$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A83BD4A5BEF11F093BA230FC4F9AE02.roa File: 5A83BD4A5BEF11F093BA230FC4F9AE02.roa (raw, json) Hash identifier: 0GSksUFzp5cxEvU7xJ5nF0JqTQRen/yLXY2Pol2oZw8= Subject key identifier: CF:8F:97:47:65:B7:5F:6A:DC:4D:06:AC:BA:2A:EE:5A:A0:C9:5D:F8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BFDC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A83BD4A5BEF11F093BA230FC4F9AE02.roa Signing time: Tue 08 Jul 2025 11:33:22 +0000 ROA not before: Tue 08 Jul 2025 11:33:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134330 IP address blocks: 103.118.157.0/24 maxlen: 24 103.155.147.0/24 maxlen: 24 2001:df1:5340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49116 (0xbfdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 8 11:33:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=686d0202-30fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:f7:ac:d6:0b:a8:08:dd:bf:b2:3a:ee:62: e7:ef:3f:10:5a:36:d6:19:5a:c1:1e:66:0c:3a:d2: 2d:ad:4c:b2:41:8c:70:3e:80:c7:b7:ea:27:d4:e0: 05:74:cb:2b:88:d1:01:7e:09:4c:2d:3b:82:81:44: d2:0b:6c:7e:41:74:4b:91:7a:80:5f:3a:d5:c9:d9: cd:81:40:88:c6:18:1e:f0:60:61:24:45:9d:6b:ed: fc:ae:cd:91:92:4b:c4:67:e7:b1:4b:93:ba:92:82: 50:cc:f6:f3:db:d2:aa:f8:f2:ca:2a:7e:39:86:ac: 97:7e:aa:c2:f4:84:71:32:7a:97:f0:5c:da:b7:bd: dc:87:65:d8:d8:ea:c3:68:20:83:a7:a4:fc:81:ca: 75:fa:72:46:4a:f1:27:94:c2:35:a0:de:af:e8:89: bf:4e:cf:ea:7f:db:a8:fd:b4:30:46:97:dc:5a:7b: 89:07:3d:21:dc:45:91:e2:da:1a:6d:f9:80:a1:60: b2:ad:d5:77:19:1c:3f:65:ab:ff:16:d7:0d:74:05: db:65:9e:da:db:39:35:a4:0b:d8:af:6f:eb:65:2a: 9a:19:c0:54:6a:03:28:07:82:e1:c6:fa:a0:57:a2: 44:3e:1d:24:55:79:0d:6f:d0:2c:d7:19:db:ce:65: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8F:97:47:65:B7:5F:6A:DC:4D:06:AC:BA:2A:EE:5A:A0:C9:5D:F8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A83BD4A5BEF11F093BA230FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.157.0/24 103.155.147.0/24 IPv6: 2001:df1:5340::/48 Signature Algorithm: sha256WithRSAEncryption 11:05:ed:12:d5:2f:05:6b:a6:0d:8c:9e:56:14:30:80:41:30: 44:d1:76:ca:eb:69:80:35:40:4e:76:97:4a:50:d0:1b:eb:bc: 9b:6e:33:2c:c6:69:ba:3c:ec:35:f4:01:89:a1:ad:41:36:e2: c3:d9:16:f3:af:40:ed:a5:d4:3b:d9:ef:ba:0e:31:c9:a7:65: 63:9d:1a:11:be:2e:e2:29:c8:91:dc:83:92:43:f7:3d:6f:15: b7:d7:33:e8:10:4d:04:81:1a:5e:58:d3:3f:62:a4:9c:76:77: e8:8f:26:d8:9f:12:f7:72:ec:8a:73:a2:ec:2d:93:29:20:ad: 64:ad:7e:38:9e:a4:8f:9d:2b:c3:a4:b5:6c:2f:af:f0:79:44: 3c:d3:29:84:67:a5:c8:14:24:95:77:6a:aa:cf:0b:7a:00:fc: 25:5a:6b:80:1b:9a:32:75:7a:6c:e0:c0:50:a9:62:09:c5:a8: 37:f2:31:1c:63:bd:d5:7f:06:58:75:6a:c4:67:58:0c:96:d4: 9a:61:62:19:3f:0e:8e:5c:91:6c:06:2d:4c:ef:15:1d:82:c4: a9:62:bf:c5:fe:59:00:35:a0:83:93:e2:08:7f:19:c0:ac:3e: 46:19:fb:96:7c:5c:5c:04:c3:74:7f:29:a0:47:e9:fb:0e:29: 43:8b:97:98 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDAL/cMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDcwODExMzMyMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg2ZDAyMDItMzBmZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7/96zWC6gI3b+yOu5i5+8/EFo21hlawR5mDDrSLa1MskGMcD6Ax7fqJ9Tg BXTLK4jRAX4JTC07goFE0gtsfkF0S5F6gF861cnZzYFAiMYYHvBgYSRFnWvt/K7N kZJLxGfnsUuTupKCUMz289vSqvjyyip+OYasl36qwvSEcTJ6l/Bc2re93Idl2Njq w2ggg6ek/IHKdfpyRkrxJ5TCNaDer+iJv07P6n/bqP20MEaX3Fp7iQc9IdxFkeLa Gm35gKFgsq3VdxkcP2Wr/xbXDXQF22We2ts5NaQL2K9v62UqmhnAVGoDKAeC4cb6 oFeiRD4dJFV5DW/QLNcZ285l+OkCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBTPj5dH ZbdfatxNBqy6Ku5aoMld+DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVBODNCRDRB NUJFRjExRjA5M0JBMjMwRkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQAZ3adAwQAZ5uTMA8EAgACMAkDBwAgAQ3xU0AwDQYJKoZI hvcNAQELBQADggEBABEF7RLVLwVrpg2MnlYUMIBBMETRdsrraYA1QE52l0pQ0Bvr vJtuMyzGabo87DX0AYmhrUE24sPZFvOvQO2l1DvZ77oOMcmnZWOdGhG+LuIpyJHc g5JD9z1vFbfXM+gQTQSBGl5Y0z9ipJx2d+iPJtifEvdy7IpzouwtkykgrWStfjie pI+dK8OktWwvr/B5RDzTKYRnpcgUJJV3aqrPC3oA/CVaa4AbmjJ1emzgwFCpYgnF qDfyMRxjvdV/Blh1asRnWAyW1JphYhk/Do5ckWwGLUzvFR2CxKliv8X+WQA1oIOT 4gh/GcCsPkYZ+5Z8XFwEw3R/KaBH6fsOKUOLl5g= -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:37 2025 by rpki-client