$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAF5F42A362211F0854CDA5DC4F9AE02.roa File: FAF5F42A362211F0854CDA5DC4F9AE02.roa (raw, json) Hash identifier: 7pgu8uuy+1Jq+uYK6xddkDCcOVtUg8oWdlTGjzlL0Nk= Subject key identifier: 3C:19:8D:F5:14:75:69:F4:41:30:6C:2D:C8:FB:02:3C:59:50:85:D8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BC55 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAF5F42A362211F0854CDA5DC4F9AE02.roa Signing time: Wed 28 May 2025 09:57:00 +0000 ROA not before: Wed 28 May 2025 09:57:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140197 IP address blocks: 103.156.102.0/23 maxlen: 24 103.163.104.0/23 maxlen: 24 2400:9fa0::/32 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 04:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48213 (0xbc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 28 09:57:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6836ddeb-954a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:5b:ae:7e:18:bf:83:8a:09:1b:80:25:72: 72:87:11:2b:5b:f6:24:2d:74:21:d0:cb:aa:84:49: 3f:2a:ea:ee:09:fc:61:96:9f:a7:bd:71:66:8e:9f: e9:26:65:8b:32:8c:b0:56:82:64:06:ef:7c:1c:0b: eb:6c:60:8b:cf:b8:d5:da:37:66:b1:67:d7:c4:3d: 9b:7b:8b:95:c9:ae:f2:b8:7a:2b:e7:de:52:dd:41: 86:5c:46:e7:64:c4:f5:f9:a0:31:d2:5c:30:aa:86: a1:99:43:6f:91:27:45:91:c7:f0:d7:3e:5d:fe:8d: c9:da:6e:85:18:1b:7b:cb:d8:e2:db:32:2d:d4:1a: 24:88:63:b1:6f:9e:09:42:dc:2d:0e:5e:53:41:f1: 00:84:d6:5a:71:5f:84:cc:1c:d4:2b:83:88:a9:dc: f2:88:75:0a:f0:2f:2c:ba:88:44:7e:50:13:e4:7a: 2e:55:c7:42:d7:d9:ca:67:13:d5:a4:32:d4:3e:10: 9d:10:4e:01:b5:31:10:42:6e:07:a6:dd:57:77:46: f7:1b:f1:61:f6:80:74:a6:de:bf:d8:21:4c:de:e7: 36:cb:cf:b8:0a:ce:82:a2:87:03:76:6f:e2:bf:1e: 2b:40:3d:0e:db:8d:a5:22:43:36:78:17:59:5b:ac: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:19:8D:F5:14:75:69:F4:41:30:6C:2D:C8:FB:02:3C:59:50:85:D8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAF5F42A362211F0854CDA5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.102.0/23 103.163.104.0/23 IPv6: 2400:9fa0::/32 Signature Algorithm: sha256WithRSAEncryption 61:40:05:f9:e3:31:4c:1e:b4:d8:3f:b6:13:37:dd:d8:8b:f8: 20:a7:8f:65:76:73:a5:f2:98:1a:a9:40:74:ae:c6:1e:17:d8: 13:df:ef:50:a3:07:fd:46:2f:6b:83:54:fe:44:dd:c5:e5:74: 7f:00:48:e2:72:e6:18:d0:67:ff:37:e2:78:18:07:55:b8:c8: cb:8e:e5:98:b7:b0:e9:4a:0b:c3:91:65:44:55:39:3d:11:f1: b0:a0:51:5c:92:5d:78:14:03:a2:a1:12:68:b4:0b:e4:f6:28: 89:0c:99:74:de:77:61:c5:93:74:6b:77:53:28:81:f7:ad:90: 0a:b2:f3:e3:48:1e:87:c3:ca:84:5f:58:b2:b4:c9:43:df:ff: 27:fd:66:82:a4:a1:9a:8c:d1:09:66:fd:2c:32:85:53:fd:da: dd:ed:6c:56:93:a4:54:e4:86:3d:e6:67:0a:9b:7f:ec:52:6f: 56:82:f6:d5:80:c2:a1:11:b8:f5:6d:2e:dd:26:69:0f:cf:73: fa:d5:cb:87:14:9b:46:3a:98:a0:ce:5b:89:bb:f1:dc:09:89: 71:1e:3d:02:f5:5d:e2:3f:d9:aa:c7:4d:75:e9:48:1f:f2:c8: 48:f3:95:62:3f:28:0a:88:02:b4:12:b7:3d:0c:8e:69:72:13: 6b:92:20:63 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIDALxVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUyODA5NTcwMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgzNmRkZWItOTU0YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcXW65+GL+DigkbgCVycocRK1v2JC10IdDLqoRJPyrq7gn8YZafp71xZo6f 6SZlizKMsFaCZAbvfBwL62xgi8+41do3ZrFn18Q9m3uLlcmu8rh6K+feUt1BhlxG 52TE9fmgMdJcMKqGoZlDb5EnRZHH8Nc+Xf6NydpuhRgbe8vY4tsyLdQaJIhjsW+e CULcLQ5eU0HxAITWWnFfhMwc1CuDiKnc8oh1CvAvLLqIRH5QE+R6LlXHQtfZymcT 1aQy1D4QnRBOAbUxEEJuB6bdV3dG9xvxYfaAdKbev9ghTN7nNsvPuArOgqKHA3Zv 4r8eK0A9DtuNpSJDNngXWVus6x0CAwEAAaOCAqowggKmMB0GA1UdDgQWBBQ8GY31 FHVp9EEwbC3I+wI8WVCF2DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZBRjVGNDJB MzYyMjExRjA4NTRDREE1REM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDQGCCsGAQUFBwEHAQH/ BCUwIzASBAIAATAMAwQBZ5xmAwQBZ6NoMA0EAgACMAcDBQAkAJ+gMA0GCSqGSIb3 DQEBCwUAA4IBAQBhQAX54zFMHrTYP7YTN93Yi/ggp49ldnOl8pgaqUB0rsYeF9gT 3+9Qowf9Ri9rg1T+RN3F5XR/AEjicuYY0Gf/N+J4GAdVuMjLjuWYt7DpSgvDkWVE VTk9EfGwoFFckl14FAOioRJotAvk9iiJDJl03ndhxZN0a3dTKIH3rZAKsvPjSB6H w8qEX1iytMlD3/8n/WaCpKGajNEJZv0sMoVT/drd7WxWk6RU5IY95mcKm3/sUm9W gvbVgMKhEbj1bS7dJmkPz3P61cuHFJtGOpigzluJu/HcCYlxHj0C9V3iP9mqx011 6Ugf8shI85ViPygKiAK0Erc9DI5pchNrkiBj -----END CERTIFICATE-----Generated at Mon Jun 9 07:26:23 2025 by rpki-client