$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A1AFDE4013111EF9F5C142DC4F9AE02.roa File: 8A1AFDE4013111EF9F5C142DC4F9AE02.roa (raw, json) Hash identifier: AYfOflA1rjikzmSKM2pdO6Svy/QtQvwhveCWs3ta2/k= Subject key identifier: DC:33:C0:F7:D3:DE:7D:C2:05:16:3E:8A:10:B0:C8:BA:46:D5:E4:7A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B701 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A1AFDE4013111EF9F5C142DC4F9AE02.roa Signing time: Thu 08 May 2025 16:19:05 +0000 ROA not before: Thu 08 May 2025 16:19:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142508 IP address blocks: 103.170.6.0/23 maxlen: 24 2407:aa40::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46849 (0xb701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:19:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd978-9efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:39:9c:c2:92:99:ce:0b:f6:32:7f:1d:91: e0:6c:e3:fb:e9:3c:7d:93:55:71:dc:97:88:e3:60: 13:5b:75:f9:1c:50:c4:36:c5:40:27:3c:6b:9f:82: e9:71:8b:54:9f:98:0c:55:03:d7:78:36:f5:ad:c9: 53:e0:22:26:b0:e3:17:9f:61:cb:bf:ad:f3:0d:2e: 5b:70:71:e2:1e:11:2b:3a:08:7e:11:8e:1d:a3:95: e5:95:8f:2c:01:47:3d:9a:1a:15:a2:c1:08:0c:55: 6c:3d:f1:28:ae:57:a9:43:1b:1f:16:d4:76:6c:5c: 74:7e:b8:8f:5d:02:f6:90:d5:52:40:47:b6:3c:ef: 72:4a:b0:36:59:05:5c:fa:7c:45:0d:15:4b:0e:6d: 9e:e6:96:95:51:4a:f4:f5:8a:39:48:7b:92:a9:94: a0:c5:7f:b5:95:93:25:f2:f9:34:c5:e1:8e:e6:8b: 28:72:5c:a6:9d:d0:b4:50:3a:6d:ba:65:7f:72:64: da:f8:05:e6:59:5f:c0:69:3a:d1:30:bf:fc:5f:6e: fb:01:70:2e:f1:af:83:cd:8c:0b:9a:a1:ce:2c:cb: fa:6c:a2:ae:fa:e6:30:67:4b:ba:ac:3e:aa:2d:4b: 84:5c:f7:b9:33:9f:22:d0:ca:27:80:54:cb:f3:d2: 9c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:33:C0:F7:D3:DE:7D:C2:05:16:3E:8A:10:B0:C8:BA:46:D5:E4:7A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A1AFDE4013111EF9F5C142DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.6.0/23 IPv6: 2407:aa40::/32 Signature Algorithm: sha256WithRSAEncryption 90:65:ca:c8:d5:90:34:d1:cd:1d:85:ee:00:ff:5d:42:b4:73: d1:c2:84:68:d9:64:64:f6:64:e0:4d:60:89:2e:0d:36:13:58: 02:52:b8:64:64:69:37:46:0e:40:93:ca:6a:74:b7:d9:fd:87: e2:bb:c4:73:1c:a3:bb:ba:eb:f2:09:35:03:cf:34:ab:73:9e: 36:30:b3:66:67:d2:02:29:1a:b6:08:c1:e0:10:01:5d:89:ea: 24:15:f4:3b:f5:ec:b5:14:84:5e:cf:91:77:f7:9c:f6:81:94: 05:82:ba:ce:14:cd:c0:bb:09:6e:a2:ce:79:7f:96:91:59:0b: 9f:20:fd:c5:ec:0f:03:51:35:33:a7:7e:7f:02:f0:25:ee:33: 7f:a3:dd:38:b6:29:59:53:e6:4c:33:02:f1:f8:b0:f9:37:fd: 12:e4:aa:cd:b9:fb:25:c5:e8:0d:eb:7f:31:b7:bd:ce:b0:98: d9:3e:61:28:6f:b8:e3:ae:4c:0f:67:86:fc:6d:71:a9:f0:8d: 63:3c:83:57:22:8a:9d:8b:a5:55:79:53:8c:fd:a9:71:20:d8: 9f:1a:83:54:a2:8b:2b:41:4e:1b:31:95:9a:6b:86:1e:44:d1: 3f:72:57:a8:44:30:ce:e2:2c:35:0a:48:ba:a2:33:6c:a2:bd: 86:af:c5:7e -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDALcBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTkwNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5NzgtOWVmZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBhOZzCkpnOC/Yyfx2R4Gzj++k8fZNVcdyXiONgE1t1+RxQxDbFQCc8a5+C 6XGLVJ+YDFUD13g29a3JU+AiJrDjF59hy7+t8w0uW3Bx4h4RKzoIfhGOHaOV5ZWP LAFHPZoaFaLBCAxVbD3xKK5XqUMbHxbUdmxcdH64j10C9pDVUkBHtjzvckqwNlkF XPp8RQ0VSw5tnuaWlVFK9PWKOUh7kqmUoMV/tZWTJfL5NMXhjuaLKHJcpp3QtFA6 bbplf3Jk2vgF5llfwGk60TC//F9u+wFwLvGvg82MC5qhzizL+myirvrmMGdLuqw+ qi1LhFz3uTOfItDKJ4BUy/PSnLUCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBTcM8D3 0959wgUWPooQsMi6RtXkejAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhBMUFGREU0 MDEzMTExRUY5RjVDMTQyREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBZ6oGMA0EAgACMAcDBQAkB6pAMA0GCSqGSIb3DQEBCwUA A4IBAQCQZcrI1ZA00c0dhe4A/11CtHPRwoRo2WRk9mTgTWCJLg02E1gCUrhkZGk3 Rg5Ak8pqdLfZ/Yfiu8RzHKO7uuvyCTUDzzSrc542MLNmZ9ICKRq2CMHgEAFdieok FfQ79ey1FIRez5F395z2gZQFgrrOFM3Auwluos55f5aRWQufIP3F7A8DUTUzp35/ AvAl7jN/o904tilZU+ZMMwLx+LD5N/0S5KrNufslxegN638xt73OsJjZPmEob7jj rkwPZ4b8bXGp8I1jPINXIoqdi6VVeVOM/alxINifGoNUoosrQU4bMZWaa4YeRNE/ cleoRDDO4iw1Cki6ojNsor2Gr8V+ -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:14 2025 by rpki-client