$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D5B9BF27F9311ED89265B3DC4F9AE02.roa File: 7D5B9BF27F9311ED89265B3DC4F9AE02.roa (raw, json) Hash identifier: d03zEexnYT4DIxFpew5onFBi4oUlvxtsPhmfl4hORy4= Subject key identifier: 46:17:41:35:E1:4E:41:4F:EE:D1:B0:67:A2:EB:F7:14:6E:34:53:FE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BA49 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D5B9BF27F9311ED89265B3DC4F9AE02.roa Signing time: Thu 08 May 2025 16:31:45 +0000 ROA not before: Thu 08 May 2025 16:31:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58529 IP address blocks: 103.247.96.0/24 maxlen: 24 103.247.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47689 (0xba49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:31:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdc70-2d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:30:27:30:e0:e7:7f:82:02:9e:82:3b:47:cf: 26:4d:30:e4:33:13:fb:be:95:ca:5b:74:60:44:cf: a1:53:bf:87:1c:2c:68:ff:26:17:3b:42:3b:46:a7: 92:64:2b:f5:b0:e9:a8:f4:ab:e7:da:51:b3:e3:f7: 83:17:93:27:2a:d7:3d:fa:52:44:8e:30:f7:c8:17: 9d:cd:6d:45:81:d0:c1:09:54:64:9e:df:8a:49:9f: 63:b3:b6:ad:25:ab:44:d6:a1:de:47:30:f0:28:19: 12:07:98:24:f2:f8:a7:20:23:83:33:e2:80:35:7b: 7d:53:80:2e:b4:41:35:51:ad:b0:0e:26:2e:fa:08: c8:c7:a4:2d:5c:2e:96:08:1f:fa:46:49:46:ef:03: 46:ce:57:73:e3:cd:b3:ae:4c:0c:ab:b3:68:f3:d3: 99:29:aa:fb:a0:fb:0c:14:6c:92:ac:8f:ed:b7:43: f7:99:20:ad:ec:2d:43:3a:43:96:b3:a9:34:8a:66: eb:29:c8:8d:7c:87:b1:e0:b3:30:80:eb:98:36:7a: 01:ba:b8:3f:ef:03:f0:05:eb:06:21:b5:7f:33:5a: 7b:3e:61:d7:40:3b:d7:72:16:b0:78:72:6e:f0:1b: 52:61:fc:5e:b1:b8:df:93:05:09:66:df:67:72:13: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:17:41:35:E1:4E:41:4F:EE:D1:B0:67:A2:EB:F7:14:6E:34:53:FE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7D5B9BF27F9311ED89265B3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.96.0/24 103.247.99.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:db:b3:52:3e:e2:e6:5c:18:8f:18:64:ad:bc:70:e4:61:52: 9a:db:47:c0:e9:61:52:e4:35:00:1c:f7:fc:7d:fb:b2:ed:69: b4:a3:48:2a:f7:fa:66:b6:ce:cd:b0:0b:3a:ae:3a:f4:7e:cb: 7d:bc:8d:4c:5b:ed:36:34:f3:8e:57:97:5b:75:3a:42:ca:83: 9b:78:28:1f:2b:64:d9:59:ee:b0:8f:e2:84:e2:50:7f:4a:00: 69:ce:a3:73:25:c7:d3:04:c8:7b:04:81:2e:b6:c7:66:36:db: b6:4a:30:db:5a:ed:ca:e3:80:10:b0:e7:01:b6:11:94:df:2d: 35:c3:a3:50:55:d5:9e:20:e9:83:60:b9:55:67:3d:8e:fc:69: d4:f1:6a:93:50:e8:c9:f5:45:de:07:19:fb:1d:ff:21:8f:b5: 50:3a:3b:aa:51:d6:f0:61:54:0f:ab:87:29:86:88:bc:b6:09: 01:cd:20:a7:9b:3e:29:9d:05:58:17:0b:0b:b8:2f:39:cd:10: 9d:aa:ce:da:e1:4d:fc:71:f8:4d:bc:68:76:3f:72:e7:09:93: 57:51:7f:87:0f:a6:77:81:35:cb:d8:7b:07:11:0f:4d:21:ee: 17:86:7e:49:7c:49:79:93:fc:2f:80:99:c4:e8:88:60:97:d0: 7e:ac:f4:2b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALpJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzE0NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RjNzAtMmQ1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANswJzDg53+CAp6CO0fPJk0w5DMT+76Vylt0YETPoVO/hxwsaP8mFztCO0an kmQr9bDpqPSr59pRs+P3gxeTJyrXPfpSRI4w98gXnc1tRYHQwQlUZJ7fikmfY7O2 rSWrRNah3kcw8CgZEgeYJPL4pyAjgzPigDV7fVOALrRBNVGtsA4mLvoIyMekLVwu lggf+kZJRu8DRs5Xc+PNs65MDKuzaPPTmSmq+6D7DBRskqyP7bdD95kgrewtQzpD lrOpNIpm6ynIjXyHseCzMIDrmDZ6Abq4P+8D8AXrBiG1fzNaez5h10A713IWsHhy bvAbUmH8XrG435MFCWbfZ3ITKk0CAwEAAaOCApswggKXMB0GA1UdDgQWBBRGF0E1 4U5BT+7RsGei6/cUbjRT/jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdENUI5QkYy N0Y5MzExRUQ4OTI2NUIzREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQAZ/dgAwQAZ/djMA0GCSqGSIb3DQEBCwUAA4IBAQCd27NS PuLmXBiPGGStvHDkYVKa20fA6WFS5DUAHPf8ffuy7Wm0o0gq9/pmts7NsAs6rjr0 fst9vI1MW+02NPOOV5dbdTpCyoObeCgfK2TZWe6wj+KE4lB/SgBpzqNzJcfTBMh7 BIEutsdmNtu2SjDbWu3K44AQsOcBthGU3y01w6NQVdWeIOmDYLlVZz2O/GnU8WqT UOjJ9UXeBxn7Hf8hj7VQOjuqUdbwYVQPq4cphoi8tgkBzSCnmz4pnQVYFwsLuC85 zRCdqs7a4U38cfhNvGh2P3LnCZNXUX+HD6Z3gTXL2HsHEQ9NIe4Xhn5JfEl5k/wv gJnE6Ihgl9B+rPQr -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:33 2025 by rpki-client