$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A0655A2939F11EC92F0252EC4F9AE02.roa File: 4A0655A2939F11EC92F0252EC4F9AE02.roa (raw, json) Hash identifier: ASfDAq7Zf9k7NH5EG9fRDjJfOoazBL+q0Fo1pXwZ8mI= Subject key identifier: 73:4B:2D:B8:E6:60:F5:2A:2F:01:41:89:FE:53:53:BB:FC:1F:BD:32 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B7C0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A0655A2939F11EC92F0252EC4F9AE02.roa Signing time: Thu 08 May 2025 16:21:54 +0000 ROA not before: Thu 08 May 2025 16:21:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149217 IP address blocks: 103.179.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47040 (0xb7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:21:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cda22-9af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:68:39:f4:26:99:45:27:91:5f:35:82:54: df:ae:5a:6e:d3:2d:3e:9e:af:4b:bd:ff:0a:2e:0c: 2f:b5:34:a0:8a:fb:f3:f8:89:bf:8b:af:5d:80:d8: 64:51:8e:d7:7f:c9:a4:1e:8d:a3:9e:d7:5d:30:f2: ef:ef:7f:d5:5a:25:c9:02:f9:ee:a0:e2:2a:49:8a: 28:98:c3:bd:17:2b:01:f2:c1:5b:11:0a:31:35:ee: f9:16:db:32:e3:0f:0d:e4:62:f4:87:7d:1e:9a:b0: 4e:6a:dc:3c:d8:23:e8:0f:8a:2a:2c:49:7d:3c:6b: f9:35:52:36:fa:e5:25:5b:4a:64:89:8e:ed:40:54: f1:80:03:db:4b:65:07:13:f6:7b:b9:7d:06:85:15: 1f:1a:46:14:01:f8:19:88:88:75:0f:a5:b7:6f:e8: f9:14:43:85:38:92:08:34:cd:1f:c0:0d:91:d4:11: b8:a9:c2:7a:b2:ef:2c:39:1e:43:9e:f8:cb:ac:97: ff:74:6d:34:dc:f3:16:0c:c4:86:6b:50:01:ef:5d: 23:47:4f:a1:c4:32:33:20:d7:9c:a7:29:5b:27:d6: 94:c4:af:7b:f0:66:20:23:67:61:48:40:31:b2:c8: 6d:0e:1b:2c:50:61:4a:63:43:52:ed:dd:ca:3c:eb: d1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4B:2D:B8:E6:60:F5:2A:2F:01:41:89:FE:53:53:BB:FC:1F:BD:32 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A0655A2939F11EC92F0252EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.52.0/23 Signature Algorithm: sha256WithRSAEncryption 40:d1:0b:d9:d6:ef:f4:12:6a:8f:e4:b8:ad:2e:e5:73:e8:80: 7e:f9:36:2b:be:c0:05:75:ef:b3:06:41:4a:a8:79:ae:42:7c: fa:b1:47:95:36:62:a4:ec:72:7a:a7:d5:49:29:1d:b3:86:94: 25:bc:a3:4b:10:d9:ce:6b:b6:7f:b4:7b:11:eb:76:b2:68:45: bd:22:51:cb:21:f5:ad:22:0f:0b:08:44:46:5e:ff:ea:bb:f9: ed:53:ec:64:40:f9:91:1f:32:37:fc:55:72:93:ba:52:fd:4b: ae:12:0c:16:f5:99:63:dd:11:b2:35:f9:96:02:1f:53:e9:2e: 1e:78:51:56:af:c1:75:75:83:7f:1c:b6:5d:32:9b:e1:f1:29: 41:ff:ab:71:f8:ef:7d:a9:85:d5:2c:6c:11:8f:d8:a2:46:af: 53:9e:27:81:75:4a:14:cf:47:1a:88:1e:01:7e:9c:46:82:e0: a8:32:3e:d6:9d:b4:b0:ce:17:5b:30:73:ab:15:7d:0d:78:03: 72:07:43:46:b4:b6:ac:ce:2f:ed:19:37:64:4b:1c:89:40:7d: ec:95:58:40:94:b9:f5:1e:89:96:e6:38:26:cf:40:bf:64:27: 89:b1:9c:bf:f4:2d:b2:62:d5:3a:6a:84:9f:d3:eb:f9:43:dd: 76:22:61:31 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALfAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjE1NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhMjItOWFmMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXaaDn0JplFJ5FfNYJU365abtMtPp6vS73/Ci4ML7U0oIr78/iJv4uvXYDY ZFGO13/JpB6No57XXTDy7+9/1VolyQL57qDiKkmKKJjDvRcrAfLBWxEKMTXu+Rbb MuMPDeRi9Id9HpqwTmrcPNgj6A+KKixJfTxr+TVSNvrlJVtKZImO7UBU8YAD20tl BxP2e7l9BoUVHxpGFAH4GYiIdQ+lt2/o+RRDhTiSCDTNH8ANkdQRuKnCerLvLDke Q574y6yX/3RtNNzzFgzEhmtQAe9dI0dPocQyMyDXnKcpWyfWlMSve/BmICNnYUhA MbLIbQ4bLFBhSmNDUu3dyjzr0WkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRzSy24 5mD1Ki8BQYn+U1O7/B+9MjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRBMDY1NUEy OTM5RjExRUM5MkYwMjUyRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ7M0MA0GCSqGSIb3DQEBCwUAA4IBAQBA0QvZ1u/0EmqP 5LitLuVz6IB++TYrvsAFde+zBkFKqHmuQnz6sUeVNmKk7HJ6p9VJKR2zhpQlvKNL ENnOa7Z/tHsR63ayaEW9IlHLIfWtIg8LCERGXv/qu/ntU+xkQPmRHzI3/FVyk7pS /UuuEgwW9Zlj3RGyNfmWAh9T6S4eeFFWr8F1dYN/HLZdMpvh8SlB/6tx+O99qYXV LGwRj9iiRq9TnieBdUoUz0caiB4BfpxGguCoMj7WnbSwzhdbMHOrFX0NeANyB0NG tLaszi/tGTdkSxyJQH3slVhAlLn1HomW5jgmz0C/ZCeJsZy/9C2yYtU6aoSf0+v5 Q912ImEx -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:46 2025 by rpki-client