$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21005AE41F4911EF9F743012C4F9AE02.roa File: 21005AE41F4911EF9F743012C4F9AE02.roa (raw, json) Hash identifier: 3+D/yyfjU7ha4jC6YN0bqPS5kYMQQN4QFx8Q4FIquis= Subject key identifier: 50:7D:4C:B1:68:86:4C:7E:DD:83:77:14:15:32:C9:5D:57:C8:0B:08 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B2CE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21005AE41F4911EF9F743012C4F9AE02.roa Signing time: Thu 08 May 2025 16:02:36 +0000 ROA not before: Thu 08 May 2025 16:02:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134929 IP address blocks: 14.1.116.0/22 maxlen: 24 103.206.52.0/22 maxlen: 24 2001:df3:dcc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45774 (0xb2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:02:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd59b-6525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7a:a1:35:9e:ed:e0:e5:1a:a5:e9:9a:46:f0: b0:bc:28:34:e9:5d:c1:52:0e:2c:73:73:4d:4d:03: c8:99:27:b6:c9:d3:a2:f9:9e:4a:a2:b7:58:1c:8e: fc:04:13:17:42:e6:9d:5f:4c:70:6c:41:ce:14:dd: 9d:de:e0:c3:98:4e:b1:44:bc:4e:b4:91:29:34:82: 3a:55:28:8a:bb:ac:31:4e:72:c7:93:5a:ab:71:c0: b7:b5:f2:91:86:8c:3d:b0:20:00:b6:b1:3e:a3:59: c9:09:89:1c:dd:2b:e8:6a:08:76:5d:3a:0d:9f:a5: 08:b9:db:16:be:26:1f:1d:1b:7d:fc:1c:42:25:0b: 2b:94:01:6c:a8:b2:ee:38:81:8e:77:86:a4:de:bd: 02:aa:ff:88:64:69:28:29:37:83:c3:53:7c:fe:7f: b8:41:b4:51:53:72:c8:dd:c1:c4:2e:c3:62:3c:09: 2f:dc:ca:64:77:57:b7:92:60:58:48:82:22:4d:92: 3b:21:56:9a:0d:94:20:3b:a6:8c:c3:7b:39:4d:7a: 0f:23:07:31:26:c7:74:0c:5a:fd:9d:78:ea:b3:25: 0e:4d:a9:5c:9c:b1:e1:ce:04:e8:35:50:ce:1e:1b: 85:a7:2c:39:b6:80:9b:ab:a7:f2:07:5d:49:d7:37: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7D:4C:B1:68:86:4C:7E:DD:83:77:14:15:32:C9:5D:57:C8:0B:08 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/21005AE41F4911EF9F743012C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.1.116.0/22 103.206.52.0/22 IPv6: 2001:df3:dcc0::/48 Signature Algorithm: sha256WithRSAEncryption 02:8b:95:f5:23:69:40:b3:e1:0c:d9:71:8a:4b:70:94:5a:70: 72:3c:49:9c:8e:ba:ff:47:83:7b:aa:47:35:47:0f:38:56:6c: 28:39:55:2f:f1:65:0b:47:2a:3b:bb:8d:f9:b6:41:14:00:bd: 4d:2d:b1:c7:06:d6:71:35:4b:68:04:c1:07:2a:0f:ea:72:71: a7:01:a2:7b:6d:12:5a:2c:13:1c:77:d5:57:37:41:42:bd:70: 2e:09:30:56:f6:ba:ab:3c:5c:89:88:8b:bd:d8:7e:c7:60:09: f9:f9:ab:34:00:eb:5d:be:7f:1b:70:bd:b8:ac:bd:b0:d3:79: de:24:a3:d6:c6:39:3a:ad:00:ad:67:19:5c:d0:f9:70:bf:ba: 29:67:d5:3c:b5:0e:7a:a9:6a:0c:08:f2:8f:08:b7:ba:d5:94: d0:d1:a7:33:c9:ec:10:b6:9b:76:23:3a:c8:d5:09:d6:1d:47: ba:fd:ef:55:7c:2e:3a:ca:63:2d:f0:1a:a9:d6:32:ac:7b:fb: 39:72:f7:f9:94:da:47:4c:3c:41:03:9a:f7:4b:cc:66:50:54: 27:a5:27:07:ed:75:1f:47:4a:de:d2:11:8e:45:99:2a:09:2f: d5:c2:e8:b5:2b:ce:e8:28:07:26:cd:85:5a:d4:a5:fa:a9:84: 2b:9a:e1:bd -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDALLOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDIzNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1OWItNjUyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMR6oTWe7eDlGqXpmkbwsLwoNOldwVIOLHNzTU0DyJkntsnTovmeSqK3WByO /AQTF0LmnV9McGxBzhTdnd7gw5hOsUS8TrSRKTSCOlUoirusMU5yx5Naq3HAt7Xy kYaMPbAgALaxPqNZyQmJHN0r6GoIdl06DZ+lCLnbFr4mHx0bffwcQiULK5QBbKiy 7jiBjneGpN69Aqr/iGRpKCk3g8NTfP5/uEG0UVNyyN3BxC7DYjwJL9zKZHdXt5Jg WEiCIk2SOyFWmg2UIDumjMN7OU16DyMHMSbHdAxa/Z146rMlDk2pXJyx4c4E6DVQ zh4bhacsObaAm6un8gddSdc3ndsCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBRQfUyx aIZMft2DdxQVMsldV8gLCDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIxMDA1QUU0 MUY0OTExRUY5Rjc0MzAxMkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQCDgF0AwQCZ840MA8EAgACMAkDBwAgAQ3z3MAwDQYJKoZI hvcNAQELBQADggEBAAKLlfUjaUCz4QzZcYpLcJRacHI8SZyOuv9Hg3uqRzVHDzhW bCg5VS/xZQtHKju7jfm2QRQAvU0tsccG1nE1S2gEwQcqD+pycacBonttElosExx3 1Vc3QUK9cC4JMFb2uqs8XImIi73YfsdgCfn5qzQA612+fxtwvbisvbDTed4ko9bG OTqtAK1nGVzQ+XC/uiln1Ty1DnqpagwI8o8It7rVlNDRpzPJ7BC2m3YjOsjVCdYd R7r971V8LjrKYy3wGqnWMqx7+zly9/mU2kdMPEEDmvdLzGZQVCelJwftdR9HSt7S EY5FmSoJL9XC6LUrzugoBybNhVrUpfqphCua4b0= -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:13 2025 by rpki-client