$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/408DE3B40FA711F0BEB34F6EC4F9AE02.roa File: 408DE3B40FA711F0BEB34F6EC4F9AE02.roa (raw, json) Hash identifier: vONn8l6w72DMFYqx75RNhHDmix8TyF6JBgodZSUdb78= Subject key identifier: 7D:BF:4A:8A:C9:52:63:C1:B9:B6:FB:CA:AA:DA:4E:2F:A7:73:2F:E1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AD6A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/408DE3B40FA711F0BEB34F6EC4F9AE02.roa Signing time: Wed 02 Apr 2025 09:45:47 +0000 ROA not before: Wed 02 Apr 2025 09:45:47 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138781 IP address blocks: 103.135.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44394 (0xad6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Apr 2 09:45:47 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67ed074a-4c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:9e:e2:53:6d:48:ef:4d:27:f5:31:86:25: 46:77:13:ff:5b:8b:71:5e:da:3e:02:a4:da:56:fe: 05:1b:8e:40:f8:a5:10:cb:7a:06:07:48:a5:b9:ed: 60:cd:27:c6:66:b5:39:a0:87:57:b0:61:31:7e:9a: 7d:1a:81:a1:e2:bf:c4:96:45:d1:54:45:83:21:22: 42:41:1f:6f:6c:2c:80:80:fb:2c:30:64:1e:a4:f5: e0:3d:1a:52:1f:38:ba:4e:c8:94:15:27:d6:d5:64: 81:fa:ca:90:f8:4e:dc:b5:4b:4c:05:58:33:7a:5f: 94:40:37:dd:1f:f8:87:1c:cc:51:c3:e5:bd:b0:8f: 3f:04:f3:37:f5:b6:06:6a:1c:0c:04:b2:66:eb:36: 5d:74:7a:ca:2b:4c:ae:38:d4:88:40:9c:c7:00:aa: 71:e7:11:ca:05:71:41:d7:d6:3f:87:17:c5:9f:9d: 13:7c:b1:cd:6c:0a:81:a0:b2:6f:b3:b3:70:64:88: 38:87:6f:2e:67:6c:6b:16:ee:08:24:cc:8b:84:62: d1:54:91:ae:99:67:80:33:68:8f:4e:a7:88:71:28: 9d:f0:d4:fb:71:dc:17:95:88:8a:c6:39:b5:57:a4: 47:d0:04:7a:1e:f5:cd:2f:1f:e5:f7:d4:fd:98:0e: e4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BF:4A:8A:C9:52:63:C1:B9:B6:FB:CA:AA:DA:4E:2F:A7:73:2F:E1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/408DE3B40FA711F0BEB34F6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.8.0/22 Signature Algorithm: sha256WithRSAEncryption 52:21:58:c4:c8:15:4f:e5:7d:fd:8a:0b:34:c2:50:59:0f:5b: 11:e2:ad:70:e8:24:dc:a7:58:b6:8b:b2:7c:e2:08:4d:79:6a: 26:c5:8d:d8:57:9d:70:fc:2c:b6:c3:70:4b:91:5d:71:91:4b: b5:d2:73:64:d0:fb:05:dc:fb:35:aa:dc:86:45:7a:ef:db:49: 21:ee:87:d9:e1:59:21:ba:09:44:13:a7:3a:30:20:56:d7:11: 79:e8:6a:ff:0f:5c:f8:36:41:4b:4f:87:db:0b:3b:e7:8f:34: b6:71:79:9d:93:aa:7f:64:41:87:71:d6:ff:67:4a:45:bc:02: 57:7d:6d:56:8d:92:4a:da:f4:74:f4:60:ad:68:c7:5f:b6:1d: 22:1a:c9:90:a3:29:c2:29:47:ae:ae:eb:c5:d2:84:29:a4:76: 8d:ee:a0:4f:1c:8e:e9:ac:a9:07:02:2e:c8:39:29:1f:f6:bb: fc:a4:fb:8d:7d:60:2c:7b:3b:2e:61:4d:10:a3:6d:25:5a:e6: 72:7c:11:80:39:d4:1f:43:ed:6c:48:b9:2a:f1:2d:63:f9:d8: 71:17:f0:c4:0b:81:1b:54:83:b9:9f:ef:7a:51:f1:d7:a1:d8: 84:38:b5:61:57:65:63:e4:32:b8:e6:da:05:0f:a9:ff:92:31: 8e:17:92:0a -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAK1qMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQwMjA5NDU0N1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdlZDA3NGEtNGMzYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOHnuJTbUjvTSf1MYYlRncT/1uLcV7aPgKk2lb+BRuOQPilEMt6BgdIpbnt YM0nxma1OaCHV7BhMX6afRqBoeK/xJZF0VRFgyEiQkEfb2wsgID7LDBkHqT14D0a Uh84uk7IlBUn1tVkgfrKkPhO3LVLTAVYM3pflEA33R/4hxzMUcPlvbCPPwTzN/W2 BmocDASyZus2XXR6yitMrjjUiECcxwCqcecRygVxQdfWP4cXxZ+dE3yxzWwKgaCy b7OzcGSIOIdvLmdsaxbuCCTMi4Ri0VSRrplngDNoj06niHEonfDU+3HcF5WIisY5 tVekR9AEeh71zS8f5ffU/ZgO5KMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBR9v0qK yVJjwbm2+8qq2k4vp3Mv4TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQwOERFM0I0 MEZBNzExRjBCRUIzNEY2RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ4cIMA0GCSqGSIb3DQEBCwUAA4IBAQBSIVjEyBVP5X39 igs0wlBZD1sR4q1w6CTcp1i2i7J84ghNeWomxY3YV51w/Cy2w3BLkV1xkUu10nNk 0PsF3Ps1qtyGRXrv20kh7ofZ4VkhuglEE6c6MCBW1xF56Gr/D1z4NkFLT4fbCzvn jzS2cXmdk6p/ZEGHcdb/Z0pFvAJXfW1WjZJK2vR09GCtaMdfth0iGsmQoynCKUeu ruvF0oQppHaN7qBPHI7prKkHAi7IOSkf9rv8pPuNfWAsezsuYU0Qo20lWuZyfBGA OdQfQ+1sSLkq8S1j+dhxF/DEC4EbVIO5n+96UfHXodiEOLVhV2Vj5DK45toFD6n/ kjGOF5IK -----END CERTIFICATE-----Generated at Fri Apr 4 11:16:04 2025 by rpki-client