$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD9F1B2D8A211EF89F50A7AC4F9AE02.roa File: 5BD9F1B2D8A211EF89F50A7AC4F9AE02.roa (raw, json) Hash identifier: CbcN8N6YWfQPllR9yCmITY3chjKOBwzoAk7vUf82CQ4= Subject key identifier: 85:F9:4E:10:F6:34:6D:6F:A8:E0:D8:F2:CA:A1:E3:A0:30:32:59:2D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A366 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD9F1B2D8A211EF89F50A7AC4F9AE02.roa Signing time: Wed 22 Jan 2025 09:22:11 +0000 ROA not before: Wed 22 Jan 2025 09:22:11 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135733 IP address blocks: 103.68.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Feb 2025 08:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41830 (0xa366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Jan 22 09:22:11 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6790b8c3-89e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:35:5d:20:32:d3:e6:af:79:14:4e:be:02: 61:f6:78:51:df:ba:02:47:6b:7e:64:f2:14:50:8f: 0f:56:e9:83:04:81:77:f5:eb:d5:ec:c3:53:c9:e6: 6a:e1:70:ea:96:a4:21:eb:41:f8:c3:dc:99:7c:80: aa:98:c5:6b:6f:ba:12:06:cd:5f:35:3d:90:e2:8e: cf:3b:96:21:5b:9c:db:24:c5:a3:61:41:46:6a:25: 84:9f:29:90:08:62:11:21:02:b6:1d:74:2f:45:d4: d4:f9:77:04:67:98:31:87:0b:22:fb:bd:6b:d1:aa: d4:cb:d2:7c:2f:d8:55:3b:00:3a:9d:d1:8e:b5:07: 24:e1:ba:b1:cd:52:c8:ac:2d:72:f2:bd:27:38:69: 81:e2:bd:1d:01:70:a6:88:d0:79:d6:a0:a7:c6:9e: e8:0e:b7:1f:66:5d:2e:8d:65:dd:42:44:98:46:ac: 6b:d9:f3:02:6b:40:d7:0a:f2:8f:45:2a:47:0c:1a: 0e:34:25:05:5d:a3:e4:bc:34:80:97:11:23:23:34: 82:3a:01:cf:90:21:52:33:78:a3:0f:42:49:3a:80: 90:33:57:bb:aa:02:92:a6:ea:38:da:0f:4e:b4:4c: 19:76:44:52:6f:19:ae:a2:39:f9:8d:38:54:e7:bc: e3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F9:4E:10:F6:34:6D:6F:A8:E0:D8:F2:CA:A1:E3:A0:30:32:59:2D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD9F1B2D8A211EF89F50A7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.16.0/22 Signature Algorithm: sha256WithRSAEncryption aa:4f:7f:44:dc:a7:a6:44:35:cb:f6:f0:77:d2:ed:4a:5d:1e: 2e:b2:31:fa:13:87:e2:2c:f8:be:88:11:ee:f4:e5:62:30:b5: 3f:8f:c2:ad:b1:af:39:41:ea:00:85:ab:c2:d3:c7:5e:33:5a: 10:21:25:e7:5c:b5:b5:9d:a8:34:43:7f:97:4f:7a:5a:96:a0: 0e:be:1e:d6:94:aa:84:d3:50:88:d2:75:ab:d0:76:8d:dc:7f: 39:28:81:b9:05:50:8c:bc:b2:51:c9:ac:0d:2b:a0:fb:d7:c6: 02:f6:f9:2b:ca:5c:24:ba:6c:4e:aa:7c:13:3c:17:5b:8c:f5: f5:2b:28:2d:03:03:55:b9:a3:56:08:85:48:21:39:68:75:dd: 9c:4b:ca:47:ca:ae:a2:d9:93:ee:b2:6f:63:a4:bc:91:c7:aa: 1a:be:9d:6a:5e:ff:e4:75:e8:d5:74:27:19:dc:60:5a:92:95: b8:e4:0a:7f:48:93:cb:26:a3:65:77:85:7a:7e:73:a5:c6:cd: dc:64:ac:9c:59:9a:6e:44:2f:74:26:81:9d:c5:aa:d8:9c:00: b5:4a:57:9a:cf:d5:6e:53:79:5a:2c:be:b8:f0:89:1a:a0:d1: 56:e7:a1:9f:7f:9f:95:5f:3a:6b:2b:0b:de:9f:fe:d3:a4:49: 93:7c:9a:ca -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAKNmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDEyMjA5MjIxMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjc5MGI4YzMtODllNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALU8NV0gMtPmr3kUTr4CYfZ4Ud+6AkdrfmTyFFCPD1bpgwSBd/Xr1ezDU8nm auFw6pakIetB+MPcmXyAqpjFa2+6EgbNXzU9kOKOzzuWIVuc2yTFo2FBRmolhJ8p kAhiESECth10L0XU1Pl3BGeYMYcLIvu9a9Gq1MvSfC/YVTsAOp3RjrUHJOG6sc1S yKwtcvK9JzhpgeK9HQFwpojQedagp8ae6A63H2ZdLo1l3UJEmEasa9nzAmtA1wry j0UqRwwaDjQlBV2j5Lw0gJcRIyM0gjoBz5AhUjN4ow9CSTqAkDNXu6oCkqbqONoP TrRMGXZEUm8ZrqI5+Y04VOe844ECAwEAAaOCApUwggKRMB0GA1UdDgQWBBSF+U4Q 9jRtb6jg2PLKoeOgMDJZLTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVCRDlGMUIy RDhBMjExRUY4OUY1MEE3QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ0QQMA0GCSqGSIb3DQEBCwUAA4IBAQCqT39E3KemRDXL 9vB30u1KXR4usjH6E4fiLPi+iBHu9OViMLU/j8Ktsa85QeoAhavC08deM1oQISXn XLW1nag0Q3+XT3palqAOvh7WlKqE01CI0nWr0HaN3H85KIG5BVCMvLJRyawNK6D7 18YC9vkrylwkumxOqnwTPBdbjPX1KygtAwNVuaNWCIVIITlodd2cS8pHyq6i2ZPu sm9jpLyRx6oavp1qXv/kdejVdCcZ3GBakpW45Ap/SJPLJqNld4V6fnOlxs3cZKyc WZpuRC90JoGdxarYnAC1Sleaz9VuU3laLL648IkaoNFW56Gff5+VXzprKwven/7T pEmTfJrK -----END CERTIFICATE-----Generated at Fri Feb 21 11:19:16 2025 by rpki-client