$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8CA6A808F8B11EFAB493860C4F9AE02.roa File: E8CA6A808F8B11EFAB493860C4F9AE02.roa (raw, json) Hash identifier: PVnvx7khnzSpeQ1W1MiT1IRYcwxV9M/+kVDdIYv6gr4= Subject key identifier: 12:F9:CF:83:6C:E6:23:EA:47:36:D0:23:00:3B:1A:1B:A0:3B:44:58 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B2D0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8CA6A808F8B11EFAB493860C4F9AE02.roa Signing time: Thu 08 May 2025 16:02:38 +0000 ROA not before: Thu 08 May 2025 16:02:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134932 IP address blocks: 103.79.100.0/24 maxlen: 24 103.79.102.0/24 maxlen: 24 103.141.116.0/23 maxlen: 24 103.164.240.0/24 maxlen: 24 103.164.241.0/24 maxlen: 24 103.174.140.0/23 maxlen: 24 103.186.132.0/23 maxlen: 24 203.145.49.0/24 maxlen: 24 2400:7e60::/32 maxlen: 32 2407:35c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 12:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45776 (0xb2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:02:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd59d-1c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:87:c1:3d:1f:0a:6f:8d:9b:52:a5:01:2e:90: f2:86:33:27:70:48:ea:de:d1:91:4d:ac:aa:76:19: 53:09:fb:3e:5b:4c:a3:8d:e4:f1:84:3e:f8:a0:08: f3:12:b5:73:e2:1c:9e:2c:81:72:32:34:00:42:04: bb:4b:77:d3:cb:95:38:86:26:b9:51:31:e7:b1:cb: 8d:fb:a0:de:6b:1a:93:76:cf:55:a2:4b:48:14:27: df:ad:01:b2:48:5b:d5:a9:f8:a7:f2:87:4a:a7:d4: d4:20:f2:ec:5e:87:e1:23:c4:b4:13:97:48:92:cf: 6f:b1:08:1b:4c:45:8a:b0:9b:97:07:c7:12:c6:9e: 4f:af:fc:5f:03:63:1f:da:0c:e7:90:10:9a:40:e8: 80:50:ff:07:af:b9:49:26:32:76:a0:03:8c:39:2c: 30:d6:23:61:da:33:41:05:d6:9a:9c:8f:4e:d8:86: 43:07:21:ef:c3:87:56:95:72:aa:ba:e6:d7:7c:6c: f3:06:dc:eb:a1:f1:13:71:97:34:77:20:ab:ad:e5: d5:5a:c8:91:5b:62:50:e3:33:49:10:1e:1c:01:71: 83:2a:40:f2:b1:2a:4a:bb:ef:02:ba:e4:56:49:0c: fb:c7:27:0d:ea:2f:6e:95:3a:36:30:ac:83:b1:04: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F9:CF:83:6C:E6:23:EA:47:36:D0:23:00:3B:1A:1B:A0:3B:44:58 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8CA6A808F8B11EFAB493860C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.79.100.0/24 103.79.102.0/24 103.141.116.0/23 103.164.240.0/23 103.174.140.0/23 103.186.132.0/23 203.145.49.0/24 IPv6: 2400:7e60::/32 2407:35c0::/32 Signature Algorithm: sha256WithRSAEncryption 7c:ad:0c:65:37:32:ec:cb:18:be:78:c2:78:92:64:4d:54:0b: 42:d2:db:8d:2a:81:4c:ef:c4:eb:d8:36:1c:10:46:13:6c:4c: df:8b:9b:7a:d4:f5:4f:17:78:c9:10:a5:11:7c:95:e3:9f:1f: 36:38:8f:54:e8:95:f9:44:ab:da:19:92:1e:b7:56:21:17:01: 1f:76:93:c2:88:88:5d:46:da:d3:cc:49:28:aa:03:ec:45:6a: ac:e7:fd:9b:2a:03:5b:6f:1f:72:41:3c:3c:a0:11:08:e5:2b: 83:83:9c:34:03:b7:ee:86:a0:3f:c0:0d:31:56:fa:9e:18:0e: e9:17:ae:99:98:3b:11:74:d6:11:24:89:ea:97:ac:84:b4:3c: 7f:ec:e3:5e:49:6d:8f:d1:f9:64:d8:2d:b0:f3:d6:c8:e7:ec: ad:18:39:8a:55:ff:20:9d:82:a7:a2:e3:3d:12:18:8f:5d:4b: 8a:d6:f8:cf:33:64:83:2a:05:d2:fd:35:d0:a3:a1:3e:59:41: 6e:cb:bc:86:ab:f3:b3:f4:86:12:c8:d3:3f:9a:ce:82:0f:26: de:0a:f1:2b:d3:b3:f1:66:05:6a:f8:a2:bd:18:c5:5d:15:5d: c1:6a:83:c4:fb:0e:eb:7e:dd:03:95:ca:71:9d:17:5c:5f:a8: ec:91:7f:b4 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgIDALLQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDIzOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1OWQtMWM1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOCHwT0fCm+Nm1KlAS6Q8oYzJ3BI6t7RkU2sqnYZUwn7PltMo43k8YQ++KAI 8xK1c+IcniyBcjI0AEIEu0t308uVOIYmuVEx57HLjfug3msak3bPVaJLSBQn360B skhb1an4p/KHSqfU1CDy7F6H4SPEtBOXSJLPb7EIG0xFirCblwfHEsaeT6/8XwNj H9oM55AQmkDogFD/B6+5SSYydqADjDksMNYjYdozQQXWmpyPTtiGQwch78OHVpVy qrrm13xs8wbc66HxE3GXNHcgq63l1VrIkVtiUOMzSRAeHAFxgypA8rEqSrvvArrk VkkM+8cnDeovbpU6NjCsg7EE4G0CAwEAAaOCAs8wggLLMB0GA1UdDgQWBBQS+c+D bOYj6kc20CMAOxoboDtEWDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U4Q0E2QTgw OEY4QjExRUZBQjQ5Mzg2MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFkGCCsGAQUFBwEHAQH/ BEowSDAwBAIAATAqAwQAZ09kAwQAZ09mAwQBZ410AwQBZ6TwAwQBZ66MAwQBZ7qE AwQAy5ExMBQEAgACMA4DBQAkAH5gAwUAJAc1wDANBgkqhkiG9w0BAQsFAAOCAQEA fK0MZTcy7MsYvnjCeJJkTVQLQtLbjSqBTO/E69g2HBBGE2xM34ubetT1Txd4yRCl EXyV458fNjiPVOiV+USr2hmSHrdWIRcBH3aTwoiIXUba08xJKKoD7EVqrOf9myoD W28fckE8PKARCOUrg4OcNAO37oagP8ANMVb6nhgO6ReumZg7EXTWESSJ6peshLQ8 f+zjXkltj9H5ZNgtsPPWyOfsrRg5ilX/IJ2Cp6LjPRIYj11Litb4zzNkgyoF0v01 0KOhPllBbsu8hqvzs/SGEsjTP5rOgg8m3grxK9Oz8WYFaviivRjFXRVdwWqDxPsO 637dA5XKcZ0XXF+o7JF/tA== -----END CERTIFICATE-----Generated at Tue Oct 21 22:10:28 2025 by rpki-client