$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B5A3F8ED18411EFB689B95DC4F9AE02.roa File: 8B5A3F8ED18411EFB689B95DC4F9AE02.roa (raw, json) Hash identifier: 7g8GXUCQiAAQ41KWSNX2BkElrFfASxR6KHaysWCF4V0= Subject key identifier: 67:AA:82:62:D4:D4:90:9B:07:14:FC:EE:DF:C8:60:CF:87:77:E4:1C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A306 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B5A3F8ED18411EFB689B95DC4F9AE02.roa Signing time: Thu 16 Jan 2025 06:44:45 +0000 ROA not before: Thu 16 Jan 2025 06:44:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136696 IP address blocks: 103.48.108.0/22 maxlen: 24 103.103.56.0/22 maxlen: 24 103.107.92.0/24 maxlen: 24 103.107.93.0/24 maxlen: 24 103.107.94.0/24 maxlen: 24 103.107.95.0/24 maxlen: 24 103.117.12.0/24 maxlen: 24 103.117.15.0/24 maxlen: 24 103.118.34.0/23 maxlen: 24 121.46.84.0/22 maxlen: 24 2001:df5:a180::/48 maxlen: 48 2407:ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Feb 2025 08:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41734 (0xa306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Jan 16 06:44:45 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6788aadd-9966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:bc:79:ae:1c:10:3c:f3:14:2b:ce:c2:01: d5:fb:b6:41:c1:ab:3c:ec:94:f2:45:25:40:33:28: 8e:f0:67:00:13:d9:f5:e9:73:20:97:de:b5:b7:50: aa:8a:89:4c:b7:82:1f:6f:40:e4:ea:97:bd:6a:06: b6:a4:19:a2:5c:6c:a8:00:63:8f:23:b6:cd:1d:64: 54:3d:cd:b2:74:d2:2a:69:36:f9:f3:9c:38:b1:29: a8:34:27:18:cc:08:b8:e6:b9:ca:1d:2c:d3:0e:8d: 6a:93:c4:4f:1f:c8:6a:0c:12:c3:6b:b4:12:e3:68: dc:71:bd:60:27:14:52:0a:fd:ec:17:10:8d:f6:f7: aa:35:6c:32:58:35:7d:0b:4b:ba:7e:82:3f:89:0c: 90:4d:56:23:57:54:a5:b4:c0:fb:f6:3f:28:f4:94: 85:02:92:1c:d2:49:44:9f:48:6d:ae:b0:cc:6e:50: 4b:6f:5f:bd:cd:39:75:b3:35:6d:65:e7:67:0e:49: 2c:ea:31:e9:7f:a3:9f:15:bb:23:93:f1:2d:77:78: d5:07:32:e7:ed:1b:4b:54:17:6e:c8:34:45:7b:9a: e1:a7:85:a3:73:c7:14:ce:f7:d8:32:35:95:41:e8: 23:48:ed:13:35:be:9f:cb:af:8a:9d:8b:d9:bf:e3: 68:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AA:82:62:D4:D4:90:9B:07:14:FC:EE:DF:C8:60:CF:87:77:E4:1C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B5A3F8ED18411EFB689B95DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.108.0/22 103.103.56.0/22 103.107.92.0/22 103.117.12.0/24 103.117.15.0/24 103.118.34.0/23 121.46.84.0/22 IPv6: 2001:df5:a180::/48 2407:ac0::/32 Signature Algorithm: sha256WithRSAEncryption 03:d0:12:a1:d0:1a:7d:f6:fb:a3:ff:c5:2e:24:58:73:13:9b: 43:42:da:2d:a1:8b:5f:d0:67:b8:3d:64:ef:8e:fc:20:bd:e4: 50:8a:65:e2:75:ad:c6:51:ac:2e:cb:4f:d0:8b:9c:bf:0b:d1: 13:65:d8:52:6d:e1:b8:9c:75:f5:36:f6:ff:23:d8:50:ad:12: 98:40:c9:ce:25:0d:0c:cc:5a:1a:cc:84:0b:2e:d9:94:dc:b4: c6:10:b8:d9:93:49:5c:f2:04:0e:ed:bd:b5:cc:d5:64:6a:a9: 7e:39:4b:2a:10:69:dc:49:22:0b:99:83:b0:25:48:82:89:de: 7e:69:47:f8:9a:94:26:65:f2:82:2a:7e:2a:4b:61:b2:a6:4f: 0a:cd:10:7d:4f:9e:b7:ca:24:88:f2:d6:d8:a5:a1:aa:fc:59: a2:ae:5b:43:f0:b3:67:cc:bd:97:3d:3a:08:66:57:82:33:cf: cb:f4:e5:4b:90:61:84:b1:4d:18:e6:7e:90:44:bc:b5:d3:b4: 56:aa:50:76:26:bd:94:09:91:9f:87:b9:67:dd:5e:8e:6b:c8: 94:da:f8:aa:26:33:1b:15:01:b3:60:bc:6d:ad:15:7e:2d:98: 86:0e:c5:8e:b3:e3:f8:98:18:19:90:b0:6d:db:bb:9e:6d:54: 75:bc:36:97 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgIDAKMGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDExNjA2NDQ0NVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjc4OGFhZGQtOTk2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+avHmuHBA88xQrzsIB1fu2QcGrPOyU8kUlQDMojvBnABPZ9elzIJfetbdQ qoqJTLeCH29A5OqXvWoGtqQZolxsqABjjyO2zR1kVD3NsnTSKmk2+fOcOLEpqDQn GMwIuOa5yh0s0w6NapPETx/IagwSw2u0EuNo3HG9YCcUUgr97BcQjfb3qjVsMlg1 fQtLun6CP4kMkE1WI1dUpbTA+/Y/KPSUhQKSHNJJRJ9Iba6wzG5QS29fvc05dbM1 bWXnZw5JLOox6X+jnxW7I5PxLXd41Qcy5+0bS1QXbsg0RXua4aeFo3PHFM732DI1 lUHoI0jtEzW+n8uvip2L2b/jaPUCAwEAAaOCAtEwggLNMB0GA1UdDgQWBBRnqoJi 1NSQmwcU/O7fyGDPh3fkHDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhCNUEzRjhF RDE4NDExRUZCNjg5Qjk1REM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBwEHAQH/ BEwwSjAwBAIAATAqAwQCZzBsAwQCZ2c4AwQCZ2tcAwQAZ3UMAwQAZ3UPAwQBZ3Yi AwQCeS5UMBYEAgACMBADBwAgAQ31oYADBQAkBwrAMA0GCSqGSIb3DQEBCwUAA4IB AQAD0BKh0Bp99vuj/8UuJFhzE5tDQtotoYtf0Ge4PWTvjvwgveRQimXida3GUawu y0/Qi5y/C9ETZdhSbeG4nHX1Nvb/I9hQrRKYQMnOJQ0MzFoazIQLLtmU3LTGELjZ k0lc8gQO7b21zNVkaql+OUsqEGncSSILmYOwJUiCid5+aUf4mpQmZfKCKn4qS2Gy pk8KzRB9T563yiSI8tbYpaGq/FmirltD8LNnzL2XPToIZleCM8/L9OVLkGGEsU0Y 5n6QRLy107RWqlB2Jr2UCZGfh7ln3V6Oa8iU2viqJjMbFQGzYLxtrRV+LZiGDsWO s+P4mBgZkLBt27uebVR1vDaX -----END CERTIFICATE-----Generated at Fri Feb 21 10:59:13 2025 by rpki-client