$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28622668F86D11ED9F0E3266C4F9AE02.roa File: 28622668F86D11ED9F0E3266C4F9AE02.roa (raw, json) Hash identifier: /HYk2ZfwdJOhULWqzAZlHNjOtqN81QqdPLZsrc2/Ysg= Subject key identifier: A7:52:0F:37:0A:7C:88:81:87:F7:AA:7E:CC:34:56:9B:EA:AB:E8:CE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B919 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28622668F86D11ED9F0E3266C4F9AE02.roa Signing time: Thu 08 May 2025 16:27:09 +0000 ROA not before: Thu 08 May 2025 16:27:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151172 IP address blocks: 103.204.50.0/23 maxlen: 24 2400:ffe0::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47385 (0xb919) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:27:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb5d-4800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:34:40:ea:cf:51:8d:ca:b0:ef:20:05:8e:44: 4c:c9:d7:92:5d:8b:53:18:ef:c3:dd:53:28:c3:3a: e1:bf:60:20:6c:f2:6f:a2:88:f9:0b:bf:6b:64:14: 75:e7:ee:0e:de:8e:40:b9:91:ef:82:ab:9b:43:30: f9:fa:89:e9:8f:ae:c0:cc:78:04:92:26:d3:a6:24: 0b:6c:14:08:54:3f:a7:8d:c9:2b:ba:ff:cc:0f:6b: 6b:88:1b:b6:a7:98:65:9d:11:d0:65:28:fb:34:68: aa:e1:b7:2f:98:fd:d9:d4:1c:f9:3e:f2:72:c7:f7: 55:77:e8:e0:4e:d3:63:78:21:6f:78:af:ad:15:4f: 90:2e:5f:45:e2:6a:a3:af:e3:f8:90:e6:67:1c:6f: df:e5:63:ed:05:c6:33:a4:c9:28:66:24:0b:59:3b: 72:bd:0e:09:d9:8e:5e:4d:93:0c:4d:77:ec:4d:5c: ae:30:dd:ec:d1:1d:a3:00:81:fc:13:4b:00:86:f4: e3:51:66:b8:31:82:19:ab:d4:ae:02:14:3c:69:a2: 39:d9:85:6f:61:af:ad:2a:48:c3:70:14:db:4a:4f: 5d:62:91:1a:2f:75:d6:69:c4:fb:6c:b3:05:1c:ce: 5b:3f:ba:75:34:17:41:cc:5e:e4:10:53:ec:f2:d1: 24:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:52:0F:37:0A:7C:88:81:87:F7:AA:7E:CC:34:56:9B:EA:AB:E8:CE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28622668F86D11ED9F0E3266C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.50.0/23 IPv6: 2400:ffe0::/32 Signature Algorithm: sha256WithRSAEncryption 23:55:14:55:24:26:1d:7c:58:97:56:5a:79:2a:f1:be:d3:6c: 20:69:38:3c:5a:b0:47:fc:16:cf:c2:02:ce:1b:79:56:6b:b3: c2:14:a2:ae:5e:a2:13:92:c4:21:de:00:ab:ac:73:63:af:72: 2e:3a:09:ba:44:49:54:b8:d8:0d:88:a7:57:82:0b:89:34:ec: 7c:b7:af:ef:2f:23:78:fd:d7:d2:68:ce:53:67:d2:54:26:c7: 64:a9:89:75:de:d4:82:24:37:78:26:c7:a6:0a:49:0f:98:d4: 0f:03:a3:f6:fb:92:68:4d:0f:2f:7c:af:1e:69:b7:b3:ab:e1: 69:27:4e:6f:48:5f:78:6f:76:ef:b2:9d:ba:f0:82:69:f0:ba: 2f:53:b3:fe:08:b7:08:c5:6f:1a:21:9b:82:ae:74:9c:9b:31: 7f:0a:98:4f:d2:7e:59:28:96:14:30:d3:7b:a8:be:15:13:85: 7b:f3:ba:01:8c:46:57:ca:fd:e9:ad:dd:b5:b5:31:62:74:bc: b0:e3:7f:4b:17:e0:08:ab:5b:16:9e:42:5b:cc:5f:42:83:92: 2d:d5:16:6f:35:dc:88:bd:29:65:43:b9:fb:32:d9:35:97:c9: 27:e0:03:ef:7f:9d:2f:61:f0:c7:87:65:ef:8a:dc:31:f6:51: 6b:0f:b6:e1 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDALkZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjcwOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiNWQtNDgwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKY0QOrPUY3KsO8gBY5ETMnXkl2LUxjvw91TKMM64b9gIGzyb6KI+Qu/a2QU defuDt6OQLmR74Krm0Mw+fqJ6Y+uwMx4BJIm06YkC2wUCFQ/p43JK7r/zA9ra4gb tqeYZZ0R0GUo+zRoquG3L5j92dQc+T7ycsf3VXfo4E7TY3ghb3ivrRVPkC5fReJq o6/j+JDmZxxv3+Vj7QXGM6TJKGYkC1k7cr0OCdmOXk2TDE137E1crjDd7NEdowCB /BNLAIb041FmuDGCGavUrgIUPGmiOdmFb2GvrSpIw3AU20pPXWKRGi911mnE+2yz BRzOWz+6dTQXQcxe5BBT7PLRJHUCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBSnUg83 CnyIgYf3qn7MNFab6qvozjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI4NjIyNjY4 Rjg2RDExRUQ5RjBFMzI2NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBZ8wyMA0EAgACMAcDBQAkAP/gMA0GCSqGSIb3DQEBCwUA A4IBAQAjVRRVJCYdfFiXVlp5KvG+02wgaTg8WrBH/BbPwgLOG3lWa7PCFKKuXqIT ksQh3gCrrHNjr3IuOgm6RElUuNgNiKdXgguJNOx8t6/vLyN4/dfSaM5TZ9JUJsdk qYl13tSCJDd4JsemCkkPmNQPA6P2+5JoTQ8vfK8eabezq+FpJ05vSF94b3bvsp26 8IJp8LovU7P+CLcIxW8aIZuCrnScmzF/CphP0n5ZKJYUMNN7qL4VE4V787oBjEZX yv3prd21tTFidLyw439LF+AIq1sWnkJbzF9Cg5It1RZvNdyIvSllQ7n7Mtk1l8kn 4APvf50vYfDHh2Xvitwx9lFrD7bh -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:39 2025 by rpki-client