$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDF3CEE685911F09A046E78C4F9AE02.roa File: 7DDF3CEE685911F09A046E78C4F9AE02.roa (raw, json) Hash identifier: k8joIYkX/3wpP2LxoLuuxsSIT0YE6xb1t8sWUd+6qpU= Subject key identifier: FC:4C:8D:4C:2E:44:EB:58:A7:34:32:9F:37:9E:47:58:4E:F7:F4:3E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C0DB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDF3CEE685911F09A046E78C4F9AE02.roa Signing time: Thu 24 Jul 2025 06:43:22 +0000 ROA not before: Thu 24 Jul 2025 06:43:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134924 IP address blocks: 103.173.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49371 (0xc0db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 24 06:43:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6881d60a-1fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:49:52:3f:a3:27:9a:a1:73:db:29:95:f4:e1: 6c:7c:5f:ed:cf:c0:a6:55:84:06:b5:51:8c:2b:3d: f4:13:f6:10:cd:f1:79:79:02:54:14:a6:aa:83:9c: 40:e0:66:70:94:02:8d:5a:93:98:89:9f:2d:93:05: 2f:eb:c7:6a:b4:e2:99:65:df:88:63:e6:38:2e:74: 24:88:88:22:a8:7b:8b:4e:9a:53:7c:c2:aa:e4:41: 65:cf:fd:cd:eb:54:5a:70:19:cb:e0:01:69:19:cb: b7:72:cd:7d:28:48:d6:f9:60:ab:4e:80:dd:e4:04: 16:ec:53:23:66:e4:3c:8d:18:66:37:88:d0:ec:2d: 77:c0:c7:45:75:aa:f0:a7:9f:66:19:3a:78:41:17: 39:82:58:7a:70:d1:fb:92:d3:36:3a:0c:82:99:d4: 12:27:46:97:08:66:36:98:89:67:76:4f:f8:0d:4f: 32:de:2e:cb:96:da:6d:18:ca:e0:c9:f3:96:05:54: 63:d2:e5:64:38:85:05:f2:d5:89:a5:8d:7b:f7:37: 45:46:cb:af:f8:6a:5e:7c:be:47:58:92:62:e2:20: 07:f2:81:aa:ca:d0:fa:ac:ce:59:ce:19:e3:64:a4: 3d:5b:d2:db:0e:7a:b6:b1:db:99:d5:ab:96:2b:d9: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4C:8D:4C:2E:44:EB:58:A7:34:32:9F:37:9E:47:58:4E:F7:F4:3E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7DDF3CEE685911F09A046E78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.124.0/23 Signature Algorithm: sha256WithRSAEncryption a3:d9:70:8f:34:c1:4d:16:92:b6:0a:35:bd:ad:e8:47:5f:32: 41:02:51:6d:47:55:97:d2:51:fa:08:6c:37:7e:27:df:fd:4a: 40:2e:83:11:3d:8a:41:1e:25:c4:c5:8e:6e:33:a6:45:68:4e: 00:e9:e6:d2:9b:ef:3c:eb:33:71:76:ec:6a:68:d9:03:eb:60: 37:da:16:50:91:a7:e6:72:03:f1:05:3b:d3:45:25:2c:3f:a6: a2:dc:6a:bc:af:e0:69:7f:60:1c:96:1a:e9:b5:bf:50:28:42: ae:28:f9:81:31:97:40:1c:fc:95:fd:38:c4:2a:13:81:f1:e3: 7a:b3:c7:37:4b:77:75:9e:f3:00:25:b9:d5:2f:66:0c:e1:94: f2:46:b4:72:f2:4b:d2:ab:88:ec:d3:11:9f:88:f8:67:8e:b2: 0e:f1:4f:17:14:ff:72:79:6c:ca:54:3a:cd:1d:eb:c2:cd:da: cf:79:13:fc:0a:40:b1:4a:1a:15:96:3f:6f:4e:5b:f4:21:6e: 6b:f3:21:60:6b:ae:92:87:21:7c:75:00:82:90:5a:e6:7e:f4: 42:61:44:7e:6f:b3:74:9f:c4:8b:c0:0c:54:00:cc:5e:ba:fb: 97:6e:63:16:74:d0:ce:4a:c8:2d:17:d7:57:84:33:9a:f3:8b: 47:cc:8b:56 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAMDbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDcyNDA2NDMyMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg4MWQ2MGEtMWZhNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJJUj+jJ5qhc9splfThbHxf7c/AplWEBrVRjCs99BP2EM3xeXkCVBSmqoOc QOBmcJQCjVqTmImfLZMFL+vHarTimWXfiGPmOC50JIiIIqh7i06aU3zCquRBZc/9 zetUWnAZy+ABaRnLt3LNfShI1vlgq06A3eQEFuxTI2bkPI0YZjeI0Owtd8DHRXWq 8KefZhk6eEEXOYJYenDR+5LTNjoMgpnUEidGlwhmNpiJZ3ZP+A1PMt4uy5babRjK 4MnzlgVUY9LlZDiFBfLViaWNe/c3RUbLr/hqXny+R1iSYuIgB/KBqsrQ+qzOWc4Z 42SkPVvS2w56trHbmdWrlivZat0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBT8TI1M LkTrWKc0Mp83nkdYTvf0PjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdEREYzQ0VF Njg1OTExRjA5QTA0NkU3OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ618MA0GCSqGSIb3DQEBCwUAA4IBAQCj2XCPNMFNFpK2 CjW9rehHXzJBAlFtR1WX0lH6CGw3fiff/UpALoMRPYpBHiXExY5uM6ZFaE4A6ebS m+886zNxduxqaNkD62A32hZQkafmcgPxBTvTRSUsP6ai3Gq8r+Bpf2Aclhrptb9Q KEKuKPmBMZdAHPyV/TjEKhOB8eN6s8c3S3d1nvMAJbnVL2YM4ZTyRrRy8kvSq4js 0xGfiPhnjrIO8U8XFP9yeWzKVDrNHevCzdrPeRP8CkCxShoVlj9vTlv0IW5r8yFg a66ShyF8dQCCkFrmfvRCYUR+b7N0n8SLwAxUAMxeuvuXbmMWdNDOSsgtF9dXhDOa 84tHzItW -----END CERTIFICATE-----Generated at Sun Aug 10 13:49:47 2025 by rpki-client