$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B6F2F3C030511F0BEE8F876C4F9AE02.roa File: 2B6F2F3C030511F0BEE8F876C4F9AE02.roa (raw, json) Hash identifier: H9f7q8TdYkaz4bCn5qiqR3y1eAGBP0t7bal6vqXQ0PI= Subject key identifier: 26:87:B2:49:14:4B:F9:73:E2:4F:3D:23:88:EE:16:BF:DB:E9:EC:2E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B467 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B6F2F3C030511F0BEE8F876C4F9AE02.roa Signing time: Thu 08 May 2025 16:08:55 +0000 ROA not before: Thu 08 May 2025 16:08:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137114 IP address blocks: 103.44.136.0/22 maxlen: 24 103.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46183 (0xb467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:08:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd717-95ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:f8:c5:dd:c4:25:27:7a:7e:4e:8c:a1:c0: 54:b9:ca:26:aa:6e:46:9e:d4:79:d7:22:35:da:be: 34:2d:81:1a:ae:42:fc:c5:4d:84:e9:bc:4c:13:cf: ad:07:6b:40:3a:79:df:25:48:e6:73:ee:3b:97:92: b6:e7:51:aa:95:5a:31:4a:86:88:68:2f:b5:4e:8b: 2f:02:80:16:59:e3:51:d4:34:d8:a6:52:3e:7b:97: 0b:b3:e0:dd:59:87:97:ae:81:35:9e:23:30:f9:53: 22:50:8d:08:c7:8d:61:52:50:88:4f:b0:eb:26:12: 04:b2:14:12:39:b1:eb:84:3e:d8:ff:54:17:29:6c: 0c:eb:d2:d0:a9:65:bd:16:e6:fa:c7:d4:81:74:2a: d4:50:c5:ef:c1:c4:ce:86:34:c6:97:5c:cc:16:ba: 43:6c:cb:e4:1b:3b:d9:9d:e6:0f:cc:2b:77:a2:7e: 5b:20:a2:a5:69:f6:a0:c0:7b:ed:77:ae:6f:f4:a6: 19:3e:9f:e3:f1:7c:84:89:59:1c:cb:6c:24:cb:d6: 67:61:ba:b2:7c:b9:7d:02:07:6e:df:05:8e:b4:05: 9b:19:1f:4d:90:b2:12:4e:0d:8c:e6:3b:81:21:27: 2d:ac:b1:d1:bf:06:d2:90:27:e9:f2:e2:c4:d9:8d: 6b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:87:B2:49:14:4B:F9:73:E2:4F:3D:23:88:EE:16:BF:DB:E9:EC:2E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B6F2F3C030511F0BEE8F876C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.44.136.0/22 103.111.20.0/22 Signature Algorithm: sha256WithRSAEncryption 86:2f:14:11:72:e0:c3:53:c4:50:02:9c:8f:b0:12:05:e3:20: 7b:ee:58:cd:a6:ef:ba:15:92:88:3b:13:ba:9b:bd:a7:d0:fc: 93:a8:c1:6b:1b:5a:d3:eb:98:66:73:e1:fb:93:66:b2:7b:0c: 5b:08:19:43:fb:f7:3d:0f:ee:6a:9d:7d:dd:f8:76:10:5d:ed: 14:77:f3:7d:2f:a1:35:81:a1:4c:64:e3:12:e8:c1:7f:c1:ca: 0b:76:ac:f9:14:7a:0c:bb:23:f8:81:f7:15:a5:b8:f3:5f:d5: 4e:16:4f:47:73:83:9d:95:9a:b8:e3:2a:7e:22:a2:00:af:9c: e2:a2:52:c5:b4:3c:8b:55:52:00:be:e4:bd:c3:0c:d0:00:38: d2:3f:6f:2a:af:5f:21:38:0f:d4:3f:1d:6e:51:60:95:17:26: 8b:b2:69:e6:a9:fc:d9:e9:44:fd:32:43:02:25:45:46:da:2e: 73:72:c6:1d:5d:79:67:ba:98:26:e4:90:a1:d2:3a:e0:5d:06: 07:d4:1c:0a:60:d0:8c:0b:2d:b1:1e:1e:16:92:35:92:26:05: 89:61:2c:d4:ec:8a:af:68:3f:2f:29:d1:8f:04:df:64:1d:78: dc:63:dd:59:e2:34:63:d2:0a:83:07:14:03:f4:b4:1c:b9:d2: c1:5a:d2:0e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALRnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDg1NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3MTctOTVmZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCl+MXdxCUnen5OjKHAVLnKJqpuRp7UedciNdq+NC2BGq5C/MVNhOm8TBPP rQdrQDp53yVI5nPuO5eStudRqpVaMUqGiGgvtU6LLwKAFlnjUdQ02KZSPnuXC7Pg 3VmHl66BNZ4jMPlTIlCNCMeNYVJQiE+w6yYSBLIUEjmx64Q+2P9UFylsDOvS0Kll vRbm+sfUgXQq1FDF78HEzoY0xpdczBa6Q2zL5Bs72Z3mD8wrd6J+WyCipWn2oMB7 7Xeub/SmGT6f4/F8hIlZHMtsJMvWZ2G6sny5fQIHbt8FjrQFmxkfTZCyEk4NjOY7 gSEnLayx0b8G0pAn6fLixNmNa3UCAwEAAaOCApswggKXMB0GA1UdDgQWBBQmh7JJ FEv5c+JPPSOI7ha/2+nsLjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJCNkYyRjND MDMwNTExRjBCRUU4Rjg3NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCZyyIAwQCZ28UMA0GCSqGSIb3DQEBCwUAA4IBAQCGLxQR cuDDU8RQApyPsBIF4yB77ljNpu+6FZKIOxO6m72n0PyTqMFrG1rT65hmc+H7k2ay ewxbCBlD+/c9D+5qnX3d+HYQXe0Ud/N9L6E1gaFMZOMS6MF/wcoLdqz5FHoMuyP4 gfcVpbjzX9VOFk9Hc4OdlZq44yp+IqIAr5ziolLFtDyLVVIAvuS9wwzQADjSP28q r18hOA/UPx1uUWCVFyaLsmnmqfzZ6UT9MkMCJUVG2i5zcsYdXXlnupgm5JCh0jrg XQYH1BwKYNCMCy2xHh4WkjWSJgWJYSzU7IqvaD8vKdGPBN9kHXjcY91Z4jRj0gqD BxQD9LQcudLBWtIO -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:24 2025 by rpki-client