$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52F0FA4EBB4F11EE875CE450C4F9AE02.roa File: 52F0FA4EBB4F11EE875CE450C4F9AE02.roa (raw, json) Hash identifier: IZHuI+MreVAg3ApFz2JU9h1b7yOPw+zI8pX1IlmgBmg= Subject key identifier: 01:39:13:42:85:3A:7B:9C:33:18:04:89:D9:6A:CF:66:0E:28:93:8F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B93E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52F0FA4EBB4F11EE875CE450C4F9AE02.roa Signing time: Thu 08 May 2025 16:27:42 +0000 ROA not before: Thu 08 May 2025 16:27:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151719 IP address blocks: 103.16.12.0/23 maxlen: 24 103.16.14.0/24 maxlen: 24 2401:7920::/32 maxlen: 48 2401:86e0::/36 maxlen: 36 2401:86e0::/48 maxlen: 48 2401:86e0:1::/48 maxlen: 48 2401:86e0:2::/48 maxlen: 48 2401:86e0:3::/48 maxlen: 48 2401:86e0:4::/48 maxlen: 48 2401:86e0:5::/48 maxlen: 48 2401:86e0:6::/48 maxlen: 48 2401:86e0:7::/48 maxlen: 48 2401:86e0:8::/48 maxlen: 48 2401:86e0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 15:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47422 (0xb93e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:27:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb7e-d446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:cc:64:8d:e7:9a:2d:4a:f9:eb:72:61:10: c9:f7:ec:e6:5a:63:64:37:47:7d:e6:a5:4d:16:41: 77:a0:3a:c7:86:27:21:2b:b6:91:86:c5:7c:83:c3: 98:16:0a:85:7b:f1:89:1b:d0:3f:80:12:bb:32:00: a1:a9:73:0a:1e:76:17:c7:89:bf:2b:3c:17:69:d7: e5:f1:df:1d:a5:83:de:cc:cc:15:22:48:26:56:a1: 22:52:20:88:9e:15:6c:45:7f:0b:06:47:a3:58:87: 96:c4:d9:3f:1a:28:4e:15:6a:11:fc:c9:2e:50:17: 27:3c:50:e9:88:ae:4b:a1:11:83:de:37:92:b3:cd: 4e:2e:f4:ab:5b:08:36:c0:ec:a8:8e:d4:ec:95:53: b7:e6:ca:a0:a5:76:2a:4f:58:fd:72:36:67:80:1a: f9:de:ec:8d:b4:39:42:6c:04:72:0f:b2:66:23:d2: 64:69:d0:d5:11:c7:5b:e0:6e:d7:0a:1b:6b:15:38: c9:00:84:04:cc:e3:00:43:f8:c1:4b:a1:a5:74:45: 20:ce:6b:8c:c5:4c:9e:10:12:34:0f:51:2e:9d:51: 9c:2d:a0:81:41:7a:67:17:15:a4:06:10:e7:2a:d6: dd:99:07:43:f6:63:72:94:03:3e:e8:09:94:4f:2f: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:39:13:42:85:3A:7B:9C:33:18:04:89:D9:6A:CF:66:0E:28:93:8F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52F0FA4EBB4F11EE875CE450C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.16.12.0-103.16.14.255 IPv6: 2401:7920::/32 2401:86e0::/36 Signature Algorithm: sha256WithRSAEncryption 18:17:d7:e2:13:e0:77:89:81:a8:bd:ae:02:95:a5:09:5f:25: 56:ca:5f:df:96:2f:91:8c:d1:65:fd:d1:0b:95:6a:09:97:fb: 67:56:f5:61:c4:85:be:01:83:12:f8:12:cd:71:01:a6:75:c2: a4:e1:9c:85:c3:5c:8f:0e:c5:c8:7c:d3:05:a5:3e:4e:6a:36: 17:34:46:d0:ac:fa:f5:09:f2:b9:7a:69:08:79:d1:8d:a1:f9: 1d:38:9c:27:2a:53:23:76:07:16:d9:07:39:7d:27:05:48:24: c1:31:ec:94:a5:50:aa:92:99:62:fc:00:56:43:5d:e5:38:2f: e1:c5:fa:d9:eb:2d:ed:38:b5:da:fa:6a:07:5b:5c:40:e1:ce: bc:f3:de:2a:af:5e:05:5b:52:a1:d7:dd:48:5f:ea:6a:a3:db: 46:5d:61:cc:59:fb:3d:62:de:3c:98:e6:ae:53:a2:f5:ff:15: 16:1e:0c:95:80:e6:7a:b0:64:19:54:98:49:8f:16:12:c4:cb: b1:67:51:60:f3:40:d8:d5:af:c5:de:bd:c1:cb:1c:d3:a7:a7: 7e:34:43:0f:86:d0:a6:6a:04:c0:ce:66:ff:2a:0f:d7:09:8d: 1a:f1:a1:ab:50:0f:d3:93:45:71:0e:7c:45:c2:e8:ee:fe:17: 3c:ad:75:ba -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIDALk+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2Mjc0MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiN2UtZDQ0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtozGSN55otSvnrcmEQyffs5lpjZDdHfealTRZBd6A6x4YnISu2kYbFfIPD mBYKhXvxiRvQP4ASuzIAoalzCh52F8eJvys8F2nX5fHfHaWD3szMFSJIJlahIlIg iJ4VbEV/CwZHo1iHlsTZPxooThVqEfzJLlAXJzxQ6YiuS6ERg943krPNTi70q1sI NsDsqI7U7JVTt+bKoKV2Kk9Y/XI2Z4Aa+d7sjbQ5QmwEcg+yZiPSZGnQ1RHHW+Bu 1wobaxU4yQCEBMzjAEP4wUuhpXRFIM5rjMVMnhASNA9RLp1RnC2ggUF6ZxcVpAYQ 5yrW3ZkHQ/ZjcpQDPugJlE8vhSsCAwEAAaOCArQwggKwMB0GA1UdDgQWBBQBORNC hTp7nDMYBInZas9mDiiTjzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUyRjBGQTRF QkI0RjExRUU4NzVDRTQ1MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMD4GCCsGAQUFBwEHAQH/ BC8wLTAUBAIAATAOMAwDBAJnEAwDBABnEA4wFQQCAAIwDwMFACQBeSADBgQkAYbg ADANBgkqhkiG9w0BAQsFAAOCAQEAGBfX4hPgd4mBqL2uApWlCV8lVspf35YvkYzR Zf3RC5VqCZf7Z1b1YcSFvgGDEvgSzXEBpnXCpOGchcNcjw7FyHzTBaU+Tmo2FzRG 0Kz69QnyuXppCHnRjaH5HTicJypTI3YHFtkHOX0nBUgkwTHslKVQqpKZYvwAVkNd 5Tgv4cX62est7Ti12vpqB1tcQOHOvPPeKq9eBVtSodfdSF/qaqPbRl1hzFn7PWLe PJjmrlOi9f8VFh4MlYDmerBkGVSYSY8WEsTLsWdRYPNA2NWvxd69wcsc06enfjRD D4bQpmoEwM5m/yoP1wmNGvGhq1AP05NFcQ58RcLo7v4XPK11ug== -----END CERTIFICATE-----Generated at Wed Jun 11 03:43:25 2025 by rpki-client