$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49377142F60911ED9D296E52C4F9AE02.roa File: 49377142F60911ED9D296E52C4F9AE02.roa (raw, json) Hash identifier: 43l0YDrCFEBaA/amLX2YxJnclzwCjhJhaIheVrh86lM= Subject key identifier: 95:AE:15:46:39:7C:FD:49:D4:3B:8F:B8:C9:FB:74:BA:12:4E:97:18 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B89D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49377142F60911ED9D296E52C4F9AE02.roa Signing time: Thu 08 May 2025 16:25:15 +0000 ROA not before: Thu 08 May 2025 16:25:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150591 IP address blocks: 103.67.96.0/24 maxlen: 24 103.67.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 12:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47261 (0xb89d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:25:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdaeb-ecea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:b6:d0:16:f5:c7:33:04:19:28:0a:c7:02: 26:d1:48:f0:93:b5:9c:18:24:80:5e:b7:68:cc:28: f2:a3:1e:ae:f4:8a:3a:dc:46:71:35:bb:dd:43:a5: 3e:c2:d9:f8:25:79:19:ba:a3:06:71:35:17:9f:3a: 72:3c:be:8a:e6:3d:f7:de:9e:6d:91:0b:00:14:15: 92:89:d4:45:d2:a7:03:e7:38:93:75:9e:19:e7:54: 8f:ea:1c:78:a5:ab:5f:2a:fa:98:6c:ca:76:ad:6c: f2:06:79:64:ed:d2:9c:e0:e3:8a:27:42:5d:70:2c: ed:19:29:0f:cb:5f:26:c9:95:af:06:dd:3f:39:b7: 2e:d5:62:0a:5a:9a:f6:88:86:93:f6:67:b4:db:94: d5:36:67:bc:86:d5:9f:82:ab:f9:9c:c7:0e:41:e7: 5f:7e:b1:27:98:a9:d4:2b:07:c7:c7:a3:47:42:d0: 1d:89:c6:ac:e8:07:ff:44:34:93:94:b3:fb:25:da: 53:0d:07:e4:92:4f:dc:29:e2:25:94:81:6e:ef:63: e5:62:79:75:88:8d:62:09:53:e5:df:e9:e2:57:0c: ab:35:4f:83:6d:37:a0:75:47:12:4d:6f:f1:e9:8f: 40:f9:23:39:da:5e:8e:a8:cf:84:8e:98:09:84:be: cc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AE:15:46:39:7C:FD:49:D4:3B:8F:B8:C9:FB:74:BA:12:4E:97:18 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49377142F60911ED9D296E52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.96.0/23 Signature Algorithm: sha256WithRSAEncryption 01:3c:7e:08:73:94:6e:27:6d:66:88:b9:60:c3:de:a7:06:83: e3:8e:2e:c0:f7:54:3f:ef:86:db:f6:3e:4a:d2:37:61:d0:e2: 1e:73:fd:fa:60:1f:2b:f0:0e:1f:02:9d:39:88:0f:22:37:fd: 17:44:93:7d:1b:46:e5:fe:a5:2b:b1:fe:ed:30:92:6e:e4:de: 68:a6:11:31:1e:11:ee:af:3f:87:26:22:2b:0e:3d:97:5e:90: 86:c5:28:1b:1e:f6:5c:df:97:e5:54:e5:b2:25:a8:c3:78:0e: 8f:4c:12:b2:b2:89:fb:52:15:dc:9e:19:8a:ea:e3:76:20:57: ea:1b:1e:34:92:14:a3:d6:22:c8:ca:73:3c:da:cc:dc:a6:52: 5d:d5:63:24:49:7c:e0:aa:a4:10:1b:f4:85:27:69:98:9c:a2: df:e8:ea:a3:6b:a8:07:50:de:37:b5:bf:26:53:44:76:2a:8e: 77:c1:93:ca:e0:96:f1:9d:9f:dc:b3:48:90:1d:1b:66:d4:d5: d9:2a:f8:1e:ca:be:e5:aa:f7:84:c4:2e:97:ed:fd:05:dc:2f: 7c:90:4e:16:18:80:a1:b8:60:e5:2e:93:41:52:27:60:6b:da: 4b:73:0c:52:fa:ff:2e:e9:a7:a3:a7:7e:84:f7:6e:40:01:a2: 4d:2f:48:c7 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALidMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjUxNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhZWItZWNlYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvDttAW9cczBBkoCscCJtFI8JO1nBgkgF63aMwo8qMervSKOtxGcTW73UOl PsLZ+CV5GbqjBnE1F586cjy+iuY9996ebZELABQVkonURdKnA+c4k3WeGedUj+oc eKWrXyr6mGzKdq1s8gZ5ZO3SnODjiidCXXAs7RkpD8tfJsmVrwbdPzm3LtViClqa 9oiGk/ZntNuU1TZnvIbVn4Kr+ZzHDkHnX36xJ5ip1CsHx8ejR0LQHYnGrOgH/0Q0 k5Sz+yXaUw0H5JJP3CniJZSBbu9j5WJ5dYiNYglT5d/p4lcMqzVPg203oHVHEk1v 8emPQPkjOdpejqjPhI6YCYS+zBcCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSVrhVG OXz9SdQ7j7jJ+3S6Ek6XGDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ5Mzc3MTQy RjYwOTExRUQ5RDI5NkU1MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ0NgMA0GCSqGSIb3DQEBCwUAA4IBAQABPH4Ic5RuJ21m iLlgw96nBoPjji7A91Q/74bb9j5K0jdh0OIec/36YB8r8A4fAp05iA8iN/0XRJN9 G0bl/qUrsf7tMJJu5N5ophExHhHurz+HJiIrDj2XXpCGxSgbHvZc35flVOWyJajD eA6PTBKyson7UhXcnhmK6uN2IFfqGx40khSj1iLIynM82szcplJd1WMkSXzgqqQQ G/SFJ2mYnKLf6Oqja6gHUN43tb8mU0R2Ko53wZPK4JbxnZ/cs0iQHRtm1NXZKvge yr7lqveExC6X7f0F3C98kE4WGIChuGDlLpNBUidga9pLcwxS+v8u6aejp36E925A AaJNL0jH -----END CERTIFICATE-----Generated at Mon Jun 9 16:17:09 2025 by rpki-client