$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F341CE2A430E11ED8A923F1CC4F9AE02.roa File: F341CE2A430E11ED8A923F1CC4F9AE02.roa (raw, json) Hash identifier: Ht9xeyWnj7FhT9F0r4MAQBwEs+kUecYRjoV5Brp5cAI= Subject key identifier: E8:93:D2:AB:83:1E:DA:27:C3:EE:2F:60:A7:D9:41:31:4C:98:10:0C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B4D5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F341CE2A430E11ED8A923F1CC4F9AE02.roa Signing time: Thu 08 May 2025 16:10:38 +0000 ROA not before: Thu 08 May 2025 16:10:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137665 IP address blocks: 103.117.176.0/24 maxlen: 24 103.117.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 09:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46293 (0xb4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:10:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd77e-1c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:01:ef:84:49:ec:74:d8:2d:a9:0b:13:56: b0:5d:28:47:a6:c1:2a:98:1c:d3:c3:1b:07:8e:b2: c4:4a:38:57:bd:ec:80:27:a1:e3:d6:3b:41:c3:e0: f7:88:9a:2e:cc:ab:05:7c:42:63:f9:ed:13:7d:a6: fb:0c:74:e5:ab:cd:48:9e:e3:c8:ba:18:1d:2f:8f: a6:ad:bb:0b:d2:fa:fe:b9:52:b2:a4:7e:bb:9c:f2: 3a:bf:8d:0f:69:43:ef:d5:60:e9:ea:ae:5b:42:52: 48:20:63:f1:02:91:a3:2e:75:06:97:2e:b2:bb:84: d1:df:fb:d0:f2:f4:ab:93:27:1e:c0:12:c5:57:7f: ce:c1:84:74:3f:85:d8:21:cd:e6:c3:f9:86:1c:09: a2:c9:3a:7d:ad:92:29:73:a3:7f:c1:e7:d5:65:02: 9f:61:58:bd:21:45:d9:bd:92:73:b6:96:46:ca:dc: 17:42:80:ac:1f:04:65:6b:ce:1a:ab:51:e2:dc:20: cc:8a:28:b6:47:23:29:3b:ea:b3:13:94:e6:70:2c: 58:d0:27:e5:af:1d:44:e8:ec:2a:e4:ba:61:4d:d9: da:57:19:a3:65:16:cd:cb:a1:75:e9:13:d1:02:a0: 5e:4a:ab:b8:c5:16:e5:b4:d1:3b:fc:e5:da:2d:b9: c0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:93:D2:AB:83:1E:DA:27:C3:EE:2F:60:A7:D9:41:31:4C:98:10:0C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F341CE2A430E11ED8A923F1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.176.0/23 Signature Algorithm: sha256WithRSAEncryption a8:ef:13:f7:79:b0:33:b3:75:67:35:11:86:6a:43:d5:47:53: ab:ed:72:6c:7c:9f:5f:96:64:d6:35:f2:f1:de:13:f4:67:8f: da:a2:00:dc:a0:e9:58:c4:c6:6e:a7:3b:7c:4c:0f:4e:a8:39: ed:da:ea:87:57:23:62:79:37:e3:a7:f6:cb:7b:76:6d:32:44: a6:01:23:40:1c:07:75:50:1c:bd:08:66:b1:b0:80:1d:c1:d9: f4:0b:2f:85:d0:97:79:8e:ca:74:58:f4:13:27:99:66:01:9a: 94:ed:f8:df:3a:87:a1:7e:c3:be:d1:fe:00:dd:8a:22:74:04: cd:ab:0e:1c:07:dc:82:df:ce:66:83:03:f3:d6:17:15:26:31: 1f:56:9e:d2:1c:c6:52:41:29:74:12:5c:74:4f:d0:69:03:2e: 34:65:1a:4b:30:57:4f:2b:ff:c2:be:39:5d:1e:a2:e0:f2:6b: 09:06:79:d2:0b:95:fd:03:28:cd:03:37:b9:16:74:5f:b8:4e: 9b:3b:3c:3b:77:46:df:2c:d3:4b:19:1e:03:fb:4f:d9:3f:21: 77:3f:de:51:d6:c0:f2:57:c1:bf:91:47:2c:23:5c:c8:70:34: c8:26:15:02:ac:9e:7b:25:1c:b3:fa:07:76:95:ff:2e:b4:af: 51:a4:99:8b -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALTVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTAzOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3N2UtMWMyZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJbAe+ESex02C2pCxNWsF0oR6bBKpgc08MbB46yxEo4V73sgCeh49Y7QcPg 94iaLsyrBXxCY/ntE32m+wx05avNSJ7jyLoYHS+Ppq27C9L6/rlSsqR+u5zyOr+N D2lD79Vg6equW0JSSCBj8QKRoy51BpcusruE0d/70PL0q5MnHsASxVd/zsGEdD+F 2CHN5sP5hhwJosk6fa2SKXOjf8Hn1WUCn2FYvSFF2b2Sc7aWRsrcF0KArB8EZWvO GqtR4twgzIootkcjKTvqsxOU5nAsWNAn5a8dROjsKuS6YU3Z2lcZo2UWzcuhdekT 0QKgXkqruMUW5bTRO/zl2i25wFMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTok9Kr gx7aJ8PuL2Cn2UExTJgQDDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YzNDFDRTJB NDMwRTExRUQ4QTkyM0YxQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ3WwMA0GCSqGSIb3DQEBCwUAA4IBAQCo7xP3ebAzs3Vn NRGGakPVR1Or7XJsfJ9flmTWNfLx3hP0Z4/aogDcoOlYxMZupzt8TA9OqDnt2uqH VyNieTfjp/bLe3ZtMkSmASNAHAd1UBy9CGaxsIAdwdn0Cy+F0Jd5jsp0WPQTJ5lm AZqU7fjfOoehfsO+0f4A3YoidATNqw4cB9yC385mgwPz1hcVJjEfVp7SHMZSQSl0 Elx0T9BpAy40ZRpLMFdPK//CvjldHqLg8msJBnnSC5X9AyjNAze5FnRfuE6bOzw7 d0bfLNNLGR4D+0/ZPyF3P95R1sDyV8G/kUcsI1zIcDTIJhUCrJ57JRyz+gd2lf8u tK9RpJmL -----END CERTIFICATE-----Generated at Thu May 15 12:24:02 2025 by rpki-client