$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6AF5A80A152711EBBB66BD23C4F9AE02.roa File: 6AF5A80A152711EBBB66BD23C4F9AE02.roa (raw, json) Hash identifier: hZOrHo6+eXZ9LIRXsW2QrIOb5o3FyE60Y3HiF69eQDU= Subject key identifier: EE:49:CE:E2:85:45:70:B3:7D:55:29:EF:3C:14:60:EC:12:EA:7D:94 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B314 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6AF5A80A152711EBBB66BD23C4F9AE02.roa Signing time: Thu 08 May 2025 16:03:41 +0000 ROA not before: Thu 08 May 2025 16:03:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135241 IP address blocks: 45.119.56.0/24 maxlen: 24 103.59.105.0/24 maxlen: 24 103.59.106.0/24 maxlen: 24 103.59.107.0/24 maxlen: 24 2001:df0:ce40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45844 (0xb314) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:03:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd5dd-406d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:53:9a:86:76:5c:a5:9a:01:59:b5:27:8e:45: a1:d7:7c:01:c9:e5:cc:d1:d0:e6:a0:8a:71:a7:62: 8b:d6:04:aa:a7:3e:00:64:83:9a:98:a9:fa:98:ae: 04:b8:89:0f:e0:33:63:08:f8:f6:eb:a3:f9:46:f5: 29:f8:06:47:f4:40:d7:fd:64:c2:93:3e:e2:1b:86: f0:56:9e:4d:99:a1:c8:21:0a:ae:6a:0e:f8:64:5b: 76:0d:b1:9f:bd:98:ad:35:02:f8:ec:31:32:a2:e4: 09:7b:ae:85:91:1a:ee:e9:61:7b:ae:b0:cb:2a:21: 46:6b:68:45:13:89:6c:d6:aa:97:4e:f8:f3:b7:55: 47:15:b4:1b:44:9d:96:49:b4:72:28:6c:c1:4c:e8: e5:4e:e8:22:53:33:e2:c0:03:9d:21:61:16:ea:ac: c6:ad:05:a0:91:16:6f:78:ba:6e:12:5c:26:09:ff: ec:e7:1e:2e:58:d3:71:df:ea:df:d4:f7:30:b8:04: 74:05:06:7d:f1:ab:e6:b4:c6:c9:39:88:ea:b4:8c: a6:90:db:02:f1:32:9d:69:0b:75:a8:06:d1:51:5a: e9:a7:c1:da:40:3f:51:d4:10:29:96:9f:63:5c:fc: fe:b3:fa:82:55:82:7a:02:af:b2:77:17:f0:79:b3: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:49:CE:E2:85:45:70:B3:7D:55:29:EF:3C:14:60:EC:12:EA:7D:94 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6AF5A80A152711EBBB66BD23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.56.0/24 103.59.105.0-103.59.107.255 IPv6: 2001:df0:ce40::/48 Signature Algorithm: sha256WithRSAEncryption 35:7b:96:e4:05:9b:f4:de:0f:57:e5:47:d4:00:61:35:91:1a: f4:75:1c:b7:0e:82:89:6c:57:44:87:a9:92:53:9e:cd:16:37: c6:1c:50:8f:83:a3:53:33:77:55:7f:ed:58:ed:92:1b:00:88: 8b:32:53:1a:04:10:45:79:27:a0:e0:69:95:d7:f9:77:f0:23: ca:81:9c:17:31:11:19:28:2f:69:b9:53:25:aa:67:41:91:3a: 3e:df:da:73:9b:0a:4c:0e:07:24:91:b5:90:23:87:1b:79:b8: b6:19:06:87:ee:1d:03:98:e3:90:60:be:a6:01:5f:28:00:f1: e7:57:14:5c:64:87:af:01:d8:22:48:13:61:8c:f9:ab:5f:25: 99:be:28:2a:f3:42:94:b6:d7:31:34:cd:ac:2d:32:af:9e:17: 23:25:1c:8a:45:00:1b:a7:26:38:e2:64:15:6b:e7:56:9c:9a: 54:91:f6:7d:20:1a:03:1d:be:5f:00:dd:0f:ec:19:a8:ea:0f: 51:50:67:e5:18:c5:de:72:4a:54:fd:9b:a9:80:db:2f:74:10: b2:b0:c6:32:5f:12:b4:55:3a:30:fb:4e:77:3c:36:1f:30:37: 6e:bc:ed:d7:ca:6d:14:e1:19:51:12:18:c5:d5:66:17:cb:b0: d6:fd:cb:f7 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIDALMUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDM0MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1ZGQtNDA2ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhTmoZ2XKWaAVm1J45Fodd8AcnlzNHQ5qCKcadii9YEqqc+AGSDmpip+piu BLiJD+AzYwj49uuj+Ub1KfgGR/RA1/1kwpM+4huG8FaeTZmhyCEKrmoO+GRbdg2x n72YrTUC+OwxMqLkCXuuhZEa7ulhe66wyyohRmtoRROJbNaql07487dVRxW0G0Sd lkm0cihswUzo5U7oIlMz4sADnSFhFuqsxq0FoJEWb3i6bhJcJgn/7OceLljTcd/q 39T3MLgEdAUGffGr5rTGyTmI6rSMppDbAvEynWkLdagG0VFa6afB2kA/UdQQKZaf Y1z8/rP6glWCegKvsncX8HmzSDUCAwEAAaOCArQwggKwMB0GA1UdDgQWBBTuSc7i hUVws31VKe88FGDsEup9lDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZBRjVBODBB MTUyNzExRUJCQjY2QkQyM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMD4GCCsGAQUFBwEHAQH/ BC8wLTAaBAIAATAUAwQALXc4MAwDBABnO2kDBAJnO2gwDwQCAAIwCQMHACABDfDO QDANBgkqhkiG9w0BAQsFAAOCAQEANXuW5AWb9N4PV+VH1ABhNZEa9HUctw6CiWxX RIepklOezRY3xhxQj4OjUzN3VX/tWO2SGwCIizJTGgQQRXknoOBpldf5d/AjyoGc FzERGSgvablTJapnQZE6Pt/ac5sKTA4HJJG1kCOHG3m4thkGh+4dA5jjkGC+pgFf KADx51cUXGSHrwHYIkgTYYz5q18lmb4oKvNClLbXMTTNrC0yr54XIyUcikUAG6cm OOJkFWvnVpyaVJH2fSAaAx2+XwDdD+wZqOoPUVBn5RjF3nJKVP2bqYDbL3QQsrDG Ml8StFU6MPtOdzw2HzA3brzt18ptFOEZURIYxdVmF8uw1v3L9w== -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:21 2025 by rpki-client