$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4DB736F81E8411F0A2EC6E64C4F9AE02.roa File: 4DB736F81E8411F0A2EC6E64C4F9AE02.roa (raw, json) Hash identifier: +j6qjET0S6YCEHdFH/OXQMl5fyMLKegnOWlZ7oPrPRo= Subject key identifier: BC:07:EE:93:79:95:3A:F8:39:75:0A:BA:FD:77:A3:38:22:D6:CF:D0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AEF6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4DB736F81E8411F0A2EC6E64C4F9AE02.roa Signing time: Mon 21 Apr 2025 07:43:24 +0000 ROA not before: Mon 21 Apr 2025 07:43:24 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132934 IP address blocks: 45.120.124.0/22 maxlen: 24 103.46.194.0/23 maxlen: 24 103.65.28.0/22 maxlen: 24 103.158.105.0/24 maxlen: 24 103.199.120.0/24 maxlen: 24 103.199.121.0/24 maxlen: 24 103.199.122.0/24 maxlen: 24 103.199.123.0/24 maxlen: 24 103.237.156.0/22 maxlen: 24 2001:df1:6a40::/48 maxlen: 48 2406:16c0::/32 maxlen: 32 2406:16c0::/40 maxlen: 40 2406:16c0:100::/40 maxlen: 40 2406:16c0:200::/40 maxlen: 40 2406:16c0:300::/40 maxlen: 40 2406:16c0:400::/40 maxlen: 40 2406:16c0:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44790 (0xaef6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 21 07:43:24 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6805f71b-908e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:aa:c6:13:c4:8f:da:f2:7f:1f:d1:43:6f:6f: 87:d3:6d:bf:c3:ea:c4:3d:bd:8b:45:7d:ec:d5:9d: 9a:0a:ba:9d:5b:55:13:44:de:fb:97:8d:7f:fa:24: 1e:ee:fc:84:40:ee:77:34:1e:f2:a5:fc:85:7d:2b: 65:ac:a2:ac:5b:0b:a4:63:9f:7e:8f:32:8e:db:8b: 28:6c:41:87:8d:8e:30:d9:f3:2e:e2:a9:67:87:16: f7:56:61:85:b4:70:01:5d:df:29:84:d2:69:d8:d2: 4a:ed:b5:06:e1:19:a3:1e:df:ec:5b:7b:38:7a:e2: b3:a5:3e:72:dd:e7:6c:be:68:93:b1:a9:dc:37:39: f7:b8:af:50:52:fe:a3:96:5a:67:80:d7:b6:aa:b6: fa:4c:e0:47:ef:2b:00:ed:26:d9:10:4a:e3:dd:d0: e3:65:63:ee:3b:1e:58:70:a9:93:d1:d2:cb:7b:5a: d9:87:8c:0e:2a:4a:c8:46:96:b3:5a:95:3e:3a:4e: 78:96:d8:ba:99:8b:a6:50:05:07:64:ae:97:e1:34: 28:0a:a3:f7:fe:16:1d:b2:18:a5:5c:d3:8e:94:14: 6d:8d:ce:33:fa:3c:ae:c9:db:3f:cd:33:c0:4a:12: f8:21:fa:b0:2d:77:0b:ae:15:20:3c:ae:09:17:df: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:07:EE:93:79:95:3A:F8:39:75:0A:BA:FD:77:A3:38:22:D6:CF:D0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4DB736F81E8411F0A2EC6E64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.124.0/22 103.46.194.0/23 103.65.28.0/22 103.158.105.0/24 103.199.120.0/22 103.237.156.0/22 IPv6: 2001:df1:6a40::/48 2406:16c0::/32 Signature Algorithm: sha256WithRSAEncryption a6:66:18:b7:01:f6:9a:ae:54:71:cd:4c:eb:99:0d:64:f9:7a: 66:51:a8:d3:93:ce:d6:fb:e5:e6:6f:01:c8:2c:31:e8:db:4f: 4a:e1:e6:39:3b:a1:31:b8:10:02:93:fa:68:90:39:fd:23:f9: 14:bd:fb:55:a6:0b:52:18:5b:43:d6:9b:ca:0a:50:35:df:90: 50:6b:d9:7b:65:ab:f4:08:4a:f8:5b:b8:ef:4c:80:2c:1e:e1: c9:9f:83:7f:80:2a:b4:d6:5d:09:ed:34:cb:fe:d5:9b:b9:9a: 5c:f5:50:f0:f4:4b:c4:51:59:d9:09:38:74:ee:9b:40:8c:2b: a5:08:cd:22:07:2a:f7:07:05:ab:7e:c6:9a:d4:4d:06:2d:d7: 6d:fa:6a:5a:93:60:34:be:cc:33:d8:ce:15:94:85:03:9f:06: 0e:92:8e:90:fb:52:ee:cc:84:28:e8:03:51:aa:81:74:b3:79: a2:ec:af:df:06:90:e3:02:a8:78:93:75:39:fd:e6:d9:f5:78: 32:4e:d1:5a:e5:30:1d:3f:f3:05:77:7a:0b:89:a9:0f:b5:19: 2a:85:33:ca:13:27:fa:a3:86:fa:ae:fa:b6:1b:3c:58:70:4c: 5f:5e:3a:25:74:f8:8e:db:a7:cc:08:6b:3b:7d:41:59:d6:8a: 38:05:ad:52 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIDAK72MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQyMTA3NDMyNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgwNWY3MWItOTA4ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKqxhPEj9ryfx/RQ29vh9Ntv8PqxD29i0V97NWdmgq6nVtVE0Te+5eNf/ok Hu78hEDudzQe8qX8hX0rZayirFsLpGOffo8yjtuLKGxBh42OMNnzLuKpZ4cW91Zh hbRwAV3fKYTSadjSSu21BuEZox7f7Ft7OHris6U+ct3nbL5ok7Gp3Dc597ivUFL+ o5ZaZ4DXtqq2+kzgR+8rAO0m2RBK493Q42Vj7jseWHCpk9HSy3ta2YeMDipKyEaW s1qVPjpOeJbYupmLplAFB2Sul+E0KAqj9/4WHbIYpVzTjpQUbY3OM/o8rsnbP80z wEoS+CH6sC13C64VIDyuCRffWH0CAwEAAaOCAsswggLHMB0GA1UdDgQWBBS8B+6T eZU6+Dl1Crr9d6M4ItbP0DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzREQjczNkY4 MUU4NDExRjBBMkVDNkU2NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFUGCCsGAQUFBwEHAQH/ BEYwRDAqBAIAATAkAwQCLXh8AwQBZy7CAwQCZ0EcAwQAZ55pAwQCZ8d4AwQCZ+2c MBYEAgACMBADBwAgAQ3xakADBQAkBhbAMA0GCSqGSIb3DQEBCwUAA4IBAQCmZhi3 AfaarlRxzUzrmQ1k+XpmUajTk87W++XmbwHILDHo209K4eY5O6ExuBACk/pokDn9 I/kUvftVpgtSGFtD1pvKClA135BQa9l7Zav0CEr4W7jvTIAsHuHJn4N/gCq01l0J 7TTL/tWbuZpc9VDw9EvEUVnZCTh07ptAjCulCM0iByr3BwWrfsaa1E0GLddt+mpa k2A0vswz2M4VlIUDnwYOko6Q+1LuzIQo6ANRqoF0s3mi7K/fBpDjAqh4k3U5/ebZ 9XgyTtFa5TAdP/MFd3oLiakPtRkqhTPKEyf6o4b6rvq2GzxYcExfXjoldPiO26fM CGs7fUFZ1oo4Ba1S -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:11 2025 by rpki-client