$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DFD5F4AD97B11EF82E5292AC4F9AE02.roa File: 0DFD5F4AD97B11EF82E5292AC4F9AE02.roa (raw, json) Hash identifier: U31d1SMi3knuwMJw7omrFz9J9UBJPKttVyWXDBa8P8A= Subject key identifier: 01:74:A4:04:4C:55:1D:A2:D2:36:9F:06:65:8A:7D:86:2B:63:01:70 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AD73 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DFD5F4AD97B11EF82E5292AC4F9AE02.roa Signing time: Wed 02 Apr 2025 12:17:38 +0000 ROA not before: Wed 02 Apr 2025 12:17:38 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136284 IP address blocks: 103.86.180.0/24 maxlen: 24 103.86.181.0/24 maxlen: 24 103.86.182.0/24 maxlen: 24 103.86.183.0/24 maxlen: 24 103.97.164.0/22 maxlen: 24 103.121.154.0/23 maxlen: 24 103.124.140.0/24 maxlen: 24 103.134.160.0/22 maxlen: 24 103.149.127.0/24 maxlen: 24 103.163.98.0/24 maxlen: 24 103.191.205.0/24 maxlen: 24 2001:df2:d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44403 (0xad73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 2 12:17:38 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67ed2ae1-f492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:7e:6b:ea:da:12:a4:75:8c:5f:b6:1d:18: 3b:85:2e:83:a2:df:47:51:4a:53:46:49:67:14:23: 40:4b:fe:d4:30:61:0b:6b:0e:66:1e:95:b6:46:06: 10:b4:1e:54:19:92:d3:9a:89:9c:fc:4d:5c:57:46: f5:f6:74:76:be:98:ed:08:9e:7f:00:d0:d8:39:f9: 42:a0:7a:35:d5:66:39:16:50:31:0c:fa:d3:82:78: e8:c2:03:7b:12:94:b3:4b:5d:3f:64:52:f9:46:82: 03:61:a6:27:ba:50:a6:b9:88:94:83:7e:04:38:d3: 59:ca:ec:60:29:85:88:01:8a:3f:8c:7b:cc:6f:8f: 5c:10:41:e4:eb:3f:88:70:a3:a5:39:22:ed:30:c7: 14:76:68:f2:ff:8d:b5:f4:47:8a:50:96:74:97:37: 80:bc:26:fb:9c:11:22:98:27:a7:97:67:e5:c9:b4: f5:8c:4c:a3:73:c8:bc:2f:de:47:82:f7:89:4f:3c: dc:48:59:c2:69:2b:6c:ee:0b:e0:39:37:e0:49:25: 70:37:f6:c1:1a:f2:79:b3:b5:6a:f3:94:52:91:4f: a0:fc:96:3b:b5:5f:d0:dc:51:0c:c0:d6:b4:61:be: cb:04:fe:14:19:08:84:9a:d7:97:e5:56:0c:43:58: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:74:A4:04:4C:55:1D:A2:D2:36:9F:06:65:8A:7D:86:2B:63:01:70 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DFD5F4AD97B11EF82E5292AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.180.0/22 103.97.164.0/22 103.121.154.0/23 103.124.140.0/24 103.134.160.0/22 103.149.127.0/24 103.163.98.0/24 103.191.205.0/24 IPv6: 2001:df2:d80::/48 Signature Algorithm: sha256WithRSAEncryption 9f:d3:08:38:9e:1c:25:49:66:32:62:07:d9:b3:05:cd:4d:97: 99:16:01:b8:78:44:f4:da:51:ce:fd:64:52:fe:2e:cb:73:48: 05:ce:3c:89:1c:96:10:c1:36:f9:25:e2:68:0a:c7:57:d4:7b: 77:1c:d5:4d:0c:1c:04:cf:ec:e8:f0:9a:90:ef:1a:6f:32:0d: 21:4a:a6:f1:26:a6:9a:5f:40:9c:e1:58:6d:0d:27:a0:2a:af: 3d:73:02:f7:f7:5b:25:fb:57:3b:ed:00:bb:f0:18:6a:04:72: 02:9b:6b:56:4f:ba:1d:dd:f2:8e:9d:55:7a:91:24:cf:56:02: d6:d3:ee:b1:d1:44:84:ce:c8:23:b0:b0:e4:6b:ea:c2:61:fa: 5e:10:7e:12:0b:71:bc:5d:15:f2:8a:d5:d3:2e:e4:42:e8:a0: 83:4e:df:8a:51:7f:81:93:82:2d:51:ed:0f:7c:1b:9c:2b:53: 99:75:94:a2:0d:e9:97:0e:72:a5:33:48:ae:80:5d:ad:cf:14: 0a:c4:88:dc:0c:47:d4:2f:f3:58:38:1d:9d:c1:96:76:6f:c6: f7:2e:81:25:e4:98:ec:ff:35:54:e0:36:8e:e9:19:7c:f9:5c: d6:f7:c1:75:4d:23:d8:f7:ca:c3:35:b8:d9:20:d1:31:c4:e5: bb:88:fc:ee -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIDAK1zMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQwMjEyMTczOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdlZDJhZTEtZjQ5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTcfmvq2hKkdYxfth0YO4Uug6LfR1FKU0ZJZxQjQEv+1DBhC2sOZh6VtkYG ELQeVBmS05qJnPxNXFdG9fZ0dr6Y7QiefwDQ2Dn5QqB6NdVmORZQMQz604J46MID exKUs0tdP2RS+UaCA2GmJ7pQprmIlIN+BDjTWcrsYCmFiAGKP4x7zG+PXBBB5Os/ iHCjpTki7TDHFHZo8v+NtfRHilCWdJc3gLwm+5wRIpgnp5dn5cm09YxMo3PIvC/e R4L3iU883EhZwmkrbO4L4Dk34EklcDf2wRryebO1avOUUpFPoPyWO7Vf0NxRDMDW tGG+ywT+FBkIhJrXl+VWDENYInECAwEAAaOCAtAwggLMMB0GA1UdDgQWBBQBdKQE TFUdotI2nwZlin2GK2MBcDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBERkQ1RjRB RDk3QjExRUY4MkU1MjkyQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFoGCCsGAQUFBwEHAQH/ BEswSTA2BAIAATAwAwQCZ1a0AwQCZ2GkAwQBZ3maAwQAZ3yMAwQCZ4agAwQAZ5V/ AwQAZ6NiAwQAZ7/NMA8EAgACMAkDBwAgAQ3yDYAwDQYJKoZIhvcNAQELBQADggEB AJ/TCDieHCVJZjJiB9mzBc1Nl5kWAbh4RPTaUc79ZFL+LstzSAXOPIkclhDBNvkl 4mgKx1fUe3cc1U0MHATP7OjwmpDvGm8yDSFKpvEmpppfQJzhWG0NJ6Aqrz1zAvf3 WyX7VzvtALvwGGoEcgKba1ZPuh3d8o6dVXqRJM9WAtbT7rHRRITOyCOwsORr6sJh +l4QfhILcbxdFfKK1dMu5ELooINO34pRf4GTgi1R7Q98G5wrU5l1lKIN6ZcOcqUz SK6AXa3PFArEiNwMR9Qv81g4HZ3BlnZvxvcugSXkmOz/NVTgNo7pGXz5XNb3wXVN I9j3ysM1uNkg0THE5buI/O4= -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:10 2025 by rpki-client