$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/196D93620ADC11F0B20A4824C4F9AE02.roa File: 196D93620ADC11F0B20A4824C4F9AE02.roa (raw, json) Hash identifier: rFVagliD2KjbFNRNTIdA2wQyQg9bsfkPk/MtZZ+v6RI= Subject key identifier: 51:C5:61:68:0E:3A:33:D2:9E:D8:59:83:69:FC:A7:04:D8:E0:AE:16 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B9C2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/196D93620ADC11F0B20A4824C4F9AE02.roa Signing time: Thu 08 May 2025 16:29:38 +0000 ROA not before: Thu 08 May 2025 16:29:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153744 IP address blocks: 103.184.82.0/23 maxlen: 24 2001:df0:8ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 12:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47554 (0xb9c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:29:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdbf1-ce0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3d:29:b5:eb:0b:fa:3d:aa:07:76:dd:bd:17: a9:d0:19:71:63:e3:b1:46:b1:27:8f:a8:ed:6f:cf: 84:5b:36:0d:bc:69:c6:03:d0:39:e0:b0:f8:3f:93: 17:07:d9:f1:e2:ad:9b:b7:36:70:28:14:ee:c7:c0: 0d:d8:67:d6:60:71:0e:4f:16:47:c4:8f:31:21:05: 9b:c6:dd:a3:98:61:ff:18:aa:00:bc:3d:26:c6:17: 3e:97:94:41:4e:58:93:f2:a8:92:94:4f:1b:cd:9b: 3e:a7:a2:41:0d:81:d8:ef:33:f5:74:df:e4:b3:c9: 29:88:f8:61:fc:02:3b:c6:c0:21:52:7a:a7:4e:93: b8:3b:cd:90:14:8a:fb:6c:0c:77:e4:70:16:35:65: 3f:3d:08:2a:a7:f5:50:de:b2:2a:30:c3:3d:7d:2a: 61:a2:cb:2e:56:89:9c:14:5f:22:76:15:3d:94:c2: dc:22:f9:d3:ea:4f:6b:28:46:b3:e0:21:a1:07:5b: bd:05:ab:3c:a7:35:53:b1:b7:52:1d:5f:98:0a:1b: 80:df:d0:fc:94:ea:c2:d9:dc:ba:3f:38:4f:62:ba: 6b:c9:d7:1d:bd:de:1f:94:88:f3:79:45:96:9b:21: 84:b0:a5:5c:a1:5e:1b:b5:8c:ae:ae:fb:05:54:2a: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C5:61:68:0E:3A:33:D2:9E:D8:59:83:69:FC:A7:04:D8:E0:AE:16 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/196D93620ADC11F0B20A4824C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.184.82.0/23 IPv6: 2001:df0:8ec0::/48 Signature Algorithm: sha256WithRSAEncryption 98:37:5e:42:ac:36:77:96:d5:aa:71:23:63:e4:3b:06:0f:20: 03:ce:ee:ad:20:c8:16:40:51:d2:cc:4a:a4:0f:3c:74:06:fd: 4d:47:a3:29:6f:5e:a4:6f:25:8a:52:12:f9:69:ab:42:61:13: 45:c1:d0:dc:17:29:a1:26:2f:94:e3:77:40:bd:34:82:96:16: 98:6a:d2:e6:ea:72:29:fa:ba:0b:e3:17:38:54:0b:bf:62:ca: 7b:a1:ea:83:3f:56:54:6c:cf:7f:9e:f0:26:66:ee:7a:99:82: 4d:84:74:65:67:04:88:30:c1:b1:db:19:62:de:36:e2:dd:b3: 06:99:a9:92:7b:94:85:4e:8d:fc:64:50:8d:a9:87:41:de:78: 67:29:fb:2e:c2:73:0e:eb:66:3b:0c:d6:96:0f:7d:06:74:4a: b1:15:c9:9a:32:40:84:9f:46:86:0e:75:f6:b0:11:f8:79:92: 97:3a:ab:3e:85:5b:81:bb:14:44:ec:91:b2:67:d1:86:46:6f: f2:8f:46:8c:8f:a1:02:cc:6d:86:a4:99:b3:c7:91:a3:9c:a0: 11:b1:fc:bb:6a:bf:5a:42:91:23:13:eb:8e:75:df:e7:cf:0a: 7f:3a:cc:56:c0:dd:98:a3:9a:04:8f:0e:a1:c5:59:6f:23:78: c9:8e:59:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALnCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjkzOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiZjEtY2UwYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANE9KbXrC/o9qgd23b0XqdAZcWPjsUaxJ4+o7W/PhFs2DbxpxgPQOeCw+D+T FwfZ8eKtm7c2cCgU7sfADdhn1mBxDk8WR8SPMSEFm8bdo5hh/xiqALw9JsYXPpeU QU5Yk/KokpRPG82bPqeiQQ2B2O8z9XTf5LPJKYj4YfwCO8bAIVJ6p06TuDvNkBSK +2wMd+RwFjVlPz0IKqf1UN6yKjDDPX0qYaLLLlaJnBRfInYVPZTC3CL50+pPayhG s+AhoQdbvQWrPKc1U7G3Uh1fmAobgN/Q/JTqwtncuj84T2K6a8nXHb3eH5SI83lF lpshhLClXKFeG7WMrq77BVQqk5kCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRRxWFo Djoz0p7YWYNp/KcE2OCuFjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE5NkQ5MzYy MEFEQzExRjBCMjBBNDgyNEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7hSMA8EAgACMAkDBwAgAQ3wjsAwDQYJKoZIhvcNAQEL BQADggEBAJg3XkKsNneW1apxI2PkOwYPIAPO7q0gyBZAUdLMSqQPPHQG/U1Hoylv XqRvJYpSEvlpq0JhE0XB0NwXKaEmL5Tjd0C9NIKWFphq0ubqcin6ugvjFzhUC79i ynuh6oM/VlRsz3+e8CZm7nqZgk2EdGVnBIgwwbHbGWLeNuLdswaZqZJ7lIVOjfxk UI2ph0HeeGcp+y7Ccw7rZjsM1pYPfQZ0SrEVyZoyQISfRoYOdfawEfh5kpc6qz6F W4G7FETskbJn0YZGb/KPRoyPoQLMbYakmbPHkaOcoBGx/Ltqv1pCkSMT64513+fP Cn86zFbA3ZijmgSPDqHFWW8jeMmOWRE= -----END CERTIFICATE-----Generated at Fri Jun 6 07:01:07 2025 by rpki-client