$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F544A5EA9B8811EC826E9357C4F9AE02.roa File: F544A5EA9B8811EC826E9357C4F9AE02.roa (raw, json) Hash identifier: tLJO2VOhbXoatH3mq6gwmCJViKqVOTMFgbsrEiN3Tlw= Subject key identifier: 85:D8:48:10:02:46:B4:C2:B0:8D:50:4B:E6:43:CF:CE:D3:03:51:89 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B555 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F544A5EA9B8811EC826E9357C4F9AE02.roa Signing time: Thu 08 May 2025 16:12:35 +0000 ROA not before: Thu 08 May 2025 16:12:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138774 IP address blocks: 103.94.232.0/23 maxlen: 24 103.164.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46421 (0xb555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:12:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd7f3-7cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:21:4f:13:c5:0e:25:d4:59:fd:23:25:75: 05:af:62:ff:13:28:50:06:0a:ca:f6:5d:dd:f7:6e: cb:94:ee:c2:e5:ab:87:ad:32:47:39:b0:0d:b8:5c: 28:19:8b:2f:43:8d:77:2c:84:89:57:53:5a:6e:96: 3e:2d:13:14:a5:45:5d:8d:ca:22:95:45:62:d4:78: 2b:4b:4e:92:55:25:8c:f5:cd:a8:16:17:48:88:53: 50:bf:d4:cc:62:91:ed:41:78:29:ca:30:75:73:14: a8:30:53:b9:dd:25:c4:34:9f:fe:7d:5a:3b:3b:c9: 11:cf:d9:85:ff:6b:43:8d:80:9e:48:74:7f:81:64: 8e:5a:85:59:9c:cf:5d:2e:53:b2:f2:0b:24:63:75: fe:e2:6f:79:32:e6:9c:32:78:93:81:85:85:1a:82: 87:d9:ab:3e:1d:75:01:1e:f0:32:bd:2b:12:05:c7: 2f:c4:50:c5:35:36:fa:f2:0b:01:44:4f:8a:a2:b0: 64:67:69:44:c7:22:23:b7:6e:32:74:73:a4:ad:ec: 99:38:85:a0:9a:f1:c7:27:dc:3c:8d:4f:e3:17:c3: 83:ba:e7:d5:bb:8c:23:f4:c3:46:21:0a:d1:c7:55: 4a:7a:5d:df:91:d0:cc:4f:d0:d3:27:b6:fc:0e:f0: da:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D8:48:10:02:46:B4:C2:B0:8D:50:4B:E6:43:CF:CE:D3:03:51:89 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F544A5EA9B8811EC826E9357C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.232.0/23 103.164.140.0/24 Signature Algorithm: sha256WithRSAEncryption b2:76:82:7e:5c:ec:40:c5:74:d1:52:0f:81:41:93:74:a7:fa: 0b:1b:6d:17:5f:aa:65:36:98:d1:99:5a:28:81:c0:0a:72:2d: f6:83:65:97:34:bf:56:d1:dd:22:4a:85:d6:57:c9:a0:16:65: 66:42:95:6d:55:f3:29:83:3b:ef:e8:2b:ab:c7:47:0c:8d:11: 9e:68:93:42:bc:92:3c:69:b4:4a:cd:31:f7:b9:89:92:32:61: f3:9c:c3:3d:12:79:4e:84:56:d6:71:ee:86:a0:66:14:a7:96: 3a:86:a3:1b:19:00:ab:14:af:7f:f5:ac:db:04:68:35:fe:3c: 5e:ed:7e:57:32:97:cb:52:d7:1d:7e:fd:77:c0:dc:2f:3e:05: ad:0f:e4:c8:cc:3e:61:d8:67:bb:5a:bd:6e:49:9f:7e:b1:ef: 43:53:a9:65:54:01:91:53:39:4c:e6:22:a8:79:be:a4:ca:21: 66:35:9f:0b:ac:c5:49:c7:a9:16:c0:79:0a:29:37:09:cd:17: 20:ed:a7:03:3c:16:cd:e2:7c:25:e4:cd:06:bc:1c:70:ed:d9: d6:20:67:99:e1:c8:e6:50:7a:00:7b:48:8c:9b:82:65:58:9d: 81:23:68:78:7b:0d:07:a5:65:af:9f:8a:9c:8a:51:0d:c6:49: 30:e2:ce:c3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALVVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTIzNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3ZjMtN2NjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2lIU8TxQ4l1Fn9IyV1Ba9i/xMoUAYKyvZd3fduy5TuwuWrh60yRzmwDbhc KBmLL0ONdyyEiVdTWm6WPi0TFKVFXY3KIpVFYtR4K0tOklUljPXNqBYXSIhTUL/U zGKR7UF4KcowdXMUqDBTud0lxDSf/n1aOzvJEc/Zhf9rQ42Ankh0f4FkjlqFWZzP XS5TsvILJGN1/uJveTLmnDJ4k4GFhRqCh9mrPh11AR7wMr0rEgXHL8RQxTU2+vIL AURPiqKwZGdpRMciI7duMnRzpK3smTiFoJrxxyfcPI1P4xfDg7rn1buMI/TDRiEK 0cdVSnpd35HQzE/Q0ye2/A7w2vMCAwEAAaOCApswggKXMB0GA1UdDgQWBBSF2EgQ Aka0wrCNUEvmQ8/O0wNRiTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y1NDRBNUVB OUI4ODExRUM4MjZFOTM1N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQBZ17oAwQAZ6SMMA0GCSqGSIb3DQEBCwUAA4IBAQCydoJ+ XOxAxXTRUg+BQZN0p/oLG20XX6plNpjRmVoogcAKci32g2WXNL9W0d0iSoXWV8mg FmVmQpVtVfMpgzvv6Curx0cMjRGeaJNCvJI8abRKzTH3uYmSMmHznMM9EnlOhFbW ce6GoGYUp5Y6hqMbGQCrFK9/9azbBGg1/jxe7X5XMpfLUtcdfv13wNwvPgWtD+TI zD5h2Ge7Wr1uSZ9+se9DU6llVAGRUzlM5iKoeb6kyiFmNZ8LrMVJx6kWwHkKKTcJ zRcg7acDPBbN4nwl5M0GvBxw7dnWIGeZ4cjmUHoAe0iMm4JlWJ2BI2h4ew0HpWWv n4qcilENxkkw4s7D -----END CERTIFICATE-----Generated at Sat May 17 00:52:21 2025 by rpki-client