$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B0145A6FDC511ECAEF22950C4F9AE02.roa File: 6B0145A6FDC511ECAEF22950C4F9AE02.roa (raw, json) Hash identifier: lUgfAHR+QA+BMzS8FPWqCN+nflI4l3hkRpNRGGfLntU= Subject key identifier: 08:B2:3B:FA:D8:E2:C8:24:A8:32:3F:DF:ED:56:FF:C6:DD:1E:F6:25 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B791 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B0145A6FDC511ECAEF22950C4F9AE02.roa Signing time: Thu 08 May 2025 16:21:15 +0000 ROA not before: Thu 08 May 2025 16:21:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147267 IP address blocks: 103.190.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 12:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46993 (0xb791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:21:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9fb-91f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:33:54:a9:92:c2:dc:80:39:96:b2:a9:60: 66:01:20:1e:4a:db:3b:a3:d6:34:dc:bb:28:d7:b2: 4f:fe:d8:cd:f7:a7:57:01:ed:93:7a:64:b1:37:47: a6:0c:09:86:90:bb:e6:a8:24:48:28:17:91:3a:08: d0:35:5f:fb:74:c1:d4:79:13:ac:d5:36:b9:d4:30: a7:aa:35:a1:85:21:3a:3b:89:68:e5:d3:28:ef:0f: 8e:9a:fa:2c:31:3d:18:9a:11:77:f7:d8:61:8d:80: df:e7:5f:58:8b:73:15:b9:b7:2f:58:54:90:c6:97: 22:8e:6a:d1:50:e1:0e:4c:f2:26:5c:ea:07:5d:0c: 7d:f3:01:ff:de:62:6d:16:1c:b1:9e:ef:59:36:72: c0:c7:85:c2:10:a1:3c:d4:2c:36:23:d0:df:51:b0: 51:2a:9b:45:a3:ca:47:c7:fc:21:90:b7:e1:97:d1: 69:62:e9:7b:6e:b1:dc:4b:3b:9e:62:70:df:7a:42: f7:9e:a3:56:f3:4f:52:98:fb:d2:15:c0:2a:7b:1b: 9e:6b:07:30:5e:16:4f:ed:e5:cb:75:b4:1c:1a:b4: 68:c3:76:db:d8:70:b8:28:49:c3:7e:6a:0e:36:ea: b4:6f:5d:f3:c3:74:1b:49:be:08:8a:37:9d:84:5e: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B2:3B:FA:D8:E2:C8:24:A8:32:3F:DF:ED:56:FF:C6:DD:1E:F6:25 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B0145A6FDC511ECAEF22950C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.127.0/24 Signature Algorithm: sha256WithRSAEncryption 40:fa:df:47:c6:29:6c:e1:fd:56:02:26:47:db:2e:24:58:17: 90:9f:ea:42:af:05:3d:51:0b:51:f9:71:d3:78:b4:f3:c8:e2: 47:09:e7:01:00:71:3d:78:ec:5d:b0:b2:33:af:51:c2:d2:b0: 8f:b2:45:72:2c:ef:0a:5d:20:a9:9d:36:d7:38:44:62:40:a5: 52:3b:ea:95:30:f6:ba:97:c5:3c:5e:c3:c4:37:2a:8d:41:66: 9b:12:28:4a:8a:24:6a:09:f5:b2:dc:33:10:b5:7b:d7:2a:5d: 32:0d:d2:00:9d:5d:db:f3:fd:d4:04:91:fa:6d:ac:15:82:48: 88:03:50:85:58:ed:33:98:de:81:2d:64:df:b5:74:32:84:a8: b2:cd:72:9a:e4:49:cc:70:72:b3:f4:7d:78:a7:21:fe:c9:d3: c1:5c:fd:3c:4e:2c:52:c4:42:69:8b:1a:23:61:46:97:ee:87: ae:aa:74:b9:4c:26:e9:fb:5f:cc:5a:9c:c0:23:de:41:9b:f3: 87:49:f9:c5:e0:b4:b5:e4:b4:1f:36:e9:3e:63:17:4a:96:f5: e2:b0:c8:a0:05:64:75:4b:2e:36:1b:3e:54:76:67:f5:06:1a: 9e:b9:e0:1c:58:85:cc:26:37:a8:73:c5:0c:73:a9:12:0d:42: 9e:7a:cb:55 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALeRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjExNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5ZmItOTFmMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgQM1SpksLcgDmWsqlgZgEgHkrbO6PWNNy7KNeyT/7YzfenVwHtk3pksTdH pgwJhpC75qgkSCgXkToI0DVf+3TB1HkTrNU2udQwp6o1oYUhOjuJaOXTKO8Pjpr6 LDE9GJoRd/fYYY2A3+dfWItzFbm3L1hUkMaXIo5q0VDhDkzyJlzqB10MffMB/95i bRYcsZ7vWTZywMeFwhChPNQsNiPQ31GwUSqbRaPKR8f8IZC34ZfRaWLpe26x3Es7 nmJw33pC956jVvNPUpj70hXAKnsbnmsHMF4WT+3ly3W0HBq0aMN229hwuChJw35q DjbqtG9d88N0G0m+CIo3nYReENUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQIsjv6 2OLIJKgyP9/tVv/G3R72JTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZCMDE0NUE2 RkRDNTExRUNBRUYyMjk1MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ75/MA0GCSqGSIb3DQEBCwUAA4IBAQBA+t9Hxils4f1W AiZH2y4kWBeQn+pCrwU9UQtR+XHTeLTzyOJHCecBAHE9eOxdsLIzr1HC0rCPskVy LO8KXSCpnTbXOERiQKVSO+qVMPa6l8U8XsPENyqNQWabEihKiiRqCfWy3DMQtXvX Kl0yDdIAnV3b8/3UBJH6bawVgkiIA1CFWO0zmN6BLWTftXQyhKiyzXKa5EnMcHKz 9H14pyH+ydPBXP08TixSxEJpixojYUaX7oeuqnS5TCbp+1/MWpzAI95Bm/OHSfnF 4LS15LQfNuk+YxdKlvXisMigBWR1Sy42Gz5Udmf1BhqeueAcWIXMJjeoc8UMc6kS DUKeestV -----END CERTIFICATE-----Generated at Fri Jun 6 06:40:47 2025 by rpki-client