$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F4A66AE4C7611EC98269B1BC4F9AE02.roa File: 9F4A66AE4C7611EC98269B1BC4F9AE02.roa (raw, json) Hash identifier: vPlEEEnlNViPu+tKlI1I161gI5bb7bYO4DqQJqqrIis= Subject key identifier: 7B:41:6A:B5:1C:BF:69:5B:0F:39:6E:01:D9:EF:E5:84:68:41:99:A0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B785 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F4A66AE4C7611EC98269B1BC4F9AE02.roa Signing time: Thu 08 May 2025 16:21:04 +0000 ROA not before: Thu 08 May 2025 16:21:04 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147251 IP address blocks: 103.176.230.0/23 maxlen: 24 2001:df0:1540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46981 (0xb785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:21:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9f0-bb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:96:4f:a7:c3:ec:6a:d8:6e:9a:52:fc:fb:dc: bd:bb:72:69:fc:23:28:ca:32:2f:7b:7e:84:d1:14: 2d:cc:01:e3:f9:5a:3d:d4:1e:63:85:3b:9a:02:b3: 4f:df:00:1b:06:ce:b0:70:6c:27:97:8b:12:93:21: 85:66:cf:fd:9f:d3:82:56:23:18:03:eb:f5:98:99: ea:0c:ad:9f:62:99:c4:77:79:cb:3f:85:e5:1c:1a: 3d:30:5b:4d:d3:af:cd:7c:77:8b:d3:9e:26:eb:b0: f2:3b:89:90:b0:9e:41:dc:76:00:95:52:93:26:48: ac:94:55:e3:cd:ce:5d:4a:28:90:dc:f1:96:f6:32: c5:5a:63:10:f1:2d:d6:52:6c:be:f5:59:17:1f:c0: 19:0b:77:42:92:d6:1e:d1:45:da:9d:c9:2f:01:91: f1:7f:61:85:ff:58:dc:6c:58:52:92:bb:c1:a3:24: 6a:30:e6:f6:d7:cb:bf:23:64:9d:ab:a3:22:b6:df: ec:6b:9e:69:26:69:a2:d2:02:cf:22:02:79:e0:f2: 9e:ea:89:ad:83:ae:25:23:70:a7:aa:1d:d4:3b:0f: 6d:de:79:ec:07:93:bc:72:7b:e7:36:f1:d6:1c:00: 56:4f:7a:b8:7f:ba:9b:3d:39:66:f7:f0:16:e2:60: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:41:6A:B5:1C:BF:69:5B:0F:39:6E:01:D9:EF:E5:84:68:41:99:A0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F4A66AE4C7611EC98269B1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.230.0/23 IPv6: 2001:df0:1540::/48 Signature Algorithm: sha256WithRSAEncryption 7f:d3:1e:49:b3:db:67:e0:40:c3:0b:76:45:2b:57:66:60:75: 91:8b:33:3a:76:d9:68:47:69:4a:0f:4f:8e:76:59:cd:01:cc: d4:38:fc:b3:45:35:96:c1:a4:52:31:2e:86:20:f7:62:96:2c: 56:f0:62:01:cd:f5:ba:12:58:81:60:76:35:92:42:89:35:57: 95:08:b3:e0:75:f2:c1:65:0f:72:0a:f7:d3:10:fe:1a:84:42: 2c:37:24:be:5a:d5:46:2f:b5:31:71:92:a7:fa:85:48:7f:0c: 67:97:a7:04:db:ed:f4:c6:f8:02:1b:71:02:39:02:0b:58:04: 20:61:1e:22:e4:80:85:aa:cf:d6:a5:1b:af:9b:6a:29:ae:43: 1b:f3:6c:9d:5e:3f:e9:f5:5f:5c:80:64:7d:72:33:fe:b1:dc: 68:25:16:71:07:4d:c3:d3:9e:4c:f1:87:b8:97:28:fb:14:93: 00:8e:a2:91:f3:87:ec:94:10:9e:cd:81:8e:f4:c7:6f:8a:76: c5:c4:39:de:58:e4:c8:89:71:60:c0:c3:d5:3f:b8:d1:9a:5e: 44:3c:5f:d8:d6:9b:a3:40:f0:cf:1d:a5:1e:ae:dd:52:ac:13: 1c:9a:c1:12:ef:7f:b2:aa:4f:b1:26:fd:d7:39:5a:63:9a:ed: e5:84:da:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALeFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjEwNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5ZjAtYmI1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqWT6fD7GrYbppS/PvcvbtyafwjKMoyL3t+hNEULcwB4/laPdQeY4U7mgKz T98AGwbOsHBsJ5eLEpMhhWbP/Z/TglYjGAPr9ZiZ6gytn2KZxHd5yz+F5RwaPTBb TdOvzXx3i9OeJuuw8juJkLCeQdx2AJVSkyZIrJRV483OXUookNzxlvYyxVpjEPEt 1lJsvvVZFx/AGQt3QpLWHtFF2p3JLwGR8X9hhf9Y3GxYUpK7waMkajDm9tfLvyNk naujIrbf7GueaSZpotICzyICeeDynuqJrYOuJSNwp6od1DsPbd557AeTvHJ75zbx 1hwAVk96uH+6mz05ZvfwFuJgFSkCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBR7QWq1 HL9pWw85bgHZ7+WEaEGZoDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlGNEE2NkFF NEM3NjExRUM5ODI2OUIxQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7DmMA8EAgACMAkDBwAgAQ3wFUAwDQYJKoZIhvcNAQEL BQADggEBAH/THkmz22fgQMMLdkUrV2ZgdZGLMzp22WhHaUoPT452Wc0BzNQ4/LNF NZbBpFIxLoYg92KWLFbwYgHN9boSWIFgdjWSQok1V5UIs+B18sFlD3IK99MQ/hqE Qiw3JL5a1UYvtTFxkqf6hUh/DGeXpwTb7fTG+AIbcQI5AgtYBCBhHiLkgIWqz9al G6+baimuQxvzbJ1eP+n1X1yAZH1yM/6x3GglFnEHTcPTnkzxh7iXKPsUkwCOopHz h+yUEJ7NgY70x2+KdsXEOd5Y5MiJcWDAw9U/uNGaXkQ8X9jWm6NA8M8dpR6u3VKs ExyawRLvf7KqT7Em/dc5WmOa7eWE2uY= -----END CERTIFICATE-----Generated at Thu Nov 6 01:12:42 2025 by rpki-client