$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D60654AD0BC11EA950DF04CC4F9AE02.roa File: 0D60654AD0BC11EA950DF04CC4F9AE02.roa (raw, json) Hash identifier: 7gA7jYQ9wOd1Z7Kmcuy2USiRXAxtQE6Z2GhOxGuKseY= Subject key identifier: 67:8D:78:63:AB:08:3E:1A:B8:FF:6F:12:90:40:99:1B:E8:59:75:8D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B58E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D60654AD0BC11EA950DF04CC4F9AE02.roa Signing time: Thu 08 May 2025 16:13:27 +0000 ROA not before: Thu 08 May 2025 16:13:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139527 IP address blocks: 103.146.4.0/24 maxlen: 24 103.255.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46478 (0xb58e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:13:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd827-82df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:69:92:39:05:11:27:22:dc:11:aa:83:ab:fe: 1f:e3:bc:84:99:bc:1b:77:05:ec:6b:fc:06:76:e1: da:fc:ab:5a:95:53:dd:31:c8:5b:0b:89:2f:fc:fb: ec:1e:aa:06:01:6f:0c:7e:2b:cd:87:2f:b8:ec:90: cd:a3:74:21:ca:75:b1:2f:0c:a1:74:f8:bb:b5:7a: 24:48:af:ca:63:8c:0b:4b:18:39:41:98:c0:06:60: dd:da:41:dc:7f:d8:1c:23:8e:39:0c:49:1c:79:50: 8d:f9:bf:a6:67:07:48:97:df:90:d9:26:bc:c7:a4: 88:ba:e9:cc:5c:9a:5d:8c:f2:c2:00:df:25:1c:9f: cb:7f:4e:b8:16:20:46:6d:0f:0c:93:71:bd:e7:23: 94:4d:3a:af:4a:81:42:74:ed:fb:d8:33:f2:0b:4e: c5:fd:e7:3c:01:12:97:06:a7:b6:a6:4e:34:8e:00: dc:4c:2b:41:b7:c1:fb:14:bd:a0:fb:60:2d:cf:11: ce:35:d8:3e:1f:da:68:78:24:78:99:06:6d:8e:58: 63:b1:28:a1:f8:46:07:fc:1c:8d:90:15:96:3f:96: 48:68:fa:c2:1d:28:93:a3:38:27:27:7c:a0:08:3a: c6:db:ef:c1:28:db:5b:7b:97:04:fc:09:87:3b:92: 19:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8D:78:63:AB:08:3E:1A:B8:FF:6F:12:90:40:99:1B:E8:59:75:8D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D60654AD0BC11EA950DF04CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.4.0/24 103.255.199.0/24 Signature Algorithm: sha256WithRSAEncryption 19:46:a6:fc:c3:65:f6:44:b2:3e:63:02:bc:15:4b:0d:07:8f: 9f:75:77:24:d1:46:57:b6:4e:09:92:de:6d:79:64:7c:f0:ad: b3:d8:e2:1c:dd:c7:0a:ac:99:ec:a8:cb:c0:53:77:34:ed:0d: d2:9b:07:57:a3:30:e8:95:8b:d2:27:c4:67:2d:39:94:65:17: 55:aa:6f:21:a6:3a:b2:66:2b:a8:2b:2b:70:3c:ab:8e:b6:17: cd:83:cb:0b:83:59:07:33:fa:f9:25:86:bf:c3:ee:ce:28:9b: d6:ad:35:da:28:37:cb:04:89:94:23:f8:31:1d:84:0f:e6:43: 3a:56:c8:44:01:12:0a:87:4a:66:d6:e4:11:c8:f1:6d:8a:8a: d5:ae:d1:0e:e2:2e:77:93:04:36:fb:fa:3c:2c:d5:43:c7:26: ae:2e:b4:51:79:38:7c:6e:b5:39:34:63:aa:7f:c7:55:b2:d7: bd:63:2b:8c:07:f2:d1:56:3b:a5:dc:02:cb:0b:25:f4:f8:12: 0c:72:9e:fa:38:11:09:50:e1:5a:32:10:8c:ec:87:37:b1:31: 7f:d5:a4:99:0a:6f:cf:f8:b3:cd:98:01:dd:93:ee:5c:6a:1c: 82:95:35:77:25:80:b3:19:e7:e2:ca:66:b8:59:75:94:6b:d6: bf:29:98:b6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALWOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTMyN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4MjctODJkZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5pkjkFESci3BGqg6v+H+O8hJm8G3cF7Gv8Bnbh2vyrWpVT3THIWwuJL/z7 7B6qBgFvDH4rzYcvuOyQzaN0Icp1sS8MoXT4u7V6JEivymOMC0sYOUGYwAZg3dpB 3H/YHCOOOQxJHHlQjfm/pmcHSJffkNkmvMekiLrpzFyaXYzywgDfJRyfy39OuBYg Rm0PDJNxvecjlE06r0qBQnTt+9gz8gtOxf3nPAESlwantqZONI4A3EwrQbfB+xS9 oPtgLc8RzjXYPh/aaHgkeJkGbY5YY7EoofhGB/wcjZAVlj+WSGj6wh0ok6M4Jyd8 oAg6xtvvwSjbW3uXBPwJhzuSGYUCAwEAAaOCApswggKXMB0GA1UdDgQWBBRnjXhj qwg+Grj/bxKQQJkb6Fl1jTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBENjA2NTRB RDBCQzExRUE5NTBERjA0Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQAZ5IEAwQAZ//HMA0GCSqGSIb3DQEBCwUAA4IBAQAZRqb8 w2X2RLI+YwK8FUsNB4+fdXck0UZXtk4Jkt5teWR88K2z2OIc3ccKrJnsqMvAU3c0 7Q3SmwdXozDolYvSJ8RnLTmUZRdVqm8hpjqyZiuoKytwPKuOthfNg8sLg1kHM/r5 JYa/w+7OKJvWrTXaKDfLBImUI/gxHYQP5kM6VshEARIKh0pm1uQRyPFtiorVrtEO 4i53kwQ2+/o8LNVDxyauLrRReTh8brU5NGOqf8dVste9YyuMB/LRVjul3ALLCyX0 +BIMcp76OBEJUOFaMhCM7Ic3sTF/1aSZCm/P+LPNmAHdk+5cahyClTV3JYCzGefi yma4WXWUa9a/KZi2 -----END CERTIFICATE-----Generated at Wed Nov 5 16:27:28 2025 by rpki-client