$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B85D428B9E411EEBBEE7F4EC4F9AE02.roa File: 2B85D428B9E411EEBBEE7F4EC4F9AE02.roa (raw, json) Hash identifier: 8iXlaQaDE8E6i29OkFUK8Lv6fJzqi7TCDrTnR2uO+zk= Subject key identifier: 37:7E:3D:0C:73:25:6D:9A:CE:C7:45:A9:DC:63:A1:89:92:ED:AA:51 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BC86 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B85D428B9E411EEBBEE7F4EC4F9AE02.roa Signing time: Fri 30 May 2025 10:36:34 +0000 ROA not before: Fri 30 May 2025 10:36:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147185 IP address blocks: 103.42.72.0/24 maxlen: 24 103.174.52.0/23 maxlen: 24 103.213.208.0/22 maxlen: 24 113.30.146.0/24 maxlen: 24 113.30.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 15:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48262 (0xbc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 10:36:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68398a32-ad48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:88:fd:61:a0:1b:66:46:1d:77:21:c4:11:70: 32:89:0f:71:aa:10:e7:36:dd:bd:1a:72:4a:7c:48: b0:e8:30:5d:43:c2:b2:34:23:bc:37:81:c9:3d:be: 32:1a:e7:80:d8:48:88:f7:84:8f:db:ea:d1:4f:e1: d3:75:60:af:79:2e:b8:b4:7d:33:5f:cf:57:23:c0: 3d:ec:45:ed:2d:bf:f2:f4:ec:c7:7b:6d:fb:1e:79: 19:5c:a6:8e:0d:4c:72:fc:75:4f:44:05:a4:0c:89: f5:02:cc:87:4b:6b:26:1a:d0:d0:8e:e1:fa:d9:91: 8a:e9:04:21:b9:60:c5:f2:47:58:64:f3:e2:6a:61: bd:53:a7:5a:c3:29:d3:6f:4b:8a:5d:9e:b5:db:e4: e0:f2:0a:e1:8f:88:a8:57:34:14:3c:a9:aa:32:00: 65:4f:cd:0b:bc:ec:2f:2a:5f:db:8e:97:10:72:e6: 66:22:79:f0:3c:cf:e8:25:11:04:de:6f:d5:cd:d5: ff:ac:9a:1e:b6:c7:a9:99:df:f8:83:43:61:5f:cf: 93:98:6d:9d:72:db:10:d3:0e:40:53:c2:7b:ae:b8: 3a:25:cb:92:91:37:09:af:e0:e5:c6:88:2d:45:3b: 7e:80:85:7f:31:24:8d:6a:dd:eb:82:25:74:ba:0d: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7E:3D:0C:73:25:6D:9A:CE:C7:45:A9:DC:63:A1:89:92:ED:AA:51 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B85D428B9E411EEBBEE7F4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.72.0/24 103.174.52.0/23 103.213.208.0/22 113.30.146.0/23 Signature Algorithm: sha256WithRSAEncryption ad:58:69:c9:3a:03:be:95:74:02:3c:9a:18:ae:37:02:6e:35: 83:8d:5a:b5:52:49:b9:de:76:23:13:21:0c:af:68:bd:ca:af: 95:36:0b:20:37:bf:01:43:91:4d:8c:65:4f:36:40:e7:0b:a0: 38:e1:c8:ce:53:c9:84:43:17:1d:aa:5d:7a:f2:07:e5:b2:20: 01:ae:f8:7c:46:8a:40:e4:e2:26:a5:5b:82:2a:dc:25:bb:7c: 20:2d:ca:1a:b3:ad:7c:f7:23:a0:a1:4f:e4:11:db:c2:76:92: 07:d7:6a:72:cc:c8:9d:00:41:71:f0:99:c6:56:64:21:9a:dc: e9:c1:82:66:c0:d6:5e:69:9b:29:25:37:45:68:6a:3f:63:4f: 2f:af:2b:48:d4:41:67:9a:21:05:86:f3:13:9e:f2:2a:fb:68: 08:90:6e:95:ab:d6:37:1c:28:0d:db:58:60:e4:22:7a:46:37: 7a:3b:25:e7:94:e4:23:eb:67:3e:13:92:7b:ec:fe:d1:88:5e: d8:2e:ad:b0:60:8a:cf:63:41:b8:8e:6a:97:50:20:1c:1d:21: 24:e5:ca:17:79:18:ea:5f:0e:c6:61:f1:c4:6d:bb:bf:9d:bb: 02:d3:34:04:23:04:9d:6e:c7:2c:46:fb:65:d3:97:7c:6e:2e: 47:85:6c:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDALyGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUzMDEwMzYzNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgzOThhMzItYWQ0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOOI/WGgG2ZGHXchxBFwMokPcaoQ5zbdvRpySnxIsOgwXUPCsjQjvDeByT2+ MhrngNhIiPeEj9vq0U/h03Vgr3kuuLR9M1/PVyPAPexF7S2/8vTsx3tt+x55GVym jg1Mcvx1T0QFpAyJ9QLMh0trJhrQ0I7h+tmRiukEIblgxfJHWGTz4mphvVOnWsMp 029Lil2etdvk4PIK4Y+IqFc0FDypqjIAZU/NC7zsLypf246XEHLmZiJ58DzP6CUR BN5v1c3V/6yaHrbHqZnf+INDYV/Pk5htnXLbENMOQFPCe664OiXLkpE3Ca/g5caI LUU7foCFfzEkjWrd64IldLoNq/MCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBQ3fj0M cyVtms7HRancY6GJku2qUTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJCODVENDI4 QjlFNDExRUVCQkVFN0Y0RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQAZypIAwQBZ640AwQCZ9XQAwQBcR6SMA0GCSqGSIb3DQEB CwUAA4IBAQCtWGnJOgO+lXQCPJoYrjcCbjWDjVq1Ukm53nYjEyEMr2i9yq+VNgsg N78BQ5FNjGVPNkDnC6A44cjOU8mEQxcdql168gflsiABrvh8RopA5OImpVuCKtwl u3wgLcoas6189yOgoU/kEdvCdpIH12pyzMidAEFx8JnGVmQhmtzpwYJmwNZeaZsp JTdFaGo/Y08vrytI1EFnmiEFhvMTnvIq+2gIkG6Vq9Y3HCgN21hg5CJ6Rjd6OyXn lOQj62c+E5J77P7RiF7YLq2wYIrPY0G4jmqXUCAcHSEk5coXeRjqXw7GYfHEbbu/ nbsC0zQEIwSdbscsRvtl05d8bi5HhWx7 -----END CERTIFICATE-----Generated at Sun Jun 8 23:54:36 2025 by rpki-client