$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A94360962A3C11F0A0F54D23C4F9AE02.roa File: A94360962A3C11F0A0F54D23C4F9AE02.roa (raw, json) Hash identifier: B7StgQHTX0e5RYOdi8nMW1JKnRGNKtjqkQv7o6nMDWM= Subject key identifier: A9:17:78:C6:E6:00:19:4A:B5:D6:41:31:5C:69:F5:30:FE:66:22:4F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B548 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A94360962A3C11F0A0F54D23C4F9AE02.roa Signing time: Thu 08 May 2025 16:12:23 +0000 ROA not before: Thu 08 May 2025 16:12:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138760 IP address blocks: 103.164.26.0/24 maxlen: 24 103.164.27.0/24 maxlen: 24 2001:df1:a780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 15:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46408 (0xb548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:12:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd7e7-5b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a6:2d:9c:52:08:30:94:aa:6f:2a:70:e6:5c: e3:ac:14:d1:f0:9e:2f:43:35:36:72:62:47:27:c7: 49:72:97:44:8a:a5:50:b8:f3:ea:d6:15:92:4b:64: 1b:a1:6d:7e:f5:53:b2:7b:38:cf:2c:0e:e0:76:ab: 29:82:85:8c:54:e1:16:ff:c7:17:80:ed:71:16:f1: 3c:c9:19:b0:09:ff:49:b7:70:01:e3:95:d2:cf:a6: 51:6a:34:08:99:05:3f:16:3c:ac:fa:d3:f1:f8:4b: 57:5e:c6:09:0c:63:67:04:40:1f:de:97:59:05:9f: 05:c8:1d:7e:fb:16:91:75:39:9e:b4:8c:07:0b:01: 09:09:68:65:a8:76:25:63:53:59:6b:7d:c4:c4:88: 8d:b4:55:2a:26:3f:b8:48:91:35:b8:f4:4b:bc:ae: 9b:e4:e8:eb:40:8d:77:4f:3f:d3:76:03:96:4c:71: ff:4d:df:39:e6:6a:15:ca:44:dc:af:ad:d6:9f:82: 56:cc:0a:37:1c:40:da:b8:9b:51:c9:01:e5:ed:54: cf:2d:86:4a:d6:72:b1:30:23:89:85:1a:6f:19:cb: d7:24:89:ac:05:da:dd:2d:f0:d0:86:24:7c:32:7d: 2b:7e:3e:61:63:ab:ec:2f:8f:f1:40:40:e3:49:af: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:17:78:C6:E6:00:19:4A:B5:D6:41:31:5C:69:F5:30:FE:66:22:4F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A94360962A3C11F0A0F54D23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.26.0/23 IPv6: 2001:df1:a780::/48 Signature Algorithm: sha256WithRSAEncryption 30:73:a1:c7:d9:6a:69:a3:30:c1:52:2f:71:b8:ad:15:b4:33: c4:93:26:b1:80:db:93:45:d2:7c:2b:c6:38:72:de:20:f5:a2: 47:28:d6:fa:dd:a8:60:ec:30:62:93:2c:65:c4:8d:fc:27:6e: ea:ab:c5:3b:d6:99:32:cb:fc:3e:72:1d:2e:28:c1:ee:14:6e: 3a:88:5d:79:cf:90:d7:2d:86:76:4f:7b:7a:90:35:53:e9:5c: 96:80:23:72:9b:05:a5:93:fd:3d:f1:ce:6b:0f:67:ba:db:31: dc:15:33:59:e9:a2:26:5b:a2:05:d6:6b:59:66:cb:8b:aa:a9: 37:7b:af:48:17:8d:90:64:a8:d1:1c:e2:24:92:70:7e:87:90: f4:5e:96:11:ff:ab:c0:3c:22:26:56:ae:94:f5:58:6f:90:7d: 5d:cb:56:37:f6:93:33:f4:dd:aa:a7:f3:41:42:41:66:92:59: 4b:38:e0:bb:7f:71:af:5a:08:51:47:4c:84:7d:ba:66:c9:e4: f3:27:ac:3b:50:ef:d4:59:c0:d3:db:96:48:92:e4:5e:82:b4: 22:cd:2b:69:5d:a7:e4:36:1b:73:40:70:ac:aa:64:05:12:d5: 4b:b5:db:24:47:b2:9f:dc:1d:56:a1:07:f1:07:c6:63:57:ea: a5:6d:d2:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALVIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTIyM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3ZTctNWI4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKemLZxSCDCUqm8qcOZc46wU0fCeL0M1NnJiRyfHSXKXRIqlULjz6tYVkktk G6FtfvVTsns4zywO4HarKYKFjFThFv/HF4DtcRbxPMkZsAn/SbdwAeOV0s+mUWo0 CJkFPxY8rPrT8fhLV17GCQxjZwRAH96XWQWfBcgdfvsWkXU5nrSMBwsBCQloZah2 JWNTWWt9xMSIjbRVKiY/uEiRNbj0S7yum+To60CNd08/03YDlkxx/03fOeZqFcpE 3K+t1p+CVswKNxxA2ribUckB5e1Uzy2GStZysTAjiYUabxnL1ySJrAXa3S3w0IYk fDJ9K34+YWOr7C+P8UBA40mv+7MCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSpF3jG 5gAZSrXWQTFcafUw/mYiTzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E5NDM2MDk2 MkEzQzExRjBBMEY1NEQyM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ6QaMA8EAgACMAkDBwAgAQ3xp4AwDQYJKoZIhvcNAQEL BQADggEBADBzocfZammjMMFSL3G4rRW0M8STJrGA25NF0nwrxjhy3iD1okco1vrd qGDsMGKTLGXEjfwnbuqrxTvWmTLL/D5yHS4owe4UbjqIXXnPkNcthnZPe3qQNVPp XJaAI3KbBaWT/T3xzmsPZ7rbMdwVM1npoiZbogXWa1lmy4uqqTd7r0gXjZBkqNEc 4iSScH6HkPRelhH/q8A8IiZWrpT1WG+QfV3LVjf2kzP03aqn80FCQWaSWUs44Lt/ ca9aCFFHTIR9umbJ5PMnrDtQ79RZwNPblkiS5F6CtCLNK2ldp+Q2G3NAcKyqZAUS 1Uu12yRHsp/cHVahB/EHxmNX6qVt0kE= -----END CERTIFICATE-----Generated at Fri Jun 6 20:20:06 2025 by rpki-client