$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BCF1652EF7011EF83DA526BC4F9AE02.roa File: 7BCF1652EF7011EF83DA526BC4F9AE02.roa (raw, json) Hash identifier: dcme5iW7y3EECDms4HIggaNnJgDc+TSB9QSzSKlnyIw= Subject key identifier: 85:B3:F1:D1:28:7B:7E:42:EE:C9:D3:37:0C:FA:E0:90:3C:D6:E1:FE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A70C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BCF1652EF7011EF83DA526BC4F9AE02.roa Signing time: Thu 20 Feb 2025 09:53:07 +0000 ROA not before: Thu 20 Feb 2025 09:53:07 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136252 IP address blocks: 103.224.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 15:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42764 (0xa70c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Feb 20 09:53:07 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67b6fb82-06d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:0f:35:59:6d:a1:e3:4c:24:23:80:30:36: af:e3:08:60:9b:12:c7:05:3e:89:ba:28:9e:fc:00: 8a:4d:48:a4:b1:54:76:b7:2e:72:d6:13:6a:34:0c: 46:81:40:bb:36:53:0d:d3:86:43:8a:d3:f2:0c:c6: 2d:30:6f:60:ba:24:75:1e:d3:fa:e9:d0:5b:36:22: b4:8c:b4:33:a4:75:32:a2:41:4f:d9:80:24:36:2f: 2c:a6:a9:00:6b:68:d5:cc:a5:1c:bc:a0:87:a9:1c: a3:8b:a9:33:54:5e:de:37:cc:a4:ba:5d:7f:dd:c0: c9:a2:d7:71:ee:51:c6:89:83:a1:b9:ac:11:7e:ea: 71:a8:92:3e:ba:21:21:cb:8c:f4:eb:bc:1b:41:b9: 9c:0c:7a:7d:3c:6b:35:03:d8:6d:b9:5a:2a:15:8e: 6e:31:a1:56:27:3c:9b:05:6c:65:66:68:42:88:71: cf:20:f8:9e:f0:f2:c8:57:fa:90:6d:b8:e7:ad:6a: b8:a1:ce:93:4b:cf:f6:89:47:4c:11:f7:61:17:18: 55:d4:73:58:7f:aa:38:be:4b:b9:57:e5:de:b7:a9: c2:a9:f0:0b:bf:08:42:d2:a4:39:5e:1a:8c:30:cf: 36:8c:ac:d3:fe:b8:3d:de:66:ba:05:c0:52:05:34: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B3:F1:D1:28:7B:7E:42:EE:C9:D3:37:0C:FA:E0:90:3C:D6:E1:FE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BCF1652EF7011EF83DA526BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.108.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:9d:af:72:dd:37:2f:57:97:c3:7f:25:1b:28:1e:93:3c:86: 00:6e:37:c2:38:24:67:38:df:36:00:a2:8f:e3:26:1b:99:6e: c2:b8:cd:23:53:61:48:1c:37:2a:f8:73:4f:7c:20:cd:f3:68: 19:43:e8:41:1d:a4:5c:8b:85:93:86:3f:0e:05:c4:28:70:9b: c0:51:71:88:3b:ea:a8:12:fc:f1:14:77:44:e6:98:fe:cb:64: 67:01:b5:ad:2d:27:9d:a6:06:67:5b:b7:18:c4:3f:c1:f2:d6: 12:6d:e8:03:a5:ef:e3:1c:42:bb:6e:fc:b2:12:85:f4:ea:d2: 0a:e8:28:67:90:ba:ef:70:29:cd:ac:1a:b2:dd:2c:5b:93:df: 1a:1a:e1:b9:2e:c0:9e:a9:71:3e:c6:00:eb:6c:10:2a:50:c9: ae:5f:d4:64:2f:65:ea:ce:26:0b:de:b0:1f:0f:d9:4e:e9:ea: ee:08:a4:3d:1f:6a:78:ff:a3:ef:97:8e:c3:81:9c:fc:60:33: cd:fb:c1:cf:fb:5d:83:9e:35:cd:dc:5b:0a:fa:58:60:9a:ed: 2c:b1:99:9b:8a:be:4d:7c:4e:2a:7e:ad:b1:e4:b7:6b:3f:4c: 22:b6:41:8c:a9:50:2b:60:c3:1a:3e:53:2a:6a:26:e3:2d:47: 6e:fe:2a:08 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAKcMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDIyMDA5NTMwN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdiNmZiODItMDZkNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKL5DzVZbaHjTCQjgDA2r+MIYJsSxwU+iboonvwAik1IpLFUdrcuctYTajQM RoFAuzZTDdOGQ4rT8gzGLTBvYLokdR7T+unQWzYitIy0M6R1MqJBT9mAJDYvLKap AGto1cylHLygh6kco4upM1Re3jfMpLpdf93AyaLXce5RxomDobmsEX7qcaiSProh IcuM9Ou8G0G5nAx6fTxrNQPYbblaKhWObjGhVic8mwVsZWZoQohxzyD4nvDyyFf6 kG24561quKHOk0vP9olHTBH3YRcYVdRzWH+qOL5LuVfl3repwqnwC78IQtKkOV4a jDDPNoys0/64Pd5mugXAUgU0ANkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSFs/HR KHt+Qu7J0zcM+uCQPNbh/jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdCQ0YxNjUy RUY3MDExRUY4M0RBNTI2QkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ+BsMA0GCSqGSIb3DQEBCwUAA4IBAQAdna9y3TcvV5fD fyUbKB6TPIYAbjfCOCRnON82AKKP4yYbmW7CuM0jU2FIHDcq+HNPfCDN82gZQ+hB HaRci4WThj8OBcQocJvAUXGIO+qoEvzxFHdE5pj+y2RnAbWtLSedpgZnW7cYxD/B 8tYSbegDpe/jHEK7bvyyEoX06tIK6ChnkLrvcCnNrBqy3Sxbk98aGuG5LsCeqXE+ xgDrbBAqUMmuX9RkL2XqziYL3rAfD9lO6eruCKQ9H2p4/6Pvl47DgZz8YDPN+8HP +12DnjXN3FsK+lhgmu0ssZmbir5NfE4qfq2x5LdrP0witkGMqVArYMMaPlMqaibj LUdu/ioI -----END CERTIFICATE-----Generated at Fri Apr 4 11:09:45 2025 by rpki-client