$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91BF097EC3D311ED97604930C4F9AE02.roa File: 91BF097EC3D311ED97604930C4F9AE02.roa (raw, json) Hash identifier: 6CzrzGNFtnm26uYjZ5WnrA6wB/yXy0LBT4NbH3/kUrY= Subject key identifier: 42:FF:68:4F:44:44:20:CF:38:16:D1:47:0D:75:C0:50:33:77:12:3E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: ADAF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91BF097EC3D311ED97604930C4F9AE02.roa Signing time: Fri 04 Apr 2025 08:50:57 +0000 ROA not before: Fri 04 Apr 2025 08:50:57 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150596 IP address blocks: 45.123.9.0/24 maxlen: 24 45.123.11.0/24 maxlen: 24 103.38.200.0/24 maxlen: 24 103.38.201.0/24 maxlen: 24 103.110.180.0/23 maxlen: 24 103.188.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44463 (0xadaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 4 08:50:57 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67ef9d71-9fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:76:30:59:a6:1d:69:f8:58:72:da:32:33: 4b:81:d7:8a:28:7f:97:7b:4f:11:ca:78:46:90:ea: 30:f9:22:c9:71:b0:ae:28:01:21:f2:86:4a:63:c1: 5b:cc:d9:4f:64:55:a0:2b:79:10:8c:fa:73:25:91: c5:cb:09:49:ed:05:54:12:f3:14:46:04:e3:e6:8b: f2:8a:54:70:a5:32:7a:d8:90:7e:6e:bc:27:1c:39: d0:5d:1d:d3:b5:df:a9:d9:84:bc:b2:b3:39:e2:3b: d1:34:7e:23:27:0b:f0:91:83:66:ff:d4:ad:87:96: f5:11:5a:2e:85:ae:68:9f:f3:3c:ee:9b:84:33:14: 89:e1:df:27:26:e6:ac:0a:b4:f4:82:d1:6d:25:89: 7d:bd:4a:37:54:44:ea:0b:3d:a9:3b:d3:18:25:be: 93:6a:c2:cc:b8:75:bc:78:5b:31:03:79:e7:a1:04: 0d:00:f0:0d:59:7e:db:c2:b1:82:54:58:de:09:d9: 4b:07:a1:39:65:3b:65:13:06:06:17:37:4d:36:8e: ee:3b:3d:22:6b:c1:35:a8:09:fa:8f:84:8f:f1:bb: 4f:1c:e5:6f:50:77:ab:3a:d7:12:90:07:b2:ee:2f: 82:94:d4:76:7d:05:d9:14:f8:50:19:99:fb:53:d2: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FF:68:4F:44:44:20:CF:38:16:D1:47:0D:75:C0:50:33:77:12:3E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91BF097EC3D311ED97604930C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.123.9.0/24 45.123.11.0/24 103.38.200.0/23 103.110.180.0/23 103.188.127.0/24 Signature Algorithm: sha256WithRSAEncryption 18:cf:eb:5e:ad:63:5a:ca:fd:20:7e:1f:9b:8b:76:ff:09:b6: 74:ff:69:00:3f:4b:9d:dd:d2:a6:fe:c2:e1:c5:ca:70:2a:d8: d7:21:45:34:26:a2:64:20:3d:5d:6c:75:f9:9c:f8:9e:e3:fa: ae:af:22:88:91:78:38:bf:af:93:d3:b7:3e:8e:4a:58:88:58: 8d:09:8e:d8:86:15:c0:54:43:f8:9a:89:3d:ae:f8:18:ba:56: 1c:3d:f2:92:9e:79:fb:d1:7d:16:d2:b4:cd:65:3d:33:c4:90: 5c:cd:c0:1f:9f:48:05:d2:e8:f4:18:13:2f:8a:f3:78:ad:0b: 86:fa:c9:a4:bd:fe:bf:da:a0:d1:c8:bd:00:69:b0:5b:fe:10: 08:24:c9:5e:f6:90:c8:3a:91:13:58:57:15:0e:65:62:b2:4a: 52:c3:07:e1:15:5e:05:63:b4:d6:3b:04:00:23:53:88:c4:1e: 37:e9:42:da:58:d6:58:90:61:b9:d6:8d:84:1c:c5:a0:7b:e2: e1:33:29:99:25:ab:57:c0:cc:bc:e0:c0:6d:35:25:42:29:25: d9:d1:6e:6b:8d:a8:e1:f6:6f:b8:66:8f:ae:8a:3b:62:24:c4: df:8d:48:40:66:71:7a:73:f1:11:35:1e:ba:76:6d:8f:f2:22: e8:2c:2d:09 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAK2vMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQwNDA4NTA1N1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdlZjlkNzEtOWZhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/YdjBZph1p+Fhy2jIzS4HXiih/l3tPEcp4RpDqMPkiyXGwrigBIfKGSmPB W8zZT2RVoCt5EIz6cyWRxcsJSe0FVBLzFEYE4+aL8opUcKUyetiQfm68Jxw50F0d 07XfqdmEvLKzOeI70TR+IycL8JGDZv/UrYeW9RFaLoWuaJ/zPO6bhDMUieHfJybm rAq09ILRbSWJfb1KN1RE6gs9qTvTGCW+k2rCzLh1vHhbMQN556EEDQDwDVl+28Kx glRY3gnZSwehOWU7ZRMGBhc3TTaO7js9ImvBNagJ+o+Ej/G7Txzlb1B3qzrXEpAH su4vgpTUdn0F2RT4UBmZ+1PSs+0CAwEAAaOCAq0wggKpMB0GA1UdDgQWBBRC/2hP REQgzzgW0UcNdcBQM3cSPjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkxQkYwOTdF QzNEMzExRUQ5NzYwNDkzMEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDcGCCsGAQUFBwEHAQH/ BCgwJjAkBAIAATAeAwQALXsJAwQALXsLAwQBZybIAwQBZ260AwQAZ7x/MA0GCSqG SIb3DQEBCwUAA4IBAQAYz+terWNayv0gfh+bi3b/CbZ0/2kAP0ud3dKm/sLhxcpw KtjXIUU0JqJkID1dbHX5nPie4/quryKIkXg4v6+T07c+jkpYiFiNCY7YhhXAVEP4 mok9rvgYulYcPfKSnnn70X0W0rTNZT0zxJBczcAfn0gF0uj0GBMvivN4rQuG+smk vf6/2qDRyL0AabBb/hAIJMle9pDIOpETWFcVDmViskpSwwfhFV4FY7TWOwQAI1OI xB436ULaWNZYkGG51o2EHMWge+LhMymZJatXwMy84MBtNSVCKSXZ0W5rjajh9m+4 Zo+uijtiJMTfjUhAZnF6c/ERNR66dm2P8iLoLC0J -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:07 2025 by rpki-client