$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87AABD9450F111ECA06EB23EC4F9AE02.roa File: 87AABD9450F111ECA06EB23EC4F9AE02.roa (raw, json) Hash identifier: ZAU02v/BV4NhNN3rVacmAUnSf8Cr9lHiEyGPUGWvbcc= Subject key identifier: 2F:68:20:59:D9:9E:85:AF:9A:9D:42:2F:B9:26:E0:FC:BE:DB:73:06 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B76E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87AABD9450F111ECA06EB23EC4F9AE02.roa Signing time: Thu 08 May 2025 16:20:43 +0000 ROA not before: Thu 08 May 2025 16:20:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147218 IP address blocks: 103.176.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46958 (0xb76e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:20:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9db-1148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:1f:ab:04:5f:50:9a:c9:64:ac:9b:3d:7c: db:fe:bc:06:70:7b:90:51:c6:27:a7:d3:a4:87:c8: 0e:36:f8:2e:fb:db:67:fb:02:6e:1e:e6:b6:1d:8f: c0:3d:38:2f:56:28:62:a1:e2:9e:41:57:07:49:d9: 0a:73:10:6b:ad:61:ef:e3:30:ff:a1:15:04:c5:9a: b4:72:62:1f:e5:78:d4:82:be:98:9b:d1:90:a8:00: ee:17:93:88:19:4a:48:7a:0f:09:54:66:0c:94:9c: 99:97:27:a9:17:07:95:ef:fe:4c:59:61:0d:d3:dc: bc:ac:a7:f9:11:8e:ff:56:41:41:c0:03:a5:26:3c: f5:45:7e:8a:fc:4f:5d:03:51:91:3b:54:42:45:3f: 86:f3:cf:2a:c2:52:29:c5:dc:93:05:46:e9:24:3e: 14:70:92:fb:d2:68:ff:77:2e:b9:7e:63:e9:31:63: 48:88:de:08:b3:49:ba:11:d5:88:49:75:5f:e6:e2: 77:fb:f6:a1:3e:17:9e:c2:ca:a4:03:d6:ce:45:b2: 68:b8:85:ea:65:39:37:4e:73:09:25:49:9a:5d:04: 15:f3:2a:7b:c5:cb:5a:a5:f7:ca:65:c4:e7:99:68: 91:3f:07:30:8b:22:a8:e1:d3:e0:41:65:57:ee:3b: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:68:20:59:D9:9E:85:AF:9A:9D:42:2F:B9:26:E0:FC:BE:DB:73:06 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87AABD9450F111ECA06EB23EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.212.0/23 Signature Algorithm: sha256WithRSAEncryption 43:a9:52:49:3b:72:cd:53:8d:a1:ad:e4:ea:7d:c3:8f:4e:3a: 8e:4b:b2:c7:f7:f8:8c:66:16:af:6b:3c:da:34:d7:9f:0e:f6: 2f:ca:cd:fe:03:2e:07:9b:e9:08:0b:c4:a7:b1:9b:cb:16:a1: b1:eb:48:2f:2b:c4:f2:2d:2c:3a:4a:59:e1:84:24:2e:83:d9: e7:ee:81:87:13:8f:99:d7:3a:67:e4:8e:2a:ef:5a:f3:aa:fd: 8d:59:12:55:0f:88:3d:90:a2:3d:41:fd:65:6c:c1:b8:73:58: 78:21:68:59:68:bf:bb:53:21:c5:fc:ec:04:78:33:f5:b0:bb: 8d:de:a6:48:8c:37:6f:1e:15:8b:e5:cd:f8:87:06:33:94:c4: 82:9c:a1:0c:d3:82:40:ce:7f:5c:a4:4b:90:cb:a3:a1:40:05: 60:0f:99:1a:ea:69:9b:1c:52:66:e0:5a:87:db:ec:19:91:65: a5:1b:45:b7:5c:ea:7d:64:04:d0:43:3a:6a:b3:4f:35:8d:fc: 3a:1a:4c:f7:93:93:f7:af:2a:42:27:64:bf:f6:8e:4b:18:54: 01:78:ba:5f:59:9a:e6:5f:c4:1e:44:e2:41:f8:00:2d:bf:6b: 1a:a4:ce:6b:81:4c:b6:59:e9:76:07:da:e9:db:01:e0:bc:89: 49:74:c1:11 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALduMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjA0M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5ZGItMTE0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEUH6sEX1CayWSsmz182/68BnB7kFHGJ6fTpIfIDjb4LvvbZ/sCbh7mth2P wD04L1YoYqHinkFXB0nZCnMQa61h7+Mw/6EVBMWatHJiH+V41IK+mJvRkKgA7heT iBlKSHoPCVRmDJScmZcnqRcHle/+TFlhDdPcvKyn+RGO/1ZBQcADpSY89UV+ivxP XQNRkTtUQkU/hvPPKsJSKcXckwVG6SQ+FHCS+9Jo/3cuuX5j6TFjSIjeCLNJuhHV iEl1X+bid/v2oT4XnsLKpAPWzkWyaLiF6mU5N05zCSVJml0EFfMqe8XLWqX3ymXE 55lokT8HMIsiqOHT4EFlV+47xvMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQvaCBZ 2Z6Fr5qdQi+5JuD8vttzBjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg3QUFCRDk0 NTBGMTExRUNBMDZFQjIzRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ7DUMA0GCSqGSIb3DQEBCwUAA4IBAQBDqVJJO3LNU42h reTqfcOPTjqOS7LH9/iMZhavazzaNNefDvYvys3+Ay4Hm+kIC8SnsZvLFqGx60gv K8TyLSw6SlnhhCQug9nn7oGHE4+Z1zpn5I4q71rzqv2NWRJVD4g9kKI9Qf1lbMG4 c1h4IWhZaL+7UyHF/OwEeDP1sLuN3qZIjDdvHhWL5c34hwYzlMSCnKEM04JAzn9c pEuQy6OhQAVgD5ka6mmbHFJm4FqH2+wZkWWlG0W3XOp9ZATQQzpqs081jfw6Gkz3 k5P3rypCJ2S/9o5LGFQBeLpfWZrmX8QeROJB+AAtv2sapM5rgUy2Wel2B9rp2wHg vIlJdMER -----END CERTIFICATE-----Generated at Wed Nov 5 19:23:06 2025 by rpki-client