$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5846CE4D14A11EE95EC246CC4F9AE02.roa File: A5846CE4D14A11EE95EC246CC4F9AE02.roa (raw, json) Hash identifier: mlJuYauZKjiuCksnybtqjbfHwCZQ6u2ogZgyi/0mtmg= Subject key identifier: 35:1B:60:4D:5D:85:27:1C:64:4F:00:4A:39:8D:ED:BE:CE:6A:E6:0D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B385 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5846CE4D14A11EE95EC246CC4F9AE02.roa Signing time: Thu 08 May 2025 16:05:29 +0000 ROA not before: Thu 08 May 2025 16:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135811 IP address blocks: 103.78.20.0/23 maxlen: 24 103.87.64.0/23 maxlen: 24 103.99.48.0/23 maxlen: 24 103.129.228.0/23 maxlen: 24 2001:df3:7dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45957 (0xb385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd648-551b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:2d:76:65:a9:43:f3:97:28:8b:d8:19:c7: de:ab:a2:54:14:de:d1:74:5a:e0:44:98:19:7f:5d: e6:a8:3a:c0:0a:1e:17:48:63:bb:df:34:6a:d4:30: 5c:85:fb:eb:77:1b:fe:e6:6a:37:88:69:9d:b3:4c: c4:b9:d5:25:2c:0f:6e:cf:24:75:4e:66:15:dd:21: 3c:87:49:10:57:ab:fb:4a:d8:74:db:c4:95:21:9e: 2f:88:50:c6:44:1e:42:ad:5c:87:23:84:c7:ba:bd: 3d:fe:a3:18:8b:a3:72:57:7c:e4:8e:d9:fe:3a:1d: a7:50:3a:11:63:8c:96:9f:02:5b:c6:5d:dd:65:3c: 93:8e:00:c9:c4:5d:fb:24:de:47:de:bb:2c:26:fe: 68:37:7e:36:08:05:8f:a2:32:4d:6c:a9:72:87:a6: cd:f1:77:61:9a:a1:72:f4:74:ca:ce:a2:c6:2a:bf: a3:1e:23:df:4c:9a:f2:c3:fe:82:d9:90:02:8f:4c: 09:a6:da:0b:3c:29:5c:74:b4:0f:b2:57:ca:56:45: 74:ba:f7:2d:b8:c7:47:34:4e:42:df:e8:0c:42:83: 7b:76:b5:04:60:b7:78:40:1c:a9:80:f0:0b:e5:fa: 1f:27:22:ea:8c:a2:b4:a7:4c:b0:08:85:21:f1:7f: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1B:60:4D:5D:85:27:1C:64:4F:00:4A:39:8D:ED:BE:CE:6A:E6:0D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5846CE4D14A11EE95EC246CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.20.0/23 103.87.64.0/23 103.99.48.0/23 103.129.228.0/23 IPv6: 2001:df3:7dc0::/48 Signature Algorithm: sha256WithRSAEncryption 71:8b:f3:dc:b3:f8:dc:af:ad:4b:70:5d:6e:5f:db:db:55:46: 07:07:a5:a0:53:c0:0a:4c:b9:62:48:32:60:f8:3b:f0:36:cf: 7f:25:53:23:08:58:f0:fb:1c:5e:b0:68:bc:6e:23:17:ae:a8: bc:bb:f4:d4:4b:18:4c:c0:26:09:fa:4a:9c:15:ed:fc:49:89: c7:a6:b9:09:55:b7:5d:9a:50:67:83:53:5e:91:7c:2b:16:59: 7c:da:43:2b:b0:47:cf:c9:a0:7a:f1:f9:79:0a:66:22:21:74: 6b:e8:67:b8:c3:43:16:07:1d:92:47:57:e3:25:96:e3:08:88: 13:ec:ee:d6:dd:9f:e5:76:6f:5e:1a:74:e1:0a:09:79:50:ab: af:39:c6:c6:9c:0e:e4:15:d8:7c:91:23:69:3a:49:7d:5c:b3: dd:5d:5f:82:e6:3c:81:56:8d:3d:7c:98:bd:13:a4:df:84:a8: 39:ee:f7:aa:fc:d8:db:e5:0e:4a:66:68:7f:2c:70:26:15:08: 67:3b:e9:16:ef:01:0b:7c:35:63:e1:a3:0e:92:24:f5:29:ce: c9:cc:78:d9:fc:82:77:61:89:4e:c6:bd:21:c3:6e:bd:05:17: 73:99:90:fb:aa:91:b9:0c:6c:12:88:79:16:c7:fb:59:8a:71: f8:2f:0b:55 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIDALOFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDUyOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2NDgtNTUxYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN9ALXZlqUPzlyiL2BnH3quiVBTe0XRa4ESYGX9d5qg6wAoeF0hju980atQw XIX763cb/uZqN4hpnbNMxLnVJSwPbs8kdU5mFd0hPIdJEFer+0rYdNvElSGeL4hQ xkQeQq1chyOEx7q9Pf6jGIujcld85I7Z/jodp1A6EWOMlp8CW8Zd3WU8k44AycRd +yTeR967LCb+aDd+NggFj6IyTWypcoemzfF3YZqhcvR0ys6ixiq/ox4j30ya8sP+ gtmQAo9MCabaCzwpXHS0D7JXylZFdLr3LbjHRzROQt/oDEKDe3a1BGC3eEAcqYDw C+X6Hyci6oyitKdMsAiFIfF/KRkCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQ1G2BN XYUnHGRPAEo5je2+zmrmDTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E1ODQ2Q0U0 RDE0QTExRUU5NUVDMjQ2Q0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEIGCCsGAQUFBwEHAQH/ BDMwMTAeBAIAATAYAwQBZ04UAwQBZ1dAAwQBZ2MwAwQBZ4HkMA8EAgACMAkDBwAg AQ3zfcAwDQYJKoZIhvcNAQELBQADggEBAHGL89yz+NyvrUtwXW5f29tVRgcHpaBT wApMuWJIMmD4O/A2z38lUyMIWPD7HF6waLxuIxeuqLy79NRLGEzAJgn6SpwV7fxJ icemuQlVt12aUGeDU16RfCsWWXzaQyuwR8/JoHrx+XkKZiIhdGvoZ7jDQxYHHZJH V+MlluMIiBPs7tbdn+V2b14adOEKCXlQq685xsacDuQV2HyRI2k6SX1cs91dX4Lm PIFWjT18mL0TpN+EqDnu96r82NvlDkpmaH8scCYVCGc76RbvAQt8NWPhow6SJPUp zsnMeNn8gndhiU7GvSHDbr0FF3OZkPuqkbkMbBKIeRbH+1mKcfgvC1U= -----END CERTIFICATE-----Generated at Wed Nov 5 16:17:05 2025 by rpki-client