$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/692CAFB4744A11F094309455C4F9AE02.roa File: 692CAFB4744A11F094309455C4F9AE02.roa (raw, json) Hash identifier: yXSZbAvsA+UNQIL0RVHWt3dSPLgkEKImfLAxP1WCojg= Subject key identifier: 31:CA:8E:19:36:E7:FE:8A:4B:C4:EF:CC:D6:BB:E2:FE:68:42:34:80 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C23D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/692CAFB4744A11F094309455C4F9AE02.roa Signing time: Fri 08 Aug 2025 11:25:39 +0000 ROA not before: Fri 08 Aug 2025 11:25:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134033 IP address blocks: 43.241.64.0/24 maxlen: 24 43.241.65.0/24 maxlen: 24 43.241.67.0/24 maxlen: 24 43.241.120.0/22 maxlen: 24 45.117.64.0/22 maxlen: 24 103.57.132.0/24 maxlen: 24 103.57.133.0/24 maxlen: 24 103.57.134.0/24 maxlen: 24 103.57.135.0/24 maxlen: 24 103.96.16.0/24 maxlen: 24 103.96.17.0/24 maxlen: 24 103.96.18.0/24 maxlen: 24 103.96.19.0/24 maxlen: 24 103.152.185.0/24 maxlen: 24 103.172.210.0/24 maxlen: 24 103.172.211.0/24 maxlen: 24 103.224.155.0/24 maxlen: 24 103.224.156.0/22 maxlen: 24 2400:7be0::/32 maxlen: 32 2400:7be0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49725 (0xc23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 8 11:25:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6895deb3-19b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:56:d5:0e:b8:f0:76:ba:da:94:bf:0e:b2: 9c:40:f6:59:a7:67:f0:ee:44:22:f3:9f:e3:b3:84: 31:a6:f0:77:ba:6d:b4:89:c4:a9:4f:7f:01:fd:4c: 3f:61:28:9e:a4:9e:91:44:7b:5c:9b:50:f0:94:ad: 21:99:30:22:9c:b2:05:e0:02:67:71:e3:4f:5d:66: 5b:64:ac:0a:2e:35:4c:d0:a5:ed:a5:9b:98:ce:c3: 1d:d1:3f:b9:f7:17:06:c0:44:ec:e2:c5:d2:1a:5d: 1f:7b:3e:56:e8:ab:9e:be:36:24:c4:9c:1a:a3:6c: ef:db:ca:d5:23:94:f9:d9:0d:c6:15:fb:f5:3d:b1: d8:c6:44:20:fd:ae:ea:bb:1e:ee:89:00:7b:64:d1: d7:a3:16:61:dd:ce:98:07:f5:9a:26:bc:6e:0d:1d: 71:89:27:db:b9:af:ec:73:b0:68:1c:48:3c:73:3b: f7:83:51:b0:3d:0b:1e:ec:d7:b8:63:c4:87:dc:ce: c2:5a:24:99:51:a7:6c:45:f5:35:35:ef:d9:62:4e: 29:65:7c:88:3a:41:40:9c:95:33:e6:97:96:09:3b: f6:92:e3:1e:8b:13:d6:e1:46:97:cf:24:ee:be:a7: 45:ac:d2:43:92:8e:51:3c:41:46:f9:cb:d7:3c:cc: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CA:8E:19:36:E7:FE:8A:4B:C4:EF:CC:D6:BB:E2:FE:68:42:34:80 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/692CAFB4744A11F094309455C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.241.64.0/23 43.241.67.0/24 43.241.120.0/22 45.117.64.0/22 103.57.132.0/22 103.96.16.0/22 103.152.185.0/24 103.172.210.0/23 103.224.155.0-103.224.159.255 IPv6: 2400:7be0::/32 Signature Algorithm: sha256WithRSAEncryption b3:7a:f6:47:21:3f:c9:1a:df:42:2a:85:3e:98:53:f0:0f:68: 79:57:87:74:44:c1:18:d2:61:ec:a8:82:62:f7:1c:3e:ad:8d: 94:8b:aa:6e:8b:4d:2d:68:8f:e3:d3:0c:fe:9d:f5:b3:b8:7f: 7c:fe:4b:4a:0f:40:1c:93:c0:ee:9f:95:77:8d:4d:81:e9:9b: fb:1a:1d:2a:e9:3a:cc:97:ca:83:06:96:ef:6e:aa:94:b6:4e: 9d:43:de:7d:d0:36:81:c0:6d:ba:aa:d5:80:f4:db:f6:ff:44: 4a:33:2e:95:9c:be:5a:e5:17:00:65:3a:66:0d:ea:5d:55:62: ab:9d:ef:8d:6f:e3:57:95:a9:5a:5f:92:68:f7:5a:bf:ba:f9: 82:23:18:51:d9:51:4b:6c:68:4a:31:b4:7e:7c:f0:f4:20:62: ec:4f:28:39:8a:f4:92:a1:e7:c3:c7:b3:07:3f:c8:67:f8:c4: 14:ab:10:9e:39:69:ff:bb:4d:19:f9:30:da:31:be:ad:22:df: b4:29:e6:ad:93:1b:fa:da:93:0e:4c:bb:01:b6:18:cc:bd:a9: 88:4c:2c:5b:ed:60:fb:42:43:8b:40:2b:a4:19:60:87:b6:8c: 17:bd:81:ea:c9:b7:ff:78:fb:da:91:02:91:42:9c:8f:5d:7f: f6:3a:0e:97 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIDAMI9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgwODExMjUzOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg5NWRlYjMtMTliNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3mVtUOuPB2utqUvw6ynED2Wadn8O5EIvOf47OEMabwd7pttInEqU9/Af1M P2EonqSekUR7XJtQ8JStIZkwIpyyBeACZ3HjT11mW2SsCi41TNCl7aWbmM7DHdE/ ufcXBsBE7OLF0hpdH3s+Vuirnr42JMScGqNs79vK1SOU+dkNxhX79T2x2MZEIP2u 6rse7okAe2TR16MWYd3OmAf1mia8bg0dcYkn27mv7HOwaBxIPHM794NRsD0LHuzX uGPEh9zOwlokmVGnbEX1NTXv2WJOKWV8iDpBQJyVM+aXlgk79pLjHosT1uFGl88k 7r6nRazSQ5KOUTxBRvnL1zzMzkkCAwEAAaOCAtwwggLYMB0GA1UdDgQWBBQxyo4Z Nuf+ikvE78zWu+L+aEI0gDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY5MkNBRkI0 NzQ0QTExRjA5NDMwOTQ1NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGYGCCsGAQUFBwEHAQH/ BFcwVTBEBAIAATA+AwQBK/FAAwQAK/FDAwQCK/F4AwQCLXVAAwQCZzmEAwQCZ2AQ AwQAZ5i5AwQBZ6zSMAwDBABn4JsDBAVn4IAwDQQCAAIwBwMFACQAe+AwDQYJKoZI hvcNAQELBQADggEBALN69kchP8ka30IqhT6YU/APaHlXh3REwRjSYeyogmL3HD6t jZSLqm6LTS1oj+PTDP6d9bO4f3z+S0oPQByTwO6flXeNTYHpm/saHSrpOsyXyoMG lu9uqpS2Tp1D3n3QNoHAbbqq1YD02/b/REozLpWcvlrlFwBlOmYN6l1VYqud741v 41eVqVpfkmj3Wr+6+YIjGFHZUUtsaEoxtH588PQgYuxPKDmK9JKh58PHswc/yGf4 xBSrEJ45af+7TRn5MNoxvq0i37Qp5q2TG/rakw5MuwG2GMy9qYhMLFvtYPtCQ4tA K6QZYIe2jBe9gerJt/94+9qRApFCnI9df/Y6Dpc= -----END CERTIFICATE-----Generated at Wed Nov 5 23:48:19 2025 by rpki-client