$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65ED4A1A459011EEB2405B6AC4F9AE02.roa File: 65ED4A1A459011EEB2405B6AC4F9AE02.roa (raw, json) Hash identifier: lFg3bN0ntRPsS+hM/91h2U6FE5gwv0PRSJYoCByrb2c= Subject key identifier: 62:BA:6F:35:59:65:DE:5F:27:73:7A:12:57:E9:D6:F3:F0:D6:7E:72 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B4BF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65ED4A1A459011EEB2405B6AC4F9AE02.roa Signing time: Thu 08 May 2025 16:10:20 +0000 ROA not before: Thu 08 May 2025 16:10:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137635 IP address blocks: 103.94.80.0/24 maxlen: 24 103.94.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46271 (0xb4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:10:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd76b-257b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:5d:a0:f6:a4:ac:04:40:a2:cd:90:da:a5: d7:b5:5a:4b:eb:6a:26:ba:d5:0f:af:88:b6:03:05: 3f:f5:f0:0b:c9:6d:f8:c7:87:91:ac:35:7c:ea:b5: d3:ae:97:65:03:12:62:82:49:02:90:c1:8d:ef:4e: b1:c8:42:6f:b5:9c:b6:30:b5:af:0a:08:b3:c1:0a: d4:42:19:7c:7f:7b:51:17:84:ad:0e:ed:bf:4f:85: 5c:90:fc:fc:83:e2:e8:cf:0c:2a:43:67:5a:b6:c6: 61:90:5a:16:1e:97:2e:d0:90:ae:d9:a5:4c:03:cf: 30:4c:db:bd:93:2e:00:d0:68:d4:0f:21:9f:1c:79: 3f:5c:76:58:a9:d2:0a:58:04:b7:79:75:b4:db:44: 6f:77:73:50:79:60:ca:ad:61:46:e3:00:7c:e3:bd: 81:63:91:69:82:b8:fe:71:01:7a:0d:f9:aa:74:80: 27:28:ec:c3:2b:03:38:7a:1d:ce:5e:09:70:a3:3a: 0e:1d:49:ce:ac:af:c8:aa:bd:3a:ba:e0:50:de:71: 1e:83:cb:8d:9d:e2:28:bd:ad:94:02:75:29:51:e4: 7d:6a:5c:ab:fa:9d:a3:d2:4a:eb:5a:63:40:be:2e: a8:c1:c9:2e:27:0d:1f:9a:b1:cf:c5:bb:ca:ca:a9: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BA:6F:35:59:65:DE:5F:27:73:7A:12:57:E9:D6:F3:F0:D6:7E:72 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65ED4A1A459011EEB2405B6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.80.0/24 103.94.83.0/24 Signature Algorithm: sha256WithRSAEncryption 43:4c:bc:f2:97:84:5d:ae:47:31:7e:27:bb:3a:ae:0e:38:91: 2a:37:25:85:45:a6:05:5a:5a:e2:e2:09:69:2c:45:f3:0f:44: 86:30:f6:46:8b:35:7b:46:39:66:82:f2:eb:b8:56:f4:56:77: e0:c8:4e:c1:ac:82:d8:3a:4f:0e:ca:45:a2:27:95:eb:5a:06: 9c:5e:3e:9e:58:46:8d:30:c4:87:90:0a:e5:7c:bf:22:5b:92: 0c:dc:e3:3c:74:47:10:e7:48:2b:51:e6:ed:de:01:7d:74:e6: df:12:8e:8e:2a:52:e2:d6:ce:9f:e9:6a:1a:ff:1e:23:62:bb: a4:0f:f9:4b:d9:c9:ec:0f:e4:f8:70:36:06:06:56:48:14:4d: 95:25:f5:a1:38:2a:3b:80:77:2f:1b:81:3f:33:7d:a0:26:dc: 65:da:86:97:0f:72:b9:a4:20:ea:a0:c3:24:ff:0d:ac:b7:04: da:ce:1f:f9:ad:33:30:a1:82:57:e4:b2:4b:5b:0f:a5:a8:6b: bc:d0:28:d4:ac:f2:7e:9a:2b:37:48:0c:f8:01:f7:79:8c:ba: 9f:31:73:97:db:f7:84:34:59:8a:95:86:8f:f0:60:b8:d6:68: f2:e1:41:c5:29:a0:93:ac:40:a4:e7:c5:33:f7:18:71:64:e2: b0:8d:70:2b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALS/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTAyMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3NmItMjU3YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwKXaD2pKwEQKLNkNql17VaS+tqJrrVD6+ItgMFP/XwC8lt+MeHkaw1fOq1 066XZQMSYoJJApDBje9OschCb7WctjC1rwoIs8EK1EIZfH97UReErQ7tv0+FXJD8 /IPi6M8MKkNnWrbGYZBaFh6XLtCQrtmlTAPPMEzbvZMuANBo1A8hnxx5P1x2WKnS ClgEt3l1tNtEb3dzUHlgyq1hRuMAfOO9gWORaYK4/nEBeg35qnSAJyjswysDOHod zl4JcKM6Dh1JzqyvyKq9OrrgUN5xHoPLjZ3iKL2tlAJ1KVHkfWpcq/qdo9JK61pj QL4uqMHJLicNH5qxz8W7ysqpef8CAwEAAaOCApswggKXMB0GA1UdDgQWBBRium81 WWXeXydzehJX6dbz8NZ+cjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY1RUQ0QTFB NDU5MDExRUVCMjQwNUI2QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQAZ15QAwQAZ15TMA0GCSqGSIb3DQEBCwUAA4IBAQBDTLzy l4Rdrkcxfie7Oq4OOJEqNyWFRaYFWlri4glpLEXzD0SGMPZGizV7RjlmgvLruFb0 VnfgyE7BrILYOk8OykWiJ5XrWgacXj6eWEaNMMSHkArlfL8iW5IM3OM8dEcQ50gr Uebt3gF9dObfEo6OKlLi1s6f6Woa/x4jYrukD/lL2cnsD+T4cDYGBlZIFE2VJfWh OCo7gHcvG4E/M32gJtxl2oaXD3K5pCDqoMMk/w2stwTazh/5rTMwoYJX5LJLWw+l qGu80CjUrPJ+mis3SAz4Afd5jLqfMXOX2/eENFmKlYaP8GC41mjy4UHFKaCTrECk 58Uz9xhxZOKwjXAr -----END CERTIFICATE-----Generated at Wed Nov 5 22:15:55 2025 by rpki-client