$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1004E2F28F0711ECBD470E1FC4F9AE02.roa File: 1004E2F28F0711ECBD470E1FC4F9AE02.roa (raw, json) Hash identifier: Smk4W7fsZtIzyK9z4Nzv0ZwsP1sRb1i1b9YiLc9IfI4= Subject key identifier: C3:0A:11:52:9F:C4:79:FB:22:37:F1:26:1C:A4:90:2B:90:15:9A:AA Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B320 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1004E2F28F0711ECBD470E1FC4F9AE02.roa Signing time: Thu 08 May 2025 16:03:52 +0000 ROA not before: Thu 08 May 2025 16:03:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135259 IP address blocks: 45.248.192.0/22 maxlen: 24 103.68.40.0/22 maxlen: 22 103.68.40.0/24 maxlen: 24 103.68.41.0/24 maxlen: 24 103.68.42.0/24 maxlen: 24 103.68.43.0/24 maxlen: 24 103.217.152.0/22 maxlen: 24 2404:98c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45856 (0xb320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:03:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd5e8-0eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:10:d4:18:33:db:82:50:c2:94:03:36:8d: 79:67:40:48:55:70:e7:12:45:7d:04:b6:c5:ef:ef: a5:a7:46:bf:70:ca:27:6e:01:2b:0d:94:91:5d:79: d5:84:90:b8:c4:67:ab:41:97:3c:74:0d:98:4c:92: 83:9d:95:b3:da:2c:0d:d5:8b:26:99:17:8a:b9:8a: 3b:8d:f0:8a:f8:08:53:fb:1e:ec:a1:88:05:62:39: 7a:e8:e2:70:20:5b:39:75:eb:bf:0e:38:4a:7b:56: 04:3e:d0:60:36:9d:8b:eb:df:b5:c5:e5:7b:54:22: af:9a:70:65:fb:a2:2a:55:f6:4d:f5:0c:c4:20:93: 25:a5:37:19:22:e8:f7:1d:29:2d:34:c1:68:82:18: 0e:64:7a:83:3f:c2:af:ff:88:aa:0d:46:81:4c:d0: e1:67:cf:8b:e2:55:94:77:5e:22:bc:52:40:9a:2b: 04:52:7e:bd:35:ef:39:f8:ef:06:e5:f6:fb:62:6c: 03:a1:d2:8c:67:30:f7:88:35:d2:e9:7a:c7:c0:67: 00:0a:d0:a6:d1:96:45:ba:45:5e:df:76:97:53:53: a3:5d:b5:ec:8e:93:ad:08:51:88:17:a1:a4:d8:b6: f1:40:16:ce:f3:f0:6c:7a:06:50:d3:a3:6a:0a:86: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0A:11:52:9F:C4:79:FB:22:37:F1:26:1C:A4:90:2B:90:15:9A:AA X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1004E2F28F0711ECBD470E1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.248.192.0/22 103.68.40.0/22 103.217.152.0/22 IPv6: 2404:98c0::/32 Signature Algorithm: sha256WithRSAEncryption 5d:cc:ea:24:eb:da:0a:f1:cd:23:af:48:68:cb:02:07:7c:6f: fc:73:09:37:2a:db:38:1c:59:7d:32:4f:fb:a3:c2:e0:b9:a1: b1:63:2a:e0:7d:4f:60:20:cc:fe:4f:d3:53:77:fb:b7:a8:ff: ac:a9:03:a7:74:28:3d:e1:a3:df:d2:ee:3e:7e:9d:09:8d:6a: 83:17:d6:14:fe:eb:4e:35:5e:bb:46:79:61:fa:aa:2e:fe:1b: 46:a7:ef:a8:e4:a2:e1:f0:41:e1:0b:6b:05:cb:aa:d5:bd:3f: 84:b7:ae:d4:15:9b:77:6d:c2:fe:1b:c7:dc:08:de:59:82:57: f8:ee:76:96:e7:57:e8:1b:2c:10:2a:fb:fe:94:61:0d:d5:94: b8:b4:e5:b0:eb:89:76:de:1a:38:56:78:fb:dd:68:a6:6a:95: 32:2c:c2:fd:ea:b8:bf:b2:7a:2d:4d:d8:f5:be:78:14:7a:b4: 86:9c:c1:26:4d:8a:60:c9:84:4e:67:c9:82:78:76:40:2f:73: 01:19:50:5f:76:36:32:54:ea:03:6b:68:4b:55:f4:1e:a0:0e: 9c:9b:b9:30:3e:d4:d1:04:b2:63:48:ac:e7:f4:d5:d6:f5:2d: 26:e3:c2:04:b0:d2:b9:f5:79:72:30:86:20:96:fa:91:be:b7: b8:e5:f4:93 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIDALMgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDM1MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1ZTgtMGVlZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK48ENQYM9uCUMKUAzaNeWdASFVw5xJFfQS2xe/vpadGv3DKJ24BKw2UkV15 1YSQuMRnq0GXPHQNmEySg52Vs9osDdWLJpkXirmKO43wivgIU/se7KGIBWI5euji cCBbOXXrvw44SntWBD7QYDadi+vftcXle1Qir5pwZfuiKlX2TfUMxCCTJaU3GSLo 9x0pLTTBaIIYDmR6gz/Cr/+Iqg1GgUzQ4WfPi+JVlHdeIrxSQJorBFJ+vTXvOfjv BuX2+2JsA6HSjGcw94g10ul6x8BnAArQptGWRbpFXt92l1NTo1217I6TrQhRiBeh pNi28UAWzvPwbHoGUNOjagqGiuECAwEAAaOCArAwggKsMB0GA1UdDgQWBBTDChFS n8R5+yI38SYcpJArkBWaqjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzEwMDRFMkYy OEYwNzExRUNCRDQ3MEUxRkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDoGCCsGAQUFBwEHAQH/ BCswKTAYBAIAATASAwQCLfjAAwQCZ0QoAwQCZ9mYMA0EAgACMAcDBQAkBJjAMA0G CSqGSIb3DQEBCwUAA4IBAQBdzOok69oK8c0jr0hoywIHfG/8cwk3Kts4HFl9Mk/7 o8LguaGxYyrgfU9gIMz+T9NTd/u3qP+sqQOndCg94aPf0u4+fp0JjWqDF9YU/utO NV67Rnlh+qou/htGp++o5KLh8EHhC2sFy6rVvT+Et67UFZt3bcL+G8fcCN5Zglf4 7naW51foGywQKvv+lGEN1ZS4tOWw64l23ho4Vnj73WimapUyLML96ri/snotTdj1 vngUerSGnMEmTYpgyYROZ8mCeHZAL3MBGVBfdjYyVOoDa2hLVfQeoA6cm7kwPtTR BLJjSKzn9NXW9S0m48IEsNK59XlyMIYglvqRvre45fST -----END CERTIFICATE-----Generated at Wed Nov 5 23:47:43 2025 by rpki-client