$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15FCF28CF64A11EAAB86A34EC4F9AE02.roa File: 15FCF28CF64A11EAAB86A34EC4F9AE02.roa (raw, json) Hash identifier: mAKGSbr6598G417PO9ZiUhcbUSyLLfdkB2DfW8F+vIk= Subject key identifier: 48:03:53:DC:4C:CE:60:B6:60:D7:F9:5C:4D:E5:4C:D5:AB:70:CC:C6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BA57 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15FCF28CF64A11EAAB86A34EC4F9AE02.roa Signing time: Thu 08 May 2025 16:31:57 +0000 ROA not before: Thu 08 May 2025 16:31:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58909 IP address blocks: 103.149.10.0/24 maxlen: 24 103.174.226.0/24 maxlen: 24 103.180.51.0/24 maxlen: 24 2001:df7:d880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 12:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47703 (0xba57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:31:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdc7d-13a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:23:88:ff:7f:7f:7b:92:33:d7:5d:c8:d9:ae: 1b:86:22:02:a3:1e:84:81:08:13:d2:44:4e:f7:7d: d4:82:40:02:fa:37:a6:b2:04:a9:52:ea:cf:69:36: 35:51:73:c2:22:6b:94:71:5f:18:74:39:6c:14:7c: 85:9f:df:15:f0:15:6a:14:0e:46:73:40:d6:30:d0: e5:3c:8e:69:fb:20:56:ff:5d:0b:e8:d2:aa:9a:51: c3:29:e3:7f:dd:f1:36:d0:e9:61:23:3b:cc:41:14: a6:02:cb:b2:c9:cc:75:b5:e0:78:64:6f:ea:fc:73: b5:aa:ed:c7:b1:d6:43:c2:ae:d4:12:78:c3:38:17: f4:56:21:47:b8:13:c9:f8:ad:96:de:19:1b:e0:33: 67:d6:5e:e6:aa:44:bb:9a:ce:86:31:fd:31:17:a1: 42:2f:29:f3:4b:99:a8:ff:0d:14:5e:7b:c2:e4:02: 56:74:30:a3:c2:d1:83:61:ed:5b:41:3a:74:63:3a: fb:d0:74:1e:e8:0f:53:e4:58:13:f2:ed:74:89:b9: a4:89:30:22:ed:09:3c:7e:02:c5:c2:57:95:a9:af: 49:a4:b8:02:b7:16:40:49:80:e8:eb:b8:50:a5:94: ec:cc:23:fa:d1:c4:3a:6b:69:48:10:11:6c:41:ec: 62:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:53:DC:4C:CE:60:B6:60:D7:F9:5C:4D:E5:4C:D5:AB:70:CC:C6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/15FCF28CF64A11EAAB86A34EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.10.0/24 103.174.226.0/24 103.180.51.0/24 IPv6: 2001:df7:d880::/48 Signature Algorithm: sha256WithRSAEncryption 6a:b6:84:39:e5:a4:da:db:82:bb:de:7f:18:ab:41:10:ec:29: ff:ee:2b:c1:f4:60:c3:fa:05:b6:8e:15:07:6f:f4:57:02:23: 0c:fb:58:42:fb:33:2d:70:fa:04:28:55:ab:2c:97:41:e4:02: d4:59:3f:36:af:5c:87:14:ae:d1:b2:d0:a9:36:e6:14:e9:b0: c2:40:21:f3:4d:15:b0:c0:b6:fa:08:1b:7b:c7:1f:9a:5d:2b: 98:7b:fb:c4:c1:7a:00:f9:b8:8d:bc:21:1b:1e:d5:87:cc:56: 0a:55:d0:55:dd:bd:8f:0d:80:10:59:a6:16:d2:56:89:1f:8d: ba:a4:16:7d:1b:6f:fc:17:ff:48:20:c9:8e:27:28:30:18:90: d5:e4:82:6a:e8:10:71:24:77:22:0f:8f:d0:a5:7e:69:4f:4a: bc:a0:fd:48:d6:90:64:1c:bf:18:5c:88:ee:28:31:b9:65:cd: ac:8f:02:a5:83:b7:78:f0:13:ab:4e:42:b9:51:b7:14:ee:f2: c5:90:5e:4e:c7:b9:d2:ba:82:8d:9c:cf:2f:5a:47:78:5c:02: 43:3b:71:9a:e2:91:29:96:72:fb:9b:8b:08:a7:8a:10:ec:2b: 4b:64:ea:cf:bf:4f:7b:d1:8d:0c:e0:56:32:f2:3e:81:23:11: 0a:99:34:89 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDALpXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzE1N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RjN2QtMTNhODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0jiP9/f3uSM9ddyNmuG4YiAqMehIEIE9JETvd91IJAAvo3prIEqVLqz2k2 NVFzwiJrlHFfGHQ5bBR8hZ/fFfAVahQORnNA1jDQ5TyOafsgVv9dC+jSqppRwynj f93xNtDpYSM7zEEUpgLLssnMdbXgeGRv6vxztartx7HWQ8Ku1BJ4wzgX9FYhR7gT yfitlt4ZG+AzZ9Ze5qpEu5rOhjH9MRehQi8p80uZqP8NFF57wuQCVnQwo8LRg2Ht W0E6dGM6+9B0HugPU+RYE/LtdIm5pIkwIu0JPH4CxcJXlamvSaS4ArcWQEmA6Ou4 UKWU7Mwj+tHEOmtpSBARbEHsYkkCAwEAAaOCArIwggKuMB0GA1UdDgQWBBRIA1Pc TM5gtmDX+VxN5UzVq3DMxjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE1RkNGMjhD RjY0QTExRUFBQjg2QTM0RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDwGCCsGAQUFBwEHAQH/ BC0wKzAYBAIAATASAwQAZ5UKAwQAZ67iAwQAZ7QzMA8EAgACMAkDBwAgAQ332IAw DQYJKoZIhvcNAQELBQADggEBAGq2hDnlpNrbgrvefxirQRDsKf/uK8H0YMP6BbaO FQdv9FcCIwz7WEL7My1w+gQoVassl0HkAtRZPzavXIcUrtGy0Kk25hTpsMJAIfNN FbDAtvoIG3vHH5pdK5h7+8TBegD5uI28IRse1YfMVgpV0FXdvY8NgBBZphbSVokf jbqkFn0bb/wX/0ggyY4nKDAYkNXkgmroEHEkdyIPj9ClfmlPSryg/UjWkGQcvxhc iO4oMbllzayPAqWDt3jwE6tOQrlRtxTu8sWQXk7HudK6go2czy9aR3hcAkM7cZri kSmWcvubiwinihDsK0tk6s+/T3vRjQzgVjLyPoEjEQqZNIk= -----END CERTIFICATE-----Generated at Tue Nov 11 19:31:02 2025 by rpki-client