqwzKV5AH4hyYPhxSRH GnRGB/hWHWI/roY+I74FLCRHIA9Yn8hKiSLgNxvJR/rQjbZ/NyiIoiVw9H89FPqL 5GwuqvIjHBqNUwXLcAoNtTTZtrkpB1dtZqQ4QMjkN8wWDCjxacqAqLzYP90h4EhG t+KOZCPkFcfnoXzo/9yWbq5ML2po3qXFHGXKwQgQoGperHal0goAD898bExFynpQ XNmq5X4I9LzQEduBIJSVfYOY8CgjcUquvks0nwQqXftJgdKozbRtGKQvPW16KpbG xhLq90E5n+faJeSaV9+HG3R/qnw294Q= -----END CERTIFICATE-----Generated at Tue May 13 02:28:39 2025 by rpki-client