$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED364E08863111EF877E864EC4F9AE02.roa File: ED364E08863111EF877E864EC4F9AE02.roa (raw, json) Hash identifier: HlZAMHRpOERLl2IsxNVrZrQki8Nu8uVRsnhmBE6yuT0= Subject key identifier: B7:38:79:99:8E:A1:3E:7F:2B:9E:37:30:F4:54:24:E7:69:E4:38:14 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B193 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED364E08863111EF877E864EC4F9AE02.roa Signing time: Thu 08 May 2025 15:57:42 +0000 ROA not before: Thu 08 May 2025 15:57:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133006 IP address blocks: 103.38.88.0/24 maxlen: 24 103.253.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 13:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45459 (0xb193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:57:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd476-5105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:8b:6c:80:75:46:26:0b:c8:d6:ef:84:7c: 47:d2:6f:95:1e:8f:a1:ab:93:27:31:25:1e:42:67: e8:e0:61:72:e5:9c:df:0c:26:5e:74:8f:f0:56:6d: af:60:14:99:47:6f:e5:15:94:d6:f8:a9:7e:9b:b1: b9:80:e8:04:c2:e0:e0:70:91:a0:d4:87:e9:ab:1a: 3e:f5:e1:6e:2a:fb:af:84:50:37:58:65:e2:2f:d8: e5:05:34:8b:65:fb:b8:e9:32:24:28:b1:0c:96:52: aa:a4:2f:b8:4b:c0:dd:eb:a0:3d:86:89:e1:6e:4a: 0e:14:99:0f:1a:55:be:f7:27:88:39:42:70:cb:a1: 0b:d5:cc:1a:99:70:51:f7:80:3d:bd:33:82:4d:ae: 75:2d:88:07:13:88:04:93:79:92:da:15:66:3c:74: 3e:55:a7:32:9b:61:48:cc:3d:21:b3:9f:81:47:cb: 33:bd:70:07:c8:e1:b1:3f:0f:03:78:92:37:64:c7: 25:88:04:e2:b2:dd:1d:61:16:4a:84:7c:8c:95:f3: 02:ac:a9:86:5e:7c:ff:42:e3:09:32:1f:cb:0c:ea: 26:1a:6f:c9:fc:e5:57:83:f7:ea:37:0a:c2:a2:d9: 45:dc:eb:bf:c8:50:f5:2b:47:74:cf:04:31:ed:95: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:38:79:99:8E:A1:3E:7F:2B:9E:37:30:F4:54:24:E7:69:E4:38:14 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED364E08863111EF877E864EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.38.88.0/24 103.253.104.0/24 Signature Algorithm: sha256WithRSAEncryption 58:5f:c6:2a:38:93:b0:08:80:49:32:d9:a1:28:a3:f9:af:c4: 30:ee:e1:02:e0:58:2b:a9:77:19:da:e7:de:4e:cc:e8:be:ab: a8:25:61:da:de:a6:68:13:18:cd:0f:2b:57:af:e5:be:7c:0a: 8d:9d:c1:73:30:58:33:49:9e:32:b7:ba:58:30:43:cf:fc:2d: 0d:98:c3:26:e7:aa:a4:79:8c:6b:03:ce:a1:38:d7:21:13:98: 60:87:e5:b3:b0:59:2e:95:a1:46:38:86:76:e9:ec:bb:71:af: 35:6b:b8:bb:b1:96:24:6e:37:61:b6:7b:8f:b5:31:4c:3e:45: 72:e5:55:d8:5f:70:9f:df:06:35:13:f2:79:ef:34:2c:d5:3c: 8a:17:a7:cc:f5:0c:ec:1b:cc:58:b5:75:7b:53:62:89:8b:94: 5b:10:c1:80:83:cf:e1:d7:c8:66:53:d5:d3:53:8f:f8:1c:64: ef:fc:cd:e9:b0:7e:6f:9c:64:76:af:11:0b:b1:f7:49:69:c3: e3:54:a4:27:df:fc:62:07:c2:46:17:ab:6f:1e:c7:57:c1:66: ff:3b:fc:ff:5f:54:ce:24:f7:68:88:54:eb:01:30:b6:b4:ff: f4:a4:51:05:56:95:c4:99:f1:bc:b9:c8:88:c7:62:d6:8f:a0: 7d:0d:3f:7b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALGTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTc0MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0NzYtNTEwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7Li2yAdUYmC8jW74R8R9JvlR6PoauTJzElHkJn6OBhcuWc3wwmXnSP8FZt r2AUmUdv5RWU1vipfpuxuYDoBMLg4HCRoNSH6asaPvXhbir7r4RQN1hl4i/Y5QU0 i2X7uOkyJCixDJZSqqQvuEvA3eugPYaJ4W5KDhSZDxpVvvcniDlCcMuhC9XMGplw UfeAPb0zgk2udS2IBxOIBJN5ktoVZjx0PlWnMpthSMw9IbOfgUfLM71wB8jhsT8P A3iSN2THJYgE4rLdHWEWSoR8jJXzAqyphl58/0LjCTIfywzqJhpvyfzlV4P36jcK wqLZRdzrv8hQ9StHdM8EMe2VtnsCAwEAAaOCApswggKXMB0GA1UdDgQWBBS3OHmZ jqE+fyueNzD0VCTnaeQ4FDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VEMzY0RTA4 ODYzMTExRUY4NzdFODY0RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQAZyZYAwQAZ/1oMA0GCSqGSIb3DQEBCwUAA4IBAQBYX8Yq OJOwCIBJMtmhKKP5r8Qw7uEC4FgrqXcZ2ufeTszovquoJWHa3qZoExjNDytXr+W+ fAqNncFzMFgzSZ4yt7pYMEPP/C0NmMMm56qkeYxrA86hONchE5hgh+WzsFkulaFG OIZ26ey7ca81a7i7sZYkbjdhtnuPtTFMPkVy5VXYX3Cf3wY1E/J57zQs1TyKF6fM 9QzsG8xYtXV7U2KJi5RbEMGAg8/h18hmU9XTU4/4HGTv/M3psH5vnGR2rxELsfdJ acPjVKQn3/xiB8JGF6tvHsdXwWb/O/z/X1TOJPdoiFTrATC2tP/0pFEFVpXEmfG8 uciIx2LWj6B9DT97 -----END CERTIFICATE-----Generated at Tue May 13 19:41:41 2025 by rpki-client