$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00966B6E525511F0B966112AC4F9AE02.roa File: 00966B6E525511F0B966112AC4F9AE02.roa (raw, json) Hash identifier: yoO2B2seLAp50RzaIC/nhWyWVjHBTbS2Jyp2DdTK16c= Subject key identifier: 4F:A1:53:2C:94:3B:92:F6:17:3B:5F:38:AF:5F:A3:D9:D9:82:9A:69 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BEE1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00966B6E525511F0B966112AC4F9AE02.roa Signing time: Thu 26 Jun 2025 06:25:53 +0000 ROA not before: Thu 26 Jun 2025 06:25:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134055 IP address blocks: 45.113.248.0/22 maxlen: 22 45.113.248.0/24 maxlen: 24 45.113.249.0/24 maxlen: 24 45.113.250.0/24 maxlen: 24 45.113.251.0/24 maxlen: 24 103.249.88.0/22 maxlen: 22 103.249.88.0/24 maxlen: 24 103.249.89.0/24 maxlen: 24 103.249.90.0/24 maxlen: 24 103.249.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48865 (0xbee1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 26 06:25:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=685ce7f0-5043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:a5:ad:72:3a:81:1d:66:98:19:6d:3d:56: 6a:36:05:cf:14:f0:08:88:85:fb:af:3a:2d:77:f6: e6:e0:1c:6d:77:e2:17:12:d9:9f:2e:26:ad:3b:40: c3:1c:d9:e4:66:3c:74:09:5e:65:0e:01:4f:5c:45: 9d:3b:f4:a9:bf:72:b9:f4:25:72:d5:7e:16:12:89: e6:08:48:6b:c4:80:72:10:dc:10:d4:8f:bb:fb:f7: 94:86:3e:a2:dc:93:4a:52:9c:de:b0:dd:d5:d6:a7: 85:ee:0e:7d:32:42:41:e3:51:10:ce:65:34:26:b5: 77:b7:a8:47:62:5f:6b:b2:8e:5e:22:1d:d0:16:91: 79:0d:7f:16:91:f0:53:c7:12:09:ff:27:6c:75:62: ac:01:62:08:74:48:55:a9:13:38:0e:f7:c8:b6:ce: c0:b8:c1:89:22:d7:47:40:36:3c:f6:e3:17:6e:f2: 82:a4:5c:90:40:f7:94:b0:24:2b:aa:f9:94:b3:b9: a9:ca:d3:49:23:ae:bf:5c:66:2f:40:7f:53:31:51: ed:0a:ed:8d:82:10:98:c8:e1:55:8a:81:7a:f3:2d: 2c:f5:18:52:c0:b1:34:84:ed:46:af:b3:62:e3:19: 57:d6:1a:c3:2e:29:83:2e:06:0d:a1:63:86:a5:a0: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A1:53:2C:94:3B:92:F6:17:3B:5F:38:AF:5F:A3:D9:D9:82:9A:69 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00966B6E525511F0B966112AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.113.248.0/22 103.249.88.0/22 Signature Algorithm: sha256WithRSAEncryption ba:ad:e5:8f:7a:e2:ab:1d:a3:b9:a1:1f:a8:b0:65:36:45:e8: a5:59:d9:79:d4:42:d4:a7:10:03:8c:0a:ba:10:69:73:7b:e1: 0c:3d:30:11:f7:95:c3:b8:6c:7c:49:c3:48:07:80:1a:fc:64: dd:69:87:a0:b3:b0:38:0c:3e:82:97:ab:eb:92:88:13:ed:a0: cc:c9:11:34:0a:24:b2:59:c8:a3:ee:41:f5:4c:e4:82:59:a3: 5b:68:31:bd:d9:2d:d2:22:93:08:fa:f4:ca:24:38:fc:a9:d7: 62:8a:3e:2b:6b:57:cb:fc:17:04:0f:ce:83:ba:9b:b5:ab:4c: c7:cd:15:b8:a6:b5:82:6e:42:b4:87:8d:aa:09:12:41:8b:1b: cb:eb:45:cd:cc:00:9b:ca:22:01:d1:7a:e6:8d:44:0a:d6:e8: 6e:e3:c9:84:42:7e:a8:e1:70:b4:e2:71:a3:bc:12:d1:68:32: 38:d8:19:92:ee:ef:7d:a7:3a:84:13:26:76:60:e0:1f:a6:4c: 59:fd:fb:91:3c:17:cc:23:3b:e0:a7:fc:8e:c4:4b:8f:52:73: 29:0b:b8:50:65:54:48:16:ec:13:32:8f:67:9a:90:5f:c2:84: a2:83:b8:1a:39:70:46:27:45:b8:5b:7e:65:a9:50:22:96:1b: 65:aa:00:d2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDAL7hMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYyNjA2MjU1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg1Y2U3ZjAtNTA0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUOpa1yOoEdZpgZbT1WajYFzxTwCIiF+686LXf25uAcbXfiFxLZny4mrTtA wxzZ5GY8dAleZQ4BT1xFnTv0qb9yufQlctV+FhKJ5ghIa8SAchDcENSPu/v3lIY+ otyTSlKc3rDd1danhe4OfTJCQeNREM5lNCa1d7eoR2Jfa7KOXiId0BaReQ1/FpHw U8cSCf8nbHVirAFiCHRIVakTOA73yLbOwLjBiSLXR0A2PPbjF27ygqRckED3lLAk K6r5lLO5qcrTSSOuv1xmL0B/UzFR7QrtjYIQmMjhVYqBevMtLPUYUsCxNITtRq+z YuMZV9Yawy4pgy4GDaFjhqWgXTECAwEAAaOCApswggKXMB0GA1UdDgQWBBRPoVMs lDuS9hc7XzivX6PZ2YKaaTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAwOTY2QjZF NTI1NTExRjBCOTY2MTEyQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCLXH4AwQCZ/lYMA0GCSqGSIb3DQEBCwUAA4IBAQC6reWP euKrHaO5oR+osGU2ReilWdl51ELUpxADjAq6EGlze+EMPTAR95XDuGx8ScNIB4Aa /GTdaYegs7A4DD6Cl6vrkogT7aDMyRE0CiSyWcij7kH1TOSCWaNbaDG92S3SIpMI +vTKJDj8qddiij4ra1fL/BcED86Dupu1q0zHzRW4prWCbkK0h42qCRJBixvL60XN zACbyiIB0XrmjUQK1uhu48mEQn6o4XC04nGjvBLRaDI42BmS7u99pzqEEyZ2YOAf pkxZ/fuRPBfMIzvgp/yOxEuPUnMpC7hQZVRIFuwTMo9nmpBfwoSig7gaOXBGJ0W4 W35lqVAilhtlqgDS -----END CERTIFICATE-----Generated at Wed Nov 5 17:55:50 2025 by rpki-client