$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/BED54F1A9B1611EA939F5A3FC4F9AE02.roa File: BED54F1A9B1611EA939F5A3FC4F9AE02.roa (raw, json) Hash identifier: vTD8xn0iYmYF0FCpYg76YMcwnWDZovAXcFL69UbAO9c= Subject key identifier: EE:1C:08:A9:55:98:AB:D9:D0:65:B9:39:FB:C7:01:CC:19:26:50:63 Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 09C0 Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/BED54F1A9B1611EA939F5A3FC4F9AE02.roa Signing time: Mon 28 Jul 2025 20:30:24 +0000 ROA not before: Mon 28 Jul 2025 20:30:24 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45750 IP address blocks: 43.242.236.0/22 maxlen: 22 103.1.32.0/22 maxlen: 22 103.9.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2496 (0x9c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9, serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Jul 28 20:30:24 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6887dde0-68a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:85:57:e9:c6:a0:a4:5b:17:a5:99:b2:28: 30:45:b1:8e:05:37:b6:18:c6:cf:92:58:65:a5:31: fa:dd:87:b0:38:eb:aa:20:97:2c:1f:74:f8:b7:6b: 37:d7:53:ea:02:0d:11:b1:e3:cb:19:ad:c9:af:1d: 29:2b:f8:b2:d0:2b:80:59:84:67:6f:0e:8c:44:d5: 95:64:0c:1b:48:d9:c6:8e:bc:0d:f5:f4:c8:38:07: f7:ea:b7:0b:55:85:6c:8b:5a:ae:d7:e6:4c:c6:0f: 0b:8a:9d:c1:55:59:e2:a9:dd:43:bf:31:17:5f:cd: c2:f8:df:11:9f:f3:b6:3f:a6:3f:cd:24:8c:e5:27: 6a:9c:d2:fa:1c:5d:9a:73:bb:4c:5b:3e:af:84:4b: 5f:d4:36:b5:b5:dd:d5:82:ee:f7:d1:49:d6:b2:11: ac:20:eb:19:8f:e5:db:fb:23:c1:a9:24:af:3f:87: a9:4f:68:05:23:9c:c5:23:ba:94:04:43:a4:87:b4: 16:ee:fd:a8:58:c0:34:48:70:44:e4:20:0d:8f:44: 42:7e:68:69:98:c0:f3:b3:35:0f:c2:6f:e0:06:0f: d9:1a:29:34:8d:c5:2a:93:d0:b6:a5:e1:29:41:53: ac:55:b2:d1:7a:28:38:08:c7:7c:27:9c:74:cd:04: bd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1C:08:A9:55:98:AB:D9:D0:65:B9:39:FB:C7:01:CC:19:26:50:63 X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/BED54F1A9B1611EA939F5A3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.242.236.0/22 103.1.32.0/22 103.9.244.0/22 Signature Algorithm: sha256WithRSAEncryption 59:cf:1f:24:69:82:5f:28:71:87:29:4e:6e:1f:7b:ed:53:b4: 38:ca:1c:64:1d:de:6b:5c:a9:a6:7b:53:04:b3:ef:a9:a5:b1: 18:5b:81:a2:8f:c4:7a:4c:bd:b4:0c:84:7c:9f:11:42:9c:46: 4d:7e:31:45:64:07:f8:44:af:53:4b:cc:dc:70:c6:36:8d:88: c0:e7:33:dc:d2:97:d7:eb:88:90:91:f7:34:18:f7:43:f0:2b: f5:06:1c:48:3d:1b:f0:43:e1:89:5d:5d:fb:e5:05:cd:12:b1: dd:a9:37:7e:b3:a8:a5:e3:79:02:c2:10:12:1c:4c:bc:9a:2e: 4b:14:81:c7:a8:19:f1:27:d0:71:06:a7:4b:c4:73:4c:fb:1f: 46:76:13:b4:67:c3:60:6e:e3:ec:ee:f2:f0:92:1f:83:45:b8: 35:2f:c2:f7:ac:16:89:92:13:f2:64:98:8c:9f:f5:a5:a7:13: d6:21:ba:68:8f:6b:b3:47:52:df:05:bb:19:3e:c1:11:2a:e5: 34:a4:bf:85:5c:4a:25:d3:02:5d:ae:c4:bf:22:47:75:9b:d4: 4b:d4:b4:e2:ee:08:0e:47:76:e0:65:d7:ac:2c:c7:c3:87:b0: 35:98:b8:2d:b6:f2:e1:3f:1c:12:fb:e5:4a:98:ef:33:27:a5: 13:3a:87:44 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjUwNzI4MjAzMDI0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg3ZGRlMC02OGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcSFV+nGoKRbF6WZsigwRbGOBTe2GMbPklhlpTH63YewOOuqIJcsH3T4t2s3 11PqAg0RsePLGa3Jrx0pK/iy0CuAWYRnbw6MRNWVZAwbSNnGjrwN9fTIOAf36rcL VYVsi1qu1+ZMxg8Lip3BVVniqd1DvzEXX83C+N8Rn/O2P6Y/zSSM5SdqnNL6HF2a c7tMWz6vhEtf1Da1td3Vgu730UnWshGsIOsZj+Xb+yPBqSSvP4epT2gFI5zFI7qU BEOkh7QW7v2oWMA0SHBE5CANj0RCfmhpmMDzszUPwm/gBg/ZGik0jcUqk9C2peEp QVOsVbLReig4CMd8J5x0zQS9BwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFO4cCKlV mKvZ0GW5OfvHAcwZJlBjMB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIwQjkvOUNCRjNEOTA4RkEwMTFFQUFBOUJCQTE4QzRGOUFFMDIvQkVENTRGMUE5 QjE2MTFFQTkzOUY1QTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr8uwDBAJnASADBAJnCfQwDQYJKoZIhvcNAQELBQADggEB AFnPHyRpgl8ocYcpTm4fe+1TtDjKHGQd3mtcqaZ7UwSz76mlsRhbgaKPxHpMvbQM hHyfEUKcRk1+MUVkB/hEr1NLzNxwxjaNiMDnM9zSl9friJCR9zQY90PwK/UGHEg9 G/BD4YldXfvlBc0Ssd2pN36zqKXjeQLCEBIcTLyaLksUgceoGfEn0HEGp0vEc0z7 H0Z2E7Rnw2Bu4+zu8vCSH4NFuDUvwvesFomSE/JkmIyf9aWnE9YhumiPa7NHUt8F uxk+wREq5TSkv4VcSiXTAl2uxL8iR3Wb1EvUtOLuCA5HduBl16wsx8OHsDWYuC22 8uE/HBL75UqY7zMnpRM6h0Q= -----END CERTIFICATE-----Generated at Mon Aug 11 13:05:33 2025 by rpki-client