$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83239BB20A1E11F0BAD8A91EC4F9AE02.roa File: 83239BB20A1E11F0BAD8A91EC4F9AE02.roa (raw, json) Hash identifier: 9f/cCiDVruY+SX/8g9Web0GOmPoTnkDwjKiznlhEFsY= Subject key identifier: 7B:A6:B6:A1:DE:15:24:88:DD:FA:AF:12:E7:7C:57:CC:41:67:38:46 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BCDF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83239BB20A1E11F0BAD8A91EC4F9AE02.roa Signing time: Tue 03 Jun 2025 11:06:02 +0000 ROA not before: Tue 03 Jun 2025 11:06:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151106 IP address blocks: 43.243.76.0/24 maxlen: 24 103.157.50.0/23 maxlen: 24 103.161.26.0/23 maxlen: 24 103.177.226.0/23 maxlen: 24 103.179.96.0/23 maxlen: 24 103.179.118.0/23 maxlen: 24 103.181.84.0/23 maxlen: 24 103.183.216.0/23 maxlen: 24 103.187.92.0/23 maxlen: 24 103.189.82.0/23 maxlen: 24 103.214.230.0/23 maxlen: 24 103.215.96.0/23 maxlen: 24 103.243.232.0/24 maxlen: 24 2001:df2:bec0::/47 maxlen: 47 2001:df2:bec0::/48 maxlen: 48 2001:df2:bec1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 12:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48351 (0xbcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 3 11:06:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=683ed719-2865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:68:f4:e5:ab:5d:d6:fb:93:85:af:7f:0f: e6:80:ec:24:05:bd:73:05:e5:0c:cf:e8:20:bc:90: 6c:06:85:e1:3d:4a:23:89:99:6e:d4:b8:42:7f:05: b5:44:58:38:6f:80:5c:1f:83:02:cc:9e:74:d1:8f: 7a:ce:a8:dc:95:cf:dc:20:7c:f4:98:83:8d:7d:d8: ac:dc:07:a4:bf:d7:09:31:0a:1a:05:44:1f:32:c0: d7:d9:00:3a:18:20:1a:2f:6e:6b:41:b4:6e:b2:43: 41:d3:0c:ec:db:b3:59:f4:77:4a:a0:d3:3e:a4:e1: d5:62:86:f0:1e:62:1f:84:bb:68:bc:d1:77:3a:8e: 41:af:85:92:9f:b8:f4:15:3f:05:27:19:08:59:fe: 14:46:5b:1f:8a:14:5d:92:36:ca:e5:48:6a:c6:a3: f9:d6:e6:6b:cf:1a:04:0e:9d:84:eb:51:5b:1d:bc: 84:05:0e:cb:af:39:20:aa:07:d3:31:b1:2d:f8:b6: 2f:09:6b:24:28:73:a8:8a:d5:62:99:c2:aa:b9:53: 9c:63:db:c3:24:59:af:51:ce:cf:ef:d2:7d:ea:84: 45:b6:ff:b0:fd:31:2f:e0:16:5d:1a:03:56:75:19: 64:d3:3c:71:ff:72:6f:5a:80:87:c7:35:26:dc:95: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A6:B6:A1:DE:15:24:88:DD:FA:AF:12:E7:7C:57:CC:41:67:38:46 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83239BB20A1E11F0BAD8A91EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.76.0/24 103.157.50.0/23 103.161.26.0/23 103.177.226.0/23 103.179.96.0/23 103.179.118.0/23 103.181.84.0/23 103.183.216.0/23 103.187.92.0/23 103.189.82.0/23 103.214.230.0/23 103.215.96.0/23 103.243.232.0/24 IPv6: 2001:df2:bec0::/47 Signature Algorithm: sha256WithRSAEncryption 54:18:03:b5:fd:8f:9c:a2:5e:00:f1:59:12:a1:d0:1d:7e:48: d2:11:8c:d7:ab:15:5a:64:56:fe:ac:0d:fa:2f:70:23:90:2f: c6:15:8b:88:b1:2e:fb:51:7a:a8:4b:e4:b5:44:10:25:f9:ee: 2f:5d:d3:06:2b:25:be:7b:36:79:8d:70:8a:d8:10:ed:f9:e1: 4d:fc:85:1f:93:a7:fe:71:84:07:f0:c3:54:45:a4:c7:ae:bf: 1c:0e:2d:d2:07:5f:97:b2:42:fb:3f:03:d8:81:04:9c:da:cf: fb:ca:6d:a6:18:d1:83:b0:24:e0:9b:1e:84:41:38:fc:f0:18: 1b:e4:20:4b:99:c0:ed:d3:87:10:bf:6a:ac:73:3b:95:f7:de: a8:19:13:79:81:e4:bd:df:15:28:9c:ed:57:4d:01:58:b8:c1: 45:4f:4c:26:15:21:98:cb:bd:f4:04:41:4b:34:2e:84:1f:05: 53:33:ec:27:20:18:e7:c2:f3:d5:9f:7b:f1:65:58:d4:fc:7c: c5:64:1e:e0:41:5b:9c:13:58:12:13:00:6c:c8:33:5d:60:b0: 35:c6:85:b6:e5:77:61:41:45:e0:02:47:bf:86:04:e4:3a:1e: d4:05:84:59:fb:d1:02:d7:cb:47:47:66:18:b8:4e:4c:2e:ee: a6:37:fa:d8 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIDALzfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYwMzExMDYwMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgzZWQ3MTktMjg2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7zaPTlq13W+5OFr38P5oDsJAW9cwXlDM/oILyQbAaF4T1KI4mZbtS4Qn8F tURYOG+AXB+DAsyedNGPes6o3JXP3CB89JiDjX3YrNwHpL/XCTEKGgVEHzLA19kA OhggGi9ua0G0brJDQdMM7NuzWfR3SqDTPqTh1WKG8B5iH4S7aLzRdzqOQa+Fkp+4 9BU/BScZCFn+FEZbH4oUXZI2yuVIasaj+dbma88aBA6dhOtRWx28hAUOy685IKoH 0zGxLfi2LwlrJChzqIrVYpnCqrlTnGPbwyRZr1HOz+/SfeqERbb/sP0xL+AWXRoD VnUZZNM8cf9yb1qAh8c1JtyV0f8CAwEAAaOCAu4wggLqMB0GA1UdDgQWBBR7prah 3hUkiN36rxLnfFfMQWc4RjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgzMjM5QkIy MEExRTExRjBCQUQ4QTkxRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMHgGCCsGAQUFBwEHAQH/ BGkwZzBUBAIAATBOAwQAK/NMAwQBZ50yAwQBZ6EaAwQBZ7HiAwQBZ7NgAwQBZ7N2 AwQBZ7VUAwQBZ7fYAwQBZ7tcAwQBZ71SAwQBZ9bmAwQBZ9dgAwQAZ/PoMA8EAgAC MAkDBwEgAQ3yvsAwDQYJKoZIhvcNAQELBQADggEBAFQYA7X9j5yiXgDxWRKh0B1+ SNIRjNerFVpkVv6sDfovcCOQL8YVi4ixLvtReqhL5LVEECX57i9d0wYrJb57NnmN cIrYEO354U38hR+Tp/5xhAfww1RFpMeuvxwOLdIHX5eyQvs/A9iBBJzaz/vKbaYY 0YOwJOCbHoRBOPzwGBvkIEuZwO3ThxC/aqxzO5X33qgZE3mB5L3fFSic7VdNAVi4 wUVPTCYVIZjLvfQEQUs0LoQfBVMz7CcgGOfC89Wfe/FlWNT8fMVkHuBBW5wTWBIT AGzIM11gsDXGhbbld2FBReACR7+GBOQ6HtQFhFn70QLXy0dHZhi4Tkwu7qY3+tg= -----END CERTIFICATE-----Generated at Thu Jun 5 19:21:05 2025 by rpki-client