$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DB6091A09EF11EBBDD8F16EC4F9AE02.roa File: 6DB6091A09EF11EBBDD8F16EC4F9AE02.roa (raw, json) Hash identifier: +b6SIsoMWKm7ZYDvdTa2cf4fDxLeuuMHD1STgMWldPA= Subject key identifier: BC:C1:6B:16:B0:F0:84:1C:2E:1C:EB:BF:88:CB:61:16:AC:FE:06:20 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B4E6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DB6091A09EF11EBBDD8F16EC4F9AE02.roa Signing time: Thu 08 May 2025 16:10:53 +0000 ROA not before: Thu 08 May 2025 16:10:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138224 IP address blocks: 103.130.110.0/24 maxlen: 24 103.149.236.0/24 maxlen: 24 2001:df2:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46310 (0xb4e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:10:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd78c-29d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:6c:98:a6:99:5c:82:9a:93:c5:b5:e3:b5: 6b:9b:65:99:d2:94:c1:94:51:f7:1c:87:9e:1f:05: e6:f3:5f:15:9a:2d:5c:6e:2a:07:c2:4c:25:a2:49: 6f:fb:44:b5:f7:79:da:ec:34:67:57:94:6b:d3:c9: ad:5d:41:c3:f1:7f:9d:ef:79:23:94:5b:0d:72:4f: 02:b6:67:8a:3c:3f:9f:bc:31:01:63:01:54:f7:79: 72:d5:27:e5:b7:07:e9:24:d4:98:ee:fd:e1:a7:f5: a3:fc:7a:11:21:23:76:78:29:07:15:5c:db:9c:aa: 21:b3:b0:65:04:68:b3:d3:52:bc:77:2a:6a:9c:c7: 12:62:94:7a:3a:f0:fc:53:ad:49:60:f6:e9:91:ba: b8:31:27:8d:d4:8f:88:3d:74:bb:62:fa:49:85:f6: 09:08:1c:5b:dd:b0:6f:14:b0:49:9e:2a:68:05:96: a8:fe:dd:f5:fa:03:dd:e1:2f:cc:70:17:67:76:4c: 02:3c:9f:35:9a:60:f0:c0:1e:09:63:f5:e3:c9:af: 2d:79:56:2e:b0:e0:41:97:35:27:99:43:09:cf:70: 14:c9:64:6a:1c:1d:53:c2:fd:16:32:3f:63:7e:dd: 96:35:44:12:4f:a6:f3:f5:1b:fe:f1:df:c3:42:2e: 0a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C1:6B:16:B0:F0:84:1C:2E:1C:EB:BF:88:CB:61:16:AC:FE:06:20 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6DB6091A09EF11EBBDD8F16EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.130.110.0/24 103.149.236.0/24 IPv6: 2001:df2:5080::/48 Signature Algorithm: sha256WithRSAEncryption 57:05:d9:bc:84:fa:fe:4d:d7:47:47:4b:e3:db:38:11:02:c0: 14:bf:04:7f:6e:4e:3a:45:22:a4:e9:1b:7e:06:a4:b1:0f:8a: ea:f5:47:a7:51:f6:be:16:76:74:4a:74:72:ba:58:ad:71:c2: 45:51:0c:b5:86:44:b7:66:91:f1:d0:ea:01:04:69:1d:a7:55: 84:a6:59:89:fd:6b:9b:f6:ac:35:0c:f4:4d:07:00:b4:b9:55: b9:0b:ca:24:7e:d4:45:06:cc:ab:5c:43:a9:23:0e:48:68:c4: d8:f1:7b:59:f4:9a:a2:a9:89:88:f5:8a:58:83:fb:62:78:f7: de:23:08:e2:c8:86:32:a8:9f:fe:71:18:88:1a:99:75:d7:f0: ba:bc:3a:a8:72:84:15:43:d2:44:2f:ba:24:ad:65:a1:e3:8b: f4:75:dd:cc:27:1a:56:73:79:41:13:71:e0:e3:35:ad:9e:ad: 58:1c:3c:e0:ca:d3:c4:6f:f5:11:15:92:1d:11:d4:66:2d:03: 0e:3f:5e:b2:a0:ff:41:36:6c:72:16:d3:57:6a:e7:7d:e9:29: 10:02:25:5c:b0:44:d8:8f:36:1a:6c:cb:db:f6:cb:36:5a:42: d6:43:9c:1d:a0:5d:d5:c5:d7:ae:66:a9:e2:fd:29:2b:3f:e5: c6:83:76:57 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDALTmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTA1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3OGMtMjlkNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKznbJimmVyCmpPFteO1a5tlmdKUwZRR9xyHnh8F5vNfFZotXG4qB8JMJaJJ b/tEtfd52uw0Z1eUa9PJrV1Bw/F/ne95I5RbDXJPArZnijw/n7wxAWMBVPd5ctUn 5bcH6STUmO794af1o/x6ESEjdngpBxVc25yqIbOwZQRos9NSvHcqapzHEmKUejrw /FOtSWD26ZG6uDEnjdSPiD10u2L6SYX2CQgcW92wbxSwSZ4qaAWWqP7d9foD3eEv zHAXZ3ZMAjyfNZpg8MAeCWP148mvLXlWLrDgQZc1J5lDCc9wFMlkahwdU8L9FjI/ Y37dljVEEk+m8/Ub/vHfw0IuCpUCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBS8wWsW sPCEHC4c67+Iy2EWrP4GIDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZEQjYwOTFB MDlFRjExRUJCREQ4RjE2RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQAZ4JuAwQAZ5XsMA8EAgACMAkDBwAgAQ3yUIAwDQYJKoZI hvcNAQELBQADggEBAFcF2byE+v5N10dHS+PbOBECwBS/BH9uTjpFIqTpG34GpLEP iur1R6dR9r4WdnRKdHK6WK1xwkVRDLWGRLdmkfHQ6gEEaR2nVYSmWYn9a5v2rDUM 9E0HALS5VbkLyiR+1EUGzKtcQ6kjDkhoxNjxe1n0mqKpiYj1iliD+2J4994jCOLI hjKon/5xGIgamXXX8Lq8OqhyhBVD0kQvuiStZaHji/R13cwnGlZzeUETceDjNa2e rVgcPODK08Rv9REVkh0R1GYtAw4/XrKg/0E2bHIW01dq533pKRACJVywRNiPNhps y9v2yzZaQtZDnB2gXdXF165mqeL9KSs/5caDdlc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:33 2025 by rpki-client