$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8683F6289C7811EDABB29819C4F9AE02.roa File: 8683F6289C7811EDABB29819C4F9AE02.roa (raw, json) Hash identifier: Xsh7Mu+lQpnCkVyVUNcZeSdD8d5jds6g+Dsxp5FP97g= Subject key identifier: 76:D6:A4:2E:49:38:12:32:2B:FB:C5:99:A1:13:45:12:D6:DF:20:1B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AAC8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8683F6289C7811EDABB29819C4F9AE02.roa Signing time: Wed 12 Mar 2025 11:36:49 +0000 ROA not before: Wed 12 Mar 2025 11:36:49 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150623 IP address blocks: 103.146.222.0/24 maxlen: 24 103.149.52.0/23 maxlen: 24 103.159.242.0/24 maxlen: 24 103.163.149.0/24 maxlen: 24 103.181.176.0/23 maxlen: 24 103.182.102.0/23 maxlen: 24 163.223.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 22:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43720 (0xaac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Mar 12 11:36:49 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67d171d1-d733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:c8:ba:57:1a:97:9a:47:9e:ad:ff:e7:f7: c2:04:6b:ba:dc:fe:18:15:17:17:1c:37:52:c4:3f: 68:c3:13:5a:38:22:49:bf:cb:35:5f:4d:4f:3e:d0: 9a:f2:75:41:63:75:05:63:9c:1c:d4:a2:6f:af:72: 26:53:84:30:56:75:7f:5e:d4:45:98:ad:4f:e6:6f: e8:a2:f0:89:a5:7b:68:63:b0:13:5c:3b:71:2a:dd: b7:4c:14:fb:2b:7b:ce:02:46:f5:8e:33:2e:0c:ad: ad:b0:60:02:72:b0:f0:0c:a2:1b:ba:d9:f6:26:0a: 75:10:c6:26:f9:e3:82:c2:86:9a:20:bb:11:af:c8: 85:d4:7c:d8:a1:49:68:8e:f5:9a:31:73:50:d1:61: dc:dd:f3:14:04:09:64:6a:e9:68:98:5e:66:7e:21: a0:b4:35:16:40:3f:fb:49:77:01:8f:9d:c0:df:aa: c1:38:bd:9b:9d:af:bb:72:94:2b:b7:79:84:82:84: c3:1e:5a:75:57:7a:e9:b5:e7:99:8b:45:f8:b7:2f: 2d:75:bc:c7:de:41:14:2a:a5:a9:5e:71:f9:4c:22: 68:43:9b:47:06:72:6f:de:52:65:99:1d:1d:43:40: da:af:24:c4:93:7f:9a:a5:98:54:be:9f:f5:4b:f6: 00:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D6:A4:2E:49:38:12:32:2B:FB:C5:99:A1:13:45:12:D6:DF:20:1B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8683F6289C7811EDABB29819C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.222.0/24 103.149.52.0/23 103.159.242.0/24 103.163.149.0/24 103.181.176.0/23 103.182.102.0/23 163.223.52.0/23 Signature Algorithm: sha256WithRSAEncryption 08:f8:b8:b4:2e:bf:64:74:6e:37:8b:fd:95:cd:13:ef:89:c1: 8f:39:2e:92:47:af:34:cb:73:bb:41:ed:07:28:26:29:48:02: b1:64:97:b6:0b:15:4e:76:a5:95:ff:e4:61:21:32:67:45:7e: a2:f7:32:d7:44:c0:36:7d:d4:6b:11:ab:46:c8:0e:af:25:29: 58:17:54:35:d1:a3:37:38:e9:85:3d:fe:ec:7d:57:d7:78:b6: 0f:6c:d0:f1:7d:5d:28:72:7a:49:ad:da:8c:dc:9b:97:e3:1f: 8f:09:93:ba:e5:0e:01:c7:8b:50:5a:f4:a4:e9:26:ca:65:ba: 10:1f:01:e9:10:b8:90:a2:31:29:07:87:fc:76:77:e8:ba:96: 79:03:b6:cd:c9:34:02:c9:72:e2:ad:16:f3:63:ea:71:61:bb: c8:a5:a4:d3:07:43:b0:9f:a3:95:ac:c9:fc:08:8a:16:b7:ff: d4:d1:23:c2:9f:65:28:8e:70:1f:c6:a3:8a:21:95:13:1d:6d: 6d:33:fe:18:41:fe:75:1b:6d:f5:0c:62:8e:56:d9:97:dd:fc: ac:f4:c7:83:cd:ff:28:96:3c:95:0d:80:a2:96:b7:ab:92:18: 7d:d6:73:4c:be:a2:ea:6e:11:9e:e8:52:e2:35:a2:4c:cb:0a: 61:65:35:1b -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIDAKrIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDMxMjExMzY0OVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdkMTcxZDEtZDczMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPgyLpXGpeaR56t/+f3wgRrutz+GBUXFxw3UsQ/aMMTWjgiSb/LNV9NTz7Q mvJ1QWN1BWOcHNSib69yJlOEMFZ1f17URZitT+Zv6KLwiaV7aGOwE1w7cSrdt0wU +yt7zgJG9Y4zLgytrbBgAnKw8AyiG7rZ9iYKdRDGJvnjgsKGmiC7Ea/IhdR82KFJ aI71mjFzUNFh3N3zFAQJZGrpaJheZn4hoLQ1FkA/+0l3AY+dwN+qwTi9m52vu3KU K7d5hIKEwx5adVd66bXnmYtF+LcvLXW8x95BFCqlqV5x+UwiaEObRwZyb95SZZkd HUNA2q8kxJN/mqWYVL6f9Uv2ACcCAwEAAaOCArkwggK1MB0GA1UdDgQWBBR21qQu STgSMiv7xZmhE0US1t8gGzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg2ODNGNjI4 OUM3ODExRURBQkIyOTgxOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEMGCCsGAQUFBwEHAQH/ BDQwMjAwBAIAATAqAwQAZ5LeAwQBZ5U0AwQAZ5/yAwQAZ6OVAwQBZ7WwAwQBZ7Zm AwQBo980MA0GCSqGSIb3DQEBCwUAA4IBAQAI+Li0Lr9kdG43i/2VzRPvicGPOS6S R680y3O7Qe0HKCYpSAKxZJe2CxVOdqWV/+RhITJnRX6i9zLXRMA2fdRrEatGyA6v JSlYF1Q10aM3OOmFPf7sfVfXeLYPbNDxfV0ocnpJrdqM3JuX4x+PCZO65Q4Bx4tQ WvSk6SbKZboQHwHpELiQojEpB4f8dnfoupZ5A7bNyTQCyXLirRbzY+pxYbvIpaTT B0Own6OVrMn8CIoWt//U0SPCn2UojnAfxqOKIZUTHW1tM/4YQf51G231DGKOVtmX 3fys9MeDzf8oljyVDYCilrerkhh91nNMvqLqbhGe6FLiNaJMywphZTUb -----END CERTIFICATE-----Generated at Fri Apr 11 14:59:27 2025 by rpki-client