$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DFD5F4AD97B11EF82E5292AC4F9AE02.roa File: 0DFD5F4AD97B11EF82E5292AC4F9AE02.roa (raw, json) Hash identifier: k0oSrO1p+e3fziK7VI6PSlmuS4CXPcRkpJRxXuOaz44= Subject key identifier: 70:A5:77:8F:9B:3C:AA:25:3F:8C:85:CA:6F:05:CE:1C:5B:92:DE:A3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B3B6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DFD5F4AD97B11EF82E5292AC4F9AE02.roa Signing time: Thu 08 May 2025 16:06:15 +0000 ROA not before: Thu 08 May 2025 16:06:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136284 IP address blocks: 103.86.180.0/24 maxlen: 24 103.86.181.0/24 maxlen: 24 103.86.182.0/24 maxlen: 24 103.86.183.0/24 maxlen: 24 103.97.164.0/22 maxlen: 24 103.121.154.0/23 maxlen: 24 103.124.140.0/24 maxlen: 24 103.134.160.0/22 maxlen: 24 103.149.127.0/24 maxlen: 24 103.163.98.0/24 maxlen: 24 103.191.205.0/24 maxlen: 24 2001:df2:d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 12:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46006 (0xb3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:06:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd676-8e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:74:aa:d0:cc:b1:4e:6c:14:5b:9c:fe:53: 3a:fa:1b:d5:3a:7c:89:cc:c8:e3:d8:cd:a2:17:ce: 76:56:fc:fe:55:56:48:74:ab:6b:25:95:8c:65:d4: d9:52:e2:02:a3:28:14:d5:7d:d4:1c:18:3e:38:33: 34:22:c6:81:85:44:e5:41:03:3d:1c:33:ba:bb:04: 74:98:a7:d6:20:09:60:80:8b:f6:fa:1b:bd:9d:db: 84:e6:ea:39:b8:09:90:b2:ed:8a:10:9f:27:60:12: 2e:45:16:35:52:07:6f:70:76:7d:f7:28:c4:31:ae: 52:23:3f:5d:be:6f:49:d3:14:a2:1a:2c:59:8e:c5: 4f:90:33:55:61:36:2c:95:eb:61:17:dd:cc:c9:c1: 43:86:bf:af:bf:d1:e2:c0:04:a4:50:d1:03:7c:fb: c0:7b:c2:f4:31:99:43:8f:51:21:42:b0:53:19:43: 17:14:74:c5:77:ec:e0:75:89:5d:6c:3c:d9:a0:c6: 48:bc:2b:49:ce:d1:4c:f5:1a:63:49:29:35:6c:d5: bf:d9:0a:f3:cb:98:80:dd:45:a9:37:09:7b:eb:1d: 05:87:dd:52:16:a2:2d:ef:2a:0b:18:d7:a4:82:a5: 89:62:88:06:89:cc:ee:0c:30:96:1e:fa:32:c6:12: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A5:77:8F:9B:3C:AA:25:3F:8C:85:CA:6F:05:CE:1C:5B:92:DE:A3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DFD5F4AD97B11EF82E5292AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.180.0/22 103.97.164.0/22 103.121.154.0/23 103.124.140.0/24 103.134.160.0/22 103.149.127.0/24 103.163.98.0/24 103.191.205.0/24 IPv6: 2001:df2:d80::/48 Signature Algorithm: sha256WithRSAEncryption 4e:fe:ce:60:38:9b:cc:cb:73:7d:68:13:6c:da:3f:2b:dd:5a: f1:b3:76:15:86:76:8d:02:fc:2f:6e:f4:09:1d:bb:f3:4b:cd: f1:32:f6:fa:cc:45:37:ea:a8:1c:1c:03:ce:e4:05:d8:53:95: 68:64:09:4c:85:8f:4f:46:e5:8b:9b:e5:84:a8:1c:2e:c8:0f: 49:3c:40:4e:f6:b8:9b:05:a0:d4:9f:fc:c0:44:5a:88:55:be: 8d:92:84:01:71:87:c2:30:0f:c2:75:cd:e9:0b:d5:ad:2e:da: fe:57:9b:cb:12:c1:f1:2e:0a:63:e5:42:30:19:50:36:16:fb: ab:ad:0e:f2:76:68:06:52:ef:8f:ec:1d:01:da:f4:ab:cb:e2: 10:e1:fa:21:f4:c6:f8:4e:2a:53:81:d7:b4:71:60:17:7b:7c: 3f:6d:16:66:13:cb:ab:64:1a:1b:47:b2:9e:1b:0f:48:b7:ee: 77:24:4d:f8:09:d2:af:4c:f0:7a:2b:ec:35:3b:5b:fb:2b:71: 66:87:6e:fe:3b:81:73:64:c5:64:8c:7e:63:55:f9:fb:d2:cb: 86:b8:1a:bc:2f:94:2e:94:6b:4e:d7:d2:40:5b:56:c0:cd:81: 68:05:2b:0b:20:6a:d6:21:64:60:fa:f9:ff:11:88:8f:1e:dd: 91:53:4d:ed -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIDALO2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDYxNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2NzYtOGU1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLQdKrQzLFObBRbnP5TOvob1Tp8iczI49jNohfOdlb8/lVWSHSrayWVjGXU 2VLiAqMoFNV91BwYPjgzNCLGgYVE5UEDPRwzursEdJin1iAJYICL9vobvZ3bhObq ObgJkLLtihCfJ2ASLkUWNVIHb3B2ffcoxDGuUiM/Xb5vSdMUohosWY7FT5AzVWE2 LJXrYRfdzMnBQ4a/r7/R4sAEpFDRA3z7wHvC9DGZQ49RIUKwUxlDFxR0xXfs4HWJ XWw82aDGSLwrSc7RTPUaY0kpNWzVv9kK88uYgN1FqTcJe+sdBYfdUhaiLe8qCxjX pIKliWKIBonM7gwwlh76MsYS1+cCAwEAAaOCAtAwggLMMB0GA1UdDgQWBBRwpXeP mzyqJT+MhcpvBc4cW5LeozAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBERkQ1RjRB RDk3QjExRUY4MkU1MjkyQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFoGCCsGAQUFBwEHAQH/ BEswSTA2BAIAATAwAwQCZ1a0AwQCZ2GkAwQBZ3maAwQAZ3yMAwQCZ4agAwQAZ5V/ AwQAZ6NiAwQAZ7/NMA8EAgACMAkDBwAgAQ3yDYAwDQYJKoZIhvcNAQELBQADggEB AE7+zmA4m8zLc31oE2zaPyvdWvGzdhWGdo0C/C9u9Akdu/NLzfEy9vrMRTfqqBwc A87kBdhTlWhkCUyFj09G5Yub5YSoHC7ID0k8QE72uJsFoNSf/MBEWohVvo2ShAFx h8IwD8J1zekL1a0u2v5Xm8sSwfEuCmPlQjAZUDYW+6utDvJ2aAZS74/sHQHa9KvL 4hDh+iH0xvhOKlOB17RxYBd7fD9tFmYTy6tkGhtHsp4bD0i37nckTfgJ0q9M8Hor 7DU7W/srcWaHbv47gXNkxWSMfmNV+fvSy4a4GrwvlC6Ua07X0kBbVsDNgWgFKwsg atYhZGD6+f8RiI8e3ZFTTe0= -----END CERTIFICATE-----Generated at Tue Oct 21 22:10:32 2025 by rpki-client