$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EC258CDEADE011EDA4F6821BC4F9AE02.roa File: EC258CDEADE011EDA4F6821BC4F9AE02.roa (raw, json) Hash identifier: /sTrS+zZEmByNn6ClMkcDj5tJLM2Bm4787yMVRsh8Mc= Subject key identifier: F2:36:E8:BF:F2:4B:75:81:7D:15:56:F4:A2:E3:7A:61:E2:DF:3E:B6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B8AF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EC258CDEADE011EDA4F6821BC4F9AE02.roa Signing time: Thu 08 May 2025 16:25:31 +0000 ROA not before: Thu 08 May 2025 16:25:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150611 IP address blocks: 103.161.30.0/23 maxlen: 24 2001:df2:b540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47279 (0xb8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:25:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdafb-135d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:15:f3:38:e1:85:7f:58:f2:a2:7d:2b:74:fd: 00:a7:9c:c0:0f:4c:f1:25:bf:d4:86:1d:9a:ab:17: 22:c2:89:ab:b7:b4:21:1d:48:9e:2f:de:07:7c:a9: 22:83:e6:8f:87:b6:8d:48:88:89:1f:10:2b:c6:52: b3:ef:e3:0c:ea:ad:86:b0:79:92:5a:93:3d:1c:c8: 6a:8e:f8:f1:39:1a:8c:ab:7f:49:0a:f1:00:b7:cb: a5:6f:3e:0f:e4:39:ea:44:ad:8d:d3:b0:d7:60:63: da:07:5c:fe:bf:e4:5e:e1:f6:99:18:67:e3:14:3f: dc:2d:bd:5e:52:8d:5a:c4:40:56:84:dd:11:73:71: a1:c7:aa:15:f3:03:b1:84:2e:1b:44:6a:f5:3b:25: d4:77:3d:ab:04:50:3a:f4:72:9d:8f:b5:e6:33:e6: ca:8c:f8:18:5a:17:81:35:b6:bd:97:9b:a5:36:5c: d0:43:9e:f3:23:16:a4:8e:27:40:95:42:a0:03:90: 34:94:e3:31:a6:75:73:b3:b6:b7:4f:3f:bf:2c:76: b4:11:96:84:b7:6a:13:30:87:85:e2:df:a6:e3:2f: 7f:e5:68:1b:a7:fb:89:37:0d:10:3e:92:26:30:8d: ff:9f:cd:64:b2:e2:b6:eb:86:f6:66:1a:77:d3:5c: a8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:36:E8:BF:F2:4B:75:81:7D:15:56:F4:A2:E3:7A:61:E2:DF:3E:B6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EC258CDEADE011EDA4F6821BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.30.0/23 IPv6: 2001:df2:b540::/48 Signature Algorithm: sha256WithRSAEncryption 14:c4:24:c7:c3:59:1f:c4:fc:01:33:79:21:c2:1e:7b:f5:b8: 11:cc:6e:0c:45:6a:63:8e:b8:be:42:f3:14:a1:fb:86:21:a5: 47:c1:66:f5:b5:e5:40:44:c5:97:ff:c1:07:ae:b9:01:1a:80: 34:84:2a:a6:ff:19:76:f4:0e:fa:4b:5c:ff:a2:c5:e3:d6:b1: 12:22:c1:0e:84:c7:8e:b8:48:c6:d9:15:36:b4:21:e7:e1:b5: 55:5c:59:15:da:c6:20:fa:a2:ed:5d:96:55:ff:a5:68:62:50: 14:d4:9f:27:12:18:5f:2b:27:88:91:04:32:0b:d6:5e:71:9d: 53:03:d0:77:28:e1:40:8f:f7:6c:0a:98:76:72:69:2e:1b:4f: 2f:1a:9b:8f:67:50:e7:10:04:1e:9d:95:d6:50:56:14:b8:eb: b5:de:d4:f4:0c:fc:d7:41:13:25:0c:23:10:ea:60:5c:5e:57: 20:7b:5b:d7:ee:8e:04:45:33:70:76:f2:6a:6b:40:11:b1:f1: 14:15:14:4f:d3:fb:da:29:3f:90:5c:34:65:a9:71:12:ac:ea: 79:d4:52:64:70:1d:c5:78:2f:f5:59:d6:f6:6c:2a:49:d6:7d: 09:5b:b9:63:ba:71:33:ad:b5:b8:be:04:5d:ab:bb:c5:ab:71: 7c:e1:93:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALivMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjUzMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhZmItMTM1ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANcV8zjhhX9Y8qJ9K3T9AKecwA9M8SW/1IYdmqsXIsKJq7e0IR1Ini/eB3yp IoPmj4e2jUiIiR8QK8ZSs+/jDOqthrB5klqTPRzIao748TkajKt/SQrxALfLpW8+ D+Q56kStjdOw12Bj2gdc/r/kXuH2mRhn4xQ/3C29XlKNWsRAVoTdEXNxoceqFfMD sYQuG0Rq9Tsl1Hc9qwRQOvRynY+15jPmyoz4GFoXgTW2vZebpTZc0EOe8yMWpI4n QJVCoAOQNJTjMaZ1c7O2t08/vyx2tBGWhLdqEzCHheLfpuMvf+VoG6f7iTcNED6S JjCN/5/NZLLituuG9mYad9NcqM0CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTyNui/ 8kt1gX0VVvSi43ph4t8+tjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VDMjU4Q0RF QURFMDExRURBNEY2ODIxQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ6EeMA8EAgACMAkDBwAgAQ3ytUAwDQYJKoZIhvcNAQEL BQADggEBABTEJMfDWR/E/AEzeSHCHnv1uBHMbgxFamOOuL5C8xSh+4YhpUfBZvW1 5UBExZf/wQeuuQEagDSEKqb/GXb0DvpLXP+ixePWsRIiwQ6Ex464SMbZFTa0Iefh tVVcWRXaxiD6ou1dllX/pWhiUBTUnycSGF8rJ4iRBDIL1l5xnVMD0Hco4UCP92wK mHZyaS4bTy8am49nUOcQBB6dldZQVhS467Xe1PQM/NdBEyUMIxDqYFxeVyB7W9fu jgRFM3B28mprQBGx8RQVFE/T+9opP5BcNGWpcRKs6nnUUmRwHcV4L/VZ1vZsKknW fQlbuWO6cTOttbi+BF2ru8WrcXzhk9M= -----END CERTIFICATE-----Generated at Tue May 13 00:02:54 2025 by rpki-client