$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20529FC4D59811EB9F992569C4F9AE02.roa File: 20529FC4D59811EB9F992569C4F9AE02.roa (raw, json) Hash identifier: 1o04Bhyi0bzYVNBMTUj2H3AjsfaCaB73X8ej0UIS0LU= Subject key identifier: FF:61:53:EA:EC:8E:DA:3F:1D:E2:85:97:C8:76:8B:0F:E5:D2:9C:56 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B2ED Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20529FC4D59811EB9F992569C4F9AE02.roa Signing time: Thu 08 May 2025 16:03:06 +0000 ROA not before: Thu 08 May 2025 16:03:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135188 IP address blocks: 45.249.48.0/24 maxlen: 24 45.249.49.0/24 maxlen: 24 45.249.51.0/24 maxlen: 24 103.117.46.0/23 maxlen: 24 103.165.14.0/23 maxlen: 24 103.168.80.0/23 maxlen: 24 103.174.110.0/23 maxlen: 24 2400:1220::/32 maxlen: 32 2407:42c0::/32 maxlen: 32 2407:8b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 12:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45805 (0xb2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:03:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd5ba-231f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:60:35:8d:8f:e8:99:b0:47:fc:a7:c5:ce: 52:e9:6d:a6:34:8e:b8:f1:7b:80:30:47:01:c5:4e: bd:42:59:3a:2d:e6:05:22:93:96:77:89:ef:3b:52: e9:56:c7:02:fb:02:84:5b:cb:1e:4f:34:0c:d7:cc: e2:67:c2:35:c8:ee:b7:21:fb:b3:c0:68:70:5e:f9: c8:77:c5:f0:af:e0:1c:c8:67:72:7e:25:d0:5c:5a: 64:c5:0c:b4:6b:7e:a2:18:1f:1b:3c:ca:a5:be:d1: 80:dc:b2:e6:94:41:2b:99:42:d6:6f:1a:9a:39:f9: aa:d2:62:7e:90:d9:83:19:7f:dc:e1:bf:5d:69:85: f4:79:11:63:68:ec:4a:2d:e7:f6:47:76:aa:b2:d9: cc:95:ea:23:78:1c:7b:bf:46:a3:47:1c:21:c9:85: b6:c3:b6:6d:c4:87:4c:16:82:96:80:2b:ba:36:18: 9e:73:c3:64:38:ef:e2:e9:c1:1e:e0:58:f8:a8:27: 8e:a2:5c:2b:8e:af:a2:27:70:00:e3:48:81:97:0b: af:96:3c:99:ae:d2:f0:b7:d6:df:bb:c2:0d:71:17: 6c:0f:67:76:0b:ab:85:d6:1d:6d:89:8e:aa:69:7e: 0b:54:6e:51:01:5d:10:1d:05:03:35:88:1e:8d:a1: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:61:53:EA:EC:8E:DA:3F:1D:E2:85:97:C8:76:8B:0F:E5:D2:9C:56 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20529FC4D59811EB9F992569C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.48.0/23 45.249.51.0/24 103.117.46.0/23 103.165.14.0/23 103.168.80.0/23 103.174.110.0/23 IPv6: 2400:1220::/32 2407:42c0::/32 2407:8b40::/32 Signature Algorithm: sha256WithRSAEncryption 6e:6f:d8:2b:44:fe:c5:66:58:44:25:70:d4:0e:41:9a:7c:8b: 01:52:50:90:5d:1a:f5:f7:19:56:a2:b8:04:0d:35:f0:80:76: b8:e6:21:44:e5:d1:e8:58:ff:22:45:f1:8b:c0:77:03:2a:6e: 46:a4:a9:84:44:53:5e:33:c4:3c:e5:fc:b9:26:d5:7a:b9:28: c0:f8:c4:5a:53:99:28:b1:3d:e2:2e:1b:eb:94:fe:5c:f1:41: d1:ad:a0:3c:ba:cf:7e:97:ec:25:dc:b7:64:0f:87:11:7c:94: f0:34:5b:32:fc:ff:6a:51:fd:ab:a8:2c:9e:d4:73:01:6d:3f: 20:0d:6a:e9:5f:7f:80:21:ed:ba:78:0e:24:e1:ab:84:1a:9a: cb:7e:a0:19:93:c3:73:9b:4f:2b:fc:a4:6f:7c:99:8b:97:5b: 4d:7f:5a:bd:18:a9:6b:a2:90:15:ce:11:f1:c0:11:26:c4:ed: 4e:3b:58:fc:59:0d:49:bc:be:9b:ce:f1:fd:14:68:8e:7a:e3: eb:73:3e:e6:8a:a7:f7:e6:3e:96:6e:d6:65:eb:1d:52:98:b4: a4:90:a4:07:1f:26:b0:78:03:ea:d7:b9:85:75:47:6d:65:98: 61:fc:59:7c:00:70:ed:0b:f5:ef:65:bf:0b:65:33:ae:c1:2f: 66:a4:b2:02 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIDALLtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDMwNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1YmEtMjMxZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfSYDWNj+iZsEf8p8XOUultpjSOuPF7gDBHAcVOvUJZOi3mBSKTlneJ7ztS 6VbHAvsChFvLHk80DNfM4mfCNcjutyH7s8BocF75yHfF8K/gHMhncn4l0FxaZMUM tGt+ohgfGzzKpb7RgNyy5pRBK5lC1m8amjn5qtJifpDZgxl/3OG/XWmF9HkRY2js Si3n9kd2qrLZzJXqI3gce79Go0ccIcmFtsO2bcSHTBaCloArujYYnnPDZDjv4unB HuBY+KgnjqJcK46voidwAONIgZcLr5Y8ma7S8LfW37vCDXEXbA9ndgurhdYdbYmO qml+C1RuUQFdEB0FAzWIHo2hrf0CAwEAAaOCAtAwggLMMB0GA1UdDgQWBBT/YVPq 7I7aPx3ihZfIdosP5dKcVjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIwNTI5RkM0 RDU5ODExRUI5Rjk5MjU2OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFoGCCsGAQUFBwEHAQH/ BEswSTAqBAIAATAkAwQBLfkwAwQALfkzAwQBZ3UuAwQBZ6UOAwQBZ6hQAwQBZ65u MBsEAgACMBUDBQAkABIgAwUAJAdCwAMFACQHi0AwDQYJKoZIhvcNAQELBQADggEB AG5v2CtE/sVmWEQlcNQOQZp8iwFSUJBdGvX3GVaiuAQNNfCAdrjmIUTl0ehY/yJF 8YvAdwMqbkakqYREU14zxDzl/Lkm1Xq5KMD4xFpTmSixPeIuG+uU/lzxQdGtoDy6 z36X7CXct2QPhxF8lPA0WzL8/2pR/auoLJ7UcwFtPyANaulff4Ah7bp4DiThq4Qa mst+oBmTw3ObTyv8pG98mYuXW01/Wr0YqWuikBXOEfHAESbE7U47WPxZDUm8vpvO 8f0UaI564+tzPuaKp/fmPpZu1mXrHVKYtKSQpAcfJrB4A+rXuYV1R21lmGH8WXwA cO0L9e9lvwtlM67BL2aksgI= -----END CERTIFICATE-----Generated at Fri Jun 6 06:39:54 2025 by rpki-client