$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/18F9209CB55411EEAD96E873C4F9AE02.roa File: 18F9209CB55411EEAD96E873C4F9AE02.roa (raw, json) Hash identifier: 5qovDHOan50hnf/FjfnVrN4jiM2XyUgRA/JNpM3f5Bk= Subject key identifier: 45:D9:B1:8D:CF:BF:A4:07:3E:DE:6A:88:0C:CA:E5:E4:06:23:B3:4F Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: CF Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/18F9209CB55411EEAD96E873C4F9AE02.roa Signing time: Thu 13 Feb 2025 07:07:57 +0000 ROA not before: Thu 13 Feb 2025 07:07:57 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 54113 IP address blocks: 43.249.73.0/24 maxlen: 24 43.249.74.0/24 maxlen: 24 103.245.222.0/24 maxlen: 24 103.245.224.0/24 maxlen: 24 2001:df0:45f::/48 maxlen: 48 2001:df0:461::/48 maxlen: 48 2001:df0:462::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A Validity Not Before: Feb 13 07:07:57 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ad9a4c-f022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:fc:3c:dc:75:4d:46:fb:6a:c6:e3:b8:7e: 26:97:94:9c:9d:e7:8a:7b:4d:83:54:0f:04:11:9d: ab:26:b4:12:16:45:5e:05:fe:58:3f:4d:7d:17:b4: d1:83:27:b9:0f:f8:94:66:eb:14:68:23:70:2b:59: 7d:f9:8b:15:4a:6c:2d:a8:e5:f5:19:ae:85:8b:62: c2:25:69:2c:23:45:00:25:70:87:34:e6:97:4f:8b: 98:c0:82:d2:2b:08:73:01:63:79:fd:63:03:26:c0: 7b:f8:76:63:bd:99:b2:ed:79:29:f6:6f:25:42:c4: 37:4b:1e:91:bb:40:b5:35:65:ce:08:f6:44:87:16: c6:e1:30:12:74:5e:28:29:d2:92:9b:7f:8b:04:dc: 4b:8b:e1:39:b8:f5:d9:25:ce:65:3c:ef:0d:dd:c3: 14:80:82:f8:8d:65:ef:b6:cb:86:a4:8e:0c:3f:8a: 09:e5:23:bd:c0:b6:b8:63:6b:5a:3c:70:7c:e1:14: 7b:a6:62:d2:22:02:be:f2:44:78:3e:5f:5f:c3:dd: 52:9d:1b:be:23:32:34:3f:af:dd:31:61:21:43:c7: 1b:52:21:9e:82:e5:f6:50:52:05:f1:33:a9:99:39: 13:f7:d6:f7:5e:82:12:88:b2:d1:61:7b:5c:ee:82: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D9:B1:8D:CF:BF:A4:07:3E:DE:6A:88:0C:CA:E5:E4:06:23:B3:4F X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/18F9209CB55411EEAD96E873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.73.0-43.249.74.255 103.245.222.0/24 103.245.224.0/24 IPv6: 2001:df0:45f::/48 2001:df0:461::-2001:df0:462:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ac:d5:ce:e9:3f:cf:7c:db:b5:f3:a0:7b:3c:89:ca:0f:ef:74: 1e:1a:25:2f:bb:77:8f:00:20:b5:1f:63:b8:bf:94:00:34:b8: ba:ce:d4:85:f6:3e:39:ad:ea:c6:41:31:c4:25:ce:66:a2:fa: 39:c6:b2:80:60:42:d8:41:54:bc:f0:27:7e:20:fa:59:c3:be: 3c:fb:f4:1d:ec:2b:32:07:65:a1:d9:f9:f2:c4:9d:fd:f7:91: 58:c3:53:c3:45:35:41:23:f0:c8:48:b9:6d:d8:0d:5e:7a:ca: cb:46:06:7a:07:d2:4a:f2:6e:7b:93:e9:ca:ce:ee:12:fd:f2: aa:af:f6:60:57:41:68:2e:ee:78:7d:f5:6c:f6:d3:48:e2:f0: 64:6c:f2:bf:64:7b:4e:bc:ae:68:e8:2c:97:24:74:28:7f:ce: bd:82:6e:1e:9d:c9:16:09:07:72:82:39:ae:ee:d6:15:36:dc: 35:5f:b3:73:d4:34:b3:0c:31:50:77:5c:94:99:57:c9:be:60: b7:e4:63:f0:5c:7c:67:4f:b6:66:fd:39:48:dc:cc:8b:80:92: b5:29:df:6e:e3:58:fb:c0:a7:bd:90:9b:1e:09:06:e6:67:1f: fb:38:53:72:e4:63:b8:45:f4:9d:40:48:ff:fe:aa:94:70:77: 63:91:0b:cb -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1RjAzNDMxM0Qx QjcxQjhENDQwHhcNMjUwMjEzMDcwNzU3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FkOWE0Yy1mMDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+H8PNx1TUb7asbjuH4ml5ScneeKe02DVA8EEZ2rJrQSFkVeBf5YP019F7TR gye5D/iUZusUaCNwK1l9+YsVSmwtqOX1Ga6Fi2LCJWksI0UAJXCHNOaXT4uYwILS KwhzAWN5/WMDJsB7+HZjvZmy7Xkp9m8lQsQ3Sx6Ru0C1NWXOCPZEhxbG4TASdF4o KdKSm3+LBNxLi+E5uPXZJc5lPO8N3cMUgIL4jWXvtsuGpI4MP4oJ5SO9wLa4Y2ta PHB84RR7pmLSIgK+8kR4Pl9fw91SnRu+IzI0P6/dMWEhQ8cbUiGeguX2UFIF8TOp mTkT99b3XoISiLLRYXtc7oJMuQIDAQABo4ICzjCCAsowHQYDVR0OBBYEFEXZsY3P v6QHPt5qiAzK5eQGI7NPMB8GA1UdIwQYMBaAFLf6USFbtcHviOrhXwNDE9G3G41E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODk3QS81MzNFMjQ2MkI1 NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdlLUk2dUZmQTBNVDBiY2Jq VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODg5N0EvNTMzRTI0NjJCNTUxMTFFRUJCNEM1NzNCQzRGOUFFMDIvMThGOTIwOUNC NTU0MTFFRUFEOTZFODczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWAYIKwYBBQUHAQcBAf8E STBHMCAEAgABMBowDAMEACv5SQMEACv5SgMEAGf13gMEAGf14DAjBAIAAjAdAwcA IAEN8ARfMBIDBwAgAQ3wBGEDBwAgAQ3wBGIwDQYJKoZIhvcNAQELBQADggEBAKzV zuk/z3zbtfOgezyJyg/vdB4aJS+7d48AILUfY7i/lAA0uLrO1IX2Pjmt6sZBMcQl zmai+jnGsoBgQthBVLzwJ34g+lnDvjz79B3sKzIHZaHZ+fLEnf33kVjDU8NFNUEj 8MhIuW3YDV56ystGBnoH0krybnuT6crO7hL98qqv9mBXQWgu7nh99Wz200ji8GRs 8r9ke068rmjoLJckdCh/zr2Cbh6dyRYJB3KCOa7u1hU23DVfs3PUNLMMMVB3XJSZ V8m+YLfkY/BcfGdPtmb9OUjczIuAkrUp327jWPvAp72Qmx4JBuZnH/s4U3LkY7hF 9J1ASP/+qpRwd2ORC8s= -----END CERTIFICATE-----Generated at Thu Apr 3 03:01:17 2025 by rpki-client