$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42CA1CBE146211F0A1771E74C4F9AE02.roa File: 42CA1CBE146211F0A1771E74C4F9AE02.roa (raw, json) Hash identifier: XLbzODOzSsJkCAlHtRE0TNJIMKbKjczPWUdoHzHr36Y= Subject key identifier: 49:69:E2:DA:3C:62:85:67:B6:CB:26:9F:21:18:E2:D2:69:E0:BD:25 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AE18 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42CA1CBE146211F0A1771E74C4F9AE02.roa Signing time: Wed 09 Apr 2025 04:58:00 +0000 ROA not before: Wed 09 Apr 2025 04:58:00 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137666 IP address blocks: 103.117.213.0/24 maxlen: 24 103.168.167.0/24 maxlen: 24 2400:dae0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44568 (0xae18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 9 04:58:00 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67f5fe58-6e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:34:0c:dc:bd:74:5d:25:3c:9c:0d:91:f6: 55:ff:6a:03:f2:e0:88:cc:8e:a3:83:2e:b1:bb:ed: b7:85:3a:13:5f:c2:48:18:05:13:62:1d:c9:44:80: e4:84:0b:7b:64:0e:4d:38:6d:39:75:04:4d:47:b6: 17:cb:d2:28:d9:49:7b:7a:a6:2f:b7:fc:aa:19:87: a3:a1:90:46:48:c2:f7:51:87:63:50:47:ff:f4:71: d4:88:a6:dc:ae:fc:c8:04:46:b2:67:ca:4c:80:35: 51:12:b5:a1:67:cd:88:f4:45:98:60:5a:a2:b8:19: e6:e9:c9:4a:6d:32:0e:fa:41:57:a4:07:2e:f4:ad: a3:95:97:53:0e:4c:b9:f8:71:8f:b7:89:9a:0d:9a: 9c:ea:58:bf:86:5c:8a:0c:2a:1a:8a:14:7d:e5:06: 91:84:14:63:06:8f:fb:6b:15:9f:a1:c2:5e:9d:8c: 11:28:dd:10:5d:8e:61:fb:b3:e9:7c:d2:5e:aa:b7: a7:8a:fd:c1:2e:26:00:3b:5a:e2:68:c9:02:bd:ee: b2:de:7c:23:00:87:2c:b4:f8:61:25:d6:9e:f2:80: 13:59:05:da:6a:ea:59:bd:fd:42:bc:c6:73:55:6e: c8:1c:b8:32:a9:c6:07:75:ab:24:03:23:7a:a7:d2: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:69:E2:DA:3C:62:85:67:B6:CB:26:9F:21:18:E2:D2:69:E0:BD:25 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42CA1CBE146211F0A1771E74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.213.0/24 103.168.167.0/24 IPv6: 2400:dae0::/32 Signature Algorithm: sha256WithRSAEncryption 83:90:7e:d3:58:be:f3:10:5a:22:6a:01:e2:b8:9e:76:24:f8: 09:78:2e:81:c5:9f:e1:6f:41:ff:f5:24:35:96:fc:ca:94:5e: fa:bf:3d:68:cc:66:cb:90:84:65:bc:24:84:b5:f7:95:2d:de: a6:8f:7d:3d:d9:ec:20:fd:98:32:94:f0:24:39:25:9d:f4:30: 16:ad:b0:99:ba:02:d6:49:9c:85:05:80:6f:ae:ea:4c:26:d7: ca:5d:d4:e1:24:df:01:92:48:86:74:1f:38:da:80:d2:28:6d: d8:8f:69:29:c4:83:ce:01:f8:3e:f8:ee:bf:a5:8f:ee:3e:02: 8f:52:bf:9f:aa:01:90:f5:5e:2b:34:b8:da:4e:db:9c:1a:1b: 95:43:d2:f8:2e:18:76:f5:64:54:48:92:e6:c0:97:0d:e8:e9: 79:e8:9d:45:ba:33:b7:02:bd:a3:1d:08:6b:b5:5e:0e:35:1d: 78:ca:69:81:f2:60:28:99:5e:3f:da:9e:46:8e:e3:8a:d5:a3: 6d:84:a8:cb:26:bb:ec:0a:e7:9d:f7:c8:d2:27:13:26:f4:3d: 8e:f7:d1:0a:5b:41:dd:6f:ec:c1:89:91:13:45:33:40:b0:ea: be:3d:8b:c9:1e:28:57:c3:21:54:07:87:10:ab:a8:80:f3:ba: 11:9f:02:8c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIDAK4YMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQwOTA0NTgwMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdmNWZlNTgtNmUyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJwxNAzcvXRdJTycDZH2Vf9qA/LgiMyOo4Musbvtt4U6E1/CSBgFE2IdyUSA 5IQLe2QOTThtOXUETUe2F8vSKNlJe3qmL7f8qhmHo6GQRkjC91GHY1BH//Rx1Iim 3K78yARGsmfKTIA1URK1oWfNiPRFmGBaorgZ5unJSm0yDvpBV6QHLvSto5WXUw5M ufhxj7eJmg2anOpYv4ZcigwqGooUfeUGkYQUYwaP+2sVn6HCXp2MESjdEF2OYfuz 6XzSXqq3p4r9wS4mADta4mjJAr3ust58IwCHLLT4YSXWnvKAE1kF2mrqWb39QrzG c1VuyBy4MqnGB3WrJAMjeqfSnb8CAwEAAaOCAqowggKmMB0GA1UdDgQWBBRJaeLa PGKFZ7bLJp8hGOLSaeC9JTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQyQ0ExQ0JF MTQ2MjExRjBBMTc3MUU3NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDQGCCsGAQUFBwEHAQH/ BCUwIzASBAIAATAMAwQAZ3XVAwQAZ6inMA0EAgACMAcDBQAkANrgMA0GCSqGSIb3 DQEBCwUAA4IBAQCDkH7TWL7zEFoiagHiuJ52JPgJeC6BxZ/hb0H/9SQ1lvzKlF76 vz1ozGbLkIRlvCSEtfeVLd6mj3092ewg/ZgylPAkOSWd9DAWrbCZugLWSZyFBYBv rupMJtfKXdThJN8BkkiGdB842oDSKG3Yj2kpxIPOAfg++O6/pY/uPgKPUr+fqgGQ 9V4rNLjaTtucGhuVQ9L4Lhh29WRUSJLmwJcN6Ol56J1FujO3Ar2jHQhrtV4ONR14 ymmB8mAomV4/2p5GjuOK1aNthKjLJrvsCued98jSJxMm9D2O99EKW0Hdb+zBiZET RTNAsOq+PYvJHihXwyFUB4cQq6iA87oRnwKM -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:42 2025 by rpki-client