$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAB857E8876311EDA9B37A75C4F9AE02.roa File: FAB857E8876311EDA9B37A75C4F9AE02.roa (raw, json) Hash identifier: 76ZODGpqBZklO5E9fKYvRD8vqAgkcr/vTXGoNexuZMo= Subject key identifier: AB:55:85:E0:6E:37:19:9F:F9:D1:0B:6A:C8:39:77:CF:05:60:DB:0D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B591 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAB857E8876311EDA9B37A75C4F9AE02.roa Signing time: Thu 08 May 2025 16:13:30 +0000 ROA not before: Thu 08 May 2025 16:13:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139530 IP address blocks: 103.146.130.0/23 maxlen: 24 2001:df1:c6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 11:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46481 (0xb591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:13:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd82a-923f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:14:5a:bc:42:a8:ba:1d:4d:66:1d:f1:2d:aa: c1:87:cd:04:bd:dd:58:9b:68:ab:fc:4e:2c:a4:49: e3:a8:6b:ae:74:2a:57:34:8c:50:f2:a3:ee:20:61: 32:f6:a5:bf:74:d5:b7:5e:9b:08:68:ba:db:f9:0b: 2c:40:75:77:c3:46:0a:8a:37:29:e9:38:90:cc:0d: 08:79:13:c5:ca:54:83:8b:71:b0:7d:74:04:26:7b: aa:d9:e8:76:47:14:c0:f4:3a:59:5d:26:c9:7c:d6: 57:55:0e:48:78:41:25:77:42:8d:33:05:37:ad:c6: ce:c5:ef:a8:cc:88:87:37:42:ab:0c:b8:ef:02:ec: 7c:ab:50:ef:97:a4:b8:63:4f:a8:8f:f1:66:6b:8f: 31:90:3e:0c:c9:c3:aa:0e:31:f7:03:59:0f:ad:bd: 6f:ab:62:e0:98:f2:dd:d8:cd:84:2b:6c:e5:f8:e0: 0f:63:18:ed:7f:2b:91:25:79:1a:b4:a9:3c:5c:c9: a2:e6:bc:7b:ee:9d:32:72:57:32:d5:40:d9:34:fb: 6c:26:e5:ed:65:05:c8:45:b1:26:c3:30:72:8e:64: 2c:0d:b6:7b:b8:b8:99:cc:ad:75:61:29:ba:92:6d: b0:78:bf:3e:4d:73:95:ee:8e:94:9e:8f:b8:e6:16: 5b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:55:85:E0:6E:37:19:9F:F9:D1:0B:6A:C8:39:77:CF:05:60:DB:0D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAB857E8876311EDA9B37A75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.130.0/23 IPv6: 2001:df1:c6c0::/48 Signature Algorithm: sha256WithRSAEncryption 76:0d:f4:9d:73:73:26:91:d7:ae:22:51:81:dd:86:15:b7:d0: 17:21:21:f4:36:bc:4f:aa:4e:0a:20:3e:df:7b:dd:3a:2a:33: 1e:92:94:bc:9e:ad:fd:6a:d9:db:d0:e0:b7:9f:0b:2e:63:13: 6e:e6:e5:5a:04:3a:74:39:3a:79:b4:c3:86:8d:43:11:75:e2: c7:41:a8:b0:fd:a6:f9:30:86:45:de:95:4a:ef:f2:d7:d7:af: 75:43:c9:2a:c7:3f:a7:96:3b:9e:63:c6:af:27:85:15:bb:9e: e9:5b:86:20:73:e9:0f:7e:0f:a0:d0:f7:d9:d1:17:a1:72:10: af:39:e7:21:c6:63:52:5f:fc:fd:b5:13:78:c2:70:73:b1:f0: ed:e2:a8:ef:a9:25:4a:44:46:45:1e:11:6d:00:60:4b:08:27: 70:6a:29:fc:2c:0a:8b:ce:50:51:88:9c:16:2c:05:1f:ef:0e: 91:2f:f0:ae:ef:6b:74:ca:fd:89:c3:95:a1:34:92:86:80:9d: 53:09:81:36:f9:1f:7b:f0:99:42:f5:55:c7:69:0c:c6:79:70: f0:91:c9:d2:cf:09:b3:bd:66:38:76:a6:76:b3:08:46:da:fc: 7a:3f:7a:c6:b3:96:f2:be:7e:77:ea:1d:1c:a7:cf:0f:78:89: 55:79:78:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALWRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTMzMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4MmEtOTIzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO8UWrxCqLodTWYd8S2qwYfNBL3dWJtoq/xOLKRJ46hrrnQqVzSMUPKj7iBh Mvalv3TVt16bCGi62/kLLEB1d8NGCoo3Kek4kMwNCHkTxcpUg4txsH10BCZ7qtno dkcUwPQ6WV0myXzWV1UOSHhBJXdCjTMFN63GzsXvqMyIhzdCqwy47wLsfKtQ75ek uGNPqI/xZmuPMZA+DMnDqg4x9wNZD629b6ti4Jjy3djNhCts5fjgD2MY7X8rkSV5 GrSpPFzJoua8e+6dMnJXMtVA2TT7bCbl7WUFyEWxJsMwco5kLA22e7i4mcytdWEp upJtsHi/Pk1zle6OlJ6PuOYWW3kCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSrVYXg bjcZn/nRC2rIOXfPBWDbDTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZBQjg1N0U4 ODc2MzExRURBOUIzN0E3NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ5KCMA8EAgACMAkDBwAgAQ3xxsAwDQYJKoZIhvcNAQEL BQADggEBAHYN9J1zcyaR164iUYHdhhW30BchIfQ2vE+qTgogPt973ToqMx6SlLye rf1q2dvQ4LefCy5jE27m5VoEOnQ5Onm0w4aNQxF14sdBqLD9pvkwhkXelUrv8tfX r3VDySrHP6eWO55jxq8nhRW7nulbhiBz6Q9+D6DQ99nRF6FyEK855yHGY1Jf/P21 E3jCcHOx8O3iqO+pJUpERkUeEW0AYEsIJ3BqKfwsCovOUFGInBYsBR/vDpEv8K7v a3TK/YnDlaE0koaAnVMJgTb5H3vwmUL1VcdpDMZ5cPCRydLPCbO9Zjh2pnazCEba /Ho/esazlvK+fnfqHRynzw94iVV5eCY= -----END CERTIFICATE-----Generated at Thu May 15 18:15:06 2025 by rpki-client