$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/555E0D90B71F11EFBBE56410C4F9AE02.roa File: 555E0D90B71F11EFBBE56410C4F9AE02.roa (raw, json) Hash identifier: Yun2AD2EJLYSRV9yxmCnTJUpxZFk9/O+PcxovQCtz2I= Subject key identifier: A6:1E:46:84:6F:C4:45:96:40:E8:C6:A3:97:FC:AD:10:02:A5:AA:89 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: FD Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/555E0D90B71F11EFBBE56410C4F9AE02.roa Signing time: Fri 28 Feb 2025 09:09:29 +0000 ROA not before: Fri 28 Feb 2025 09:09:29 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 9400 IP address blocks: 103.118.40.0/22 maxlen: 22 103.118.40.0/24 maxlen: 24 103.118.41.0/24 maxlen: 24 103.118.42.0/24 maxlen: 24 103.118.43.0/24 maxlen: 24 103.236.224.0/24 maxlen: 24 103.236.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F Validity Not Before: Feb 28 09:09:29 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67c17d49-9468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:50:65:73:fd:c9:f2:2f:d4:bf:e9:3e:e1: f5:ec:54:b6:92:31:2e:1b:b2:4c:5e:7d:b5:b0:c5: 59:34:ac:04:67:f7:e3:7e:15:23:12:85:53:7d:58: b7:43:ad:2e:20:70:c7:ec:64:0b:9d:f9:2a:f2:e7: b8:f0:ca:d1:76:39:75:e8:5e:0a:3c:28:4d:bb:78: 0a:dd:10:e6:b7:3a:c4:d0:62:2a:39:59:83:3f:62: 0d:21:4c:85:1e:d0:cd:3e:00:2f:cf:7d:c0:23:4a: bf:0f:cd:11:f3:7d:7f:a3:42:5c:2f:05:87:3b:c9: d7:23:2a:72:3f:4c:e5:29:94:94:25:c2:41:91:55: cb:eb:70:97:27:06:ce:28:86:0d:19:82:c5:6a:fb: 7f:63:13:e7:36:0b:7f:8a:90:67:5f:53:1e:5f:4c: f7:be:c7:b2:a8:0c:2c:73:af:52:5b:7f:0b:d0:ea: 3c:ca:2e:d1:e6:93:04:65:d1:eb:65:f6:5e:2c:f2: 9d:d5:5b:69:31:45:52:71:29:ba:b8:f4:a5:ec:28: 40:48:46:7b:c3:d2:bc:74:24:57:fd:d6:b1:0a:d2: 6e:5e:b7:fa:7f:b8:7c:44:95:c4:70:22:fe:99:2f: ea:e0:56:c7:e2:87:bc:51:91:2b:ae:5f:6e:d0:1b: eb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1E:46:84:6F:C4:45:96:40:E8:C6:A3:97:FC:AD:10:02:A5:AA:89 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/555E0D90B71F11EFBBE56410C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.40.0/22 103.236.224.0/23 Signature Algorithm: sha256WithRSAEncryption 04:7e:b2:d6:d4:15:36:60:30:d1:8a:b9:18:da:d6:8d:68:87: fd:85:97:23:85:5b:04:ef:f4:79:43:16:db:34:0d:f0:96:4a: 9a:cb:13:21:23:0d:f6:68:a6:60:7d:8c:05:25:f3:cb:ea:3b: 75:fa:9c:21:11:36:55:ca:bc:6d:e7:0e:36:dd:39:6b:c3:63: f7:27:47:5c:10:d2:b4:14:09:e8:84:f8:99:dc:99:d2:e8:d4: 64:45:f1:78:80:24:34:70:47:91:07:bf:d6:a4:ef:79:fa:6e: b4:32:ef:a7:18:e3:f2:d2:94:df:7a:9f:c3:96:48:e0:67:a3: 88:0c:0b:a6:ca:8c:d3:7f:e2:9b:6a:b4:f3:c2:5f:79:ce:74: 79:f4:d9:e9:83:c0:3b:c7:0f:7c:ce:71:73:f3:0a:99:2f:45: 06:1b:35:07:22:14:8c:ed:5b:71:01:60:63:03:d3:b4:70:74: ef:f3:39:2b:be:54:93:72:d3:5c:dd:59:70:83:d3:03:bf:64: 25:e7:02:4f:e3:fc:45:16:3e:d3:dd:08:cb:f7:ab:61:fa:a1: 20:45:43:e3:96:bb:c6:d9:37:55:e3:39:1b:0e:7f:c1:db:cd: 1f:7e:4a:ce:f9:ea:71:fc:31:19:2b:0a:85:98:3c:ba:a0:ee: de:1b:fe:d0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwMjI4MDkwOTI5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MxN2Q0OS05NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts5QZXP9yfIv1L/pPuH17FS2kjEuG7JMXn21sMVZNKwEZ/fjfhUjEoVTfVi3 Q60uIHDH7GQLnfkq8ue48MrRdjl16F4KPChNu3gK3RDmtzrE0GIqOVmDP2INIUyF HtDNPgAvz33AI0q/D80R831/o0JcLwWHO8nXIypyP0zlKZSUJcJBkVXL63CXJwbO KIYNGYLFavt/YxPnNgt/ipBnX1MeX0z3vseyqAwsc69SW38L0Oo8yi7R5pMEZdHr ZfZeLPKd1VtpMUVScSm6uPSl7ChASEZ7w9K8dCRX/daxCtJuXrf6f7h8RJXEcCL+ mS/q4FbH4oe8UZErrl9u0Bvr2QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKYeRoRv xEWWQOjGo5f8rRACpaqJMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2NkYvOEZDQzlEMjhDNkY5MTFFRTk3RTZGQjFEQzRGOUFFMDIvNTU1RTBEOTBC NzFGMTFFRkJCRTU2NDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJndigDBAFn7OAwDQYJKoZIhvcNAQELBQADggEBAAR+stbU FTZgMNGKuRja1o1oh/2FlyOFWwTv9HlDFts0DfCWSprLEyEjDfZopmB9jAUl88vq O3X6nCERNlXKvG3nDjbdOWvDY/cnR1wQ0rQUCeiE+JncmdLo1GRF8XiAJDRwR5EH v9ak73n6brQy76cY4/LSlN96n8OWSOBno4gMC6bKjNN/4ptqtPPCX3nOdHn02emD wDvHD3zOcXPzCpkvRQYbNQciFIztW3EBYGMD07RwdO/zOSu+VJNy01zdWXCD0wO/ ZCXnAk/j/EUWPtPdCMv3q2H6oSBFQ+OWu8bZN1XjORsOf8HbzR9+Ss756nH8MRkr CoWYPLqg7t4b/tA= -----END CERTIFICATE-----Generated at Sun Apr 6 04:00:11 2025 by rpki-client