$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/98501A28D94611EF88DCB768C4F9AE02.roa File: 98501A28D94611EF88DCB768C4F9AE02.roa (raw, json) Hash identifier: cwn8GdAFno8dwakMTCRX9vk13pviigcATlDHoT5kE0Q= Subject key identifier: 7B:51:85:6B:78:8C:15:03:89:35:2F:99:3F:D7:13:EC:72:CF:E4:DF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B1DB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/98501A28D94611EF88DCB768C4F9AE02.roa Signing time: Thu 08 May 2025 15:58:51 +0000 ROA not before: Thu 08 May 2025 15:58:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133638 IP address blocks: 103.40.72.0/22 maxlen: 24 182.255.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45531 (0xb1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:58:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd4bb-42aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:da:2a:57:36:94:21:1c:7c:16:cb:ae:52:b7: 9c:12:88:90:85:50:2e:74:85:35:b4:db:65:1e:07: 20:09:fa:28:e0:6c:e0:e4:2c:04:76:4e:1e:3d:c1: c9:dc:92:fe:74:c3:53:87:08:a0:d5:27:dd:d5:10: 9b:ac:03:4e:43:94:ff:d8:11:c1:19:c0:74:81:ed: 30:68:65:f1:c6:11:45:8d:f7:73:6e:85:8b:ca:03: a1:cf:25:59:e3:ac:d4:1c:22:8d:69:d4:0a:5b:82: 15:51:cb:b0:a3:38:f7:d5:a3:06:e0:15:d2:9a:d3: 22:07:46:f8:40:a5:89:42:a6:ea:b3:d8:c6:14:27: 64:35:4e:bd:a9:ba:5a:c9:70:87:ff:3a:3e:a4:94: ae:12:7e:35:62:db:26:2a:c6:ca:61:52:8d:3a:af: bc:8b:b2:10:44:17:18:a8:08:5e:c1:51:3d:a9:57: b1:f2:7f:4c:e7:4a:ca:e0:b2:a1:06:8e:8d:21:dc: 08:ab:0b:1a:13:d1:d4:fd:4c:1c:72:80:44:1e:d4: 7b:c9:02:8b:a9:ea:39:72:55:82:d4:b8:60:3f:f8: 4f:5a:cc:46:4b:55:f4:ed:6e:e9:25:5a:22:bd:87: 6b:bb:01:bf:44:e1:94:f3:97:8f:ad:36:83:db:5c: 34:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:51:85:6B:78:8C:15:03:89:35:2F:99:3F:D7:13:EC:72:CF:E4:DF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/98501A28D94611EF88DCB768C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.72.0/22 182.255.56.0/22 Signature Algorithm: sha256WithRSAEncryption 20:30:df:f6:08:b0:ad:bf:76:0a:b6:02:ce:56:e9:3c:c1:26: f0:85:f1:4b:52:ea:9e:57:95:f4:3c:dd:20:b3:ab:aa:37:88: e8:98:09:00:7f:96:b9:21:5c:ec:e9:88:d4:47:cf:96:a8:7f: 2a:ad:d1:a2:0c:5a:09:01:a6:c4:84:c8:06:55:0b:d8:d2:73: d2:7e:18:94:a1:f9:1a:0e:81:4c:40:4d:74:64:12:63:b7:a5: 81:f2:c6:a1:b7:ea:a0:5c:b9:ce:b1:11:ea:00:ef:ad:79:64: d7:65:0d:dd:3a:aa:e8:a2:84:22:70:d9:75:ce:d7:d5:e0:1b: 13:b5:ad:f0:15:2f:50:35:e9:e8:1c:de:00:12:2e:7d:3f:c3: cb:72:3a:4a:3c:25:6c:55:bf:53:3c:9c:fa:e8:26:dc:05:cc: f7:90:e4:fa:5d:5a:ae:b9:ff:71:ba:dd:64:f7:ef:6d:b4:60: cb:e3:34:4c:a4:a2:f5:f0:84:0e:da:2b:32:05:37:17:27:fd: e6:3a:3a:93:20:c7:6f:73:6a:fa:4b:75:56:60:c6:5c:70:5f: 47:b9:47:08:e2:dd:03:29:39:28:17:c6:2d:97:f3:30:f3:3d: 5b:3b:e0:f8:3e:86:7d:6b:38:9e:4f:10:34:19:5a:ab:e8:60: 34:96:6c:7f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALHbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTg1MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0YmItNDJhYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTaKlc2lCEcfBbLrlK3nBKIkIVQLnSFNbTbZR4HIAn6KOBs4OQsBHZOHj3B ydyS/nTDU4cIoNUn3dUQm6wDTkOU/9gRwRnAdIHtMGhl8cYRRY33c26Fi8oDoc8l WeOs1BwijWnUCluCFVHLsKM499WjBuAV0prTIgdG+ECliUKm6rPYxhQnZDVOvam6 Wslwh/86PqSUrhJ+NWLbJirGymFSjTqvvIuyEEQXGKgIXsFRPalXsfJ/TOdKyuCy oQaOjSHcCKsLGhPR1P1MHHKARB7Ue8kCi6nqOXJVgtS4YD/4T1rMRktV9O1u6SVa Ir2Ha7sBv0ThlPOXj602g9tcNHECAwEAAaOCApswggKXMB0GA1UdDgQWBBR7UYVr eIwVA4k1L5k/1xPscs/k3zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk4NTAxQTI4 RDk0NjExRUY4OERDQjc2OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQCZyhIAwQCtv84MA0GCSqGSIb3DQEBCwUAA4IBAQAgMN/2 CLCtv3YKtgLOVuk8wSbwhfFLUuqeV5X0PN0gs6uqN4jomAkAf5a5IVzs6YjUR8+W qH8qrdGiDFoJAabEhMgGVQvY0nPSfhiUofkaDoFMQE10ZBJjt6WB8saht+qgXLnO sRHqAO+teWTXZQ3dOqroooQicNl1ztfV4BsTta3wFS9QNenoHN4AEi59P8PLcjpK PCVsVb9TPJz66CbcBcz3kOT6XVquuf9xut1k9+9ttGDL4zRMpKL18IQO2isyBTcX J/3mOjqTIMdvc2r6S3VWYMZccF9HuUcI4t0DKTkoF8Ytl/Mw8z1bO+D4PoZ9azie TxA0GVqr6GA0lmx/ -----END CERTIFICATE-----Generated at Wed Nov 5 16:27:05 2025 by rpki-client