$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D904E37A86F511F0AF25496EC4F9AE02.roa File: D904E37A86F511F0AF25496EC4F9AE02.roa (raw, json) Hash identifier: m4qyZYomqpGdGyCI0YNKtopXyOi27513EqZ2Jf0DKFs= Subject key identifier: 74:F3:F0:31:A2:8C:1E:A3:F1:A8:78:E2:B4:FA:A5:84:B6:03:9B:3B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C3AD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D904E37A86F511F0AF25496EC4F9AE02.roa Signing time: Mon 01 Sep 2025 05:38:11 +0000 ROA not before: Mon 01 Sep 2025 05:38:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 288819 IP address blocks: 103.38.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50093 (0xc3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 1 05:38:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68b53143-bf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:af:58:87:7e:5a:b8:5e:23:47:9b:17:8c: a0:22:39:5e:80:3a:10:50:f1:81:f4:7f:4a:18:c9: 05:4a:65:87:5f:e5:f6:dd:4b:1f:b0:ce:a7:7b:2a: 70:8d:91:8b:80:da:48:71:22:11:5d:fc:bb:51:e4: 45:9d:ac:a6:01:88:0e:bb:21:00:ca:f0:ae:0c:06: 48:98:67:64:0b:50:a4:65:ec:4e:05:da:3e:f8:4d: 49:df:38:ef:16:e9:3d:74:9b:fa:09:f5:39:50:46: 07:22:79:23:29:b9:68:cc:b4:22:39:9e:28:66:5b: 9b:10:36:46:72:35:a1:49:49:83:2c:fe:25:52:46: fc:c7:69:e8:14:0a:c4:a1:f4:23:55:1a:6e:9e:5c: 2a:c0:9a:32:a5:e6:c5:4d:74:7e:d4:e9:6f:ba:39: 5d:17:54:43:71:43:18:db:a1:b9:e2:ed:6e:7a:ca: fd:58:16:67:70:9c:bf:12:49:80:ec:c1:b9:19:46: d4:4b:17:0f:77:2d:fb:21:d5:e8:cc:ff:ba:05:62: e1:1d:63:9e:32:c1:87:dc:41:d2:a5:80:17:c6:ff: 3b:c2:7d:69:30:94:ff:10:28:e0:22:eb:e7:0f:5a: c0:cc:2e:d7:3d:72:b4:f9:12:30:69:74:78:02:79: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F3:F0:31:A2:8C:1E:A3:F1:A8:78:E2:B4:FA:A5:84:B6:03:9B:3B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D904E37A86F511F0AF25496EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.38.150.0/24 Signature Algorithm: sha256WithRSAEncryption 67:38:d0:d9:94:b4:ea:56:90:27:85:c1:4d:bd:b0:78:5b:a5: 5b:76:04:74:e8:43:b9:e1:e1:f1:b9:ec:69:5a:55:20:54:b4: bd:94:a4:e9:c1:77:39:d8:32:b4:e4:fd:6e:88:a8:84:02:59: e1:31:7f:a1:6a:ee:b5:42:d1:ed:f0:4e:a8:e4:f2:e3:28:43: f2:55:31:2f:9c:2d:39:3c:97:fe:ac:2c:81:cc:e0:52:15:c1: 97:25:57:e6:c7:c6:bb:c4:20:e7:27:ea:69:07:b8:99:14:4d: eb:a1:c2:7e:ff:10:69:de:e3:17:ee:97:e5:e9:4c:70:2a:7e: 8c:64:10:1f:b9:f4:71:6d:7c:a4:43:33:1f:28:32:ad:c7:36: 5d:3c:f2:d7:1f:75:a3:a7:fa:72:cf:92:26:b1:c7:19:53:a1: a3:81:20:60:18:bb:ec:b8:25:ba:26:b9:48:d4:e0:9a:06:d2: 6e:fe:18:d8:12:d5:ff:8a:1d:8f:b5:4b:e9:1e:d0:ae:eb:14: 3a:9d:4c:c3:11:c1:cf:a1:e9:cb:1c:da:9e:ad:90:35:2e:ee: 8d:ee:4e:03:0b:0f:57:2d:00:9b:55:9b:08:8d:aa:e1:85:66: f4:df:b5:37:6b:03:61:ee:10:05:04:d2:94:84:8f:75:fe:b0: 20:d7:bd:8c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAMOtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkwMTA1MzgxMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhiNTMxNDMtYmY1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKUr1iHflq4XiNHmxeMoCI5XoA6EFDxgfR/ShjJBUplh1/l9t1LH7DOp3sq cI2Ri4DaSHEiEV38u1HkRZ2spgGIDrshAMrwrgwGSJhnZAtQpGXsTgXaPvhNSd84 7xbpPXSb+gn1OVBGByJ5Iym5aMy0IjmeKGZbmxA2RnI1oUlJgyz+JVJG/Mdp6BQK xKH0I1Uabp5cKsCaMqXmxU10ftTpb7o5XRdUQ3FDGNuhueLtbnrK/VgWZ3CcvxJJ gOzBuRlG1EsXD3ct+yHV6Mz/ugVi4R1jnjLBh9xB0qWAF8b/O8J9aTCU/xAo4CLr 5w9awMwu1z1ytPkSMGl0eAJ5dUMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBR08/Ax ooweo/GoeOK0+qWEtgObOzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q5MDRFMzdB ODZGNTExRjBBRjI1NDk2RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZyaWMA0GCSqGSIb3DQEBCwUAA4IBAQBnONDZlLTqVpAn hcFNvbB4W6VbdgR06EO54eHxuexpWlUgVLS9lKTpwXc52DK05P1uiKiEAlnhMX+h au61QtHt8E6o5PLjKEPyVTEvnC05PJf+rCyBzOBSFcGXJVfmx8a7xCDnJ+ppB7iZ FE3rocJ+/xBp3uMX7pfl6UxwKn6MZBAfufRxbXykQzMfKDKtxzZdPPLXH3Wjp/py z5ImsccZU6GjgSBgGLvsuCW6JrlI1OCaBtJu/hjYEtX/ih2PtUvpHtCu6xQ6nUzD EcHPoenLHNqerZA1Lu6N7k4DCw9XLQCbVZsIjarhhWb037U3awNh7hAFBNKUhI91 /rAg172M -----END CERTIFICATE-----Generated at Mon Sep 8 03:04:19 2025 by rpki-client