$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F632182A67B211EC9EB0B015C4F9AE02.roa File: F632182A67B211EC9EB0B015C4F9AE02.roa (raw, json) Hash identifier: yQkTiyYxNN6C8gJ+7I1DB28hKi2Hx0i+hIjG0kKj7Xc= Subject key identifier: A8:D5:98:3A:5A:B1:C0:AB:26:CD:C9:0A:AA:9C:35:A0:20:E8:AB:95 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B6F2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F632182A67B211EC9EB0B015C4F9AE02.roa Signing time: Thu 08 May 2025 16:18:50 +0000 ROA not before: Thu 08 May 2025 16:18:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142484 IP address blocks: 103.171.64.0/23 maxlen: 24 103.205.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 06:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46834 (0xb6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:18:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd969-b8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:64:0c:0c:da:5d:19:d4:40:02:92:6b:97: 0e:e8:aa:46:88:df:13:dd:1f:ad:95:2e:bd:cc:5e: f4:20:bc:51:8c:cb:20:c2:82:3a:90:d4:e2:ef:76: 00:49:c9:a4:ae:0e:5f:36:66:11:38:89:f8:19:d0: 5d:03:a4:c9:b9:ff:df:36:ed:ed:d1:54:1a:9a:cb: 8c:fe:ac:57:12:45:9a:63:34:7d:4a:10:b5:08:b2: 23:cf:b4:2f:90:49:e8:b5:1d:49:48:3a:2f:28:9d: 88:2d:a7:cd:c0:ea:42:5e:26:29:d3:49:5b:27:c6: 43:61:55:64:78:3f:a6:b7:27:4c:cd:2c:0a:36:80: de:e8:de:65:a6:df:5b:0f:56:21:2c:e8:c4:35:39: cb:90:1c:a0:b1:0c:c7:fc:e2:d1:94:33:11:79:87: 02:42:54:6e:df:45:08:bc:71:de:54:4b:0b:0a:24: 2a:d5:ec:9c:93:a5:05:8f:9f:44:f4:cd:92:fb:5c: af:d3:6f:a2:b6:c3:af:e8:bc:2f:d3:5b:01:66:eb: e9:ea:17:ba:32:88:7a:ea:52:3d:8f:7e:7c:d9:e9: 48:12:c1:a8:ac:15:b4:b3:bf:4c:30:34:f4:40:ce: 9f:01:40:f2:98:f1:a1:0f:98:9e:df:fb:c0:ef:b0: 8b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D5:98:3A:5A:B1:C0:AB:26:CD:C9:0A:AA:9C:35:A0:20:E8:AB:95 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F632182A67B211EC9EB0B015C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.64.0/23 103.205.148.0/22 Signature Algorithm: sha256WithRSAEncryption 73:a2:b3:93:30:3c:02:3e:cb:e3:01:62:6e:f3:a2:a3:bb:ec: 23:4c:ab:15:97:ab:e2:8c:3e:6b:14:3e:14:e7:4b:73:bd:2b: 04:2d:1b:d3:b5:18:d2:59:a6:ad:60:a5:87:2f:05:51:3b:4e: 77:c3:76:ce:03:1c:51:41:ba:dc:df:70:2f:65:bc:12:e8:74: 9b:6d:9d:ef:01:21:77:e5:79:72:b5:79:ac:30:ad:93:81:e7: ee:c9:31:80:19:c3:07:7f:5a:a1:92:53:52:f4:8b:48:71:ce: 7b:0c:42:79:2d:cd:64:65:3e:e3:a9:77:d0:a5:2c:2a:f0:1f: 43:ac:1c:ec:49:cc:e6:fd:9f:e2:d7:aa:60:ef:81:b1:76:cc: 80:9b:61:a1:bb:d0:a3:21:95:ab:26:42:84:70:18:44:1e:b0: 1e:6d:65:f4:b7:60:74:81:17:29:7b:ba:d4:9b:b3:df:9d:31: 68:f9:89:40:51:1e:8d:8a:b2:33:d2:4d:2a:a7:90:d7:fa:5a: 82:95:d3:96:8e:e2:8f:cc:90:39:bb:27:f3:4b:d1:52:a1:c1: 63:c3:d0:79:e2:f9:57:3a:7c:f3:a5:15:7e:ce:37:e3:f8:d7: fb:29:9a:b5:b9:b9:e1:06:87:e6:6c:7d:22:55:1a:e5:68:b1: 7f:98:f2:a4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALbyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTg1MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5NjktYjhlOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALp/ZAwM2l0Z1EACkmuXDuiqRojfE90frZUuvcxe9CC8UYzLIMKCOpDU4u92 AEnJpK4OXzZmETiJ+BnQXQOkybn/3zbt7dFUGprLjP6sVxJFmmM0fUoQtQiyI8+0 L5BJ6LUdSUg6LyidiC2nzcDqQl4mKdNJWyfGQ2FVZHg/prcnTM0sCjaA3ujeZabf Ww9WISzoxDU5y5AcoLEMx/zi0ZQzEXmHAkJUbt9FCLxx3lRLCwokKtXsnJOlBY+f RPTNkvtcr9NvorbDr+i8L9NbAWbr6eoXujKIeupSPY9+fNnpSBLBqKwVtLO/TDA0 9EDOnwFA8pjxoQ+Ynt/7wO+wi80CAwEAAaOCApswggKXMB0GA1UdDgQWBBSo1Zg6 WrHAqybNyQqqnDWgIOirlTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y2MzIxODJB NjdCMjExRUM5RUIwQjAxNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQBZ6tAAwQCZ82UMA0GCSqGSIb3DQEBCwUAA4IBAQBzorOT MDwCPsvjAWJu86Kju+wjTKsVl6vijD5rFD4U50tzvSsELRvTtRjSWaatYKWHLwVR O053w3bOAxxRQbrc33AvZbwS6HSbbZ3vASF35XlytXmsMK2TgefuyTGAGcMHf1qh klNS9ItIcc57DEJ5Lc1kZT7jqXfQpSwq8B9DrBzsSczm/Z/i16pg74GxdsyAm2Gh u9CjIZWrJkKEcBhEHrAebWX0t2B0gRcpe7rUm7PfnTFo+YlAUR6NirIz0k0qp5DX +lqCldOWjuKPzJA5uyfzS9FSocFjw9B54vlXOnzzpRV+zjfj+Nf7KZq1ubnhBofm bH0iVRrlaLF/mPKk -----END CERTIFICATE-----Generated at Wed May 14 08:02:35 2025 by rpki-client