$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6C73620781D11EB808A544BC4F9AE02.roa File: E6C73620781D11EB808A544BC4F9AE02.roa (raw, json) Hash identifier: jiT8tCBBCyWdqjITuZjmRtAG+HMaO4malRrnP01ukjA= Subject key identifier: B7:30:EE:93:CD:76:55:A1:D4:91:1F:71:F0:B5:66:8D:6D:13:4E:E8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B66C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6C73620781D11EB808A544BC4F9AE02.roa Signing time: Thu 08 May 2025 16:16:48 +0000 ROA not before: Thu 08 May 2025 16:16:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141532 IP address blocks: 103.162.188.0/23 maxlen: 24 103.165.62.0/23 maxlen: 24 2001:df6:7480::/48 maxlen: 48 2407:2140::/32 maxlen: 32 2407:2140::/33 maxlen: 33 2407:2140:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46700 (0xb66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:16:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd8f0-9a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:03:02:a4:91:c2:d2:5b:66:c9:04:fc:46:69: b3:c0:1a:7e:93:24:83:32:0e:dc:78:59:f0:76:62: 7f:a4:a5:e2:70:6c:bb:3c:d2:9f:03:d5:10:21:7d: fd:31:7a:c3:6f:d1:f4:8d:af:15:b3:3c:4b:8b:52: d4:f6:6b:4e:5a:be:8e:bd:1b:7c:04:ef:8e:d6:37: 7e:d1:e9:d2:2e:7a:3e:13:fd:68:60:f6:c1:0b:f4: 4a:d3:db:d1:6d:46:5e:07:0d:58:a3:63:42:7d:38: a0:45:63:a9:18:a1:c7:6c:55:0b:c6:9d:f3:98:7b: 82:1c:60:e1:64:3a:a1:fe:7d:88:a8:23:15:aa:9d: 2c:0f:75:53:a5:81:04:9c:c6:3f:ca:32:2f:33:15: 65:80:dc:ef:7a:b1:66:ed:ea:85:b3:43:80:87:2f: ac:53:c1:7d:df:7a:b1:19:d7:a2:c3:40:37:69:87: 25:90:1f:cd:f5:ef:8e:f5:54:c4:6a:30:04:76:4c: 4f:1b:92:2d:12:cb:80:84:9b:5a:5a:c4:11:17:ef: ab:a4:32:4c:31:3c:16:1f:36:73:10:05:47:bb:0d: e0:9b:97:ac:0f:0a:20:2c:48:dd:2f:f3:36:f0:ab: ca:2e:e8:74:a6:76:3f:94:70:bd:ba:45:1e:a3:ca: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:30:EE:93:CD:76:55:A1:D4:91:1F:71:F0:B5:66:8D:6D:13:4E:E8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6C73620781D11EB808A544BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.188.0/23 103.165.62.0/23 IPv6: 2001:df6:7480::/48 2407:2140::/32 Signature Algorithm: sha256WithRSAEncryption 3c:a3:87:99:af:33:dc:d2:75:89:a7:3a:38:78:d0:50:99:d3: ba:c2:c9:1d:29:d8:bf:f7:b0:7d:85:07:ae:72:9a:da:ca:c5: b5:52:cf:14:0e:e9:1a:6b:76:3a:bb:9d:e5:16:d9:80:13:d7: 77:e5:bd:92:12:09:0a:13:8d:17:3b:df:0a:3d:89:9e:41:a1: 51:28:e2:77:35:ec:d3:b8:b7:95:a1:5b:af:db:cb:5f:aa:76: da:5c:08:4d:1e:8f:43:31:f2:2e:99:fa:08:25:e5:f7:7d:3c: 07:e8:1b:5a:c8:33:2c:bb:9a:bb:da:fa:93:95:ef:bd:a1:a0: 5b:42:d3:1c:cc:ef:d8:f6:63:da:42:f9:6b:1c:a3:d4:e2:f0: a3:4b:c3:bc:38:71:6e:b6:12:7b:53:70:d3:98:23:14:2e:34: 80:9d:c0:18:66:13:69:4a:2e:6b:a5:f5:d1:f8:8b:0f:8b:00: 69:2d:ed:2d:2b:39:17:2d:0d:e0:17:7f:91:60:14:24:9e:d1: 68:eb:89:41:a7:8c:79:85:69:43:68:f9:90:d2:41:da:76:78: f1:74:e2:c7:dc:96:14:6d:ce:db:24:0c:df:11:1a:c9:0a:a4: b1:39:e8:2c:70:c6:f2:2f:95:65:fa:4b:66:fa:ed:d0:32:14: d6:05:c4:88 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIDALZsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTY0OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4ZjAtOWEzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJwDAqSRwtJbZskE/EZps8AafpMkgzIO3HhZ8HZif6Sl4nBsuzzSnwPVECF9 /TF6w2/R9I2vFbM8S4tS1PZrTlq+jr0bfATvjtY3ftHp0i56PhP9aGD2wQv0StPb 0W1GXgcNWKNjQn04oEVjqRihx2xVC8ad85h7ghxg4WQ6of59iKgjFaqdLA91U6WB BJzGP8oyLzMVZYDc73qxZu3qhbNDgIcvrFPBfd96sRnXosNAN2mHJZAfzfXvjvVU xGowBHZMTxuSLRLLgISbWlrEERfvq6QyTDE8Fh82cxAFR7sN4JuXrA8KICxI3S/z NvCryi7odKZ2P5RwvbpFHqPKxoUCAwEAAaOCArMwggKvMB0GA1UdDgQWBBS3MO6T zXZVodSRH3HwtWaNbRNO6DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U2QzczNjIw NzgxRDExRUI4MDhBNTQ0QkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMD0GCCsGAQUFBwEHAQH/ BC4wLDASBAIAATAMAwQBZ6K8AwQBZ6U+MBYEAgACMBADBwAgAQ32dIADBQAkByFA MA0GCSqGSIb3DQEBCwUAA4IBAQA8o4eZrzPc0nWJpzo4eNBQmdO6wskdKdi/97B9 hQeucpraysW1Us8UDukaa3Y6u53lFtmAE9d35b2SEgkKE40XO98KPYmeQaFRKOJ3 NezTuLeVoVuv28tfqnbaXAhNHo9DMfIumfoIJeX3fTwH6BtayDMsu5q72vqTle+9 oaBbQtMczO/Y9mPaQvlrHKPU4vCjS8O8OHFuthJ7U3DTmCMULjSAncAYZhNpSi5r pfXR+IsPiwBpLe0tKzkXLQ3gF3+RYBQkntFo64lBp4x5hWlDaPmQ0kHadnjxdOLH 3JYUbc7bJAzfERrJCqSxOegscMbyL5Vl+ktm+u3QMhTWBcSI -----END CERTIFICATE-----Generated at Tue May 13 05:04:23 2025 by rpki-client