$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72F3E7AAD90C11EDBA00DC2EC4F9AE02.roa File: 72F3E7AAD90C11EDBA00DC2EC4F9AE02.roa (raw, json) Hash identifier: tkDoQpoQSaPBSiYMbFZj/1wx3CxeBPaijdRWLBwIvsA= Subject key identifier: DD:24:91:A4:EC:82:0D:60:18:50:19:E4:3F:AC:45:4B:05:0A:1F:44 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B7FF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72F3E7AAD90C11EDBA00DC2EC4F9AE02.roa Signing time: Thu 08 May 2025 16:22:51 +0000 ROA not before: Thu 08 May 2025 16:22:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149548 IP address blocks: 103.119.186.0/23 maxlen: 24 2001:df2:2b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47103 (0xb7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:22:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cda5b-8df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:68:4a:de:e3:ea:00:72:88:fa:a6:93:f5: 88:0c:1f:ae:a9:09:db:72:16:8f:00:6f:04:92:82: 5a:65:d2:c6:84:f5:94:9f:f7:82:e0:77:e1:ae:58: 88:d6:66:d4:98:38:65:2d:56:99:7a:12:20:fa:14: b5:94:59:60:45:ca:f9:18:2c:d5:e3:40:50:9c:dc: 59:c9:0e:8c:74:b8:85:86:c6:ba:dd:0a:0e:19:b7: 70:97:ef:a2:91:a9:a9:0a:a4:9d:a4:f2:b4:f6:75: a3:8a:1a:5f:ba:ae:f1:01:9c:52:0f:06:b3:91:7a: fc:c2:df:09:ac:c3:cd:03:a6:43:6f:1e:ed:61:65: 75:b4:97:ed:d9:53:c9:77:8c:14:48:1b:d1:ed:7d: 29:80:21:4a:e7:eb:fa:02:9b:9a:07:d2:e7:0d:ae: e4:35:18:d6:0d:0e:23:28:ad:ec:47:5c:cd:72:55: a4:03:68:82:cb:ad:12:fb:ae:a8:f2:97:c1:1c:04: 08:09:14:7c:a8:19:8c:c1:e4:28:bf:c7:05:a2:09: 52:c4:60:4f:10:56:9e:9e:b3:03:68:8c:0f:36:ad: 80:5e:f6:26:a6:56:82:1b:aa:84:69:c5:b4:40:eb: 82:01:0d:2f:47:80:48:94:87:96:5b:eb:f0:33:6f: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:24:91:A4:EC:82:0D:60:18:50:19:E4:3F:AC:45:4B:05:0A:1F:44 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72F3E7AAD90C11EDBA00DC2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.186.0/23 IPv6: 2001:df2:2b40::/48 Signature Algorithm: sha256WithRSAEncryption 47:34:a5:6c:7f:24:96:18:6f:4a:8a:2e:7d:0f:eb:22:28:57: 4d:f9:f7:35:9e:d6:01:8f:54:52:f1:57:e7:1e:1d:f0:9b:07: b1:a3:10:ab:9b:7b:e4:9c:f4:68:1c:aa:c6:1d:94:e6:71:73: 7a:16:bc:86:4a:c8:44:16:4a:e0:59:72:0a:67:f5:9a:f2:7b: e0:74:5e:87:db:09:98:36:5e:dd:d0:f8:09:24:df:fc:88:21: 71:92:42:02:65:90:c4:4f:0e:a2:b6:9c:8a:5a:9e:cb:c5:83: ae:8d:3a:2e:d4:64:f0:bb:b9:36:56:2d:50:0a:c4:3e:27:3a: 35:b0:69:4b:9f:68:77:1a:04:7e:9a:62:cc:b1:92:2b:7e:b5: a8:08:71:3c:73:2c:8c:42:6c:81:85:d8:05:84:7a:3f:25:5c: 95:91:9b:33:45:60:e2:4a:58:c1:8d:ed:eb:74:dc:40:43:7a: b6:f7:18:d4:87:85:41:57:e1:96:3c:b6:be:23:2f:51:f8:e3: e7:2c:6c:3f:76:48:52:e8:8f:61:d5:86:14:a9:5a:bf:f0:91: 10:64:93:de:53:a6:e0:d0:60:c0:a9:62:18:58:c1:fc:5f:8e: d6:da:f8:ed:d6:fd:58:62:f1:df:3f:42:58:24:47:2a:08:2d: 6e:0f:dc:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALf/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjI1MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhNWItOGRmNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALA+aEre4+oAcoj6ppP1iAwfrqkJ23IWjwBvBJKCWmXSxoT1lJ/3guB34a5Y iNZm1Jg4ZS1WmXoSIPoUtZRZYEXK+Rgs1eNAUJzcWckOjHS4hYbGut0KDhm3cJfv opGpqQqknaTytPZ1o4oaX7qu8QGcUg8Gs5F6/MLfCazDzQOmQ28e7WFldbSX7dlT yXeMFEgb0e19KYAhSufr+gKbmgfS5w2u5DUY1g0OIyit7EdczXJVpANogsutEvuu qPKXwRwECAkUfKgZjMHkKL/HBaIJUsRgTxBWnp6zA2iMDzatgF72JqZWghuqhGnF tEDrggENL0eASJSHllvr8DNvfvkCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTdJJGk 7IINYBhQGeQ/rEVLBQofRDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcyRjNFN0FB RDkwQzExRURCQTAwREMyRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ3e6MA8EAgACMAkDBwAgAQ3yK0AwDQYJKoZIhvcNAQEL BQADggEBAEc0pWx/JJYYb0qKLn0P6yIoV0359zWe1gGPVFLxV+ceHfCbB7GjEKub e+Sc9GgcqsYdlOZxc3oWvIZKyEQWSuBZcgpn9Zrye+B0XofbCZg2Xt3Q+Akk3/yI IXGSQgJlkMRPDqK2nIpansvFg66NOi7UZPC7uTZWLVAKxD4nOjWwaUufaHcaBH6a Ysyxkit+tagIcTxzLIxCbIGF2AWEej8lXJWRmzNFYOJKWMGN7et03EBDerb3GNSH hUFX4ZY8tr4jL1H44+csbD92SFLoj2HVhhSpWr/wkRBkk95TpuDQYMCpYhhYwfxf jtba+O3W/Vhi8d8/QlgkRyoILW4P3Iw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:08 2025 by rpki-client