$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E89D01ADF9711EF9A6E2E29C4F9AE02.roa File: 1E89D01ADF9711EF9A6E2E29C4F9AE02.roa (raw, json) Hash identifier: dAap7wJOIwCDknDQLQSfZneK7oKUC9ltpTMJdWsQIsk= Subject key identifier: 13:52:C9:EA:BD:DD:C9:8D:B0:CD:3E:02:1C:A5:CD:59:4C:DB:9B:F8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A44A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E89D01ADF9711EF9A6E2E29C4F9AE02.roa Signing time: Fri 31 Jan 2025 05:49:22 +0000 ROA not before: Fri 31 Jan 2025 05:49:22 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134936 IP address blocks: 103.206.176.0/23 maxlen: 24 103.206.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42058 (0xa44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Jan 31 05:49:22 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=679c6461-bcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:6f:ce:7a:49:72:4d:8b:75:07:6f:ce:bc: e1:b9:4f:61:ee:32:de:4d:f6:38:73:92:4f:41:0d: 1e:b4:7a:c3:3a:09:b0:b7:b0:c9:8b:94:7b:0f:df: 82:e2:95:19:d3:af:8b:5a:36:07:25:41:5c:43:fd: ed:e6:49:cc:cd:60:bd:cc:a6:a3:38:38:e6:56:49: 35:b7:24:e2:b9:59:bf:30:82:88:fe:63:af:7c:fa: 19:d1:6d:b1:78:79:d1:51:36:99:19:bc:92:3e:97: d5:de:65:71:8d:55:a1:d3:e6:a8:8e:b8:7d:82:f0: 37:98:e1:d0:24:04:3f:62:4f:59:0c:7f:86:30:f0: b4:d6:66:8b:3c:de:2c:5d:d0:e7:7a:e5:34:65:a0: ea:b3:15:1b:cf:cc:a9:2e:6e:2f:65:b2:56:7e:cf: f8:9d:80:38:e6:ce:ea:2a:1f:17:d9:7a:33:ab:5c: 58:57:20:3b:0a:a0:a3:fe:35:d4:15:e2:df:1f:15: ba:60:62:15:12:f8:eb:47:db:7e:00:b6:67:3b:d6: 21:4d:30:3d:7f:3c:b3:28:db:a4:cb:f1:73:90:bb: ae:a4:28:c5:ec:c8:e9:22:f4:58:84:ff:c4:f8:4d: 32:1e:69:ea:d1:04:4e:1d:71:cc:66:d9:7e:40:10: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:52:C9:EA:BD:DD:C9:8D:B0:CD:3E:02:1C:A5:CD:59:4C:DB:9B:F8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E89D01ADF9711EF9A6E2E29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.206.176.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:21:79:54:78:b3:a8:81:c7:fe:c6:a1:a1:9e:f4:1e:cb:83: f5:e5:79:4e:98:c0:b5:78:2b:ad:78:8f:c3:3a:64:ac:3f:c5: ab:b1:06:d5:c0:0e:22:7f:30:72:5a:ee:09:d7:56:df:92:d7: f9:22:a1:3a:28:b2:79:15:27:db:cd:c7:c7:0d:0d:83:49:39: 4e:4b:d6:95:54:3e:d9:2f:66:ae:0f:f9:c0:18:89:ec:c3:aa: ba:20:82:85:6c:54:4a:3e:2a:e5:ab:be:48:14:78:08:ee:d9: cf:8d:2f:90:91:01:61:bb:95:35:6d:44:5c:61:47:34:ff:ce: ae:e1:80:e9:68:7c:95:c6:17:ea:9b:d9:c4:33:e9:ec:7b:ac: 50:c6:69:1f:3a:81:84:46:d6:e7:46:b5:b2:9c:28:86:6f:cb: c0:13:26:38:e7:6b:57:5a:2b:ee:f8:1f:84:4d:da:3c:4d:f4: 35:d8:56:b1:2b:56:a8:b4:b9:b8:cc:e0:2c:18:e7:f5:3a:1a: f8:5a:ac:d1:f9:b3:32:4f:f0:de:d2:f5:a7:6b:ef:b2:3a:c7: 4f:b9:18:c6:9b:c1:3b:0e:19:23:bb:07:86:79:b8:fe:41:f9: 01:2d:aa:62:0b:a8:7f:43:1e:37:12:e5:00:63:2b:f1:5d:ef: 6b:3b:ef:9c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAKRKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDEzMTA1NDkyMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjc5YzY0NjEtYmNmZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKiBb856SXJNi3UHb8684blPYe4y3k32OHOST0ENHrR6wzoJsLewyYuUew/f guKVGdOvi1o2ByVBXEP97eZJzM1gvcymozg45lZJNbck4rlZvzCCiP5jr3z6GdFt sXh50VE2mRm8kj6X1d5lcY1VodPmqI64fYLwN5jh0CQEP2JPWQx/hjDwtNZmizze LF3Q53rlNGWg6rMVG8/MqS5uL2WyVn7P+J2AOObO6iofF9l6M6tcWFcgOwqgo/41 1BXi3x8VumBiFRL460fbfgC2ZzvWIU0wPX88syjbpMvxc5C7rqQoxezI6SL0WIT/ xPhNMh5p6tEETh1xzGbZfkAQzHsCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQTUsnq vd3JjbDNPgIcpc1ZTNub+DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFFODlEMDFB REY5NzExRUY5QTZFMkUyOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ86wMA0GCSqGSIb3DQEBCwUAA4IBAQB/IXlUeLOogcf+ xqGhnvQey4P15XlOmMC1eCuteI/DOmSsP8WrsQbVwA4ifzByWu4J11bfktf5IqE6 KLJ5FSfbzcfHDQ2DSTlOS9aVVD7ZL2auD/nAGInsw6q6IIKFbFRKPirlq75IFHgI 7tnPjS+QkQFhu5U1bURcYUc0/86u4YDpaHyVxhfqm9nEM+nse6xQxmkfOoGERtbn RrWynCiGb8vAEyY452tXWivu+B+ETdo8TfQ12FaxK1aotLm4zOAsGOf1Ohr4WqzR +bMyT/De0vWna++yOsdPuRjGm8E7DhkjuweGebj+QfkBLapiC6h/Qx43EuUAYyvx Xe9rO++c -----END CERTIFICATE-----Generated at Fri Apr 4 10:48:15 2025 by rpki-client