$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/36651CDCEEBD11EFAFE9FA67C4F9AE02.roa File: 36651CDCEEBD11EFAFE9FA67C4F9AE02.roa (raw, json) Hash identifier: +X0rDsfulM22qzGgb11C7YuLxKzsIJXLTQ1s4E1yKng= Subject key identifier: 66:72:53:7C:F5:B5:6A:7E:CA:39:CD:3C:04:44:7C:5B:03:C6:BF:88 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A6E3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/36651CDCEEBD11EFAFE9FA67C4F9AE02.roa Signing time: Wed 19 Feb 2025 12:29:50 +0000 ROA not before: Wed 19 Feb 2025 12:29:50 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 24029 IP address blocks: 103.97.92.0/22 maxlen: 24 203.119.49.0/24 maxlen: 24 203.119.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42723 (0xa6e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Feb 19 12:29:50 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67b5cebe-ebfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:c0:3a:aa:fe:bf:b0:1f:00:4f:8a:ce:98: 4b:c1:9b:24:d9:41:79:ee:8c:18:14:d2:c8:ef:5b: 40:67:ba:c3:91:ad:92:7c:82:3f:b8:9d:cb:48:b7: 65:91:de:c0:b5:03:be:57:dd:e9:2c:0f:fb:4f:5b: cf:42:f8:07:06:0e:88:fd:3e:c9:c7:b0:98:6b:d6: 8e:ba:26:2d:28:27:4d:d2:95:f5:d6:0f:f0:39:74: d9:a5:6c:1a:e7:51:dd:d1:ef:41:a3:d7:ca:39:78: 55:da:41:c4:9e:29:bc:ad:9e:95:c5:86:ba:d9:5e: 17:84:5a:07:38:57:b8:2e:ad:f1:3f:d7:04:bc:a1: 5a:15:11:5e:f3:f6:08:10:c3:03:23:7b:5a:4d:d2: 77:d5:e8:46:3b:05:6b:f5:1c:66:b1:ec:d7:2f:05: 80:ff:ef:b5:99:97:cc:48:7b:eb:d5:2e:c1:b2:ba: e4:d7:2a:95:6d:46:1d:81:a6:0e:ab:1c:dc:22:0f: 1a:4c:71:9d:08:fc:f0:ef:73:8f:58:6d:4f:89:00: 05:a1:02:52:a5:0c:4d:17:63:9d:67:6d:1b:79:1f: c2:f3:36:ac:15:de:43:39:c4:74:1f:4d:bd:4a:96: 64:a4:c8:95:2a:c1:20:18:4b:9c:ca:f5:47:55:d5: 5a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:72:53:7C:F5:B5:6A:7E:CA:39:CD:3C:04:44:7C:5B:03:C6:BF:88 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/36651CDCEEBD11EFAFE9FA67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.92.0/22 203.119.49.0-203.119.50.255 Signature Algorithm: sha256WithRSAEncryption 41:26:ff:80:f0:80:07:34:a4:fa:fd:e9:c5:0c:5d:7e:4e:69: 97:25:ea:88:bc:92:62:13:86:29:c7:c4:24:2c:a7:6b:86:5e: c0:3a:16:69:ef:26:12:1b:1d:48:5b:68:64:39:db:05:70:b7: cc:33:fa:ba:15:24:da:cc:ad:d8:62:31:5b:35:44:cb:96:a2: 55:65:9e:c1:a3:40:d1:ac:2e:0f:39:b5:ca:02:4b:e1:f3:ef: 6c:08:a9:2b:78:67:65:1c:c2:2b:f4:7e:1b:71:18:28:9c:2d: a6:4f:d5:3d:1e:9f:a2:b5:38:8f:bc:a8:d3:46:1b:c7:97:66: 4e:c6:83:ed:da:f5:e1:71:f2:42:12:fa:df:3f:12:de:23:9c: b4:81:a5:3b:12:cd:a0:64:82:eb:08:bc:8c:92:1d:c2:7e:0d: ad:60:30:20:72:87:80:60:28:cd:26:c6:f1:ac:92:88:ae:04: a2:d0:01:e2:c6:33:de:eb:c9:60:e7:56:c0:07:97:e1:46:b0: 24:4d:34:4a:55:35:c8:ad:b4:8b:1e:f4:ce:5e:1c:73:c8:f4: da:a3:a2:cb:82:51:dc:e9:fe:45:e8:51:89:ee:4d:83:23:b1: b8:3c:29:78:7a:8c:e3:2d:5c:ec:3c:dc:f1:3d:1f:01:aa:39: 46:11:6c:02 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIDAKbjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDIxOTEyMjk1MFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdiNWNlYmUtZWJmYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNPwDqq/r+wHwBPis6YS8GbJNlBee6MGBTSyO9bQGe6w5GtknyCP7idy0i3 ZZHewLUDvlfd6SwP+09bz0L4BwYOiP0+ycewmGvWjromLSgnTdKV9dYP8Dl02aVs GudR3dHvQaPXyjl4VdpBxJ4pvK2elcWGutleF4RaBzhXuC6t8T/XBLyhWhURXvP2 CBDDAyN7Wk3Sd9XoRjsFa/UcZrHs1y8FgP/vtZmXzEh769UuwbK65NcqlW1GHYGm Dqsc3CIPGkxxnQj88O9zj1htT4kABaECUqUMTRdjnWdtG3kfwvM2rBXeQznEdB9N vUqWZKTIlSrBIBhLnMr1R1XVWg8CAwEAAaOCAqMwggKfMB0GA1UdDgQWBBRmclN8 9bVqfso5zTwERHxbA8a/iDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM2NjUxQ0RD RUVCRDExRUZBRkU5RkE2N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC0GCCsGAQUFBwEHAQH/ BB4wHDAaBAIAATAUAwQCZ2FcMAwDBADLdzEDBADLdzIwDQYJKoZIhvcNAQELBQAD ggEBAEEm/4DwgAc0pPr96cUMXX5OaZcl6oi8kmIThinHxCQsp2uGXsA6FmnvJhIb HUhbaGQ52wVwt8wz+roVJNrMrdhiMVs1RMuWolVlnsGjQNGsLg85tcoCS+Hz72wI qSt4Z2Ucwiv0fhtxGCicLaZP1T0en6K1OI+8qNNGG8eXZk7Gg+3a9eFx8kIS+t8/ Et4jnLSBpTsSzaBkgusIvIySHcJ+Da1gMCByh4BgKM0mxvGskoiuBKLQAeLGM97r yWDnVsAHl+FGsCRNNEpVNcittIse9M5eHHPI9NqjosuCUdzp/kXoUYnuTYMjsbg8 KXh6jOMtXOw83PE9HwGqOUYRbAI= -----END CERTIFICATE-----Generated at Fri Apr 4 10:55:55 2025 by rpki-client