$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0A1BCEBDD611EA97CDF72CC4F9AE02.roa File: 5E0A1BCEBDD611EA97CDF72CC4F9AE02.roa (raw, json) Hash identifier: T5OZmsda5VLxzvHgYB4Py9O53o1DvgQeQ8fIDZtHCok= Subject key identifier: 72:DA:E0:2B:DB:42:A1:F6:0B:53:5E:66:14:89:92:2A:A5:FB:27:08 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C375 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0A1BCEBDD611EA97CDF72CC4F9AE02.roa Signing time: Thu 28 Aug 2025 08:56:05 +0000 ROA not before: Thu 28 Aug 2025 08:56:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136287 IP address blocks: 45.119.122.0/23 maxlen: 24 103.87.24.0/22 maxlen: 22 103.87.24.0/24 maxlen: 24 103.87.25.0/24 maxlen: 24 103.87.26.0/24 maxlen: 24 103.87.27.0/24 maxlen: 24 103.164.204.0/23 maxlen: 24 103.184.206.0/23 maxlen: 24 2001:df1:1e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50037 (0xc375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 28 08:56:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68b019a5-2f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:90:47:54:9a:03:0b:93:38:8b:cc:e1:3b:40: 6e:1d:68:63:8c:55:5a:2c:50:0b:c1:fd:ea:6c:37: 15:bf:bd:16:f0:aa:01:84:db:2b:34:25:ce:ee:fc: 89:a7:5e:49:6a:df:ca:f5:d6:23:37:72:c0:ba:8f: 25:53:b1:75:24:19:e8:f4:56:23:f6:20:b3:dc:14: a0:55:8b:50:07:88:df:03:bf:b6:8a:d4:ac:6f:54: 0f:7d:26:8e:8d:50:24:f1:94:d4:6a:5a:19:9a:c4: 1b:20:e5:84:b0:c5:29:f2:b5:e6:02:a7:d9:ed:67: a8:0e:10:e6:42:67:f5:cd:d8:95:a0:b0:1b:c6:15: 75:53:60:b6:38:f8:49:23:ed:46:40:78:18:d6:75: 8e:90:54:d0:ed:2d:97:61:9d:c1:44:57:39:96:bb: ea:99:82:89:ca:52:cb:bf:87:02:d9:2b:1b:3c:56: d1:b4:a4:39:fd:17:1e:fe:42:1e:17:a5:36:31:72: 96:b4:9c:bc:ae:1b:67:1f:b7:ff:68:5c:81:5f:e6: 8a:e3:ed:81:e8:f3:85:1c:db:07:d2:d8:1d:fb:78: 64:54:79:3d:18:8f:5d:fa:4e:46:f1:8e:ee:fb:b6: f0:69:ec:7e:e9:3d:c8:b1:7e:82:e2:a1:4c:e3:6a: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DA:E0:2B:DB:42:A1:F6:0B:53:5E:66:14:89:92:2A:A5:FB:27:08 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0A1BCEBDD611EA97CDF72CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.122.0/23 103.87.24.0/22 103.164.204.0/23 103.184.206.0/23 IPv6: 2001:df1:1e40::/48 Signature Algorithm: sha256WithRSAEncryption 7d:bd:c1:80:f0:0c:75:81:50:47:8c:7f:32:6b:15:74:91:51: 0e:11:51:66:2a:2c:0c:9f:33:de:d0:18:34:e3:43:00:56:be: e9:05:61:6a:58:22:88:62:69:1f:4f:bf:50:bf:4f:3f:12:e8: 11:88:2b:f5:1d:07:6b:95:5e:73:83:f1:1e:62:9d:8f:6f:d5: b3:ba:ee:16:c1:55:fd:65:06:f2:25:2e:9f:93:2f:38:b0:38: 6c:7c:8c:f0:41:92:d3:29:14:94:2a:62:2b:16:c1:1a:b3:8e: 0d:27:9c:a6:d0:6b:e4:35:b4:30:c4:a1:38:e1:f7:c5:b0:32: 42:ac:61:96:ec:67:fa:88:21:70:a3:e1:20:b8:23:a7:98:14: 33:dd:26:90:1c:0f:c7:e4:0e:84:bf:cf:b4:ec:e8:79:02:43: d2:51:e9:f6:49:71:88:04:67:30:38:e8:25:cb:5b:77:1c:1d: 53:47:d5:05:c2:2b:ab:8d:0b:28:84:e4:47:88:78:86:a1:50: 83:2d:7e:7e:e0:12:0e:fe:92:08:a9:81:19:19:21:1e:ff:74: b3:e0:c5:e6:28:01:7e:3d:63:cd:cb:5d:7d:98:6d:b6:1f:6a: bf:37:6b:4c:7d:69:78:cc:41:2d:3c:7b:32:0c:38:d6:73:20: 9c:c5:25:55 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIDAMN1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgyODA4NTYwNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhiMDE5YTUtMmYyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJeQR1SaAwuTOIvM4TtAbh1oY4xVWixQC8H96mw3Fb+9FvCqAYTbKzQlzu78 iadeSWrfyvXWIzdywLqPJVOxdSQZ6PRWI/Ygs9wUoFWLUAeI3wO/torUrG9UD30m jo1QJPGU1GpaGZrEGyDlhLDFKfK15gKn2e1nqA4Q5kJn9c3YlaCwG8YVdVNgtjj4 SSPtRkB4GNZ1jpBU0O0tl2GdwURXOZa76pmCicpSy7+HAtkrGzxW0bSkOf0XHv5C HhelNjFylrScvK4bZx+3/2hcgV/miuPtgejzhRzbB9LYHft4ZFR5PRiPXfpORvGO 7vu28Gnsfuk9yLF+guKhTONqmQkCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRy2uAr 20Kh9gtTXmYUiZIqpfsnCDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVFMEExQkNF QkRENjExRUE5N0NERjcyQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEIGCCsGAQUFBwEHAQH/ BDMwMTAeBAIAATAYAwQBLXd6AwQCZ1cYAwQBZ6TMAwQBZ7jOMA8EAgACMAkDBwAg AQ3xHkAwDQYJKoZIhvcNAQELBQADggEBAH29wYDwDHWBUEeMfzJrFXSRUQ4RUWYq LAyfM97QGDTjQwBWvukFYWpYIohiaR9Pv1C/Tz8S6BGIK/UdB2uVXnOD8R5inY9v 1bO67hbBVf1lBvIlLp+TLziwOGx8jPBBktMpFJQqYisWwRqzjg0nnKbQa+Q1tDDE oTjh98WwMkKsYZbsZ/qIIXCj4SC4I6eYFDPdJpAcD8fkDoS/z7Ts6HkCQ9JR6fZJ cYgEZzA46CXLW3ccHVNH1QXCK6uNCyiE5EeIeIahUIMtfn7gEg7+kgipgRkZIR7/ dLPgxeYoAX49Y83LXX2YbbYfar83a0x9aXjMQS08ezIMONZzIJzFJVU= -----END CERTIFICATE-----Generated at Wed Nov 5 16:30:59 2025 by rpki-client