$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F21A9B38FFC911EFB90F061CC4F9AE02.roa File: F21A9B38FFC911EFB90F061CC4F9AE02.roa (raw, json) Hash identifier: 0t7MSs9WuQCtdIZ8giMp+xLtIK4jiH55DPkCvVhxFaQ= Subject key identifier: 89:07:CC:A5:9F:AD:33:D2:BB:3D:DB:BD:09:F2:9A:BC:79:6A:20:A7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B44C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F21A9B38FFC911EFB90F061CC4F9AE02.roa Signing time: Thu 08 May 2025 16:08:31 +0000 ROA not before: Thu 08 May 2025 16:08:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136956 IP address blocks: 103.177.190.0/23 maxlen: 24 103.178.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 09:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46156 (0xb44c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:08:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd6ff-d0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:cb:df:3e:a5:22:6f:7f:a8:43:5a:e0:3e: 81:6d:39:00:3c:fd:9c:f5:38:b0:bb:6b:e5:70:cb: c9:b9:76:d9:3e:c8:5b:69:92:6b:74:ea:8a:1b:15: 17:3b:8a:e0:3c:9a:5b:5b:4d:72:97:66:ea:96:c3: 36:0c:30:27:61:a3:53:3e:8e:7a:e6:ca:ac:d8:9d: 28:0a:ff:f1:2d:70:ce:ba:60:b6:dc:4e:23:f1:86: 38:5a:ef:0c:c6:1a:05:9b:e5:23:85:9e:81:18:7b: fd:8a:e8:82:d2:c4:de:0c:b4:8a:55:d8:be:a2:bf: 38:07:ff:52:6e:f1:7c:db:c3:ee:ce:a2:24:21:66: 49:1d:79:39:d8:fa:2f:3c:61:47:21:3b:96:b3:f5: 0c:e8:e3:73:04:79:c7:9f:e5:2c:18:03:c5:f3:80: 3c:d2:8c:c0:0d:2d:85:f4:98:e2:bc:b0:d3:77:49: 03:88:c9:09:db:68:c1:e8:5a:81:2d:e5:a1:d0:fb: e8:90:02:d3:ec:8c:68:df:8e:de:f6:fa:cf:9a:37: 9f:e1:75:80:5e:25:44:98:4b:cf:47:c5:8e:af:b7: 19:00:91:78:5e:a3:ae:be:d6:2c:ad:17:86:04:7b: 16:f9:3e:4b:76:de:2a:45:0c:45:cb:33:aa:7b:95: 82:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:07:CC:A5:9F:AD:33:D2:BB:3D:DB:BD:09:F2:9A:BC:79:6A:20:A7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F21A9B38FFC911EFB90F061CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.190.0/23 103.178.180.0/23 Signature Algorithm: sha256WithRSAEncryption 00:e5:4e:4f:c3:cc:ea:6b:44:9a:82:c7:ae:ae:58:54:a0:50: e5:83:2c:74:e7:01:0f:59:6b:1a:d6:98:d5:4e:48:4d:43:fe: 3d:fd:75:8e:bc:5f:de:de:1e:12:2b:de:d8:f8:d3:0c:12:f9: d9:b1:d8:39:6a:d3:b2:97:3e:80:77:c7:58:5c:68:f6:81:f3: 9d:fb:7a:13:bc:51:c5:f4:b9:51:fa:b5:92:f9:16:4a:94:8c: ec:44:ec:5a:62:49:f6:a4:3a:bc:7e:b0:e1:97:d4:d7:43:a8: e0:21:6d:33:32:25:33:0f:8c:80:4c:2b:08:d6:87:9c:c2:d6: 13:f7:59:9b:99:36:85:a5:6f:22:f6:8d:6b:a2:e3:ef:c7:ce: 04:94:d3:d1:68:00:fa:5c:4f:12:26:8c:02:cc:6f:16:c7:c0: 08:bd:7d:fb:8e:60:5a:e3:17:0f:9e:a9:63:21:d6:7b:32:79: 12:f3:11:1f:5b:05:66:6f:eb:ac:f3:b4:22:16:60:26:c7:b6: 79:d4:f3:36:86:18:b4:a1:cc:e9:eb:48:4f:47:41:9d:e6:3e: 0d:40:8b:98:d1:8d:c4:a5:db:58:c4:88:7e:fe:43:81:e6:c3: ea:77:38:49:f4:11:f1:9a:bb:c1:72:07:08:6b:9d:14:f5:53: 30:e4:f7:52 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALRMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDgzMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2ZmYtZDBjZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKD/y98+pSJvf6hDWuA+gW05ADz9nPU4sLtr5XDLybl22T7IW2mSa3TqihsV FzuK4DyaW1tNcpdm6pbDNgwwJ2GjUz6OeubKrNidKAr/8S1wzrpgttxOI/GGOFrv DMYaBZvlI4WegRh7/YrogtLE3gy0ilXYvqK/OAf/Um7xfNvD7s6iJCFmSR15Odj6 LzxhRyE7lrP1DOjjcwR5x5/lLBgDxfOAPNKMwA0thfSY4ryw03dJA4jJCdtoweha gS3lodD76JAC0+yMaN+O3vb6z5o3n+F1gF4lRJhLz0fFjq+3GQCReF6jrr7WLK0X hgR7Fvk+S3beKkUMRcszqnuVgk0CAwEAAaOCApswggKXMB0GA1UdDgQWBBSJB8yl n60z0rs9270J8pq8eWogpzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YyMUE5QjM4 RkZDOTExRUZCOTBGMDYxQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQBZ7G+AwQBZ7K0MA0GCSqGSIb3DQEBCwUAA4IBAQAA5U5P w8zqa0SagseurlhUoFDlgyx05wEPWWsa1pjVTkhNQ/49/XWOvF/e3h4SK97Y+NMM EvnZsdg5atOylz6Ad8dYXGj2gfOd+3oTvFHF9LlR+rWS+RZKlIzsROxaYkn2pDq8 frDhl9TXQ6jgIW0zMiUzD4yATCsI1oecwtYT91mbmTaFpW8i9o1rouPvx84ElNPR aAD6XE8SJowCzG8Wx8AIvX37jmBa4xcPnqljIdZ7MnkS8xEfWwVmb+us87QiFmAm x7Z51PM2hhi0oczp60hPR0Gd5j4NQIuY0Y3EpdtYxIh+/kOB5sPqdzhJ9BHxmrvB cgcIa50U9VMw5PdS -----END CERTIFICATE-----Generated at Thu May 15 12:29:23 2025 by rpki-client