$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E7B4D74A765211EFBDB1E074C4F9AE02.roa File: E7B4D74A765211EFBDB1E074C4F9AE02.roa (raw, json) Hash identifier: qdpKP6X2ktQ0LgmrQXBBO/QIY5MSTylEifu46UtGAjU= Subject key identifier: 5B:D8:01:46:96:9D:D2:37:DA:8E:61:8E:2F:B0:EA:D8:8D:40:3A:44 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AB93 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E7B4D74A765211EFBDB1E074C4F9AE02.roa Signing time: Wed 19 Mar 2025 05:20:08 +0000 ROA not before: Wed 19 Mar 2025 05:20:08 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151732 IP address blocks: 103.148.9.0/24 maxlen: 24 103.164.26.0/23 maxlen: 24 103.191.88.0/23 maxlen: 24 103.197.78.0/23 maxlen: 24 2001:df4:5c40::/48 maxlen: 48 2401:d5e0::/32 maxlen: 32 2401:d5e0::/48 maxlen: 48 2401:d5e0:1::/48 maxlen: 48 2401:d5e0:2::/48 maxlen: 48 2401:d5e0:3::/48 maxlen: 48 2401:d5e0:4::/48 maxlen: 48 2401:d5e0:5::/48 maxlen: 48 2401:d5e0:6::/48 maxlen: 48 2401:d5e0:7::/48 maxlen: 48 2401:d5e0:8::/48 maxlen: 48 2401:d5e0:9::/48 maxlen: 48 2401:d5e0:a::/48 maxlen: 48 2401:d5e0:b::/48 maxlen: 48 2401:d5e0:c::/48 maxlen: 48 2401:d5e0:d::/48 maxlen: 48 2401:d5e0:e::/48 maxlen: 48 2401:d5e0:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 12:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43923 (0xab93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 19 05:20:08 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67da5407-b29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:20:cc:66:5e:85:87:a9:6b:9e:74:ba:6e: e4:ac:27:86:ff:0e:b1:1f:ec:70:76:cf:0b:87:ac: e6:73:66:7f:16:11:68:49:a8:05:07:63:fe:40:7d: d3:25:f7:ac:49:73:3d:11:40:4e:84:4f:df:af:0b: b6:49:89:7a:20:08:8d:99:df:b6:fb:91:6a:90:f6: d8:77:93:2d:61:0f:d4:7a:f8:87:65:0b:41:f5:7e: ab:db:81:86:57:60:28:a6:53:bd:aa:fd:95:47:f4: 0c:5a:30:62:19:f6:be:70:37:55:4e:77:77:76:18: fe:df:60:ac:df:69:f6:1c:6e:64:85:d4:56:58:b5: 64:a9:3e:e5:cf:0e:31:fb:dd:67:3f:1a:7c:82:2b: 72:0a:a5:5c:2d:55:29:ca:e1:7d:e3:b5:0e:fb:7c: 05:d6:30:51:bf:0b:ef:d6:2c:31:f6:07:09:e5:dd: ff:97:9c:b4:f7:40:2e:3b:2a:09:84:7d:e3:04:a9: 3e:74:e5:af:33:51:d1:d9:aa:52:46:d7:dc:59:60: fe:99:c1:ae:a8:90:60:10:ac:53:3a:76:65:34:0f: bb:e9:5e:b8:e3:c9:fd:0d:58:1f:e3:59:13:eb:55: a0:fb:da:2f:17:24:f1:d5:df:1b:d2:2d:a4:f8:89: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D8:01:46:96:9D:D2:37:DA:8E:61:8E:2F:B0:EA:D8:8D:40:3A:44 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E7B4D74A765211EFBDB1E074C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.9.0/24 103.164.26.0/23 103.191.88.0/23 103.197.78.0/23 IPv6: 2001:df4:5c40::/48 2401:d5e0::/32 Signature Algorithm: sha256WithRSAEncryption 21:f0:e0:53:01:5c:c2:36:41:f3:8e:10:12:0b:16:ec:29:f5: fd:4a:43:ed:52:0b:e2:1e:b4:64:41:f7:b8:15:ca:d2:1c:76: 54:68:2c:b7:fe:93:8b:2c:e9:9b:25:b1:88:84:2f:bc:82:44: e6:f9:3d:c3:2d:dd:cf:2b:69:f0:70:81:15:eb:eb:03:79:25: 42:0d:e7:cf:85:80:01:05:97:d9:51:89:60:a8:e0:8a:54:34: 4a:26:fa:7a:2f:02:42:50:2c:77:8a:ef:42:b0:b0:17:1b:cc: 1f:3d:9a:3c:17:c7:c7:66:f7:99:2c:40:ff:5c:17:c2:12:4e: 29:ce:d9:8a:9c:e0:d5:a6:47:c3:dd:70:f6:6c:d3:c6:f1:38: 8b:64:51:78:bd:3e:02:24:21:76:66:88:9b:d9:69:71:02:20: af:50:c5:92:e4:aa:3e:8d:8e:45:6b:aa:ca:ea:70:6b:7a:5a: ef:a7:0f:07:39:3a:dd:2b:3d:6d:e6:98:f7:ac:7d:30:d0:05: 97:1a:d9:b6:5d:46:2e:30:d0:66:57:2c:21:bf:a2:6d:d4:dd: 53:79:7a:0c:50:b8:4e:f7:0a:31:ed:96:70:f1:d2:85:f9:de: 48:1f:2e:a0:55:33:9e:1a:dc:de:d8:c1:29:bd:9b:98:05:f3: 38:3e:ac:aa -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIDAKuTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDMxOTA1MjAwOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdkYTU0MDctYjI5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMqIMxmXoWHqWuedLpu5Kwnhv8OsR/scHbPC4es5nNmfxYRaEmoBQdj/kB9 0yX3rElzPRFAToRP368LtkmJeiAIjZnftvuRapD22HeTLWEP1Hr4h2ULQfV+q9uB hldgKKZTvar9lUf0DFowYhn2vnA3VU53d3YY/t9grN9p9hxuZIXUVli1ZKk+5c8O MfvdZz8afIIrcgqlXC1VKcrhfeO1Dvt8BdYwUb8L79YsMfYHCeXd/5ectPdALjsq CYR94wSpPnTlrzNR0dmqUkbX3Flg/pnBrqiQYBCsUzp2ZTQPu+leuOPJ/Q1YH+NZ E+tVoPvaLxck8dXfG9ItpPiJogkCAwEAAaOCAr8wggK7MB0GA1UdDgQWBBRb2AFG lp3SN9qOYY4vsOrYjUA6RDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U3QjRENzRB NzY1MjExRUZCREIxRTA3NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEkGCCsGAQUFBwEHAQH/ BDowODAeBAIAATAYAwQAZ5QJAwQBZ6QaAwQBZ79YAwQBZ8VOMBYEAgACMBADBwAg AQ30XEADBQAkAdXgMA0GCSqGSIb3DQEBCwUAA4IBAQAh8OBTAVzCNkHzjhASCxbs KfX9SkPtUgviHrRkQfe4FcrSHHZUaCy3/pOLLOmbJbGIhC+8gkTm+T3DLd3PK2nw cIEV6+sDeSVCDefPhYABBZfZUYlgqOCKVDRKJvp6LwJCUCx3iu9CsLAXG8wfPZo8 F8fHZveZLED/XBfCEk4pztmKnODVpkfD3XD2bNPG8TiLZFF4vT4CJCF2Zoib2Wlx AiCvUMWS5Ko+jY5Fa6rK6nBrelrvpw8HOTrdKz1t5pj3rH0w0AWXGtm2XUYuMNBm Vywhv6Jt1N1TeXoMULhO9wox7ZZw8dKF+d5IHy6gVTOeGtze2MEpvZuYBfM4Pqyq -----END CERTIFICATE-----Generated at Thu Apr 17 15:04:17 2025 by rpki-client