$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABC541E8363211F0A8E88525C4F9AE02.roa File: ABC541E8363211F0A8E88525C4F9AE02.roa (raw, json) Hash identifier: Lk/lDZM3BcoWoU+eGzz/Rh6h5I8M5H9n2/ESNqUMROU= Subject key identifier: 8F:2E:A8:DD:27:EC:0F:0A:8D:01:45:F9:AA:EC:29:B5:28:EE:78:10 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BB97 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABC541E8363211F0A8E88525C4F9AE02.roa Signing time: Wed 21 May 2025 10:59:31 +0000 ROA not before: Wed 21 May 2025 10:59:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140506 IP address blocks: 163.223.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48023 (0xbb97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 21 10:59:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682db212-292e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:de:55:2c:a8:d4:a9:c7:7e:ea:50:c1:af: 13:3b:4a:b4:7b:78:ab:48:d8:80:85:77:48:a2:4d: 3e:e1:e3:9b:05:5d:ec:70:e3:07:ec:b5:e2:6e:ec: 21:29:db:2d:ff:2c:67:8d:3a:18:d7:aa:67:60:67: c6:9e:ed:f1:22:3c:be:db:12:7b:b8:76:ec:30:a1: b3:c5:59:46:aa:12:4a:fd:3a:db:aa:5a:fa:64:6e: d5:ab:c2:5a:29:30:4f:b9:da:5b:39:ea:77:29:48: 75:c8:83:7c:6c:48:b7:d1:68:ec:35:52:5b:a8:01: 85:aa:21:80:bb:88:2a:3c:a4:41:f7:9d:6b:7a:15: 34:75:e1:1b:d3:fd:79:21:74:19:bc:77:0e:c8:c0: 6c:16:09:ab:9e:e9:03:7e:f0:a7:2e:ce:5f:cb:98: b3:cf:ce:4d:7a:62:02:ee:8b:ae:e0:64:78:34:14: 8e:77:07:45:24:c7:ff:6d:2d:df:c5:0c:51:52:57: 14:9d:7c:05:20:ca:b7:85:8f:c8:6e:9a:08:a2:75: a0:4b:be:6a:60:c0:0b:b4:a1:33:10:51:f0:32:96: a3:c8:bd:a2:38:3c:f2:c5:02:ff:86:6d:bf:d3:ee: 9d:b1:8f:20:2e:ab:74:21:a1:fd:ed:53:2c:b2:21: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2E:A8:DD:27:EC:0F:0A:8D:01:45:F9:AA:EC:29:B5:28:EE:78:10 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABC541E8363211F0A8E88525C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.252.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:fe:08:58:d2:3c:85:3e:7e:32:e0:72:d9:9b:97:e8:a8:d9: f4:f4:24:58:a1:99:1e:06:7a:00:7a:4d:b4:7d:9b:fe:61:22: 24:51:0c:dd:aa:b8:78:77:a6:b5:b5:81:39:fa:7e:81:21:9d: d0:5a:e1:18:ce:65:31:ec:0d:fd:fe:ee:cf:b6:cb:71:ef:19: 1f:d9:a4:fc:ba:cf:5a:ff:57:6f:12:7c:7f:d5:4e:34:da:1f: ff:53:fe:f2:38:ea:bf:ec:ec:e3:3d:ec:7c:0c:54:e6:e2:55: 1c:8c:97:01:7f:66:37:d5:cd:f0:a0:18:99:6b:1a:81:42:57: ae:bb:3d:7d:74:61:45:eb:06:20:e8:67:d4:1a:59:99:b2:62: 0d:9d:58:29:e5:06:9f:25:8f:52:ce:b2:c9:7a:7b:21:fe:f0: 5d:a3:fd:51:8f:68:32:d9:7c:4e:d8:b9:38:eb:3e:4f:21:83: 1b:5e:a0:7b:4c:19:08:e1:f7:ac:60:85:11:aa:a1:96:d1:e7: a0:e5:cb:24:f7:30:15:31:33:32:e7:e3:1f:82:84:25:86:98: 25:fa:5c:82:02:c1:45:42:be:e3:ed:d4:24:9c:ab:2e:50:ef: 51:39:24:87:a6:f6:f5:c2:67:6e:3d:24:38:e9:9a:f3:c2:13: c9:12:b2:88 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALuXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUyMTEwNTkzMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgyZGIyMTItMjkyZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9d3lUsqNSpx37qUMGvEztKtHt4q0jYgIV3SKJNPuHjmwVd7HDjB+y14m7s ISnbLf8sZ406GNeqZ2Bnxp7t8SI8vtsSe7h27DChs8VZRqoSSv0626pa+mRu1avC WikwT7naWznqdylIdciDfGxIt9Fo7DVSW6gBhaohgLuIKjykQfeda3oVNHXhG9P9 eSF0Gbx3DsjAbBYJq57pA37wpy7OX8uYs8/OTXpiAu6LruBkeDQUjncHRSTH/20t 38UMUVJXFJ18BSDKt4WPyG6aCKJ1oEu+amDAC7ShMxBR8DKWo8i9ojg88sUC/4Zt v9PunbGPIC6rdCGh/e1TLLIhmIMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSPLqjd J+wPCo0BRfmq7Cm1KO54EDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FCQzU0MUU4 MzYzMjExRjBBOEU4ODUyNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBo9/8MA0GCSqGSIb3DQEBCwUAA4IBAQB6/ghY0jyFPn4y 4HLZm5foqNn09CRYoZkeBnoAek20fZv+YSIkUQzdqrh4d6a1tYE5+n6BIZ3QWuEY zmUx7A39/u7Ptstx7xkf2aT8us9a/1dvEnx/1U402h//U/7yOOq/7OzjPex8DFTm 4lUcjJcBf2Y31c3woBiZaxqBQleuuz19dGFF6wYg6GfUGlmZsmINnVgp5QafJY9S zrLJensh/vBdo/1Rj2gy2XxO2Lk46z5PIYMbXqB7TBkI4fesYIURqqGW0eeg5csk 9zAVMTMy5+MfgoQlhpgl+lyCAsFFQr7j7dQknKsuUO9ROSSHpvb1wmduPSQ46Zrz whPJErKI -----END CERTIFICATE-----Generated at Wed Nov 5 22:15:28 2025 by rpki-client