$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC8428C6459911EF8F3D030CC4F9AE02.roa File: BC8428C6459911EF8F3D030CC4F9AE02.roa (raw, json) Hash identifier: m60vrpvkyb9hAgMCr4tKOIo2R/exPwWnIDMA0QfWnR0= Subject key identifier: 9A:DD:C3:7D:89:23:F1:A9:7D:4A:92:7E:E1:6C:54:3F:58:3A:3B:9C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B6F5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC8428C6459911EF8F3D030CC4F9AE02.roa Signing time: Thu 08 May 2025 16:18:53 +0000 ROA not before: Thu 08 May 2025 16:18:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142488 IP address blocks: 43.225.72.0/23 maxlen: 24 43.225.75.0/24 maxlen: 24 103.44.52.0/22 maxlen: 24 103.49.234.0/23 maxlen: 24 103.168.180.0/23 maxlen: 24 2407:9640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46837 (0xb6f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:18:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd96d-75a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:86:d7:a6:76:c8:ee:f5:99:df:8a:77:3b: 31:09:a7:4c:0b:4e:11:7b:8c:2a:9d:33:e2:1e:52: 89:04:74:fc:ec:f5:5d:2b:34:2c:4f:7b:e2:da:3b: f2:24:cf:ec:59:76:23:50:85:78:7f:dc:32:8c:31: 0b:f8:bb:44:f8:ee:0f:57:af:c8:53:2f:59:27:c6: 02:45:32:b6:71:f7:24:84:ea:8c:31:d5:df:17:0c: 53:d7:d2:74:4b:67:70:5e:71:9c:ae:b7:0a:8b:75: 1a:8d:75:27:f1:1c:14:fc:76:a5:82:21:ed:43:6a: 9a:b1:cd:5b:ae:20:74:30:66:ea:0a:45:54:86:2f: 16:b4:53:9e:71:82:4c:22:7c:3f:aa:8c:65:c1:9a: ad:3d:02:58:81:dc:02:f6:4f:b8:73:1b:80:b2:ef: 8d:04:4f:da:41:44:37:71:17:32:91:93:a8:34:5e: 80:92:14:fc:46:cf:cc:dc:2f:b3:35:91:f3:34:0f: 84:db:e5:b4:c2:55:69:b9:c0:91:5f:db:a4:5a:14: 91:65:ad:45:b7:0a:78:ab:c1:ea:5e:00:b4:bc:33: 1e:14:c4:6a:b9:aa:6c:ee:d8:52:bc:4d:96:16:0d: fe:4d:ae:30:cb:c9:46:ac:35:5b:07:27:ce:7c:0a: 17:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DD:C3:7D:89:23:F1:A9:7D:4A:92:7E:E1:6C:54:3F:58:3A:3B:9C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC8428C6459911EF8F3D030CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.72.0/23 43.225.75.0/24 103.44.52.0/22 103.49.234.0/23 103.168.180.0/23 IPv6: 2407:9640::/32 Signature Algorithm: sha256WithRSAEncryption ba:66:ff:b2:99:fd:43:7f:bc:98:2d:65:32:61:17:ce:d1:1e: ba:fe:b3:ea:96:07:34:ce:1f:68:6f:1f:84:f9:35:4d:1f:80: b2:f6:8b:a7:f7:6a:67:2f:c3:93:bd:c0:02:cf:8e:3e:2a:d1: 24:d0:80:28:ed:57:8b:c7:ac:71:51:5d:52:fc:bd:3f:88:49: 9a:5e:8a:73:e2:39:7d:e2:1b:e0:59:e1:62:2d:ad:da:54:72: 99:2a:10:24:a2:b1:2d:db:17:ec:3a:6f:5c:f7:f3:c7:62:3e: ac:31:33:f0:46:f4:f6:db:95:7d:24:c8:87:ce:57:3f:17:3f: b7:3c:3d:71:42:f0:d2:a6:aa:82:94:3b:96:ef:f3:e7:13:09: df:d2:51:96:f3:54:c2:83:0e:42:88:67:00:e4:aa:0e:5b:c7: dc:9a:9b:f9:9e:f6:fc:fa:b8:93:45:87:29:d0:4c:ec:5e:99: b3:d6:90:fe:e0:a6:04:c2:bc:ed:c6:13:df:2b:d1:9c:21:e0: 09:e2:24:c3:35:d9:85:98:f3:3b:96:13:2a:34:d6:60:d6:aa: a1:00:34:12:3e:97:98:5f:8d:b9:45:80:e5:70:4c:e0:8f:6b: 4b:8c:c1:aa:86:1b:f2:04:4a:b8:58:9f:88:35:af:f6:d6:84: 07:73:18:3f -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgIDALb1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTg1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5NmQtNzVhMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKX5htemdsju9Znfinc7MQmnTAtOEXuMKp0z4h5SiQR0/Oz1XSs0LE974to7 8iTP7Fl2I1CFeH/cMowxC/i7RPjuD1evyFMvWSfGAkUytnH3JITqjDHV3xcMU9fS dEtncF5xnK63Cot1Go11J/EcFPx2pYIh7UNqmrHNW64gdDBm6gpFVIYvFrRTnnGC TCJ8P6qMZcGarT0CWIHcAvZPuHMbgLLvjQRP2kFEN3EXMpGTqDRegJIU/EbPzNwv szWR8zQPhNvltMJVabnAkV/bpFoUkWWtRbcKeKvB6l4AtLwzHhTEarmqbO7YUrxN lhYN/k2uMMvJRqw1WwcnznwKF5UCAwEAAaOCArwwggK4MB0GA1UdDgQWBBSa3cN9 iSPxqX1Kkn7hbFQ/WDo7nDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JDODQyOEM2 NDU5OTExRUY4RjNEMDMwQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEYGCCsGAQUFBwEHAQH/ BDcwNTAkBAIAATAeAwQBK+FIAwQAK+FLAwQCZyw0AwQBZzHqAwQBZ6i0MA0EAgAC MAcDBQAkB5ZAMA0GCSqGSIb3DQEBCwUAA4IBAQC6Zv+ymf1Df7yYLWUyYRfO0R66 /rPqlgc0zh9obx+E+TVNH4Cy9oun92pnL8OTvcACz44+KtEk0IAo7VeLx6xxUV1S /L0/iEmaXopz4jl94hvgWeFiLa3aVHKZKhAkorEt2xfsOm9c9/PHYj6sMTPwRvT2 25V9JMiHzlc/Fz+3PD1xQvDSpqqClDuW7/PnEwnf0lGW81TCgw5CiGcA5KoOW8fc mpv5nvb8+riTRYcp0EzsXpmz1pD+4KYEwrztxhPfK9GcIeAJ4iTDNdmFmPM7lhMq NNZg1qqhADQSPpeYX425RYDlcEzgj2tLjMGqhhvyBEq4WJ+INa/21oQHcxg/ -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:09 2025 by rpki-client