$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/80DE56F2355D11F0A8C7F559C4F9AE02.roa File: 80DE56F2355D11F0A8C7F559C4F9AE02.roa (raw, json) Hash identifier: ZHB5HyWHIeMUdK8FQ83iXhPDeHhVdive57aqWkTwI34= Subject key identifier: 44:67:6F:7E:54:CB:0E:F7:BA:7A:C0:E7:A3:D2:A0:B0:43:35:78:BF Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Certificate serial: 06E6 Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/80DE56F2355D11F0A8C7F559C4F9AE02.roa Signing time: Wed 02 Jul 2025 22:31:55 +0000 ROA not before: Wed 02 Jul 2025 22:31:55 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 134130 IP address blocks: 43.254.216.0/22 maxlen: 22 103.238.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 22:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1766 (0x6e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Validity Not Before: Jul 2 22:31:55 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6865b35b-2e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:32:46:3f:18:29:e8:7d:2a:66:47:94:57:b3: e4:25:5a:a5:97:d2:94:d6:5e:a3:29:14:d7:a7:71: 6f:13:c2:7c:d0:1b:aa:63:ef:b3:51:3e:85:7b:77: 28:b5:62:72:e4:fc:2a:fb:94:1e:f4:ad:4e:ec:7c: a4:1b:38:95:12:bd:5e:54:40:f7:cb:59:d3:84:cb: d8:e2:b4:d8:71:d0:14:ee:b4:23:2c:20:e1:b6:e9: 10:50:26:2b:f8:95:78:11:4a:82:83:ff:6e:2c:93: 90:bc:5d:6a:31:93:fe:44:18:74:8b:60:7c:a4:eb: 78:fc:35:aa:aa:0c:0e:ae:06:36:19:7e:dd:e7:9a: ae:5a:3d:9b:ea:26:8c:75:fb:a7:5c:e0:b0:01:25: 14:19:ca:5f:09:d6:b7:63:f2:18:75:11:e4:49:93: de:16:60:e9:3e:35:a3:b3:d1:02:d2:91:44:d6:ac: 03:0d:31:ec:4c:05:2c:6e:e1:45:a9:53:8a:16:5e: 73:e5:01:d2:e0:d5:e3:3a:d7:4c:3f:20:ab:2c:5c: cb:7c:55:b1:09:b1:06:4a:22:7e:5e:3c:35:12:ff: 4c:99:ad:ae:a0:37:de:37:e7:0a:6a:ce:29:a7:68: d9:5e:4d:0a:fa:0b:47:fa:b8:d3:2f:6a:01:20:21: 18:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:67:6F:7E:54:CB:0E:F7:BA:7A:C0:E7:A3:D2:A0:B0:43:35:78:BF X509v3 Authority Key Identifier: keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/80DE56F2355D11F0A8C7F559C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.254.216.0/22 103.238.224.0/22 Signature Algorithm: sha256WithRSAEncryption 06:03:2d:fb:e8:06:b6:62:c8:4d:4e:4b:4d:6b:71:e2:af:ef: c4:24:a6:81:4a:29:4c:25:c4:4b:35:76:73:a9:b9:fa:3d:42: 72:cc:c4:8e:db:b8:b3:b1:e1:44:2d:7f:ce:66:58:4f:26:e1: 70:80:ad:6b:53:16:2d:c7:2c:ac:43:c1:33:36:a8:8e:d6:29: b4:48:1e:a4:68:50:c3:c2:61:87:c5:e3:91:be:dd:1f:4c:a8: eb:16:fa:d9:fd:d2:88:09:91:c8:6a:36:f6:dd:bc:ea:71:7d: 7e:7b:6b:fe:93:ee:c5:0e:66:d5:26:d2:e2:3f:54:c9:4a:ba: af:67:4f:e9:a5:9b:34:5a:27:bf:1b:15:43:88:38:ff:4c:ac: 7e:54:72:7f:27:f4:7d:05:88:03:73:f2:10:cd:1f:4c:1a:1d: 6d:a2:a8:e7:9a:11:e4:88:45:3e:ba:99:66:3f:73:ae:af:13: e9:42:6a:c4:a1:dc:ac:6a:fa:5a:4d:57:e3:22:4f:5a:a9:36: 1b:41:01:c1:1d:51:63:3f:1a:6e:4e:bd:fc:68:fd:19:a4:7a: d9:28:19:aa:80:42:87:54:18:82:83:1f:4d:c7:2e:95:ca:c8: a9:64:bd:ac:ba:e4:a1:01:f2:29:a9:33:c8:71:a0:62:8a:f2: bd:3f:b2:11 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0 QzkxNTRGMjQwHhcNMjUwNzAyMjIzMTU1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1YjM1Yi0yZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jJGPxgp6H0qZkeUV7PkJVqll9KU1l6jKRTXp3FvE8J80BuqY++zUT6Fe3co tWJy5Pwq+5Qe9K1O7HykGziVEr1eVED3y1nThMvY4rTYcdAU7rQjLCDhtukQUCYr +JV4EUqCg/9uLJOQvF1qMZP+RBh0i2B8pOt4/DWqqgwOrgY2GX7d55quWj2b6iaM dfunXOCwASUUGcpfCda3Y/IYdRHkSZPeFmDpPjWjs9EC0pFE1qwDDTHsTAUsbuFF qVOKFl5z5QHS4NXjOtdMPyCrLFzLfFWxCbEGSiJ+Xjw1Ev9Mma2uoDfeN+cKas4p p2jZXk0K+gtH+rjTL2oBICEYHwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFERnb35U yw73unrA56PSoLBDNXi/MB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJCNEQvQ0E1NjNCRTg2NTIyMTFFQjgwRjZFOTRCQzRGOUFFMDIvODBERTU2RjIz NTVEMTFGMEE4QzdGNTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr/tgDBAJn7uAwDQYJKoZIhvcNAQELBQADggEBAAYDLfvo BrZiyE1OS01rceKv78QkpoFKKUwlxEs1dnOpufo9QnLMxI7buLOx4UQtf85mWE8m 4XCArWtTFi3HLKxDwTM2qI7WKbRIHqRoUMPCYYfF45G+3R9MqOsW+tn90ogJkchq NvbdvOpxfX57a/6T7sUOZtUm0uI/VMlKuq9nT+mlmzRaJ78bFUOIOP9MrH5Ucn8n 9H0FiANz8hDNH0waHW2iqOeaEeSIRT66mWY/c66vE+lCasSh3Kxq+lpNV+MiT1qp NhtBAcEdUWM/Gm5Ovfxo/RmketkoGaqAQodUGIKDH03HLpXKyKlkvay65KEB8imp M8hxoGKK8r0/shE= -----END CERTIFICATE-----Generated at Fri Oct 24 18:53:39 2025 by rpki-client