$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD0CEFFA108511F09C2A8074C4F9AE02.roa File: BD0CEFFA108511F09C2A8074C4F9AE02.roa (raw, json) Hash identifier: 5BBCPYyoB5XaKuyboasDVjke6+0MUaJfBabp/g9I+2A= Subject key identifier: 48:A7:D5:AD:10:2E:A5:E1:61:62:D0:7C:CE:B6:E4:C7:A2:88:B8:4D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AD99 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD0CEFFA108511F09C2A8074C4F9AE02.roa Signing time: Thu 03 Apr 2025 12:18:24 +0000 ROA not before: Thu 03 Apr 2025 12:18:24 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135253 IP address blocks: 45.251.116.0/24 maxlen: 24 45.251.117.0/24 maxlen: 24 45.251.118.0/24 maxlen: 24 45.251.119.0/24 maxlen: 24 103.116.18.0/23 maxlen: 24 103.220.88.0/24 maxlen: 24 103.220.89.0/24 maxlen: 24 103.220.90.0/24 maxlen: 24 103.220.91.0/24 maxlen: 24 2401:5940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44441 (0xad99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 3 12:18:24 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67ee7c8f-f831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:f9:16:4d:ed:76:0d:e7:4e:0c:c3:6a:5b: 99:ea:51:11:e8:ca:9f:67:4d:26:bf:f7:81:28:06: 4e:5f:88:b1:48:4e:ae:60:87:f4:1b:23:92:78:e3: 64:44:d6:d7:fc:05:64:bb:86:3a:cd:24:c7:20:8a: 6d:7a:4f:bc:8c:0d:26:e1:13:91:4a:cb:3b:4a:e5: ab:a6:62:6c:9c:0d:f0:be:ca:5e:aa:53:21:c7:81: c2:74:33:7c:ca:b4:39:b9:ff:84:e6:b0:39:3a:64: 32:21:54:05:40:5b:31:9e:08:ef:67:b9:b2:3a:c2: 52:15:fb:55:20:33:fb:70:b3:dc:0b:20:3f:3a:0c: ac:37:97:79:4f:01:a3:84:d2:41:8c:33:5b:d8:0d: 1d:b6:a8:0f:b0:35:c5:10:1c:24:9f:e2:a5:2c:dd: e6:e9:a2:60:96:b2:25:f0:29:af:e4:a9:b2:97:e8: 36:bb:18:61:30:32:ec:d5:a1:f4:3b:a0:13:ef:90: 81:cb:3e:fd:3b:9b:95:3b:e3:e6:46:46:3d:95:b6: 91:68:a8:0b:1a:61:17:13:62:f2:63:1b:53:36:e4: 9e:1e:df:ea:c1:3e:39:ca:a5:bd:98:09:c3:20:a4: 76:50:2a:ed:ca:99:98:56:b3:5f:13:f6:42:90:cd: e6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A7:D5:AD:10:2E:A5:E1:61:62:D0:7C:CE:B6:E4:C7:A2:88:B8:4D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD0CEFFA108511F09C2A8074C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.251.116.0/22 103.116.18.0/23 103.220.88.0/22 IPv6: 2401:5940::/32 Signature Algorithm: sha256WithRSAEncryption 1c:53:1d:1e:e8:9e:31:32:70:3a:ec:08:e2:29:de:0d:69:9e: 51:85:07:68:c4:d8:de:08:0b:d5:17:73:7a:69:b6:ad:54:e4: a0:7d:7e:71:f4:a8:66:58:66:13:2b:85:04:5c:46:02:4b:1b: ca:20:2d:47:42:ea:22:a8:61:cd:f0:6c:d8:5a:ee:9e:e0:e3: b2:d2:b6:75:cc:56:3b:ba:d8:da:e3:61:65:b8:9d:d9:45:6f: 81:f6:1a:18:bb:15:d5:18:b1:81:40:ee:97:75:67:3b:e6:83: a0:25:4f:b8:b1:8e:54:ce:02:75:dd:aa:eb:35:d6:81:24:22: 9d:7d:c7:10:51:8e:11:f3:5a:3b:7e:07:ef:5b:79:e7:35:c1: 4f:90:2f:16:2a:01:d4:e6:ff:38:d3:5a:b0:3f:2b:cb:30:01: 97:6d:88:e2:bc:f5:4b:8d:07:20:2d:be:43:e6:ff:8a:bc:af: 4f:67:de:e2:99:a0:71:7a:ae:e1:39:21:6d:41:93:b0:4e:04: c5:64:b3:3a:c0:f6:82:db:42:1f:2b:63:92:f9:e4:ec:38:3a: a3:22:f8:d6:90:c5:12:ae:84:9b:05:4d:57:36:63:b4:f5:b5: d9:63:f5:b1:da:96:e0:08:f5:65:b4:e9:af:7b:14:3a:fe:44: 55:26:dd:21 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIDAK2ZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQwMzEyMTgyNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdlZTdjOGYtZjgzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMV2+RZN7XYN504Mw2pbmepREejKn2dNJr/3gSgGTl+IsUhOrmCH9Bsjknjj ZETW1/wFZLuGOs0kxyCKbXpPvIwNJuETkUrLO0rlq6ZibJwN8L7KXqpTIceBwnQz fMq0Obn/hOawOTpkMiFUBUBbMZ4I72e5sjrCUhX7VSAz+3Cz3AsgPzoMrDeXeU8B o4TSQYwzW9gNHbaoD7A1xRAcJJ/ipSzd5umiYJayJfApr+SpspfoNrsYYTAy7NWh 9DugE++Qgcs+/TublTvj5kZGPZW2kWioCxphFxNi8mMbUzbknh7f6sE+OcqlvZgJ wyCkdlAq7cqZmFazXxP2QpDN5jsCAwEAAaOCArAwggKsMB0GA1UdDgQWBBRIp9Wt EC6l4WFi0HzOtuTHooi4TTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JEMENFRkZB MTA4NTExRjA5QzJBODA3NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDoGCCsGAQUFBwEHAQH/ BCswKTAYBAIAATASAwQCLft0AwQBZ3QSAwQCZ9xYMA0EAgACMAcDBQAkAVlAMA0G CSqGSIb3DQEBCwUAA4IBAQAcUx0e6J4xMnA67AjiKd4NaZ5RhQdoxNjeCAvVF3N6 abatVOSgfX5x9KhmWGYTK4UEXEYCSxvKIC1HQuoiqGHN8GzYWu6e4OOy0rZ1zFY7 utja42FluJ3ZRW+B9hoYuxXVGLGBQO6XdWc75oOgJU+4sY5UzgJ13arrNdaBJCKd fccQUY4R81o7fgfvW3nnNcFPkC8WKgHU5v8401qwPyvLMAGXbYjivPVLjQcgLb5D 5v+KvK9PZ97imaBxeq7hOSFtQZOwTgTFZLM6wPaC20IfK2OS+eTsODqjIvjWkMUS roSbBU1XNmO09bXZY/Wx2pbgCPVltOmvexQ6/kRVJt0h -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:09 2025 by rpki-client