$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF596AC3B9211EBBD73D178C4F9AE02.roa File: 2FF596AC3B9211EBBD73D178C4F9AE02.roa (raw, json) Hash identifier: iS+4A4uDo4TWaXHNn9vXDH/c35jlT03Vm0SN6hXSSVU= Subject key identifier: FE:83:00:14:09:97:7A:96:F4:1F:49:8F:BF:7B:CC:B9:F4:A3:AC:C1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A742 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF596AC3B9211EBBD73D178C4F9AE02.roa Signing time: Fri 21 Feb 2025 08:30:41 +0000 ROA not before: Fri 21 Feb 2025 08:30:41 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141317 IP address blocks: 103.49.164.0/24 maxlen: 24 103.49.165.0/24 maxlen: 24 103.159.152.0/23 maxlen: 24 103.162.161.0/24 maxlen: 24 2001:df5:8c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 12:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42818 (0xa742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Feb 21 08:30:41 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67b839b1-bc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:50:7a:42:1e:66:d7:5a:f5:1d:ca:05:c7: ed:aa:67:63:3a:ea:1f:1f:51:14:34:02:dc:21:c4: 5d:fa:3b:12:b3:fd:65:d9:08:5d:58:44:c4:b4:82: bb:bc:19:02:b9:9e:39:02:52:b3:65:6d:89:2f:8f: ed:26:ab:e3:f1:7c:05:b8:0e:4b:e0:8c:7c:37:ba: 01:70:47:53:98:6e:15:ed:dd:d8:f8:46:8c:7c:87: 53:5d:73:ce:25:e1:97:3b:4c:0e:f4:23:32:f4:e6: 8f:02:04:75:c6:41:33:91:4d:53:3b:eb:8f:d6:41: 13:74:76:3a:3b:1f:49:c2:d4:e3:12:04:17:52:40: 0c:a4:1a:f7:6c:4f:cd:b2:73:8b:90:74:18:a4:8b: 93:65:5d:2f:6a:00:a6:98:d9:8c:ec:cb:d6:b6:77: b5:35:7f:60:20:44:ae:24:09:15:8f:98:1d:d0:15: 1c:55:25:f7:43:79:57:9c:05:9c:34:e6:32:f1:cf: fc:4b:16:3d:0c:25:8b:d7:81:f9:41:ed:8e:7a:f5: 29:92:51:2b:72:90:46:af:2d:30:06:c2:9f:83:33: 38:0a:1f:60:e0:14:c4:9c:48:9f:dd:09:34:a4:73: e3:2b:3a:e0:03:c7:79:5e:d2:71:45:0f:41:af:34: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:83:00:14:09:97:7A:96:F4:1F:49:8F:BF:7B:CC:B9:F4:A3:AC:C1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF596AC3B9211EBBD73D178C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.49.164.0/23 103.159.152.0/23 103.162.161.0/24 IPv6: 2001:df5:8c80::/48 Signature Algorithm: sha256WithRSAEncryption 31:60:81:80:cf:4d:9c:d6:fa:36:d6:70:93:61:08:b9:38:0f: d4:36:46:a4:25:e9:7b:61:a7:b6:32:b1:5b:2b:5e:73:a0:ca: 46:78:70:69:85:50:28:74:ac:6a:a0:d6:8c:00:17:f6:55:87: 6a:5a:45:cc:4c:b2:af:1b:c9:ea:a6:eb:c5:3b:7a:7a:6c:23: 6c:2e:a6:4c:42:69:ce:fd:a9:be:c5:bd:c0:5b:26:b7:83:5b: 5d:13:8f:64:76:8c:29:e5:fa:df:e3:d4:91:5d:af:e4:57:9f: b9:3b:30:69:ba:e3:9d:b6:79:89:e7:f6:83:64:fe:76:60:d7: 89:1a:68:9a:14:1c:f3:19:77:66:3f:cc:44:cd:a0:68:df:ec: a5:e2:09:4b:29:77:81:d5:9f:39:e2:39:07:b5:ab:f8:9f:e0: dd:32:49:66:5e:40:45:6e:94:d2:8c:73:84:0e:28:12:fb:c4: 21:b4:2f:aa:c3:8e:a8:bb:e2:07:ee:23:d4:35:1f:49:02:ce: 38:74:20:98:a6:c6:16:68:d0:c0:bc:34:f1:ef:20:49:f9:6f: e6:70:63:b1:cf:09:28:1d:34:b3:48:33:ad:83:7f:a3:a3:66: 4b:f0:8f:34:c8:96:6f:07:32:5a:74:2e:bf:64:d0:2f:d0:60: 65:c2:f2:76 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDAKdCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDIyMTA4MzA0MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdiODM5YjEtYmM2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEUUHpCHmbXWvUdygXH7apnYzrqHx9RFDQC3CHEXfo7ErP9ZdkIXVhExLSC u7wZArmeOQJSs2VtiS+P7Sar4/F8BbgOS+CMfDe6AXBHU5huFe3d2PhGjHyHU11z ziXhlztMDvQjMvTmjwIEdcZBM5FNUzvrj9ZBE3R2OjsfScLU4xIEF1JADKQa92xP zbJzi5B0GKSLk2VdL2oAppjZjOzL1rZ3tTV/YCBEriQJFY+YHdAVHFUl90N5V5wF nDTmMvHP/EsWPQwli9eB+UHtjnr1KZJRK3KQRq8tMAbCn4MzOAofYOAUxJxIn90J NKRz4ys64APHeV7ScUUPQa802ysCAwEAAaOCArIwggKuMB0GA1UdDgQWBBT+gwAU CZd6lvQfSY+/e8y59KOswTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJGRjU5NkFD M0I5MjExRUJCRDczRDE3OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDwGCCsGAQUFBwEHAQH/ BC0wKzAYBAIAATASAwQBZzGkAwQBZ5+YAwQAZ6KhMA8EAgACMAkDBwAgAQ31jIAw DQYJKoZIhvcNAQELBQADggEBADFggYDPTZzW+jbWcJNhCLk4D9Q2RqQl6Xthp7Yy sVsrXnOgykZ4cGmFUCh0rGqg1owAF/ZVh2paRcxMsq8byeqm68U7enpsI2wupkxC ac79qb7FvcBbJreDW10Tj2R2jCnl+t/j1JFdr+RXn7k7MGm64522eYnn9oNk/nZg 14kaaJoUHPMZd2Y/zETNoGjf7KXiCUspd4HVnzniOQe1q/if4N0ySWZeQEVulNKM c4QOKBL7xCG0L6rDjqi74gfuI9Q1H0kCzjh0IJimxhZo0MC8NPHvIEn5b+ZwY7HP CSgdNLNIM62Df6OjZkvwjzTIlm8HMlp0Lr9k0C/QYGXC8nY= -----END CERTIFICATE-----Generated at Fri Apr 4 01:41:33 2025 by rpki-client