$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/88EA307C7DAC11F0B23D5E6FC4F9AE02.roa File: 88EA307C7DAC11F0B23D5E6FC4F9AE02.roa (raw, json) Hash identifier: EAtsf/1tqR9JdkSl3d0upYnAjlnDdntkPG35BWW0f+E= Subject key identifier: 53:36:0B:D5:6C:09:88:9B:D9:B4:DA:88:7D:03:E6:64:56:02:5F:BE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C2EF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/88EA307C7DAC11F0B23D5E6FC4F9AE02.roa Signing time: Wed 20 Aug 2025 10:00:43 +0000 ROA not before: Wed 20 Aug 2025 10:00:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55832 IP address blocks: 103.19.136.0/23 maxlen: 24 103.19.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49903 (0xc2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 20 10:00:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68a59ccb-fb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:4d:eb:66:49:8d:3a:aa:8c:b6:ae:f8:06: 79:6f:2d:17:81:ca:6d:71:ba:7f:c9:c9:23:17:1d: 6f:74:82:75:0f:01:7b:40:16:b5:50:aa:de:cf:4f: db:fd:08:f6:7f:0c:39:0e:ea:d5:fd:27:cc:f3:b9: 45:5d:63:90:24:b5:73:1e:19:ff:48:c9:5f:f2:27: ad:6c:09:ff:bb:83:2d:42:9d:bd:75:a9:ae:7f:6c: 3b:6f:a4:61:6d:1f:6e:5b:d4:be:ca:3c:8a:4f:39: 17:8f:55:a3:98:61:80:7a:43:57:39:5d:3a:87:89: 28:68:62:68:47:a6:87:b4:e9:5e:3e:8d:a2:53:d8: f6:8a:a9:d5:a9:4c:49:bf:d1:67:1c:12:20:ab:3f: ec:69:fa:9d:83:97:cb:5f:83:b6:5b:57:a0:cd:dc: bb:f2:bc:62:0e:62:8c:2f:13:52:c4:f7:81:17:84: 25:97:16:98:ac:55:d6:4e:fe:da:35:b7:d8:db:bb: 2c:e6:91:ca:25:82:05:65:7c:83:c9:cb:6f:72:b0: f0:60:be:44:b4:aa:06:e0:0e:d7:4d:ca:b5:72:87: 2d:33:fb:7e:51:d1:2b:0b:1a:84:a3:29:76:1f:e0: 7c:d1:9e:f4:d8:fd:d1:1b:fb:64:f9:34:04:78:4f: aa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:36:0B:D5:6C:09:88:9B:D9:B4:DA:88:7D:03:E6:64:56:02:5F:BE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/88EA307C7DAC11F0B23D5E6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.19.136.0/22 Signature Algorithm: sha256WithRSAEncryption a8:b0:7a:f5:45:96:a5:85:ab:ef:dd:55:90:d0:9b:3e:70:35: dd:1a:8a:b5:fb:ab:12:64:5d:f7:03:5e:16:9c:32:82:15:98: 25:18:09:d4:32:7e:2d:7d:68:05:dd:ad:eb:de:37:7a:14:c5: 0f:a6:6a:1a:e9:34:85:49:ab:23:f0:73:2c:64:ed:bc:1e:35: f6:a0:bd:b1:05:65:57:97:b0:f1:9d:55:ac:c1:c0:b4:b3:02: d6:0a:b6:b5:ce:ab:8d:03:d5:b3:97:c8:8c:da:17:47:07:a5: 92:0d:22:dc:f3:db:a7:3e:cc:40:f9:17:b4:af:f2:c5:26:db: ea:44:9c:36:14:3e:1a:6b:59:c7:aa:96:96:5e:02:6e:fa:a3: e6:ef:39:af:de:80:28:d7:3e:56:6e:1f:26:be:d6:6f:28:6a: 08:be:a8:96:54:18:89:6e:16:8d:26:49:92:f0:7e:36:6b:a9: 1b:af:25:ad:aa:f8:03:66:38:3b:38:db:b8:d3:86:e8:c7:e1: 42:16:29:e9:97:4f:f6:52:34:bb:a1:08:e3:18:d0:57:e6:b4: 45:5f:9a:3a:7b:9a:c6:c0:a2:c9:71:45:b7:5b:af:fa:5c:0e: f0:43:49:63:51:47:6c:b9:1f:b7:d4:98:58:82:61:2c:63:df: be:91:7a:25 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAMLvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgyMDEwMDA0M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhhNTljY2ItZmI0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANIWTetmSY06qoy2rvgGeW8tF4HKbXG6f8nJIxcdb3SCdQ8Be0AWtVCq3s9P 2/0I9n8MOQ7q1f0nzPO5RV1jkCS1cx4Z/0jJX/InrWwJ/7uDLUKdvXWprn9sO2+k YW0fblvUvso8ik85F49Vo5hhgHpDVzldOoeJKGhiaEemh7TpXj6NolPY9oqp1alM Sb/RZxwSIKs/7Gn6nYOXy1+DtltXoM3cu/K8Yg5ijC8TUsT3gReEJZcWmKxV1k7+ 2jW32Nu7LOaRyiWCBWV8g8nLb3Kw8GC+RLSqBuAO103KtXKHLTP7flHRKwsahKMp dh/gfNGe9Nj90Rv7ZPk0BHhPqvkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRTNgvV bAmIm9m02oh9A+ZkVgJfvjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg4RUEzMDdD N0RBQzExRjBCMjNENUU2RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZxOIMA0GCSqGSIb3DQEBCwUAA4IBAQCosHr1RZalhavv 3VWQ0Js+cDXdGoq1+6sSZF33A14WnDKCFZglGAnUMn4tfWgF3a3r3jd6FMUPpmoa 6TSFSasj8HMsZO28HjX2oL2xBWVXl7DxnVWswcC0swLWCra1zquNA9Wzl8iM2hdH B6WSDSLc89unPsxA+Re0r/LFJtvqRJw2FD4aa1nHqpaWXgJu+qPm7zmv3oAo1z5W bh8mvtZvKGoIvqiWVBiJbhaNJkmS8H42a6kbryWtqvgDZjg7ONu404box+FCFinp l0/2UjS7oQjjGNBX5rRFX5o6e5rGwKLJcUW3W6/6XA7wQ0ljUUdsuR+31JhYgmEs Y9++kXol -----END CERTIFICATE-----Generated at Wed Nov 5 04:25:13 2025 by rpki-client