$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D77AB3C2BC6B11EFAA982820C4F9AE02.roa File: D77AB3C2BC6B11EFAA982820C4F9AE02.roa (raw, json) Hash identifier: NqEYbW/dzNSpZb6n8UL4acwCJbER7+GiPqzT3uX1k7s= Subject key identifier: 4E:A5:C7:46:49:23:44:C3:2A:CB:7F:DB:D0:84:02:67:9D:85:62:43 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AF51 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D77AB3C2BC6B11EFAA982820C4F9AE02.roa Signing time: Wed 23 Apr 2025 05:28:17 +0000 ROA not before: Wed 23 Apr 2025 05:28:17 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135133 IP address blocks: 103.37.96.0/23 maxlen: 24 103.165.94.0/24 maxlen: 24 103.170.132.0/23 maxlen: 24 163.61.132.0/23 maxlen: 24 163.223.122.0/23 maxlen: 23 2401:f620::/32 maxlen: 32 2407:b240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 03:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44881 (0xaf51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 23 05:28:17 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=68087a71-a0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:1d:66:e6:0d:f1:e4:fa:52:47:5f:25:e9: 71:06:50:e3:de:b8:4a:fc:2a:df:4f:f6:69:ee:75: 15:da:85:99:17:e7:76:a1:cd:c7:c4:e8:ae:ea:59: 27:b1:75:8a:5f:01:42:90:6c:0e:fa:2e:39:c1:9b: 66:32:b5:b5:50:aa:23:1a:30:3c:29:12:04:d9:f1: 1c:a2:26:e5:bd:2c:2b:9b:44:03:da:da:1a:2a:7d: 07:34:68:aa:cb:4a:b7:85:7e:eb:7d:5a:ec:a2:9d: ff:58:af:30:b3:c0:82:09:54:4f:a8:3c:71:27:66: 40:4b:93:e9:52:f2:02:f9:50:89:21:9d:d0:71:bb: 24:cb:99:32:31:f1:e9:73:7d:6e:5d:12:e7:d8:71: c0:0b:ab:21:f7:cf:42:a5:3a:82:55:f8:64:bc:e0: df:04:63:ff:01:0f:aa:7e:5e:a2:a5:32:7a:c3:74: a9:7c:29:f6:ba:cf:d2:ca:01:f6:d1:b8:a1:5f:b8: e9:be:78:53:17:aa:22:32:27:f2:10:93:ff:ac:b8: 91:09:98:29:7b:b9:f2:f5:29:63:ba:31:bd:03:cd: 22:5a:13:22:4f:46:59:f6:75:8e:2d:51:dd:ae:e8: d1:ac:0c:05:da:8b:0f:67:26:35:69:be:6e:ac:ce: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A5:C7:46:49:23:44:C3:2A:CB:7F:DB:D0:84:02:67:9D:85:62:43 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D77AB3C2BC6B11EFAA982820C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.37.96.0/23 103.165.94.0/24 103.170.132.0/23 163.61.132.0/23 163.223.122.0/23 IPv6: 2401:f620::/32 2407:b240::/32 Signature Algorithm: sha256WithRSAEncryption 54:9d:f7:89:77:62:e2:a4:ae:be:87:23:df:70:9b:10:26:26: 72:1d:b7:f6:63:a5:a8:6f:7b:68:b3:9b:c1:e7:d1:53:9e:f7: 36:f0:65:44:ff:2e:7a:89:fe:61:1f:be:ff:55:60:aa:40:08: 60:df:75:38:83:24:aa:2e:e3:c4:fe:55:16:0b:ef:70:47:51: e7:80:a8:4a:94:69:33:f3:0f:dc:05:97:37:ad:2f:33:7e:d8: bd:7e:be:e7:01:21:e4:e9:61:3e:30:a5:fe:7a:90:b8:71:da: fe:9f:c1:1c:47:37:f6:89:04:a9:94:15:15:16:40:cd:89:29: cb:fc:9c:e6:af:af:e7:ca:12:39:4a:c9:6f:80:88:6c:00:99: 90:9b:ba:72:6a:d8:13:c6:2b:28:6d:ef:14:39:ec:31:53:f8: 8e:46:69:75:bf:24:d3:13:db:f7:ab:f3:8f:92:46:04:7e:d8: c4:83:79:59:92:15:6c:94:42:6b:6a:3d:93:1f:01:93:fa:d4: 96:d2:42:be:05:e3:eb:ca:3c:b8:26:64:24:98:c1:d7:0d:07: 40:e9:21:e9:f4:66:f5:21:e7:c7:89:cc:9e:86:1b:82:9e:4f: e4:c2:a6:65:c5:45:51:af:ad:db:80:4f:15:e1:e6:00:33:ae: 6e:8a:67:71 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIDAK9RMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQyMzA1MjgxN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgwODdhNzEtYTBiMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/jHWbmDfHk+lJHXyXpcQZQ4964Svwq30/2ae51FdqFmRfndqHNx8TorupZ J7F1il8BQpBsDvouOcGbZjK1tVCqIxowPCkSBNnxHKIm5b0sK5tEA9raGip9BzRo qstKt4V+631a7KKd/1ivMLPAgglUT6g8cSdmQEuT6VLyAvlQiSGd0HG7JMuZMjHx 6XN9bl0S59hxwAurIffPQqU6glX4ZLzg3wRj/wEPqn5eoqUyesN0qXwp9rrP0soB 9tG4oV+46b54UxeqIjIn8hCT/6y4kQmYKXu58vUpY7oxvQPNIloTIk9GWfZ1ji1R 3a7o0awMBdqLD2cmNWm+bqzODQMCAwEAAaOCAsMwggK/MB0GA1UdDgQWBBROpcdG SSNEwyrLf9vQhAJnnYViQzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q3N0FCM0My QkM2QjExRUZBQTk4MjgyMEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sME0GCCsGAQUFBwEHAQH/ BD4wPDAkBAIAATAeAwQBZyVgAwQAZ6VeAwQBZ6qEAwQBoz2EAwQBo996MBQEAgAC MA4DBQAkAfYgAwUAJAeyQDANBgkqhkiG9w0BAQsFAAOCAQEAVJ33iXdi4qSuvocj 33CbECYmch239mOlqG97aLObwefRU573NvBlRP8ueon+YR++/1VgqkAIYN91OIMk qi7jxP5VFgvvcEdR54CoSpRpM/MP3AWXN60vM37YvX6+5wEh5OlhPjCl/nqQuHHa /p/BHEc39okEqZQVFRZAzYkpy/yc5q+v58oSOUrJb4CIbACZkJu6cmrYE8YrKG3v FDnsMVP4jkZpdb8k0xPb96vzj5JGBH7YxIN5WZIVbJRCa2o9kx8Bk/rUltJCvgXj 68o8uCZkJJjB1w0HQOkh6fRm9SHnx4nMnoYbgp5P5MKmZcVFUa+t24BPFeHmADOu bopncQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:39 2025 by rpki-client