$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B9553A6246111EE9F778464C4F9AE02.roa File: 9B9553A6246111EE9F778464C4F9AE02.roa (raw, json) Hash identifier: M44zWy65CfnqxgE3XVMNEVRpPjj4fqCn4mdxt2R3yBQ= Subject key identifier: DF:D7:22:E3:BA:4F:D1:47:06:94:2E:17:1E:0F:65:77:29:AF:5D:61 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B383 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B9553A6246111EE9F778464C4F9AE02.roa Signing time: Thu 08 May 2025 16:05:27 +0000 ROA not before: Thu 08 May 2025 16:05:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135808 IP address blocks: 103.78.221.0/24 maxlen: 24 103.103.174.0/24 maxlen: 24 103.119.254.0/23 maxlen: 24 2405:13c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45955 (0xb383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:05:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd647-f0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:d8:95:d4:36:4f:05:1d:8b:43:e7:ae:bb: 50:e6:67:ab:73:ac:70:6b:9e:00:e0:33:62:cf:ba: 7d:80:2b:fd:e6:a7:f8:c7:df:d2:c4:73:83:74:08: a7:ea:4e:31:b7:80:ff:1d:e3:70:2c:e6:7f:1d:90: e4:9d:03:f8:63:23:6d:03:94:8b:4e:72:71:26:29: c2:dc:c4:ba:d1:98:5f:e8:c3:96:16:79:38:31:6f: 54:e7:ca:32:fa:a9:53:d3:be:ce:81:13:1c:2a:53: 04:07:38:60:ca:14:fb:13:42:fd:5e:f9:0c:32:b4: 63:2a:9c:fb:72:81:2a:46:9c:ee:f0:55:d8:6c:3e: 0f:fe:7c:4f:77:06:73:0f:cf:69:46:32:be:b9:f9: f4:05:0b:68:65:75:1b:72:2e:09:35:9e:d7:f7:69: 82:5a:a0:15:2b:0f:94:72:37:b9:8c:46:33:3c:c3: ab:89:9b:d0:42:4f:05:21:fa:c6:b2:22:dd:da:09: db:30:9e:15:bf:3d:ab:0c:31:41:75:73:23:8d:5e: ef:60:c3:0c:41:5a:ea:5d:65:31:ce:8d:ac:ff:21: 82:d1:bb:a7:b4:60:f8:39:74:08:70:61:1a:b8:5b: 87:8a:5b:75:dd:40:df:fe:d6:77:ea:4c:bb:b5:de: 41:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D7:22:E3:BA:4F:D1:47:06:94:2E:17:1E:0F:65:77:29:AF:5D:61 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B9553A6246111EE9F778464C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.221.0/24 103.103.174.0/24 103.119.254.0/23 IPv6: 2405:13c0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:2f:c0:d9:89:9b:f4:a8:0f:60:ed:09:fa:21:6c:b9:33:75: bb:e9:37:40:fa:42:15:56:4b:e5:81:cf:e3:3a:99:86:1f:47: 5b:d1:42:d7:5a:b7:8f:59:24:05:90:13:e9:52:ec:63:26:9a: 9b:2b:bc:e8:7a:48:cd:5b:e8:d2:f0:65:ad:74:a9:1d:cb:11: 5d:96:f4:49:50:c8:a2:4f:cf:f9:f9:ef:00:ba:5c:85:ab:4e: 3d:95:38:ca:8a:26:fb:c2:d7:9c:7c:7c:41:6c:32:9d:e8:4e: 44:3b:cf:64:40:24:f6:b1:55:d1:d6:37:55:b3:a7:4e:89:72: 45:d0:32:91:de:41:c9:b3:98:40:6c:d4:e2:53:09:0e:15:84: 4f:75:21:9d:23:a0:98:10:43:e6:98:b9:36:25:e0:3c:f7:f8: 5c:67:37:12:d1:41:43:b1:f2:0c:29:56:37:9f:e6:13:8b:7b: b2:b1:fc:7c:49:33:15:1e:fc:b0:03:19:d8:e6:5a:a0:12:6f: 4e:fb:1e:36:62:54:79:6f:02:ad:6c:e9:55:89:ee:cf:21:b4: 08:af:a5:81:83:00:db:28:79:a6:df:fb:6d:00:d7:03:b3:7a: f1:9e:c7:54:4b:82:75:8e:b5:c1:32:e2:74:fd:fe:b5:63:7c: 2a:c9:ef:f3 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIDALODMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDUyN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2NDctZjBkZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7V2JXUNk8FHYtD5667UOZnq3OscGueAOAzYs+6fYAr/ean+Mff0sRzg3QI p+pOMbeA/x3jcCzmfx2Q5J0D+GMjbQOUi05ycSYpwtzEutGYX+jDlhZ5ODFvVOfK MvqpU9O+zoETHCpTBAc4YMoU+xNC/V75DDK0Yyqc+3KBKkac7vBV2Gw+D/58T3cG cw/PaUYyvrn59AULaGV1G3IuCTWe1/dpglqgFSsPlHI3uYxGMzzDq4mb0EJPBSH6 xrIi3doJ2zCeFb89qwwxQXVzI41e72DDDEFa6l1lMc6NrP8hgtG7p7Rg+Dl0CHBh Grhbh4pbdd1A3/7Wd+pMu7XeQSkCAwEAAaOCArAwggKsMB0GA1UdDgQWBBTf1yLj uk/RRwaULhceD2V3Ka9dYTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlCOTU1M0E2 MjQ2MTExRUU5Rjc3ODQ2NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDoGCCsGAQUFBwEHAQH/ BCswKTAYBAIAATASAwQAZ07dAwQAZ2euAwQBZ3f+MA0EAgACMAcDBQAkBRPAMA0G CSqGSIb3DQEBCwUAA4IBAQALL8DZiZv0qA9g7Qn6IWy5M3W76TdA+kIVVkvlgc/j OpmGH0db0ULXWrePWSQFkBPpUuxjJpqbK7zoekjNW+jS8GWtdKkdyxFdlvRJUMii T8/5+e8AulyFq049lTjKiib7wtecfHxBbDKd6E5EO89kQCT2sVXR1jdVs6dOiXJF 0DKR3kHJs5hAbNTiUwkOFYRPdSGdI6CYEEPmmLk2JeA89/hcZzcS0UFDsfIMKVY3 n+YTi3uysfx8STMVHvywAxnY5lqgEm9O+x42YlR5bwKtbOlVie7PIbQIr6WBgwDb KHmm3/ttANcDs3rxnsdUS4J1jrXBMuJ0/f61Y3wqye/z -----END CERTIFICATE-----Generated at Wed Nov 5 23:50:40 2025 by rpki-client