$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86DE899EB14311EF8D942621C4F9AE02.roa File: 86DE899EB14311EF8D942621C4F9AE02.roa (raw, json) Hash identifier: lBEKnp0DizmdhoCpC95VapdvLgJdUWywhX6WPsdRm2A= Subject key identifier: E6:AE:AB:57:99:7A:FA:A5:C0:32:0F:6A:8B:2A:5B:B0:82:E8:A3:6D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BA60 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86DE899EB14311EF8D942621C4F9AE02.roa Signing time: Thu 08 May 2025 16:32:08 +0000 ROA not before: Thu 08 May 2025 16:32:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59164 IP address blocks: 43.239.200.0/22 maxlen: 24 103.232.128.0/22 maxlen: 24 2001:df7:4400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47712 (0xba60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:32:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdc87-22c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:3e:32:55:c7:44:e6:df:71:6c:70:77:92: 1b:a1:71:d9:97:97:7e:a1:75:22:93:89:c8:3d:a9: 17:07:63:b9:03:75:b8:4b:95:71:4b:d6:01:2e:23: c8:a1:b5:05:6e:e5:4e:46:e7:af:cc:bd:24:1d:fa: 1d:8b:3d:80:2c:45:9a:6b:70:3f:ba:0d:85:0f:28: 80:91:4e:f3:c4:e5:9d:a3:79:78:c4:10:d2:e8:fb: a3:eb:76:09:bb:15:b8:86:9f:7f:ec:58:72:bf:59: ca:38:11:ad:ee:9d:a4:93:2b:40:e2:df:7d:e6:2d: 1e:4e:2a:54:74:c7:a9:8a:f9:07:24:13:38:98:0a: ee:7e:a6:77:90:6d:78:58:fb:d3:29:24:fb:10:8b: ed:90:a2:08:76:49:3c:51:b0:5a:3e:34:94:05:e5: 86:f8:2b:69:be:fc:ff:9e:3b:7e:b9:9b:cc:fb:00: 0e:d6:05:95:4e:d5:ce:a2:d4:92:8e:6e:54:6c:a8: c5:1c:94:fd:77:91:f5:49:9f:f6:6d:fc:98:a9:e2: f6:aa:c3:46:f7:06:16:71:6e:c4:9f:be:59:e1:16: c4:c9:ee:95:97:49:2a:d4:d3:99:12:df:4a:23:77: 89:30:ed:e1:46:87:2c:a7:ea:1a:3d:bc:19:c8:60: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AE:AB:57:99:7A:FA:A5:C0:32:0F:6A:8B:2A:5B:B0:82:E8:A3:6D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/86DE899EB14311EF8D942621C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.200.0/22 103.232.128.0/22 IPv6: 2001:df7:4400::/48 Signature Algorithm: sha256WithRSAEncryption 52:74:dd:c1:e4:3f:cb:d5:49:05:4b:8e:ce:59:33:9a:11:03: 30:00:16:f6:23:f3:f8:69:e8:55:e7:eb:86:21:7a:67:e7:6b: 2e:61:40:e3:cc:f0:c3:09:d1:32:78:32:07:cf:64:b1:15:2f: b6:9e:f9:96:6c:cb:0a:16:97:46:71:15:db:37:f5:9f:b0:a3: 41:d0:6d:8d:31:f0:b1:65:0a:d6:2b:84:98:cb:f8:05:ef:64: 00:6c:e1:17:fa:a4:af:2c:5c:31:aa:ed:b1:15:26:09:04:6e: bc:ed:fd:07:95:a6:0e:71:d9:fd:6e:49:dd:9b:f3:52:38:b7: 5a:de:c5:6c:70:29:70:0f:de:3f:e9:04:55:87:d2:5d:2d:fc: 0b:ca:74:02:07:8a:1c:ec:fc:dd:af:04:87:59:8c:ee:f5:00: ee:a2:1e:69:6c:fe:b4:3d:9b:a2:79:26:c5:3c:51:ea:f3:c4: d9:83:06:de:d1:5a:94:30:97:58:d9:e6:76:45:35:14:4b:10: cf:6e:9c:6f:a7:b7:49:9e:c0:02:2f:72:c6:1a:0b:88:c8:7a: 85:e3:7d:02:09:57:6d:c8:f5:0f:99:18:02:3c:fe:fb:42:ff: 6b:d3:42:06:eb:aa:67:ee:2b:18:b8:10:49:d7:55:86:b5:1a: f5:95:c1:dd -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDALpgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzIwOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RjODctMjJjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKA5PjJVx0Tm33FscHeSG6Fx2ZeXfqF1IpOJyD2pFwdjuQN1uEuVcUvWAS4j yKG1BW7lTkbnr8y9JB36HYs9gCxFmmtwP7oNhQ8ogJFO88TlnaN5eMQQ0uj7o+t2 CbsVuIaff+xYcr9ZyjgRre6dpJMrQOLffeYtHk4qVHTHqYr5ByQTOJgK7n6md5Bt eFj70ykk+xCL7ZCiCHZJPFGwWj40lAXlhvgrab78/547frmbzPsADtYFlU7VzqLU ko5uVGyoxRyU/XeR9Umf9m38mKni9qrDRvcGFnFuxJ++WeEWxMnulZdJKtTTmRLf SiN3iTDt4UaHLKfqGj28GchgGfUCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBTmrqtX mXr6pcAyD2qLKluwguijbTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg2REU4OTlF QjE0MzExRUY4RDk0MjYyMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQCK+/IAwQCZ+iAMA8EAgACMAkDBwAgAQ33RAAwDQYJKoZI hvcNAQELBQADggEBAFJ03cHkP8vVSQVLjs5ZM5oRAzAAFvYj8/hp6FXn64Yhemfn ay5hQOPM8MMJ0TJ4MgfPZLEVL7ae+ZZsywoWl0ZxFds39Z+wo0HQbY0x8LFlCtYr hJjL+AXvZABs4Rf6pK8sXDGq7bEVJgkEbrzt/QeVpg5x2f1uSd2b81I4t1rexWxw KXAP3j/pBFWH0l0t/AvKdAIHihzs/N2vBIdZjO71AO6iHmls/rQ9m6J5JsU8Uerz xNmDBt7RWpQwl1jZ5nZFNRRLEM9unG+nt0mewAIvcsYaC4jIeoXjfQIJV23I9Q+Z GAI8/vtC/2vTQgbrqmfuKxi4EEnXVYa1GvWVwd0= -----END CERTIFICATE-----Generated at Wed Nov 5 16:28:51 2025 by rpki-client