$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa File: EF0F317E15FD11ECAF541012C4F9AE02.roa (raw, json) Hash identifier: YjnI4RGZKW/TO/XRDSOJw7sB2PR87UL+QbdkSewRqxo= Subject key identifier: 2C:1A:A4:F7:F9:A3:F0:E7:E1:00:CA:2C:E9:66:A4:D1:E5:F2:FD:15 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B705 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa Signing time: Thu 08 May 2025 16:19:10 +0000 ROA not before: Thu 08 May 2025 16:19:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142513 IP address blocks: 103.170.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46853 (0xb705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:19:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd97e-98e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:8c:85:7b:9c:fe:e8:96:2d:2c:ff:a2:8f: 06:4e:e0:d5:74:ae:e1:3b:d1:5d:0e:c9:f3:5d:7d: af:3a:ca:46:29:f9:23:63:c9:60:ed:41:ac:87:d6: f1:57:6b:1e:5a:05:9a:25:a4:d3:43:e9:ab:cf:b1: 89:93:c9:f7:2e:fd:62:4e:07:27:7b:ec:91:89:86: e9:31:af:27:fd:ec:6c:39:98:5f:57:10:f3:5d:94: 97:3a:38:65:a6:20:b1:c9:28:62:19:f9:9f:d7:cc: ef:ec:1e:0d:e9:1a:9a:32:83:e3:f8:b3:e0:d9:62: e0:98:85:18:96:56:f7:88:11:bc:d7:75:67:37:ba: 54:df:74:4a:d8:03:42:96:97:5e:d2:47:b1:e7:01: 5c:55:e9:34:76:cd:06:bd:f7:38:7e:b6:04:06:a9: 27:5f:84:a1:df:0e:a6:c7:ac:bc:54:ff:a9:d6:d8: 85:4d:f3:7a:9d:0f:06:88:dd:a6:95:80:41:4c:29: b8:70:f1:85:bb:ee:5b:11:bf:ec:99:aa:1a:95:3b: 75:66:31:c6:53:3f:57:4b:09:f1:7e:92:0d:f6:2d: 33:a9:bd:bd:7f:e5:37:a4:ca:36:17:a8:56:fa:e4: f3:d5:f9:f1:60:88:d8:ef:aa:f0:ae:73:3b:c8:50: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1A:A4:F7:F9:A3:F0:E7:E1:00:CA:2C:E9:66:A4:D1:E5:F2:FD:15 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF0F317E15FD11ECAF541012C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.244.0/23 Signature Algorithm: sha256WithRSAEncryption 84:a0:c0:5d:18:cb:a7:6c:82:3b:18:ec:28:5d:fa:3b:f8:02: f8:5c:25:52:10:47:47:f1:04:c1:f6:c2:14:11:ec:1b:6a:72: 73:73:29:a0:48:45:77:71:de:67:6d:f9:d6:b0:98:19:03:26: 1a:9f:99:5f:ae:cf:ae:a7:df:c9:a9:2b:46:d1:59:e8:8e:60: 72:40:35:a8:94:56:35:38:b0:34:ef:d1:1c:c4:06:96:73:47: 1b:49:f3:90:54:27:91:48:b0:96:d0:65:19:8c:bc:b2:25:ad: e5:11:3d:85:02:e8:c6:db:9b:09:25:a7:b2:23:e8:16:a2:63: ef:2f:6a:cf:76:88:8c:95:32:a4:9c:35:99:88:f6:ec:30:9c: a3:9e:e4:aa:f9:41:96:fd:20:c8:8e:b5:a1:e9:cd:a7:69:cf: fa:d3:e6:29:9b:d7:c5:ea:f5:77:53:b1:22:4a:04:d9:7e:40: 5b:9e:20:a1:50:30:bb:07:1d:6e:54:b2:69:51:e2:7e:15:64: 0b:8a:a1:8a:fa:dc:2e:7b:70:ec:ae:0b:ec:ff:1e:7a:6c:be: 9e:df:57:ea:ab:19:7d:b5:6a:12:0c:51:98:21:44:51:35:e6: 46:98:2e:75:cc:97:44:bf:b3:6a:26:bc:59:9b:33:8d:6c:57: 18:d1:8e:f8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALcFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTkxMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5N2UtOThlMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJl0jIV7nP7oli0s/6KPBk7g1XSu4TvRXQ7J8119rzrKRin5I2PJYO1BrIfW 8VdrHloFmiWk00Ppq8+xiZPJ9y79Yk4HJ3vskYmG6TGvJ/3sbDmYX1cQ812Ulzo4 ZaYgsckoYhn5n9fM7+weDekamjKD4/iz4Nli4JiFGJZW94gRvNd1Zze6VN90StgD QpaXXtJHsecBXFXpNHbNBr33OH62BAapJ1+Eod8OpsesvFT/qdbYhU3zep0PBojd ppWAQUwpuHDxhbvuWxG/7JmqGpU7dWYxxlM/V0sJ8X6SDfYtM6m9vX/lN6TKNheo Vvrk89X58WCI2O+q8K5zO8hQYXMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQsGqT3 +aPw5+EAyizpZqTR5fL9FTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VGMEYzMTdF MTVGRDExRUNBRjU0MTAxMkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ6r0MA0GCSqGSIb3DQEBCwUAA4IBAQCEoMBdGMunbII7 GOwoXfo7+AL4XCVSEEdH8QTB9sIUEewbanJzcymgSEV3cd5nbfnWsJgZAyYan5lf rs+up9/JqStG0VnojmByQDWolFY1OLA079EcxAaWc0cbSfOQVCeRSLCW0GUZjLyy Ja3lET2FAujG25sJJaeyI+gWomPvL2rPdoiMlTKknDWZiPbsMJyjnuSq+UGW/SDI jrWh6c2nac/60+Ypm9fF6vV3U7EiSgTZfkBbniChUDC7Bx1uVLJpUeJ+FWQLiqGK +twue3Dsrgvs/x56bL6e31fqqxl9tWoSDFGYIURRNeZGmC51zJdEv7NqJrxZmzON bFcY0Y74 -----END CERTIFICATE-----Generated at Tue May 13 00:58:58 2025 by rpki-client