$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/793E6208413C11F083BAA540C4F9AE02.roa File: 793E6208413C11F083BAA540C4F9AE02.roa (raw, json) Hash identifier: LkoFaDH51zbwHHumjw4xV/OeTRAMWe9/9a2DslK4SdM= Subject key identifier: C2:18:5C:F5:73:B6:44:E5:24:AD:37:D5:78:15:B5:82:8C:2E:73:45 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C285 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/793E6208413C11F083BAA540C4F9AE02.roa Signing time: Wed 13 Aug 2025 09:31:53 +0000 ROA not before: Wed 13 Aug 2025 09:31:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142502 IP address blocks: 27.0.253.0/24 maxlen: 24 43.246.104.0/24 maxlen: 24 45.249.124.0/22 maxlen: 22 45.249.124.0/23 maxlen: 24 45.249.236.0/22 maxlen: 24 45.251.244.0/22 maxlen: 24 45.251.252.0/22 maxlen: 24 103.66.116.0/22 maxlen: 24 103.66.136.0/24 maxlen: 24 103.66.144.0/24 maxlen: 24 103.68.50.0/24 maxlen: 24 103.68.51.0/24 maxlen: 24 103.70.96.0/20 maxlen: 24 137.59.128.0/20 maxlen: 21 137.59.132.0/22 maxlen: 24 137.59.136.0/21 maxlen: 24 2407:ca40::/32 maxlen: 32 2407:ca40:136::/48 maxlen: 48 2407:ca40:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49797 (0xc285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 13 09:31:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=689c5b89-6482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:90:b4:a6:9b:61:09:b6:b8:91:f9:00:22: 62:db:7e:8d:29:9c:bf:e2:24:7c:cc:4d:86:5e:5b: c4:d0:f0:9e:f1:08:5f:93:de:ef:80:e3:49:0e:9e: 4d:7b:f0:1e:2b:df:fe:95:6c:40:a1:c4:b3:61:98: 6a:78:dc:98:85:d7:31:98:44:7c:09:91:25:0a:c7: af:d1:ce:91:44:1c:e2:32:ef:c9:8f:69:96:80:b8: fc:f7:d0:21:e1:54:6c:5f:b3:da:b6:2a:97:0e:3f: 0a:80:c5:7f:69:8e:ec:ff:00:47:1a:98:ff:79:70: c7:70:ee:4e:73:b2:95:20:68:9b:d9:03:77:2b:dc: 58:3b:cb:33:23:6f:d7:cb:b4:d8:ae:55:02:d0:16: 63:f1:7f:01:fa:95:49:b5:6a:d6:c7:ae:4a:3d:38: f3:b1:86:81:31:d6:32:f5:ce:30:92:ba:78:18:be: 72:81:86:68:2a:52:ed:e9:58:d8:d7:b4:f5:59:30: 4f:8d:00:46:38:f0:25:b2:8c:e4:60:e1:2e:0d:b3: 18:cf:ef:35:34:82:4c:ff:c3:06:74:1a:d6:81:5f: 24:1d:3e:91:36:7f:be:84:00:b6:6a:c9:d6:41:69: 91:86:35:3a:5d:9f:8d:7b:5d:08:b2:d8:38:30:7e: 8e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:5C:F5:73:B6:44:E5:24:AD:37:D5:78:15:B5:82:8C:2E:73:45 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/793E6208413C11F083BAA540C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.0.253.0/24 43.246.104.0/24 45.249.124.0/22 45.249.236.0/22 45.251.244.0/22 45.251.252.0/22 103.66.116.0/22 103.66.136.0/24 103.66.144.0/24 103.68.50.0/23 103.70.96.0/20 137.59.128.0/20 IPv6: 2407:ca40::/32 Signature Algorithm: sha256WithRSAEncryption 30:c2:de:26:90:86:5a:96:2e:89:a9:f6:7d:e7:3e:86:e0:e1: 83:79:ba:bb:67:e5:4d:83:8b:11:f3:af:ac:13:dd:29:22:e1: 56:bf:2a:3a:d8:5e:97:27:47:27:24:63:44:3c:c5:07:0b:26: 7c:15:5b:6a:49:d4:b6:d6:f9:98:51:d6:22:25:c7:91:08:f3: e5:76:d0:80:2f:22:17:6a:d3:61:06:88:fb:56:58:9f:b4:e6: fb:b7:84:0f:9c:3c:dd:77:1c:37:ea:06:7a:84:35:d4:ce:3d: 53:8d:a5:fc:6d:e2:fc:c8:f0:c5:27:75:48:7b:e0:0e:f7:ce: bb:a2:18:a2:ab:0c:c7:3e:d2:90:83:43:e1:51:a0:25:1f:7a: 35:77:78:6a:ee:c0:65:24:93:4e:e4:54:27:0b:58:0a:b5:d3: 96:c4:4a:44:dc:51:14:55:b0:fb:b3:55:ad:d1:80:fa:4b:c7: 7d:f3:10:32:0a:16:d2:cd:1f:db:fa:7b:67:5f:53:3e:ca:8c: 3a:02:4a:04:d7:7b:43:53:b2:2e:d0:ef:73:c8:b7:8c:b2:e7: 06:90:7f:da:c1:94:36:7e:c5:8a:44:28:de:eb:54:6c:5a:a5: 39:f6:84:ae:8d:7f:75:0d:a9:90:9f:ac:2f:c3:a0:40:5b:8c: 5f:8c:fc:69 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIDAMKFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgxMzA5MzE1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg5YzViODktNjQ4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmPkLSmm2EJtriR+QAiYtt+jSmcv+IkfMxNhl5bxNDwnvEIX5Pe74DjSQ6e TXvwHivf/pVsQKHEs2GYanjcmIXXMZhEfAmRJQrHr9HOkUQc4jLvyY9ploC4/PfQ IeFUbF+z2rYqlw4/CoDFf2mO7P8ARxqY/3lwx3DuTnOylSBom9kDdyvcWDvLMyNv 18u02K5VAtAWY/F/AfqVSbVq1seuSj0487GGgTHWMvXOMJK6eBi+coGGaCpS7elY 2Ne09VkwT40ARjjwJbKM5GDhLg2zGM/vNTSCTP/DBnQa1oFfJB0+kTZ/voQAtmrJ 1kFpkYY1Ol2fjXtdCLLYODB+jpsCAwEAAaOCAuYwggLiMB0GA1UdDgQWBBTCGFz1 c7ZE5SStN9V4FbWCjC5zRTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc5M0U2MjA4 NDEzQzExRjA4M0JBQTU0MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMHAGCCsGAQUFBwEHAQH/ BGEwXzBOBAIAATBIAwQAGwD9AwQAK/ZoAwQCLfl8AwQCLfnsAwQCLfv0AwQCLfv8 AwQCZ0J0AwQAZ0KIAwQAZ0KQAwQBZ0QyAwQEZ0ZgAwQEiTuAMA0EAgACMAcDBQAk B8pAMA0GCSqGSIb3DQEBCwUAA4IBAQAwwt4mkIZali6JqfZ95z6G4OGDebq7Z+VN g4sR86+sE90pIuFWvyo62F6XJ0cnJGNEPMUHCyZ8FVtqSdS21vmYUdYiJceRCPPl dtCALyIXatNhBoj7VliftOb7t4QPnDzddxw36gZ6hDXUzj1TjaX8beL8yPDFJ3VI e+AO9867ohiiqwzHPtKQg0PhUaAlH3o1d3hq7sBlJJNO5FQnC1gKtdOWxEpE3FEU VbD7s1Wt0YD6S8d98xAyChbSzR/b+ntnX1M+yow6AkoE13tDU7Iu0O9zyLeMsucG kH/awZQ2fsWKRCje61RsWqU59oSujX91DamQn6wvw6BAW4xfjPxp -----END CERTIFICATE-----Generated at Wed Nov 5 22:16:02 2025 by rpki-client