$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/474A2C986D0411EB89A3805EC4F9AE02.roa File: 474A2C986D0411EB89A3805EC4F9AE02.roa (raw, json) Hash identifier: OxQReO6PWDYFr70XgE+mPNFCEE82D/qXCj+ahRVWPOc= Subject key identifier: 1D:93:71:72:77:56:EB:D5:D9:73:24:1E:25:6D:60:05:F5:E4:D6:6A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B660 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/474A2C986D0411EB89A3805EC4F9AE02.roa Signing time: Thu 08 May 2025 16:16:38 +0000 ROA not before: Thu 08 May 2025 16:16:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141519 IP address blocks: 103.162.164.0/24 maxlen: 24 103.162.165.0/24 maxlen: 24 2407:19c0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46688 (0xb660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:16:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd8e5-dbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c7:b4:c4:86:d7:45:04:4e:ac:dd:f6:e6:1c: 75:3a:32:9e:4d:06:94:1f:6c:ed:ba:22:ae:6f:9c: 20:16:e1:c6:06:22:f6:ad:47:b7:4b:f2:9b:2a:20: 92:05:9c:01:5f:b8:66:b3:ab:df:63:41:0f:06:b2: db:21:0c:1e:08:53:aa:3b:0f:12:ce:9b:02:52:26: 11:58:84:88:72:41:ca:bf:89:27:1a:7e:6c:ec:9b: 85:1e:0d:02:2a:20:95:66:bd:fc:09:3e:93:24:63: a9:c0:7f:cf:72:03:55:73:dd:56:ed:9e:1b:7f:d0: 0c:c8:6e:05:10:6b:61:c1:8f:3c:7a:74:36:84:f2: f3:a5:d3:c0:65:eb:ef:cd:6f:b9:f1:9d:7c:5c:6f: c4:41:7f:eb:d1:9b:90:36:cf:cb:e7:e6:8f:ed:37: 1a:6f:f3:e6:43:9a:f5:c4:40:75:03:e7:99:08:56: cf:a7:3f:e1:90:77:9b:ab:c0:a3:1d:6c:40:72:f1: a1:02:61:19:96:7f:b4:e3:56:3b:6b:f7:80:0a:5e: 80:b4:0d:db:51:85:26:df:cd:0e:6e:ff:76:35:80: 7e:9b:4e:a3:5c:09:ff:e9:31:3a:00:aa:2a:2c:bc: 26:db:af:55:9f:42:b0:da:f8:35:04:52:c7:52:71: 4e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:93:71:72:77:56:EB:D5:D9:73:24:1E:25:6D:60:05:F5:E4:D6:6A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/474A2C986D0411EB89A3805EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.164.0/23 IPv6: 2407:19c0::/36 Signature Algorithm: sha256WithRSAEncryption 61:8b:9a:ed:46:59:59:cf:44:05:8b:6c:c8:ea:2a:b4:4f:c6: 99:0f:f0:21:b8:c7:05:3d:fd:2b:cc:01:49:8d:85:2d:19:95: 40:1c:75:1c:5e:a3:cc:3f:fa:bf:28:a4:37:4d:63:45:ff:77: 30:87:6e:6a:ea:34:7f:60:d7:e0:1d:24:c6:aa:61:ec:a6:1b: 7f:ba:59:88:31:a8:0b:70:70:92:48:18:9f:26:04:a3:92:76: 58:11:35:95:4e:e3:0c:af:9f:67:6d:2e:06:87:bc:a6:6b:c1: 38:dc:9d:5c:ae:4b:32:c3:6a:e3:d5:43:60:8f:12:5a:93:dc: 64:b9:e6:4a:f8:29:fd:79:b2:bc:5f:d4:a5:90:5c:58:73:a7: d1:59:66:fd:03:5a:7f:3c:e8:88:7d:b9:51:14:64:d0:3d:1b: 0c:13:bc:86:80:62:7d:7b:30:17:9c:99:36:03:24:26:7a:f2: 9b:fd:a3:68:ea:4d:c1:46:dd:7c:4b:58:7d:24:68:70:44:fd: 25:4e:e9:87:01:9f:33:30:b9:45:06:f6:44:16:03:4b:69:3d: db:38:2e:23:fd:4d:d8:8d:48:8c:28:73:2b:ee:3c:e1:cf:2c: 50:16:96:53:7d:be:71:00:60:35:7d:7b:38:a2:66:91:b2:1e: d3:94:d3:79 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIDALZgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTYzOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4ZTUtZGJjYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXHtMSG10UETqzd9uYcdToynk0GlB9s7boirm+cIBbhxgYi9q1Ht0vymyog kgWcAV+4ZrOr32NBDway2yEMHghTqjsPEs6bAlImEViEiHJByr+JJxp+bOybhR4N AioglWa9/Ak+kyRjqcB/z3IDVXPdVu2eG3/QDMhuBRBrYcGPPHp0NoTy86XTwGXr 781vufGdfFxvxEF/69GbkDbPy+fmj+03Gm/z5kOa9cRAdQPnmQhWz6c/4ZB3m6vA ox1sQHLxoQJhGZZ/tONWO2v3gApegLQN21GFJt/NDm7/djWAfptOo1wJ/+kxOgCq Kiy8JtuvVZ9CsNr4NQRSx1JxTqECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQdk3Fy d1br1dlzJB4lbWAF9eTWajAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ3NEEyQzk4 NkQwNDExRUI4OUEzODA1RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC8GCCsGAQUFBwEHAQH/ BCAwHjAMBAIAATAGAwQBZ6KkMA4EAgACMAgDBgQkBxnAADANBgkqhkiG9w0BAQsF AAOCAQEAYYua7UZZWc9EBYtsyOoqtE/GmQ/wIbjHBT39K8wBSY2FLRmVQBx1HF6j zD/6vyikN01jRf93MIduauo0f2DX4B0kxqph7KYbf7pZiDGoC3BwkkgYnyYEo5J2 WBE1lU7jDK+fZ20uBoe8pmvBONydXK5LMsNq49VDYI8SWpPcZLnmSvgp/XmyvF/U pZBcWHOn0Vlm/QNafzzoiH25URRk0D0bDBO8hoBifXswF5yZNgMkJnrym/2jaOpN wUbdfEtYfSRocET9JU7phwGfMzC5RQb2RBYDS2k92zguI/1N2I1IjChzK+484c8s UBaWU32+cQBgNX17OKJmkbIe05TTeQ== -----END CERTIFICATE-----Generated at Wed Nov 5 18:01:11 2025 by rpki-client