$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9AA66640C1911ED89FC7831C4F9AE02.roa File: E9AA66640C1911ED89FC7831C4F9AE02.roa (raw, json) Hash identifier: HwlcYwYCy/mzn8Qoo5kvP7ohrPnHq6kq1P2w6NJDqI8= Subject key identifier: F1:CF:4E:43:A5:C5:21:1F:38:0B:D2:B1:9B:62:80:C6:88:AB:10:EE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B869 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9AA66640C1911ED89FC7831C4F9AE02.roa Signing time: Thu 08 May 2025 16:24:26 +0000 ROA not before: Thu 08 May 2025 16:24:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150062 IP address blocks: 103.186.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47209 (0xb869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:24:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdaba-5f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:4b:ed:96:24:96:8f:07:91:63:28:3d:d7: 19:f0:90:14:23:34:17:0e:f1:63:b7:2f:dd:ac:1a: bb:83:ed:b2:ff:a4:bb:a7:5d:01:21:ec:83:f3:41: 82:43:61:fb:d7:f8:23:b4:63:cf:7d:23:5a:e2:d5: 2c:f5:ee:49:cf:1c:6c:36:73:87:f3:a3:82:b4:8c: ab:39:e6:b4:34:3b:4e:09:51:de:ff:94:d1:46:0a: a1:fa:66:48:ab:bd:5c:ab:9c:4b:f1:a1:01:0e:2f: c1:66:bb:85:29:e9:c5:49:af:30:24:9f:e3:49:f9: 82:c1:60:98:56:76:7c:3c:70:48:3b:be:e1:f7:a8: ea:0c:7f:4e:af:f5:fe:67:a6:26:66:7a:dc:1e:74: d3:2f:47:a7:20:ab:ac:0e:b9:6a:32:04:31:01:12: 05:5d:28:1b:d6:af:37:34:72:ae:15:3a:ea:b7:de: c7:15:70:59:fa:9a:fa:95:d5:71:ca:d0:5a:0e:eb: f6:69:7c:9a:d9:10:4d:ba:95:04:ea:b9:bf:fb:a9: f5:bd:4f:58:18:78:cd:da:8b:c1:4d:b2:a6:c5:b7: 95:d0:06:70:ed:69:c9:48:a9:82:21:ed:6a:2a:6e: 9a:67:df:75:5b:d3:ff:18:55:28:7a:95:35:a7:66: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CF:4E:43:A5:C5:21:1F:38:0B:D2:B1:9B:62:80:C6:88:AB:10:EE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9AA66640C1911ED89FC7831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.130.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:b9:21:33:23:d9:1b:81:c1:33:a0:5b:c1:a7:04:67:78:ce: 44:7a:99:93:b5:c9:dd:7e:d1:5e:32:55:86:82:87:45:99:ae: f0:ef:1d:5e:d7:bf:f8:92:5b:fa:1e:ae:f6:87:6c:03:44:bb: cc:b4:15:29:ae:3c:f6:00:51:ab:55:ad:1f:04:81:12:04:be: d0:2e:b8:cd:61:2f:7b:04:4a:59:17:6d:ba:5e:c6:b3:49:1f: 8e:d6:ba:e7:88:e3:d6:8a:9f:19:fa:95:53:96:61:c9:7b:16: f1:71:19:8a:3f:fd:66:4c:14:59:7f:02:46:b6:8c:a5:62:92: ef:b4:19:d2:35:6a:a2:d9:8b:74:04:e6:77:1c:a6:5e:c7:b2: e5:c1:62:4f:79:10:65:5b:f2:e8:5c:ed:02:7f:50:1d:df:53: dc:66:84:0c:c5:aa:33:90:9b:c4:88:ee:fc:01:f7:cc:91:f3: f4:94:93:f1:10:62:7b:83:0d:23:f8:c4:d5:dd:5e:18:97:07: 41:7e:82:37:8e:98:31:d6:50:58:69:00:78:cb:24:9e:2d:cb: 96:e8:c6:f1:5f:18:47:c1:57:2d:07:54:f1:0f:e8:fa:5e:5f: b9:95:4c:a2:93:23:70:f5:ec:4d:5e:d6:e8:d4:d4:49:a4:33: b2:60:9e:53 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALhpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjQyNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhYmEtNWYyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANmKS+2WJJaPB5FjKD3XGfCQFCM0Fw7xY7cv3awau4Ptsv+ku6ddASHsg/NB gkNh+9f4I7Rjz30jWuLVLPXuSc8cbDZzh/OjgrSMqznmtDQ7TglR3v+U0UYKofpm SKu9XKucS/GhAQ4vwWa7hSnpxUmvMCSf40n5gsFgmFZ2fDxwSDu+4feo6gx/Tq/1 /memJmZ63B500y9HpyCrrA65ajIEMQESBV0oG9avNzRyrhU66rfexxVwWfqa+pXV ccrQWg7r9ml8mtkQTbqVBOq5v/up9b1PWBh4zdqLwU2ypsW3ldAGcO1pyUipgiHt aipummffdVvT/xhVKHqVNadmvncCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTxz05D pcUhHzgL0rGbYoDGiKsQ7jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U5QUE2NjY0 MEMxOTExRUQ4OUZDNzgzMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ7qCMA0GCSqGSIb3DQEBCwUAA4IBAQBquSEzI9kbgcEz oFvBpwRneM5EepmTtcndftFeMlWGgodFma7w7x1e17/4klv6Hq72h2wDRLvMtBUp rjz2AFGrVa0fBIESBL7QLrjNYS97BEpZF226XsazSR+O1rrniOPWip8Z+pVTlmHJ exbxcRmKP/1mTBRZfwJGtoylYpLvtBnSNWqi2Yt0BOZ3HKZex7LlwWJPeRBlW/Lo XO0Cf1Ad31PcZoQMxaozkJvEiO78AffMkfP0lJPxEGJ7gw0j+MTV3V4YlwdBfoI3 jpgx1lBYaQB4yySeLcuW6MbxXxhHwVctB1TxD+j6Xl+5lUyikyNw9exNXtbo1NRJ pDOyYJ5T -----END CERTIFICATE-----Generated at Tue May 13 02:12:30 2025 by rpki-client