$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4D618ACF80D11EFAE4C043CC4F9AE02.roa File: F4D618ACF80D11EFAE4C043CC4F9AE02.roa (raw, json) Hash identifier: ZsINyzDXYh9IHhiS4k8PYGFsArbhX9XHRgfIwvlI404= Subject key identifier: F5:45:A3:3C:D0:F5:21:C4:91:1F:25:83:D1:FA:5D:CA:38:3D:06:75 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A8B9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4D618ACF80D11EFAE4C043CC4F9AE02.roa Signing time: Mon 03 Mar 2025 09:00:30 +0000 ROA not before: Mon 03 Mar 2025 09:00:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152544 IP address blocks: 103.171.118.0/24 maxlen: 24 2401:ad60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 15:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43193 (0xa8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Mar 3 09:00:30 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67c56fae-475f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:54:0c:fb:4e:b7:7a:4a:b8:f9:92:99:7f: 17:db:4c:28:31:7c:df:08:c5:e1:e4:e4:f1:d2:3c: fa:6a:cd:2f:28:2e:cd:72:84:f0:2c:e1:34:c2:54: 9c:0d:33:45:cd:cb:a1:16:1e:c6:77:94:71:bd:f6: df:a0:8f:7c:c3:1e:73:6d:fb:08:03:85:7e:e6:a6: 18:8e:b5:2e:90:da:4c:48:18:0b:e7:c6:6a:29:df: 16:9f:b4:9d:fb:2d:51:b5:23:d5:81:cc:32:7a:44: 52:98:71:1e:dc:06:f3:1c:1b:09:00:33:f3:e3:88: 18:15:7d:55:ad:0c:1d:fe:a7:c3:d9:41:75:ba:00: a4:e7:75:b7:5d:ff:5b:b4:b1:7a:8d:6a:b9:a7:b0: 41:ae:15:97:5e:d1:16:74:32:9b:b0:50:4f:6a:36: 6f:7e:b1:e1:03:0e:9b:e9:08:3b:4f:cb:4f:8e:3d: 61:35:cd:d9:7d:73:1d:86:3f:8d:5f:da:31:41:dc: 76:43:91:f9:67:96:23:1c:96:e9:27:aa:25:02:c9: b5:b6:2a:f2:21:97:79:2a:b9:4b:5a:20:09:f0:0c: 6d:9d:ac:11:c4:0a:56:0d:b9:d3:01:de:24:72:fd: 64:1d:16:64:80:75:b8:29:f6:21:14:15:f3:54:91: e0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:45:A3:3C:D0:F5:21:C4:91:1F:25:83:D1:FA:5D:CA:38:3D:06:75 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F4D618ACF80D11EFAE4C043CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.118.0/24 IPv6: 2401:ad60::/32 Signature Algorithm: sha256WithRSAEncryption a8:8e:31:7c:c7:73:b9:16:63:bd:81:f6:7c:72:60:3f:84:08: ce:71:2b:16:e1:f5:ae:d6:ba:4c:97:6d:76:d2:b9:c3:dc:33: 8b:73:ac:a4:38:97:ce:28:fc:4d:45:a8:cf:80:fe:5b:34:fa: 92:1a:f8:d4:f1:22:fb:a1:9e:ba:fc:78:b0:d4:53:bf:46:63: 3d:e2:0f:16:3e:0f:08:ab:78:6d:8e:a9:bf:ac:41:1b:1d:83: 57:cc:fb:61:d2:1b:21:9f:43:26:29:cf:72:62:bc:ea:16:8d: 56:39:85:cb:c5:de:d4:15:84:42:9a:f7:78:29:41:97:fa:b3: ea:47:4c:a8:7b:ec:32:0e:72:8c:b1:58:3f:9b:c9:f9:d4:24: c2:bf:b8:af:81:a0:e1:c2:b4:e5:55:5e:59:e9:a0:de:1e:92: 73:83:fb:f9:81:3d:f4:af:b1:b6:ba:4b:f9:ec:43:10:f7:69: 4c:bc:b2:54:c2:cd:a3:47:4f:25:1f:39:a4:e4:3c:b9:5a:12: f7:28:51:40:41:b7:3b:bb:0a:bf:19:58:5d:a7:88:50:a4:af: 4b:61:51:59:d9:7a:db:fc:ce:46:8d:ce:a6:6f:7d:ba:62:1d: 98:6d:10:ee:fd:85:5f:ee:c1:d8:25:b3:91:7e:a7:8b:8d:89: bb:8f:d9:19 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAKi5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDMwMzA5MDAzMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdjNTZmYWUtNDc1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaiVAz7Trd6Srj5kpl/F9tMKDF83wjF4eTk8dI8+mrNLyguzXKE8CzhNMJU nA0zRc3LoRYexneUcb3236CPfMMec237CAOFfuamGI61LpDaTEgYC+fGainfFp+0 nfstUbUj1YHMMnpEUphxHtwG8xwbCQAz8+OIGBV9Va0MHf6nw9lBdboApOd1t13/ W7Sxeo1quaewQa4Vl17RFnQym7BQT2o2b36x4QMOm+kIO0/LT449YTXN2X1zHYY/ jV/aMUHcdkOR+WeWIxyW6SeqJQLJtbYq8iGXeSq5S1ogCfAMbZ2sEcQKVg250wHe JHL9ZB0WZIB1uCn2IRQV81SR4N0CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBT1RaM8 0PUhxJEfJYPR+l3KOD0GdTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y0RDYxOEFD RjgwRDExRUZBRTRDMDQzQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQAZ6t2MA0EAgACMAcDBQAkAa1gMA0GCSqGSIb3DQEBCwUA A4IBAQCojjF8x3O5FmO9gfZ8cmA/hAjOcSsW4fWu1rpMl2120rnD3DOLc6ykOJfO KPxNRajPgP5bNPqSGvjU8SL7oZ66/Hiw1FO/RmM94g8WPg8Iq3htjqm/rEEbHYNX zPth0hshn0MmKc9yYrzqFo1WOYXLxd7UFYRCmvd4KUGX+rPqR0yoe+wyDnKMsVg/ m8n51CTCv7ivgaDhwrTlVV5Z6aDeHpJzg/v5gT30r7G2ukv57EMQ92lMvLJUws2j R08lHzmk5Dy5WhL3KFFAQbc7uwq/GVhdp4hQpK9LYVFZ2Xrb/M5Gjc6mb326Yh2Y bRDu/YVf7sHYJbORfqeLjYm7j9kZ -----END CERTIFICATE-----Generated at Fri Apr 4 10:51:33 2025 by rpki-client