$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/984B0856EEC811EBAACF6435C4F9AE02.roa File: 984B0856EEC811EBAACF6435C4F9AE02.roa (raw, json) Hash identifier: fXqTikYBdRAhBiIFq6LkNN5g6FQ+sfE9EDXEzbrQ0HM= Subject key identifier: 6A:A8:06:ED:95:D4:B1:28:A7:98:AA:F5:55:32:4C:69:90:9D:84:D2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B5C3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/984B0856EEC811EBAACF6435C4F9AE02.roa Signing time: Thu 08 May 2025 16:14:14 +0000 ROA not before: Thu 08 May 2025 16:14:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140134 IP address blocks: 103.154.4.0/23 maxlen: 24 103.158.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46531 (0xb5c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:14:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd856-949a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ad:1c:82:ae:5d:0b:d1:dd:0d:2f:21:2e:ec: 53:af:08:10:72:7f:4f:21:99:14:60:1b:9c:33:c2: e6:23:c8:60:67:c3:39:8e:6d:27:dd:a7:1f:88:89: 10:09:a8:32:cf:0e:0d:74:e9:a6:d4:4e:51:75:4d: b0:5f:4a:1a:c9:b6:1d:b4:d7:1a:e9:aa:1f:cf:ae: 59:37:0e:3d:3a:34:c0:17:00:c0:f1:ee:a7:ec:8e: 6a:b8:7e:72:dc:98:f2:62:1a:47:76:28:1d:0e:ad: c2:db:b6:73:22:2e:81:ba:83:36:49:02:37:63:f6: 49:18:67:5a:ea:c5:91:31:68:75:ff:4d:6a:a1:97: 9e:80:d2:a1:a8:1e:12:b9:47:dc:0c:1a:05:52:33: a5:11:e4:35:e9:9f:06:b9:e1:01:a7:86:ae:25:4d: 5a:4f:5b:83:09:12:03:af:81:36:e1:1f:6f:13:d2: 79:83:20:ec:b7:6f:03:38:55:00:a1:94:f3:1e:b4: e1:f1:2b:89:12:fa:df:f5:b0:d8:fe:1e:c6:3c:6c: 9a:54:a2:8c:99:29:22:62:21:5c:e7:29:f9:b1:15: b6:e2:91:9a:dd:26:90:f8:54:2d:9c:5a:a7:ca:06: ab:fe:61:4b:4b:2d:0a:05:69:39:de:fd:1b:65:50: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A8:06:ED:95:D4:B1:28:A7:98:AA:F5:55:32:4C:69:90:9D:84:D2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/984B0856EEC811EBAACF6435C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.4.0/23 103.158.168.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:87:0b:dc:3b:76:5c:59:5b:fd:bb:80:68:ac:95:e9:98:6b: da:95:74:8a:77:c3:4d:b4:54:73:9f:8e:4a:e2:f5:c7:4b:83: 31:c2:81:38:69:dd:a7:d3:44:8c:56:37:be:b6:6e:41:f3:96: b2:81:59:e9:ea:72:df:d1:c2:84:b8:fe:8b:e0:fa:e2:28:5d: c6:f1:ca:c7:5d:c8:20:c2:ae:6c:85:ab:67:cd:2c:03:df:77: da:52:4b:df:b1:d4:55:e8:08:6d:d6:be:37:bc:c3:5e:77:ea: 62:5a:68:c7:87:c0:db:93:66:d6:19:c0:ec:cb:77:0f:ed:29: 74:73:34:d9:28:86:73:31:e3:3c:c6:64:b8:d0:9c:db:3b:ba: 52:b7:ed:f4:38:6e:95:2f:f2:b5:7c:d5:b5:c5:3d:ca:e2:ff: 13:b0:fe:f3:32:95:2f:5f:7a:85:48:99:61:35:a4:49:ce:56: c9:13:e0:2f:69:0d:c5:32:90:48:04:68:e2:67:f9:9e:55:33: 76:3e:ea:6e:a4:ea:9f:08:82:c5:2f:55:c7:46:35:d0:28:16: 00:51:df:8f:ae:0f:88:bd:ec:0a:c5:1c:5c:d3:75:d5:e4:64: d7:ab:ef:12:0f:24:5f:99:e7:52:b5:fe:03:7f:3d:92:0b:00: 00:03:57:88 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALXDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTQxNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4NTYtOTQ5YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOetHIKuXQvR3Q0vIS7sU68IEHJ/TyGZFGAbnDPC5iPIYGfDOY5tJ92nH4iJ EAmoMs8ODXTpptROUXVNsF9KGsm2HbTXGumqH8+uWTcOPTo0wBcAwPHup+yOarh+ ctyY8mIaR3YoHQ6twtu2cyIugbqDNkkCN2P2SRhnWurFkTFodf9NaqGXnoDSoage ErlH3AwaBVIzpRHkNemfBrnhAaeGriVNWk9bgwkSA6+BNuEfbxPSeYMg7LdvAzhV AKGU8x604fEriRL63/Ww2P4exjxsmlSijJkpImIhXOcp+bEVtuKRmt0mkPhULZxa p8oGq/5hS0stCgVpOd79G2VQYOECAwEAAaOCApswggKXMB0GA1UdDgQWBBRqqAbt ldSxKKeYqvVVMkxpkJ2E0jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk4NEIwODU2 RUVDODExRUJBQUNGNjQzNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQBZ5oEAwQBZ56oMA0GCSqGSIb3DQEBCwUAA4IBAQBNhwvc O3ZcWVv9u4BorJXpmGvalXSKd8NNtFRzn45K4vXHS4MxwoE4ad2n00SMVje+tm5B 85aygVnp6nLf0cKEuP6L4PriKF3G8crHXcggwq5shatnzSwD33faUkvfsdRV6Aht 1r43vMNed+piWmjHh8Dbk2bWGcDsy3cP7Sl0czTZKIZzMeM8xmS40JzbO7pSt+30 OG6VL/K1fNW1xT3K4v8TsP7zMpUvX3qFSJlhNaRJzlbJE+AvaQ3FMpBIBGjiZ/me VTN2PupupOqfCILFL1XHRjXQKBYAUd+Prg+IvewKxRxc03XV5GTXq+8SDyRfmedS tf4Dfz2SCwAAA1eI -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:03 2025 by rpki-client