$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A1EF9BCFE3711EF9A63CD78C4F9AE02.roa File: 4A1EF9BCFE3711EF9A63CD78C4F9AE02.roa (raw, json) Hash identifier: +zpBtIaOdilv2Hw2Hkuj+Z6imW4VFSNm9HuAYlzqf4c= Subject key identifier: EB:1D:1E:72:FF:F7:44:88:5A:07:86:BF:EA:C2:49:9F:2C:4C:09:C3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A9FA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A1EF9BCFE3711EF9A63CD78C4F9AE02.roa Signing time: Tue 11 Mar 2025 05:16:19 +0000 ROA not before: Tue 11 Mar 2025 05:16:19 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 59194 IP address blocks: 103.105.72.0/24 maxlen: 24 103.209.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 15:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43514 (0xa9fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Mar 11 05:16:19 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67cfc722-9066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:9e:cc:0f:68:a6:ed:27:74:7d:6b:d0:79: 0a:82:af:14:44:9d:cc:bc:13:6d:ae:14:a7:6c:bd: 8d:1d:b7:1a:3e:79:60:02:6b:f5:b6:f9:ff:11:5b: e4:dc:77:2f:b1:39:06:c8:6a:3d:90:b0:80:f2:6b: 08:1c:0e:19:97:e7:bd:5b:a0:16:0f:95:2d:2a:14: ea:1e:3f:44:c6:78:e9:5b:a3:07:c1:5d:08:8d:13: ec:1e:88:1b:93:17:1c:53:3f:2b:8b:e3:5c:d9:9b: 2b:b7:e6:80:be:be:9c:5d:8c:76:b3:60:04:18:40: 45:41:d6:6a:4b:69:48:2b:ab:c3:8c:92:35:f6:84: 6a:74:95:61:5b:44:4d:97:8d:02:0e:48:46:0c:be: 6c:f3:2a:89:d3:2c:b5:7f:86:28:a2:3f:a1:ea:c8: 2d:3f:6e:a4:c1:9e:b1:50:d2:60:02:d6:04:e5:d9: 10:0d:0a:b9:39:9b:75:f4:c2:18:22:3b:4e:58:e0: 92:a6:cf:ec:32:5b:f8:1d:a2:44:64:22:5a:c4:3f: 56:33:70:ab:48:78:74:91:62:13:e6:4c:9c:dd:88: a8:09:d6:ee:d8:b5:3e:20:47:e5:15:8a:4a:1b:10: 71:0c:41:8c:50:89:90:e5:69:cb:a3:ed:20:64:da: cf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1D:1E:72:FF:F7:44:88:5A:07:86:BF:EA:C2:49:9F:2C:4C:09:C3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A1EF9BCFE3711EF9A63CD78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.105.72.0/24 103.209.26.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:43:63:e4:4c:6f:82:fa:1f:37:81:a4:85:40:83:8f:a6:84: 99:b1:1c:e9:cc:d4:f9:31:81:b9:69:e0:5f:75:c2:a0:8f:12: d5:a0:73:d1:79:46:c5:c9:45:2d:b7:f4:f7:42:0e:88:f0:0c: 23:64:ff:2f:a9:e4:77:07:14:b8:e8:70:69:ce:bd:19:5b:8c: e7:5d:b1:89:9e:32:3a:4a:54:55:d4:dd:7b:0a:0f:44:80:3a: 45:c8:7b:40:2e:1a:79:b2:7e:af:9d:cd:20:68:52:34:17:70: fb:71:b1:25:41:ac:d5:b6:f7:9a:af:66:02:87:1d:10:77:75: eb:ae:a1:b3:83:39:37:6d:c7:a9:05:7b:0e:9f:06:68:7d:a4: ee:71:86:b5:5b:76:d8:c0:71:80:ed:cc:7a:fe:0f:1e:ec:b3: 84:ee:82:ca:52:90:0e:b5:a0:99:3a:ca:d9:04:83:94:f7:56: c0:36:39:b1:db:74:c6:d0:53:76:60:78:2b:6a:b7:45:db:9d: 57:7f:27:3c:8c:5a:b8:46:a2:d3:b2:e1:ef:1f:ba:6a:41:86: 1e:88:5e:3e:12:7a:c4:e2:2d:fd:90:aa:dc:c1:67:d8:2b:99: c7:4e:50:8a:67:82:bf:11:c7:c8:a1:05:8d:5b:60:a2:55:15: fa:f3:64:29 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAKn6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDMxMTA1MTYxOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdjZmM3MjItOTA2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0XnswPaKbtJ3R9a9B5CoKvFESdzLwTba4Up2y9jR23Gj55YAJr9bb5/xFb 5Nx3L7E5BshqPZCwgPJrCBwOGZfnvVugFg+VLSoU6h4/RMZ46VujB8FdCI0T7B6I G5MXHFM/K4vjXNmbK7fmgL6+nF2MdrNgBBhARUHWaktpSCurw4ySNfaEanSVYVtE TZeNAg5IRgy+bPMqidMstX+GKKI/oerILT9upMGesVDSYALWBOXZEA0KuTmbdfTC GCI7TljgkqbP7DJb+B2iRGQiWsQ/VjNwq0h4dJFiE+ZMnN2IqAnW7ti1PiBH5RWK ShsQcQxBjFCJkOVpy6PtIGTaz5cCAwEAAaOCApswggKXMB0GA1UdDgQWBBTrHR5y //dEiFoHhr/qwkmfLEwJwzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRBMUVGOUJD RkUzNzExRUY5QTYzQ0Q3OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQAZ2lIAwQAZ9EaMA0GCSqGSIb3DQEBCwUAA4IBAQBLQ2Pk TG+C+h83gaSFQIOPpoSZsRzpzNT5MYG5aeBfdcKgjxLVoHPReUbFyUUtt/T3Qg6I 8AwjZP8vqeR3BxS46HBpzr0ZW4znXbGJnjI6SlRV1N17Cg9EgDpFyHtALhp5sn6v nc0gaFI0F3D7cbElQazVtvear2YChx0Qd3XrrqGzgzk3bcepBXsOnwZofaTucYa1 W3bYwHGA7cx6/g8e7LOE7oLKUpAOtaCZOsrZBIOU91bANjmx23TG0FN2YHgrardF 251Xfyc8jFq4RqLTsuHvH7pqQYYeiF4+EnrE4i39kKrcwWfYK5nHTlCKZ4K/EcfI oQWNW2CiVRX682Qp -----END CERTIFICATE-----Generated at Fri Apr 4 01:45:51 2025 by rpki-client