$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa File: 070090465BD411F0A0A63980C4F9AE02.roa (raw, json) Hash identifier: 1sU5D3L+2IxUxPvSsRMeYW4pPlNmCIzQLZSfyGQ+B84= Subject key identifier: 23:B0:8A:B5:9B:19:A9:40:C6:33:1E:09:1F:35:2E:96:FF:13:56:A8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BFCF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa Signing time: Tue 08 Jul 2025 08:17:46 +0000 ROA not before: Tue 08 Jul 2025 08:17:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45194 IP address blocks: 43.249.180.0/22 maxlen: 22 43.249.180.0/24 maxlen: 24 43.249.181.0/24 maxlen: 24 43.249.182.0/24 maxlen: 24 43.249.183.0/24 maxlen: 24 45.117.212.0/22 maxlen: 24 45.124.48.0/22 maxlen: 24 103.51.152.0/22 maxlen: 24 103.58.4.0/22 maxlen: 24 103.97.180.0/22 maxlen: 24 103.183.25.0/24 maxlen: 24 103.185.237.0/24 maxlen: 24 103.199.136.0/22 maxlen: 24 103.209.36.0/24 maxlen: 24 103.209.37.0/24 maxlen: 24 103.231.0.0/22 maxlen: 24 137.59.64.0/22 maxlen: 24 137.59.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49103 (0xbfcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 8 08:17:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=686cd429-30b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a1:d2:29:e9:4f:69:d1:c6:79:1b:9a:75:86: a7:69:a8:3c:5d:67:cd:94:be:c5:e2:47:86:d6:ff: c5:04:11:3b:b8:71:53:f3:fc:ba:64:3b:0c:e3:b9: 31:33:c5:00:c6:c7:61:09:6c:6d:5d:9a:55:67:c4: d0:49:a0:ca:c5:5e:7b:7b:b3:47:66:7c:0b:44:cd: b1:43:71:62:72:85:a2:98:11:2e:f1:7d:8f:c2:74: 75:1e:ec:81:d0:b1:3d:11:43:83:2f:f0:42:d6:3a: 0f:d6:08:04:c9:64:15:54:96:07:de:43:4c:b0:9d: 28:e5:ac:55:b9:e7:0e:99:a8:16:35:04:a0:e5:c1: b0:d9:bc:1c:5f:93:0e:06:54:2e:03:05:0a:27:ee: f3:14:a6:79:a3:66:1c:45:2d:98:aa:07:12:f3:fd: 74:d1:55:fc:3e:f0:3c:c8:ee:4d:b6:20:30:80:8b: 3f:8f:bd:ed:af:1e:04:d1:8e:0e:61:15:89:ff:3f: a8:c5:78:48:43:37:cc:2f:d2:f5:5c:ac:15:0c:e8: 6c:df:9d:d8:e8:28:e0:2b:00:d4:4b:9e:93:3e:59: 92:25:86:ed:6b:d0:d8:3d:5e:9e:d2:40:3a:56:16: f3:11:50:42:2c:0a:45:b8:fe:0c:f0:b4:52:52:f9: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B0:8A:B5:9B:19:A9:40:C6:33:1E:09:1F:35:2E:96:FF:13:56:A8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/070090465BD411F0A0A63980C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.180.0/22 45.117.212.0/22 45.124.48.0/22 103.51.152.0/22 103.58.4.0/22 103.97.180.0/22 103.183.25.0/24 103.185.237.0/24 103.199.136.0/22 103.209.36.0/23 103.231.0.0/22 137.59.64.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:d8:c5:13:42:90:e9:9d:2a:aa:2d:4b:d8:2c:e0:a1:e1:11: 38:07:25:72:74:2d:e2:77:3a:94:16:37:df:9e:63:de:e7:20: 95:b3:3d:13:76:11:6c:e1:6f:58:37:1e:1c:c4:12:6d:c1:94: 27:f8:5c:46:63:01:98:91:1c:b5:f2:43:da:dc:61:17:e2:9c: 7c:59:16:62:50:f2:7a:f0:34:33:1d:24:0f:ff:66:58:35:0b: 77:9d:f9:fe:43:ca:4e:8c:1e:21:2a:43:8f:ec:52:b0:fd:97: ab:37:df:23:2e:aa:2c:34:72:af:cd:29:d8:82:db:5f:c4:50: b1:92:f8:f9:b1:4a:dd:22:2a:47:f6:d8:82:8e:f4:58:78:2d: 53:f1:57:8e:86:53:89:6e:b3:3f:d9:fb:d5:ec:a9:e1:cf:30: df:3d:37:08:b4:f4:6d:07:c7:a0:b3:53:5b:30:43:06:60:a9: ab:a3:94:df:a1:f4:97:12:99:2f:4b:7d:0b:81:80:bb:da:64: 00:90:21:78:85:97:3d:17:a6:c9:81:b7:72:c2:b9:60:3d:a5: 53:9e:42:51:67:64:2b:ec:18:43:c9:3c:ca:c6:08:93:a5:6d: a6:ad:df:15:2f:18:32:ea:5d:85:08:3e:4b:64:59:4e:1b:ae: 83:71:08:71 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIDAL/PMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDcwODA4MTc0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg2Y2Q0MjktMzBiODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCh0inpT2nRxnkbmnWGp2moPF1nzZS+xeJHhtb/xQQRO7hxU/P8umQ7DOO5 MTPFAMbHYQlsbV2aVWfE0EmgysVee3uzR2Z8C0TNsUNxYnKFopgRLvF9j8J0dR7s gdCxPRFDgy/wQtY6D9YIBMlkFVSWB95DTLCdKOWsVbnnDpmoFjUEoOXBsNm8HF+T DgZULgMFCifu8xSmeaNmHEUtmKoHEvP9dNFV/D7wPMjuTbYgMICLP4+97a8eBNGO DmEVif8/qMV4SEM3zC/S9VysFQzobN+d2Ogo4CsA1Euekz5ZkiWG7WvQ2D1entJA OlYW8xFQQiwKRbj+DPC0UlL59s0CAwEAAaOCAtcwggLTMB0GA1UdDgQWBBQjsIq1 mxmpQMYzHgkfNS6W/xNWqDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA3MDA5MDQ2 NUJENDExRjBBMEE2Mzk4MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGEGCCsGAQUFBwEHAQH/ BFIwUDBOBAIAATBIAwQCK/m0AwQCLXXUAwQCLXwwAwQCZzOYAwQCZzoEAwQCZ2G0 AwQAZ7cZAwQAZ7ntAwQCZ8eIAwQBZ9EkAwQCZ+cAAwQDiTtAMA0GCSqGSIb3DQEB CwUAA4IBAQBO2MUTQpDpnSqqLUvYLOCh4RE4ByVydC3idzqUFjffnmPe5yCVsz0T dhFs4W9YNx4cxBJtwZQn+FxGYwGYkRy18kPa3GEX4px8WRZiUPJ68DQzHSQP/2ZY NQt3nfn+Q8pOjB4hKkOP7FKw/ZerN98jLqosNHKvzSnYgttfxFCxkvj5sUrdIipH 9tiCjvRYeC1T8VeOhlOJbrM/2fvV7KnhzzDfPTcItPRtB8egs1NbMEMGYKmro5Tf ofSXEpkvS30LgYC72mQAkCF4hZc9F6bJgbdywrlgPaVTnkJRZ2Qr7BhDyTzKxgiT pW2mrd8VLxgy6l2FCD5LZFlOG66DcQhx -----END CERTIFICATE-----Generated at Wed Nov 5 18:08:49 2025 by rpki-client