$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FD9D0E80F9911EB99108B5AC4F9AE02.roa File: 4FD9D0E80F9911EB99108B5AC4F9AE02.roa (raw, json) Hash identifier: FC5fMGoUjpld2I9+XxP4H/70DRt/2AFdDSspBPLJlxc= Subject key identifier: 3A:60:5A:24:56:36:13:EB:14:4A:96:27:D5:78:A5:75:EA:F4:D2:47 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C654 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FD9D0E80F9911EB99108B5AC4F9AE02.roa Signing time: Thu 16 Oct 2025 05:10:30 +0000 ROA not before: Thu 16 Oct 2025 05:10:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140205 IP address blocks: 103.156.138.0/23 maxlen: 24 103.168.222.0/23 maxlen: 24 2001:df1:d740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50772 (0xc654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 16 05:10:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68f07e46-21bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:1c:ed:a8:15:b2:57:5f:54:cd:2b:d7:ae: 74:ef:7d:ba:49:18:d3:4a:65:ec:9d:70:b6:a0:99: 72:72:f1:2d:a8:03:b6:00:75:69:c1:a1:8f:f1:6c: 27:d4:4b:60:13:5c:3e:42:f5:15:5e:3d:d7:3a:10: ee:53:cf:05:8b:a4:99:7c:3a:da:1e:31:90:55:1a: ef:09:be:47:05:eb:33:73:00:e3:2a:d1:9a:c6:ec: e4:f9:fa:31:76:c3:df:c4:f1:d4:3e:73:3d:1c:c4: 9e:40:a7:f3:5c:b0:76:f9:40:0a:79:74:47:dd:1e: d5:8b:5e:42:00:eb:38:30:88:a4:b6:c7:87:7c:5d: 74:99:5a:5a:8c:ad:7a:cc:84:04:95:40:e0:76:37: eb:14:96:ad:af:da:b9:51:1b:d4:35:36:74:f8:eb: 75:e3:cb:11:49:a7:59:25:91:9e:83:b7:a6:59:eb: ab:a1:4b:2c:37:09:d1:08:5f:97:3a:c7:d4:0f:03: 08:cc:2e:f5:bc:19:cf:74:7e:03:68:6e:65:99:c8: ba:d8:6a:01:ee:63:71:85:c5:b2:cf:a4:64:9a:4c: a4:06:84:4c:fd:9d:3a:0f:06:3f:b1:63:91:76:69: 84:c5:fd:4e:11:11:b4:b7:c1:d4:34:87:29:5e:36: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:60:5A:24:56:36:13:EB:14:4A:96:27:D5:78:A5:75:EA:F4:D2:47 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FD9D0E80F9911EB99108B5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.138.0/23 103.168.222.0/23 IPv6: 2001:df1:d740::/48 Signature Algorithm: sha256WithRSAEncryption 54:2d:03:c6:6d:64:e3:37:ee:a3:c2:81:af:c4:37:91:84:18: bd:52:b5:4b:e0:70:c0:f0:68:af:c4:75:a9:86:1f:e3:ce:8e: ea:08:21:fe:ba:c6:13:f4:e3:4e:39:44:54:86:05:19:1b:62: 1a:bf:82:6a:7f:8c:3c:02:e7:3d:7d:97:af:53:66:bd:e8:e1: d1:93:43:9f:f5:4f:a3:43:b5:84:68:e1:65:ce:a1:a1:9a:c7: 6a:a3:6f:5b:b9:12:ae:9f:31:34:d7:b8:93:b3:75:4b:06:1a: b7:a2:7b:62:30:b6:ec:6d:80:a3:85:82:e4:f0:94:02:89:19: f6:7a:66:c1:86:b7:c8:73:b0:8d:2a:c3:2f:86:20:2e:cb:1c: 0d:f4:b9:64:d8:73:b0:38:45:82:a9:be:37:d5:b3:fa:b5:3d: 1f:0e:9e:f5:58:a4:f6:e1:35:9a:c1:99:b0:77:9a:ca:25:8c: d6:c5:2d:cf:10:fc:e2:e0:95:9a:ec:8d:85:14:33:5f:44:c9: b6:13:27:74:4d:0d:ef:da:7b:24:7a:cf:89:1c:a6:2d:66:35: 30:10:8b:0e:07:d8:8e:61:88:4f:d1:71:a0:ae:14:c7:ba:da: 4c:fb:3d:a2:3b:a0:31:04:99:18:d9:8e:4d:c7:02:8f:27:2b: 9d:73:3b:91 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAMZUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTAxNjA1MTAzMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhmMDdlNDYtMjFiZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3KHO2oFbJXX1TNK9eudO99ukkY00pl7J1wtqCZcnLxLagDtgB1acGhj/Fs J9RLYBNcPkL1FV491zoQ7lPPBYukmXw62h4xkFUa7wm+RwXrM3MA4yrRmsbs5Pn6 MXbD38Tx1D5zPRzEnkCn81ywdvlACnl0R90e1YteQgDrODCIpLbHh3xddJlaWoyt esyEBJVA4HY36xSWra/auVEb1DU2dPjrdePLEUmnWSWRnoO3plnrq6FLLDcJ0Qhf lzrH1A8DCMwu9bwZz3R+A2huZZnIuthqAe5jcYXFss+kZJpMpAaETP2dOg8GP7Fj kXZphMX9ThERtLfB1DSHKV42Hw8CAwEAAaOCAqwwggKoMB0GA1UdDgQWBBQ6YFok VjYT6xRKlifVeKV16vTSRzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRGRDlEMEU4 MEY5OTExRUI5OTEwOEI1QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQBZ5yKAwQBZ6jeMA8EAgACMAkDBwAgAQ3x10AwDQYJKoZI hvcNAQELBQADggEBAFQtA8ZtZOM37qPCga/EN5GEGL1StUvgcMDwaK/EdamGH+PO juoIIf66xhP04045RFSGBRkbYhq/gmp/jDwC5z19l69TZr3o4dGTQ5/1T6NDtYRo 4WXOoaGax2qjb1u5Eq6fMTTXuJOzdUsGGreie2IwtuxtgKOFguTwlAKJGfZ6ZsGG t8hzsI0qwy+GIC7LHA30uWTYc7A4RYKpvjfVs/q1PR8OnvVYpPbhNZrBmbB3msol jNbFLc8Q/OLglZrsjYUUM19EybYTJ3RNDe/aeyR6z4kcpi1mNTAQiw4H2I5hiE/R caCuFMe62kz7PaI7oDEEmRjZjk3HAo8nK51zO5E= -----END CERTIFICATE-----Generated at Wed Nov 5 17:55:22 2025 by rpki-client