$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E068C458872511F0BB5EC957C4F9AE02.roa File: E068C458872511F0BB5EC957C4F9AE02.roa (raw, json) Hash identifier: iIHKVE2RQUpdxZtB4XvnSR0w5PGmWw5IVBgYbQVBtnk= Subject key identifier: FE:CE:30:5F:4E:7F:09:31:3E:5E:23:EC:E4:7F:E2:BC:E0:40:62:27 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C3C4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E068C458872511F0BB5EC957C4F9AE02.roa Signing time: Mon 01 Sep 2025 11:22:00 +0000 ROA not before: Mon 01 Sep 2025 11:22:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150593 IP address blocks: 103.17.12.0/24 maxlen: 24 103.17.13.0/24 maxlen: 24 103.85.180.0/23 maxlen: 24 103.137.48.0/22 maxlen: 24 103.157.129.0/24 maxlen: 24 103.182.113.0/24 maxlen: 24 2001:df2:7240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 12:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50116 (0xc3c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 1 11:22:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68b581d7-65c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:f6:84:cb:1c:b6:a0:89:96:bb:94:a3:c7: 0a:5e:94:0b:08:c2:1a:70:59:aa:5a:cf:f5:ac:3f: 6d:37:78:ed:e4:70:e8:ee:22:93:26:74:cd:7b:10: c7:6e:61:45:b3:1e:8c:2d:61:6f:b9:9a:cd:23:c2: 26:d8:4d:5d:ba:f5:1b:8c:55:cb:2d:2e:94:c4:1f: 29:57:27:67:b1:66:64:fb:bb:2d:37:bc:8a:a4:f4: 40:5a:6a:2c:68:4a:ee:71:b7:22:fa:c1:65:86:7f: 8d:ad:88:4f:5b:f9:0a:b4:e6:41:fc:de:a9:1b:67: ba:e5:bc:6c:9e:a7:5f:54:16:14:40:81:38:60:d3: 00:22:ab:93:08:77:42:2d:3b:e4:96:04:2b:9c:b1: 5e:1f:26:74:5d:68:c8:f0:e1:ec:aa:43:72:53:36: a8:b8:1b:86:b7:58:c1:d2:2f:f1:8c:51:08:b3:3e: 7c:4e:f1:aa:86:4d:f3:ee:c6:bf:77:86:17:a3:c2: 3b:25:87:2e:ae:46:49:52:52:97:81:81:38:9c:81: 4f:c8:da:4d:c8:c9:25:9e:d6:3e:b8:e5:2b:b6:e6: 98:6a:b0:00:e6:2a:19:38:c3:8a:5a:a6:5a:f0:af: 76:a9:af:c8:a2:18:97:54:8d:5e:65:a9:cb:9e:bf: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CE:30:5F:4E:7F:09:31:3E:5E:23:EC:E4:7F:E2:BC:E0:40:62:27 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E068C458872511F0BB5EC957C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.12.0/23 103.85.180.0/23 103.137.48.0/22 103.157.129.0/24 103.182.113.0/24 IPv6: 2001:df2:7240::/48 Signature Algorithm: sha256WithRSAEncryption 86:98:bf:ed:26:b2:3f:30:89:35:ba:99:0d:fc:c3:05:b5:c7: 52:72:1f:5c:02:3e:1f:08:52:90:b5:17:30:c8:b8:82:e1:f3: e8:e5:40:90:2a:44:47:51:3b:02:39:f1:ab:f5:e5:87:d3:16: 34:12:ff:9e:95:1c:f8:3f:7f:7e:66:31:16:a9:f5:5f:0e:c0: 23:bb:6b:e5:79:45:f4:75:a5:a4:c1:be:00:db:c1:14:99:5f: 81:01:cf:a3:f6:8c:49:60:97:2f:d8:10:1e:94:0a:a9:f6:68: e6:c7:7d:16:cd:b1:73:6a:f6:1f:3c:ac:87:27:57:14:cf:ab: ee:a0:ed:88:ee:fd:18:a6:7a:6c:38:bd:03:15:4e:df:91:fb: 86:24:4a:63:85:c6:1b:24:93:9f:91:11:23:66:2a:ea:60:57: be:f6:9e:27:7b:8d:0b:e8:01:13:41:0f:67:9e:0c:ed:0a:c1: 76:00:89:9a:0e:66:6b:24:97:c8:0a:25:1c:5c:55:a6:5b:10: 2c:ff:12:d7:49:42:85:f2:29:51:5d:92:4e:56:a7:1b:86:b7: 45:51:0e:d1:a5:41:62:0b:c3:69:32:1d:c8:e9:73:b0:4c:05: 9c:aa:05:74:15:85:b2:cb:f9:a0:86:d3:29:d9:3a:15:7d:8c: 40:dc:26:4a -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIDAMPEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkwMTExMjIwMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhiNTgxZDctNjVjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsM9oTLHLagiZa7lKPHCl6UCwjCGnBZqlrP9aw/bTd47eRw6O4ikyZ0zXsQ x25hRbMejC1hb7mazSPCJthNXbr1G4xVyy0ulMQfKVcnZ7FmZPu7LTe8iqT0QFpq LGhK7nG3IvrBZYZ/ja2IT1v5CrTmQfzeqRtnuuW8bJ6nX1QWFECBOGDTACKrkwh3 Qi075JYEK5yxXh8mdF1oyPDh7KpDclM2qLgbhrdYwdIv8YxRCLM+fE7xqoZN8+7G v3eGF6PCOyWHLq5GSVJSl4GBOJyBT8jaTcjJJZ7WPrjlK7bmmGqwAOYqGTjDilqm WvCvdqmvyKIYl1SNXmWpy56/Ot8CAwEAAaOCAr4wggK6MB0GA1UdDgQWBBT+zjBf Tn8JMT5eI+zkf+K84EBiJzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UwNjhDNDU4 ODcyNTExRjBCQjVFQzk1N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEgGCCsGAQUFBwEHAQH/ BDkwNzAkBAIAATAeAwQBZxEMAwQBZ1W0AwQCZ4kwAwQAZ52BAwQAZ7ZxMA8EAgAC MAkDBwAgAQ3yckAwDQYJKoZIhvcNAQELBQADggEBAIaYv+0msj8wiTW6mQ38wwW1 x1JyH1wCPh8IUpC1FzDIuILh8+jlQJAqREdROwI58av15YfTFjQS/56VHPg/f35m MRap9V8OwCO7a+V5RfR1paTBvgDbwRSZX4EBz6P2jElgly/YEB6UCqn2aObHfRbN sXNq9h88rIcnVxTPq+6g7Yju/Rimemw4vQMVTt+R+4YkSmOFxhskk5+RESNmKupg V772nid7jQvoARNBD2eeDO0KwXYAiZoOZmskl8gKJRxcVaZbECz/EtdJQoXyKVFd kk5WpxuGt0VRDtGlQWILw2kyHcjpc7BMBZyqBXQVhbLL+aCG0ynZOhV9jEDcJko= -----END CERTIFICATE-----Generated at Tue Oct 21 22:10:26 2025 by rpki-client