$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1AFEF2245B2D11F094910D47C4F9AE02.roa File: 1AFEF2245B2D11F094910D47C4F9AE02.roa (raw, json) Hash identifier: RFpA7lrXQeWe06cxzSHyt8EtMD+7kuGRkHlu0u90vp4= Subject key identifier: 86:C2:E5:63:2C:78:38:93:76:5C:43:83:C9:40:31:89:98:98:55:FF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BFC0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1AFEF2245B2D11F094910D47C4F9AE02.roa Signing time: Mon 07 Jul 2025 12:22:53 +0000 ROA not before: Mon 07 Jul 2025 12:22:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135848 IP address blocks: 103.81.156.0/22 maxlen: 24 103.158.148.0/23 maxlen: 24 2001:df2:3500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49088 (0xbfc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 7 12:22:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=686bbc1d-8b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:7a:9f:b1:74:79:06:ba:d2:d2:d4:e9:3a: 28:a6:e6:0d:aa:23:e2:3f:7a:23:4d:22:0f:62:27: 01:90:62:67:e6:3c:a7:e8:ae:67:4f:bc:86:43:ff: 79:dc:18:bd:1f:a0:75:3c:63:61:1d:d4:86:34:ce: 3b:08:f4:90:e7:69:98:ed:dd:4f:d8:91:03:89:8c: 5b:61:76:e0:3d:0d:cf:9b:ce:c8:7f:9a:8c:58:61: 56:5d:34:97:e8:0c:6a:50:d6:8e:ea:27:38:bf:15: fc:80:db:da:89:a2:2a:a8:69:85:ce:37:d2:cd:28: fb:59:1d:17:70:4d:58:67:83:7b:b1:c3:b8:92:f9: e3:4f:f0:54:29:9d:e2:94:12:7c:90:00:c7:f1:dc: 81:cc:69:96:de:52:90:86:30:6d:51:f1:99:bd:d8: f1:e7:bc:16:79:14:ad:6b:b1:11:13:53:49:84:c5: ff:3d:7d:1e:2b:48:0f:56:d3:8a:43:55:94:03:98: 01:4e:98:a4:10:49:4d:62:f4:e3:bb:da:54:07:58: 76:e0:1c:dd:b4:8d:44:10:d8:96:c0:d9:af:e2:13: 2a:09:3e:ba:c2:a9:09:cf:7a:72:62:d9:11:fc:61: 94:e5:4a:6b:c4:f8:30:75:84:f6:cc:6c:60:3b:23: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C2:E5:63:2C:78:38:93:76:5C:43:83:C9:40:31:89:98:98:55:FF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1AFEF2245B2D11F094910D47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.156.0/22 103.158.148.0/23 IPv6: 2001:df2:3500::/48 Signature Algorithm: sha256WithRSAEncryption 48:eb:0c:e3:bd:1f:66:35:26:11:d1:43:92:7b:0b:64:c6:87: bd:ed:75:f6:b7:93:18:1b:05:c7:a5:d5:38:0a:98:97:8d:45: 03:0e:78:df:26:e8:54:c1:34:6e:1a:43:b8:48:5f:d5:db:8f: d1:03:d3:45:c0:6c:fe:a8:75:8d:0b:1a:e9:fb:e1:73:b8:6e: d8:7c:6f:5a:bb:01:0f:20:70:93:43:8b:cf:cf:c8:25:a6:36: 9c:1a:10:e1:46:58:61:c1:59:be:75:b6:09:bb:67:51:c6:14: ec:6a:1f:88:ea:31:06:24:8a:93:32:c7:0e:a9:0c:cc:a1:2b: 05:e6:f3:11:c8:fa:d4:7e:80:d2:df:7e:a2:80:a9:88:3f:a0: cb:e0:33:86:e9:cc:93:36:69:bb:a9:e7:b6:05:17:45:de:4c: 8d:d3:95:58:38:4e:ab:e6:17:5a:21:6b:e5:f0:8e:f5:7d:13: e0:e2:01:d6:08:c1:4c:df:26:3f:90:34:1a:d2:51:dc:ae:4e: 48:b1:76:dc:be:bb:4c:4f:5a:59:f1:bf:eb:a8:47:98:4a:b2: 7f:40:6b:8d:cc:b0:e6:e4:75:9c:63:b1:f9:f7:b2:01:4b:ad: 08:f4:b3:71:62:da:c6:eb:44:cb:2d:1f:a9:75:b4:ed:01:1f: 59:bb:3b:11 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAL/AMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDcwNzEyMjI1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg2YmJjMWQtOGI4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5Nep+xdHkGutLS1Ok6KKbmDaoj4j96I00iD2InAZBiZ+Y8p+iuZ0+8hkP/ edwYvR+gdTxjYR3UhjTOOwj0kOdpmO3dT9iRA4mMW2F24D0Nz5vOyH+ajFhhVl00 l+gMalDWjuonOL8V/IDb2omiKqhphc430s0o+1kdF3BNWGeDe7HDuJL540/wVCmd 4pQSfJAAx/Hcgcxplt5SkIYwbVHxmb3Y8ee8FnkUrWuxERNTSYTF/z19HitID1bT ikNVlAOYAU6YpBBJTWL047vaVAdYduAc3bSNRBDYlsDZr+ITKgk+usKpCc96cmLZ EfxhlOVKa8T4MHWE9sxsYDsj9t0CAwEAAaOCAqwwggKoMB0GA1UdDgQWBBSGwuVj LHg4k3ZcQ4PJQDGJmJhV/zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFBRkVGMjI0 NUIyRDExRjA5NDkxMEQ0N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQCZ1GcAwQBZ56UMA8EAgACMAkDBwAgAQ3yNQAwDQYJKoZI hvcNAQELBQADggEBAEjrDOO9H2Y1JhHRQ5J7C2TGh73tdfa3kxgbBcel1TgKmJeN RQMOeN8m6FTBNG4aQ7hIX9Xbj9ED00XAbP6odY0LGun74XO4bth8b1q7AQ8gcJND i8/PyCWmNpwaEOFGWGHBWb51tgm7Z1HGFOxqH4jqMQYkipMyxw6pDMyhKwXm8xHI +tR+gNLffqKAqYg/oMvgM4bpzJM2abup57YFF0XeTI3TlVg4TqvmF1oha+XwjvV9 E+DiAdYIwUzfJj+QNBrSUdyuTkixdty+u0xPWlnxv+uoR5hKsn9Aa43MsObkdZxj sfn3sgFLrQj0s3Fi2sbrRMstH6l1tO0BH1m7OxE= -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:12 2025 by rpki-client