$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/970ED090476E11EC8A31B762C4F9AE02.roa File: 970ED090476E11EC8A31B762C4F9AE02.roa (raw, json) Hash identifier: /MhNQ2clYvqBHcqvzbHFJf9P1WPsrJFaBsptG/D/LjM= Subject key identifier: 05:74:9D:B7:D4:67:80:34:B9:FC:98:3E:91:B6:4F:09:CA:0E:42:42 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BD10 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/970ED090476E11EC8A31B762C4F9AE02.roa Signing time: Thu 05 Jun 2025 07:00:36 +0000 ROA not before: Thu 05 Jun 2025 07:00:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198949 IP address blocks: 103.55.74.0/24 maxlen: 24 103.153.57.0/24 maxlen: 24 103.153.251.0/24 maxlen: 24 103.183.72.0/24 maxlen: 24 103.183.73.0/24 maxlen: 24 180.94.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 12:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48400 (0xbd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 5 07:00:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68414093-1971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:76:be:ca:88:8f:bf:78:f5:85:75:08:f0: a4:09:63:77:cf:a8:6e:b0:4d:10:39:96:09:bb:61: 83:1c:7b:17:df:68:6f:55:45:9d:a7:a9:bd:44:15: 5f:41:f6:8a:c2:e9:ce:f4:73:e7:e3:4a:c3:a2:41: 99:a2:15:d7:49:30:5e:71:b0:fa:98:20:72:02:38: ad:bf:e6:cd:a8:42:f7:0c:7c:7a:fd:0c:8a:c1:e9: 8f:4e:aa:d7:03:2f:db:7a:8e:89:97:c2:3d:e5:82: 33:fb:93:5d:05:32:40:cb:bc:94:42:05:70:e1:0b: 34:d6:8b:68:ae:fd:e7:a6:c7:24:3b:ae:be:89:f6: b6:64:dd:d8:e3:ff:50:2c:ee:39:8a:3a:44:bf:3d: 94:f3:a4:9a:92:36:52:36:a1:93:91:ac:66:63:a8: f2:fd:46:b6:d2:e9:5d:e5:66:0d:c6:bc:53:2c:2b: d0:a6:31:b6:6a:d5:48:91:8a:02:7d:78:30:33:13: 38:30:73:4a:ac:3d:c8:e5:57:fc:8a:ac:3d:f4:c8: 90:82:b3:0d:dd:cb:21:0e:70:4b:33:59:6b:81:22: f4:ee:61:54:b2:4c:73:45:b4:6e:a3:d4:98:86:28: 69:8e:69:d9:53:fa:04:a4:17:3a:4b:c3:9e:8c:6d: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:74:9D:B7:D4:67:80:34:B9:FC:98:3E:91:B6:4F:09:CA:0E:42:42 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/970ED090476E11EC8A31B762C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.55.74.0/24 103.153.57.0/24 103.153.251.0/24 103.183.72.0/23 180.94.16.0/23 Signature Algorithm: sha256WithRSAEncryption 54:16:b5:6e:e9:89:e6:23:60:2d:74:5e:6a:04:08:05:fc:52: 77:32:0c:e6:27:36:8a:db:44:15:2c:ee:a6:e1:8e:2f:07:87: 84:1b:44:2c:dc:3b:9b:ba:7d:03:5c:52:de:93:f5:f9:da:75: dd:0b:16:4e:d0:82:08:2e:98:68:e0:eb:37:03:28:05:9f:8c: 28:ba:79:a4:4d:28:32:c8:48:5f:ed:98:cd:02:6d:12:2f:18: 7f:36:17:b1:a5:5f:9e:43:e3:e1:f4:ca:b2:99:36:28:c3:c3: b4:79:f8:32:19:f3:c1:6c:03:ac:09:d4:e8:8b:82:69:1e:9d: 8e:4b:c7:31:16:0e:2d:7f:49:36:90:5c:20:fb:59:31:e7:4a: a5:bd:cd:93:e1:83:27:94:ab:07:27:e5:40:00:da:52:4b:24: 0d:6c:04:8f:1e:4f:50:ac:a5:5c:26:84:e4:3b:55:0e:47:1d: 78:1c:1d:d4:f6:2d:1f:35:71:76:73:6d:1f:40:86:ce:71:93: 35:55:3e:ba:92:b4:b0:b0:7f:eb:a5:2d:56:0f:ab:54:60:69: d4:1d:26:8f:0b:7d:55:31:a6:27:03:e1:bb:bb:93:67:28:19: 51:bb:76:ad:05:69:8e:80:1f:91:8a:df:ae:8b:79:9c:ef:71: f6:13:71:71 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAL0QMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYwNTA3MDAzNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg0MTQwOTMtMTk3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAwdr7KiI+/ePWFdQjwpAljd8+obrBNEDmWCbthgxx7F99ob1VFnaepvUQV X0H2isLpzvRz5+NKw6JBmaIV10kwXnGw+pggcgI4rb/mzahC9wx8ev0MisHpj06q 1wMv23qOiZfCPeWCM/uTXQUyQMu8lEIFcOELNNaLaK7956bHJDuuvon2tmTd2OP/ UCzuOYo6RL89lPOkmpI2Ujahk5GsZmOo8v1GttLpXeVmDca8Uywr0KYxtmrVSJGK An14MDMTODBzSqw9yOVX/IqsPfTIkIKzDd3LIQ5wSzNZa4Ei9O5hVLJMc0W0bqPU mIYoaY5p2VP6BKQXOkvDnoxtvokCAwEAAaOCAq0wggKpMB0GA1UdDgQWBBQFdJ23 1GeANLn8mD6Rtk8Jyg5CQjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk3MEVEMDkw NDc2RTExRUM4QTMxQjc2MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDcGCCsGAQUFBwEHAQH/ BCgwJjAkBAIAATAeAwQAZzdKAwQAZ5k5AwQAZ5n7AwQBZ7dIAwQBtF4QMA0GCSqG SIb3DQEBCwUAA4IBAQBUFrVu6YnmI2AtdF5qBAgF/FJ3MgzmJzaK20QVLO6m4Y4v B4eEG0Qs3Dubun0DXFLek/X52nXdCxZO0IIILpho4Os3AygFn4wounmkTSgyyEhf 7ZjNAm0SLxh/NhexpV+eQ+Ph9MqymTYow8O0efgyGfPBbAOsCdToi4JpHp2OS8cx Fg4tf0k2kFwg+1kx50qlvc2T4YMnlKsHJ+VAANpSSyQNbASPHk9QrKVcJoTkO1UO Rx14HB3U9i0fNXF2c20fQIbOcZM1VT66krSwsH/rpS1WD6tUYGnUHSaPC31VMaYn A+G7u5NnKBlRu3atBWmOgB+Rit+ui3mc73H2E3Fx -----END CERTIFICATE-----Generated at Thu Jun 5 19:20:53 2025 by rpki-client