$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0786A1C322311F0A3585715C4F9AE02.roa File: A0786A1C322311F0A3585715C4F9AE02.roa (raw, json) Hash identifier: jqDSCVo/qP/cm596298c+CUonPnMMyw+kbKulnjU3zw= Subject key identifier: 70:59:D6:17:EE:78:EF:64:C8:71:84:60:52:0A:6F:19:4A:DA:31:DD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BB18 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0786A1C322311F0A3585715C4F9AE02.roa Signing time: Fri 16 May 2025 07:01:45 +0000 ROA not before: Fri 16 May 2025 07:01:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141312 IP address blocks: 103.159.10.0/23 maxlen: 24 103.185.202.0/23 maxlen: 24 103.191.90.0/23 maxlen: 24 203.145.52.0/24 maxlen: 24 203.145.53.0/24 maxlen: 24 2400:cc20::/32 maxlen: 32 2400:cc20::/48 maxlen: 48 2400:cc20:1::/48 maxlen: 48 2400:cc20:2::/48 maxlen: 48 2400:cc20:3::/48 maxlen: 48 2400:cc20:4::/48 maxlen: 48 2400:cc20:5::/48 maxlen: 48 2400:cc20:6::/48 maxlen: 48 2400:cc20:7::/48 maxlen: 48 2400:cc20:8::/48 maxlen: 48 2400:cc20:9::/48 maxlen: 48 2400:cc20:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47896 (0xbb18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 16 07:01:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6826e2d8-fd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3f:e5:a3:da:e8:6a:ea:f8:17:f0:5c:dd:ae: 94:08:f6:d3:61:b9:d3:43:f0:1d:8e:0f:9d:4a:b1: 78:38:d1:2f:42:51:ca:ef:3a:a3:3d:18:61:81:45: f0:ae:58:15:9a:94:c8:da:71:b3:03:1b:29:9f:b6: 5f:f2:1f:e6:26:ea:dc:2b:90:45:f1:40:02:f6:dd: 7d:fb:17:a7:a0:95:23:ac:42:b9:2b:95:02:02:7b: af:1d:25:af:df:a1:28:be:58:87:27:3d:0e:7e:47: 5e:57:e2:f2:00:c7:49:88:b3:67:16:e0:a2:21:94: 90:2d:49:5c:1b:f7:05:01:97:6a:23:6a:d9:b9:34: 62:f9:22:8f:1d:83:94:bf:26:82:f7:00:30:63:5c: 5e:7f:9b:a9:00:2c:a9:d4:b0:e5:df:18:9f:97:fc: 4f:cd:9b:68:3d:37:e9:18:d6:77:93:3d:f9:6b:3e: 12:e5:2d:46:08:c4:ce:2a:e9:b3:5a:5a:f8:6d:f6: 40:0a:38:eb:13:17:d7:8d:7d:f7:2e:9c:3d:92:d2: b3:5f:4d:2b:b1:e7:7f:7d:3c:77:29:bb:0a:a2:fb: d7:50:ff:71:a5:de:92:7a:88:87:25:ca:75:da:a0: ad:3d:77:b7:73:98:e2:62:4c:b6:22:e7:4c:10:64: 23:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:59:D6:17:EE:78:EF:64:C8:71:84:60:52:0A:6F:19:4A:DA:31:DD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0786A1C322311F0A3585715C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.10.0/23 103.185.202.0/23 103.191.90.0/23 203.145.52.0/23 IPv6: 2400:cc20::/32 Signature Algorithm: sha256WithRSAEncryption 19:14:a5:20:dc:72:89:98:83:c5:30:c7:b8:36:46:a2:7f:b3: ba:72:cc:26:86:78:9b:7c:f6:0f:d1:3c:ef:77:48:20:3a:eb: cd:14:6e:67:a6:66:ff:88:16:87:db:e3:86:dc:31:c6:72:bf: 62:c4:ea:40:4e:dd:e3:8d:8b:4e:2c:ad:9e:cc:71:46:e5:9f: 70:0a:57:cf:40:a2:fb:88:b4:ad:2f:31:71:d2:00:29:05:30: 0c:30:55:e9:67:55:c7:18:92:1a:3b:66:98:b6:ed:0f:51:67: e3:02:f9:51:f8:ed:6c:78:0f:73:ce:9f:8e:82:cc:a6:44:0d: 3a:6d:bc:c8:07:44:a5:9c:74:6a:07:fc:90:b3:70:8d:f6:8d: ea:e1:f4:ac:d0:73:76:2f:9f:aa:30:1f:48:8c:48:72:92:79: 0e:7b:93:a3:ce:a3:2c:28:36:ca:8a:e4:41:4e:d0:9d:ba:c6: 68:7b:94:98:57:fc:86:04:9e:03:07:a1:f8:5e:a5:de:c3:1c: 67:5f:a5:69:01:6b:2a:87:be:bf:64:e7:8e:c7:90:9e:0e:40: 90:9f:4f:e5:8f:26:8d:c4:7c:53:d9:64:b4:95:ce:f9:c2:f5: fa:3d:db:ac:36:78:fd:2c:ea:1f:53:c0:eb:9c:60:28:71:95: 3a:60:90:1c -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgIDALsYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUxNjA3MDE0NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgyNmUyZDgtZmQ5YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJg/5aPa6Grq+BfwXN2ulAj202G500PwHY4PnUqxeDjRL0JRyu86oz0YYYFF 8K5YFZqUyNpxswMbKZ+2X/If5ibq3CuQRfFAAvbdffsXp6CVI6xCuSuVAgJ7rx0l r9+hKL5Yhyc9Dn5HXlfi8gDHSYizZxbgoiGUkC1JXBv3BQGXaiNq2bk0Yvkijx2D lL8mgvcAMGNcXn+bqQAsqdSw5d8Yn5f8T82baD036RjWd5M9+Ws+EuUtRgjEzirp s1pa+G32QAo46xMX14199y6cPZLSs19NK7Hnf308dym7CqL711D/caXeknqIhyXK ddqgrT13t3OY4mJMtiLnTBBkI3cCAwEAAaOCArYwggKyMB0GA1UdDgQWBBRwWdYX 7njvZMhxhGBSCm8ZStox3TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0EwNzg2QTFD MzIyMzExRjBBMzU4NTcxNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEAGCCsGAQUFBwEHAQH/ BDEwLzAeBAIAATAYAwQBZ58KAwQBZ7nKAwQBZ79aAwQBy5E0MA0EAgACMAcDBQAk AMwgMA0GCSqGSIb3DQEBCwUAA4IBAQAZFKUg3HKJmIPFMMe4Nkaif7O6cswmhnib fPYP0Tzvd0ggOuvNFG5npmb/iBaH2+OG3DHGcr9ixOpATt3jjYtOLK2ezHFG5Z9w ClfPQKL7iLStLzFx0gApBTAMMFXpZ1XHGJIaO2aYtu0PUWfjAvlR+O1seA9zzp+O gsymRA06bbzIB0SlnHRqB/yQs3CN9o3q4fSs0HN2L5+qMB9IjEhyknkOe5OjzqMs KDbKiuRBTtCdusZoe5SYV/yGBJ4DB6H4XqXewxxnX6VpAWsqh76/ZOeOx5CeDkCQ n0/ljyaNxHxT2WS0lc75wvX6PdusNnj9LOofU8DrnGAocZU6YJAc -----END CERTIFICATE-----Generated at Sun Jun 15 10:09:26 2025 by rpki-client