$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E1553ACB93D11F084F9B912C4F9AE02.roa File: 3E1553ACB93D11F084F9B912C4F9AE02.roa (raw, json) Hash identifier: OOo7wp2/WDuT07xDUjC/8Gwv0Z2TzkUgqFl5oJNhNR4= Subject key identifier: 49:8C:6E:CB:BC:7D:4F:06:77:CF:C9:58:13:53:4D:A0:2B:94:60:0F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C6CE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E1553ACB93D11F084F9B912C4F9AE02.roa Signing time: Tue 04 Nov 2025 05:19:36 +0000 ROA not before: Tue 04 Nov 2025 05:19:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154276 IP address blocks: 43.240.232.0/23 maxlen: 23 2001:df6:2b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50894 (0xc6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 4 05:19:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69098ce8-df7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0f:6a:39:a8:b1:55:92:8e:04:c1:04:68:05: e1:16:41:3b:53:10:86:69:03:3d:ca:b1:57:bc:81: 6f:b1:b8:fe:2f:0d:a2:a0:ca:a8:3e:0f:8e:fe:64: d5:0d:36:17:11:43:9a:5e:52:7e:92:22:0e:53:37: aa:70:86:f2:d1:42:e0:8f:a2:68:66:11:91:ef:e3: 12:60:28:bf:c0:87:62:fd:63:c3:1d:aa:0d:0d:5b: 02:4a:4c:e5:77:6a:2c:8e:7c:9d:17:72:82:75:1d: 2b:6e:fd:ca:13:b5:b4:6d:21:fa:3a:91:98:33:63: 68:a2:6b:c7:01:78:ab:e5:61:c8:11:16:b7:9f:83: 6d:1e:6f:88:8d:fe:23:e9:89:76:f2:ef:6a:04:a3: 60:0f:42:c0:4e:18:b7:0d:79:31:a2:ff:88:77:1a: 0b:ca:de:96:9f:e2:29:00:f0:68:af:b1:1e:d6:56: 08:6b:3d:07:bf:97:30:71:20:53:1f:d0:0d:f1:7a: 18:e4:fb:86:60:ba:cf:6a:d0:06:cb:19:95:9f:67: 93:31:b7:42:a2:3d:f3:e0:b8:bd:5d:0a:11:e1:33: 75:68:39:80:b6:e5:e3:45:13:75:ea:55:61:8f:02: c5:7a:3d:a9:63:7f:4f:1f:06:6e:bc:80:8e:6a:ba: 9b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8C:6E:CB:BC:7D:4F:06:77:CF:C9:58:13:53:4D:A0:2B:94:60:0F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E1553ACB93D11F084F9B912C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.240.232.0/23 IPv6: 2001:df6:2b40::/48 Signature Algorithm: sha256WithRSAEncryption 9e:c2:56:a5:c1:ed:7e:17:4e:f3:f9:5f:67:cc:c5:78:12:16: 8a:03:5f:75:35:80:2f:c0:a8:35:35:36:3f:df:88:50:e2:ca: e2:b2:ac:33:fe:78:95:8c:ed:52:0f:49:e4:b7:a9:4b:2b:65: b3:05:aa:87:9c:3e:43:ce:57:31:14:38:77:f2:83:52:89:72: 39:16:57:31:58:c1:45:79:34:cc:ec:39:7f:d7:e7:f1:15:f2: 85:04:32:40:34:57:66:2a:31:59:0c:df:6c:1a:5a:46:b5:ab: 1a:6f:a2:c9:3d:26:5a:f6:6e:97:12:99:ee:14:df:1c:c3:97: 23:e3:02:62:7c:bf:aa:dd:37:93:cd:be:9b:a3:f1:ad:00:2e: 01:01:01:8a:31:b9:ee:12:83:87:1b:93:9b:49:47:62:6f:f9: 9e:d8:dd:39:ca:bb:7a:11:93:50:b5:96:e3:1b:5d:d1:ba:fe: 0f:ac:a9:36:3b:a4:2a:a6:24:e6:01:79:1b:a0:37:98:21:05: af:8f:4a:19:19:cc:6d:cf:07:7a:73:e2:30:17:73:05:1e:fc: c6:0d:a6:89:09:dc:c7:eb:12:5a:e3:88:c6:84:a5:07:34:92: 36:3c:1c:1b:da:f2:cc:71:31:4f:00:57:1f:9f:8c:c2:6b:d7: b7:46:66:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAMbOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTEwNDA1MTkzNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjkwOThjZTgtZGY3YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkPajmosVWSjgTBBGgF4RZBO1MQhmkDPcqxV7yBb7G4/i8NoqDKqD4Pjv5k 1Q02FxFDml5SfpIiDlM3qnCG8tFC4I+iaGYRke/jEmAov8CHYv1jwx2qDQ1bAkpM 5XdqLI58nRdygnUdK279yhO1tG0h+jqRmDNjaKJrxwF4q+VhyBEWt5+DbR5viI3+ I+mJdvLvagSjYA9CwE4Ytw15MaL/iHcaC8relp/iKQDwaK+xHtZWCGs9B7+XMHEg Ux/QDfF6GOT7hmC6z2rQBssZlZ9nkzG3QqI98+C4vV0KEeEzdWg5gLbl40UTdepV YY8CxXo9qWN/Tx8GbryAjmq6m+kCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRJjG7L vH1PBnfPyVgTU02gK5RgDzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNFMTU1M0FD QjkzRDExRjA4NEY5QjkxMkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBK/DoMA8EAgACMAkDBwAgAQ32K0AwDQYJKoZIhvcNAQEL BQADggEBAJ7CVqXB7X4XTvP5X2fMxXgSFooDX3U1gC/AqDU1Nj/fiFDiyuKyrDP+ eJWM7VIPSeS3qUsrZbMFqoecPkPOVzEUOHfyg1KJcjkWVzFYwUV5NMzsOX/X5/EV 8oUEMkA0V2YqMVkM32waWka1qxpvosk9Jlr2bpcSme4U3xzDlyPjAmJ8v6rdN5PN vpuj8a0ALgEBAYoxue4Sg4cbk5tJR2Jv+Z7Y3TnKu3oRk1C1luMbXdG6/g+sqTY7 pCqmJOYBeRugN5ghBa+PShkZzG3PB3pz4jAXcwUe/MYNpokJ3MfrElrjiMaEpQc0 kjY8HBva8sxxMU8AVx+fjMJr17dGZjs= -----END CERTIFICATE-----Generated at Wed Nov 5 21:54:00 2025 by rpki-client