$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46199FBC75B411EB851F4B4CC4F9AE02.roa File: 46199FBC75B411EB851F4B4CC4F9AE02.roa (raw, json) Hash identifier: 9HSBH+LGz6YIKogK6XBS0CyHEaJH2bZlfZeKVQ9+TZA= Subject key identifier: 1F:65:AA:63:D8:8A:83:F9:4C:44:DA:BE:2E:AB:F4:DE:85:BF:82:5D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B1C1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46199FBC75B411EB851F4B4CC4F9AE02.roa Signing time: Thu 08 May 2025 15:58:27 +0000 ROA not before: Thu 08 May 2025 15:58:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133287 IP address blocks: 103.211.108.0/22 maxlen: 24 160.238.72.0/22 maxlen: 24 223.196.160.0/19 maxlen: 24 223.196.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45505 (0xb1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:58:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd4a3-6448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:db:23:fc:c9:9d:8f:92:b1:e0:d8:a7:3f: 68:9c:61:2f:b0:3b:80:4f:d0:8c:17:79:5d:e6:e3: 73:fc:ee:7f:ae:1c:83:b1:f4:e7:94:2a:f2:9b:59: 67:38:af:da:a2:98:b0:35:20:73:d7:99:88:13:e5: b1:f6:e2:2f:fa:4a:da:83:c6:32:94:6b:02:ed:46: ba:68:fe:74:79:46:82:00:b3:d9:6a:74:6d:54:ed: 1e:10:5a:06:46:23:90:07:bb:6b:7a:e6:be:0b:7b: 21:6f:b6:02:45:d2:f4:6f:58:92:38:5c:3b:f0:35: 10:ae:17:d6:41:d6:7b:9e:b3:8a:e6:35:48:e1:7a: 91:bd:d0:a6:8f:a2:34:26:4f:b4:76:6c:d3:52:dd: 5b:bf:7c:28:79:15:66:31:5c:61:1d:8b:ea:29:25: 8f:f2:9f:89:f9:00:31:c3:9b:d6:6d:cd:1c:86:21: 85:91:a6:e0:93:7f:5e:af:ed:ac:37:c2:5b:56:a0: 9c:7c:61:a2:32:cc:c0:e0:b9:38:f9:10:14:c3:08: 17:f7:55:64:4f:61:9f:2d:b4:ab:c6:86:f3:bb:3c: e6:b4:3a:e9:68:4a:ea:0e:a0:7e:85:7b:3a:58:93: d6:5e:af:12:35:9e:43:e4:ab:74:6b:bb:89:46:46: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:AA:63:D8:8A:83:F9:4C:44:DA:BE:2E:AB:F4:DE:85:BF:82:5D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46199FBC75B411EB851F4B4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.108.0/22 160.238.72.0/22 223.196.160.0-223.196.199.255 Signature Algorithm: sha256WithRSAEncryption b1:13:5c:cb:0b:d3:d0:0c:cb:84:bd:68:6a:0e:99:76:10:2f: 32:18:03:bc:65:3c:52:15:60:7e:42:ee:b3:89:a4:d1:dc:c3: 45:98:c2:ea:53:c7:7d:30:83:63:1b:e0:d5:c1:9e:68:35:f4: dd:2d:3d:b6:9e:4c:8f:2c:cd:eb:d6:7b:b6:47:ad:17:47:10: c1:e2:db:85:64:fe:6f:6a:11:49:06:1e:34:2f:dd:c7:e6:95: 88:99:c3:ef:bf:25:6a:a2:47:50:90:73:3f:5c:cc:b5:04:dd: a6:d3:ea:41:37:68:55:8e:84:b5:01:23:02:c6:67:61:43:81: 5e:11:da:d4:e1:ff:82:f8:26:76:ed:1a:9f:e5:c1:8e:66:96: 95:7a:57:a8:b1:b5:93:02:b2:38:69:e9:ca:47:20:9c:b4:ba: 8c:08:e2:ad:25:e4:3d:10:ed:6b:ea:8b:c2:bc:45:8c:d0:3f: 58:88:71:a9:42:c7:4e:78:6c:ba:b7:c9:56:2b:9e:67:24:be: e3:44:eb:02:e1:a8:c5:59:9b:07:63:4d:fe:53:d1:bd:72:2c: 02:29:ab:85:d5:b5:4b:79:3e:7a:e4:2c:f7:be:4c:81:a1:12: 33:1e:60:36:69:d5:ed:98:cb:f3:57:fd:f0:87:2d:b9:70:7a: ae:fc:0b:4b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIDALHBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTgyN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0YTMtNjQ0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZj2yP8yZ2PkrHg2Kc/aJxhL7A7gE/QjBd5Xebjc/zuf64cg7H055Qq8ptZ Zziv2qKYsDUgc9eZiBPlsfbiL/pK2oPGMpRrAu1Gumj+dHlGggCz2Wp0bVTtHhBa BkYjkAe7a3rmvgt7IW+2AkXS9G9YkjhcO/A1EK4X1kHWe56ziuY1SOF6kb3Qpo+i NCZPtHZs01LdW798KHkVZjFcYR2L6iklj/KfifkAMcOb1m3NHIYhhZGm4JN/Xq/t rDfCW1agnHxhojLMwOC5OPkQFMMIF/dVZE9hny20q8aG87s85rQ66WhK6g6gfoV7 OliT1l6vEjWeQ+SrdGu7iUZGbrUCAwEAAaOCAqkwggKlMB0GA1UdDgQWBBQfZapj 2IqD+UxE2r4uq/Tehb+CXTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ2MTk5RkJD NzVCNDExRUI4NTFGNEI0Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDMGCCsGAQUFBwEHAQH/ BCQwIjAgBAIAATAaAwQCZ9NsAwQCoO5IMAwDBAXfxKADBAPfxMAwDQYJKoZIhvcN AQELBQADggEBALETXMsL09AMy4S9aGoOmXYQLzIYA7xlPFIVYH5C7rOJpNHcw0WY wupTx30wg2Mb4NXBnmg19N0tPbaeTI8szevWe7ZHrRdHEMHi24Vk/m9qEUkGHjQv 3cfmlYiZw++/JWqiR1CQcz9czLUE3abT6kE3aFWOhLUBIwLGZ2FDgV4R2tTh/4L4 JnbtGp/lwY5mlpV6V6ixtZMCsjhp6cpHIJy0uowI4q0l5D0Q7Wvqi8K8RYzQP1iI calCx054bLq3yVYrnmckvuNE6wLhqMVZmwdjTf5T0b1yLAIpq4XVtUt5PnrkLPe+ TIGhEjMeYDZp1e2Yy/NX/fCHLblweq78C0s= -----END CERTIFICATE-----Generated at Wed Nov 5 19:23:58 2025 by rpki-client