$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1DC7548120611EBAF9F1B36C4F9AE02.roa File: F1DC7548120611EBAF9F1B36C4F9AE02.roa (raw, json) Hash identifier: kgBv7G2cew4c7zUqgvPLjTHizVhaXZPJs+NV3Xi876M= Subject key identifier: E5:9B:70:F6:5D:12:F7:71:9B:E5:0F:A2:C3:CD:97:C9:8D:10:79:5D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B5AD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1DC7548120611EBAF9F1B36C4F9AE02.roa Signing time: Thu 08 May 2025 16:13:53 +0000 ROA not before: Thu 08 May 2025 16:13:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139570 IP address blocks: 103.157.72.0/23 maxlen: 24 103.246.62.0/24 maxlen: 24 103.246.63.0/24 maxlen: 24 2401:1ee0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 07:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46509 (0xb5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:13:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd841-ebe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a0:ea:83:07:d4:5c:2b:0d:29:9f:53:15:3d: 80:bf:f1:28:96:f8:45:41:68:44:d4:2e:57:1c:1a: e8:96:2f:c2:14:77:7e:62:5a:74:52:e2:6f:cc:02: 18:12:bd:95:54:3a:21:5a:07:71:3b:6d:4f:2f:99: 81:b5:36:b3:ae:9c:b0:5d:86:e5:5c:79:cd:58:fe: a8:18:b1:6b:10:c7:5c:5b:31:a6:70:8a:fe:91:d6: 48:1d:ff:69:2a:99:50:62:f2:0b:07:fb:12:5b:69: d2:c5:38:5c:35:f1:7d:98:8f:19:52:85:15:0e:45: b4:c6:14:00:86:2e:33:b0:91:5c:ae:80:28:91:15: b6:b1:f4:bd:e9:9a:ba:4b:79:62:5f:93:e5:2b:b8: ee:20:78:81:82:cf:44:79:d8:d9:6d:fd:de:bf:94: c0:98:e6:7d:5f:11:ba:14:de:d3:40:ab:9c:bc:07: c0:f0:e0:7e:15:92:95:f8:da:66:99:2a:1b:a2:d5: 95:0b:2c:6e:66:d8:51:77:8c:a0:09:22:f5:9e:a4: 6b:30:bd:85:ea:a4:18:63:26:55:19:d3:64:f9:cc: 2e:89:8e:53:ed:ee:b9:46:78:59:15:67:3c:df:e9: 7d:bf:d2:67:f5:03:93:ab:e8:b2:da:46:f4:df:03: dc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9B:70:F6:5D:12:F7:71:9B:E5:0F:A2:C3:CD:97:C9:8D:10:79:5D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1DC7548120611EBAF9F1B36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.72.0/23 103.246.62.0/23 IPv6: 2401:1ee0::/32 Signature Algorithm: sha256WithRSAEncryption 79:3d:1f:9b:4e:e1:a8:89:f1:bd:d0:ff:90:d4:85:c1:40:ba: e6:9c:88:95:0b:0c:ca:52:16:34:fd:67:7f:37:f8:63:8d:29: fd:b4:db:22:81:3e:6d:c4:e9:0c:49:ac:d0:d4:a2:3b:4b:a1: f7:45:c9:26:fb:22:f9:c7:f1:86:28:40:97:f0:50:d4:14:65: 08:42:6c:90:59:50:a0:8c:d3:cc:2f:77:a7:fe:ac:35:c1:6f: 4d:da:f9:d1:26:47:e5:50:7e:48:8c:d6:af:ca:65:8c:f0:f5: ff:fd:dd:09:cf:5a:b3:b6:11:3c:4b:2d:44:cb:44:8c:db:72: 83:ef:0c:a6:b9:3d:28:ec:7f:0a:f1:c2:1e:03:b3:4d:d7:7f: dd:00:a8:55:81:d4:0b:77:37:5a:35:d9:09:ae:47:d1:b0:bf: 8f:ed:05:5c:0b:da:ff:f5:46:05:ff:f1:67:e0:a3:c0:cd:ba: 18:dc:9a:a6:87:3e:6c:57:57:74:53:f4:90:e7:95:4e:8b:1f: 45:fe:d9:01:77:a1:1a:cd:41:84:d4:f7:da:35:0d:56:7b:22: 87:0a:87:66:ee:66:c3:9f:d5:78:6c:af:9c:2a:ec:ba:7c:ea: be:c4:bd:a0:c3:d7:84:1f:82:58:60:0e:20:75:39:68:6e:b2: cf:8e:dc:dc -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIDALWtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTM1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4NDEtZWJlMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+g6oMH1FwrDSmfUxU9gL/xKJb4RUFoRNQuVxwa6JYvwhR3fmJadFLib8wC GBK9lVQ6IVoHcTttTy+ZgbU2s66csF2G5Vx5zVj+qBixaxDHXFsxpnCK/pHWSB3/ aSqZUGLyCwf7Eltp0sU4XDXxfZiPGVKFFQ5FtMYUAIYuM7CRXK6AKJEVtrH0vema ukt5Yl+T5Su47iB4gYLPRHnY2W393r+UwJjmfV8RuhTe00CrnLwHwPDgfhWSlfja ZpkqG6LVlQssbmbYUXeMoAki9Z6kazC9heqkGGMmVRnTZPnMLomOU+3uuUZ4WRVn PN/pfb/SZ/UDk6vostpG9N8D3A0CAwEAAaOCAqowggKmMB0GA1UdDgQWBBTlm3D2 XRL3cZvlD6LDzZfJjRB5XTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YxREM3NTQ4 MTIwNjExRUJBRjlGMUIzNkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDQGCCsGAQUFBwEHAQH/ BCUwIzASBAIAATAMAwQBZ51IAwQBZ/Y+MA0EAgACMAcDBQAkAR7gMA0GCSqGSIb3 DQEBCwUAA4IBAQB5PR+bTuGoifG90P+Q1IXBQLrmnIiVCwzKUhY0/Wd/N/hjjSn9 tNsigT5txOkMSazQ1KI7S6H3Rckm+yL5x/GGKECX8FDUFGUIQmyQWVCgjNPML3en /qw1wW9N2vnRJkflUH5IjNavymWM8PX//d0Jz1qzthE8Sy1Ey0SM23KD7wymuT0o 7H8K8cIeA7NN13/dAKhVgdQLdzdaNdkJrkfRsL+P7QVcC9r/9UYF//Fn4KPAzboY 3Jqmhz5sV1d0U/SQ55VOix9F/tkBd6EazUGE1PfaNQ1WeyKHCodm7mbDn9V4bK+c Kuy6fOq+xL2gw9eEH4JYYA4gdTlobrLPjtzc -----END CERTIFICATE-----Generated at Wed May 14 10:29:22 2025 by rpki-client