$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C0DA3478DF6511EEA5A86E67C4F9AE02.roa File: C0DA3478DF6511EEA5A86E67C4F9AE02.roa (raw, json) Hash identifier: E0bby+VoVWN3IinmieYSIGzFWw2xSsxLHHNClH/uMmo= Subject key identifier: 06:99:FF:00:DB:3A:8C:A7:60:48:05:B4:08:F2:9C:DA:07:34:90:82 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B1CD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C0DA3478DF6511EEA5A86E67C4F9AE02.roa Signing time: Thu 08 May 2025 15:58:38 +0000 ROA not before: Thu 08 May 2025 15:58:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133310 IP address blocks: 103.76.76.0/24 maxlen: 24 103.76.77.0/24 maxlen: 24 103.76.78.0/24 maxlen: 24 103.76.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45517 (0xb1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:58:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd4ad-20df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fb:34:9e:c0:ae:0b:dd:df:9e:62:79:85:f9: e5:69:66:ee:24:be:50:16:d8:09:5c:3c:79:13:07: 61:5e:73:d4:df:bf:6b:08:67:34:33:55:92:7f:d8: dd:ae:b0:51:3d:46:d5:a4:fb:b7:98:d7:14:2e:be: b9:4c:54:4d:f8:36:46:19:4d:7a:70:c9:1b:ab:0b: a9:26:2b:50:32:ba:da:7b:ef:79:bb:98:ac:e1:17: 75:84:e8:30:b9:d8:83:31:c6:56:d0:49:58:16:16: 4d:47:00:7a:a1:8d:49:21:cc:8d:b2:80:1f:ee:bb: f1:c6:87:b7:e3:e8:e8:c2:f8:4a:f4:e3:02:8f:42: ab:34:86:11:1f:15:38:10:29:e6:0c:15:db:09:90: c0:64:08:f5:ea:d3:15:88:a2:11:1e:60:7b:77:57: 8d:24:4f:28:96:50:07:0b:a6:9d:75:2b:f6:c3:50: e2:b0:cc:63:63:b3:1a:4e:39:0a:39:af:9b:fb:c8: 2a:73:9f:46:cc:76:77:40:14:41:e5:95:88:e4:35: eb:01:60:e7:1c:88:6d:11:42:72:08:f6:72:d9:c0: 7e:bd:83:ff:43:21:87:e9:3a:11:e7:57:d2:25:77: 5b:bf:5d:15:30:b1:14:cd:70:66:5f:4b:bb:07:ed: 49:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:99:FF:00:DB:3A:8C:A7:60:48:05:B4:08:F2:9C:DA:07:34:90:82 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C0DA3478DF6511EEA5A86E67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.76.0/22 Signature Algorithm: sha256WithRSAEncryption 03:83:e2:1b:a9:ba:82:68:83:36:02:d1:73:43:68:09:28:81: f4:19:6d:5f:6f:e1:b0:6a:b3:d6:49:f1:5e:85:17:34:ec:2d: 49:d8:08:2d:0f:c4:44:33:9b:30:9e:0d:29:73:23:12:68:49: 6d:40:c7:49:44:95:47:dc:d9:0a:d2:59:d0:9b:4c:1a:b4:7e: 08:01:06:7e:fd:13:e9:11:a2:63:a1:79:cc:ba:2e:c6:5f:30: 36:7f:f3:0d:d7:08:51:61:e9:d8:8d:3b:6b:e7:f1:02:db:3c: e7:96:e0:6a:14:45:cc:06:b4:19:c0:3c:50:aa:bd:11:62:35: 11:ac:14:c5:e7:d7:a0:cc:fa:85:33:2a:a8:f7:e7:b3:0a:98: 0a:83:b8:34:2c:29:85:29:30:cf:4b:95:dc:b1:e5:54:1a:8d: 88:aa:4b:25:dc:ab:19:6a:a9:e4:ef:0e:25:69:6d:87:28:e5: 4f:f1:10:71:22:0a:a7:48:2c:39:de:e3:f4:aa:1c:a2:77:23: 18:9f:6f:c4:bb:93:57:04:99:6a:0f:65:72:74:86:83:65:0e: 55:3d:96:48:cc:82:c0:22:b7:7b:f6:df:0e:e0:27:44:ed:4a: 39:21:de:85:a0:77:8f:90:30:e5:3c:a1:31:29:d2:ac:b2:1b: fe:f5:3f:15 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALHNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTgzOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0YWQtMjBkZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMb7NJ7Argvd355ieYX55Wlm7iS+UBbYCVw8eRMHYV5z1N+/awhnNDNVkn/Y 3a6wUT1G1aT7t5jXFC6+uUxUTfg2RhlNenDJG6sLqSYrUDK62nvvebuYrOEXdYTo MLnYgzHGVtBJWBYWTUcAeqGNSSHMjbKAH+678caHt+Po6ML4SvTjAo9CqzSGER8V OBAp5gwV2wmQwGQI9erTFYiiER5ge3dXjSRPKJZQBwumnXUr9sNQ4rDMY2OzGk45 Cjmvm/vIKnOfRsx2d0AUQeWViOQ16wFg5xyIbRFCcgj2ctnAfr2D/0Mhh+k6EedX 0iV3W79dFTCxFM1wZl9LuwftScMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQGmf8A 2zqMp2BIBbQI8pzaBzSQgjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MwREEzNDc4 REY2NTExRUVBNUE4NkU2N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ0xMMA0GCSqGSIb3DQEBCwUAA4IBAQADg+IbqbqCaIM2 AtFzQ2gJKIH0GW1fb+GwarPWSfFehRc07C1J2AgtD8REM5swng0pcyMSaEltQMdJ RJVH3NkK0lnQm0watH4IAQZ+/RPpEaJjoXnMui7GXzA2f/MN1whRYenYjTtr5/EC 2zznluBqFEXMBrQZwDxQqr0RYjURrBTF59egzPqFMyqo9+ezCpgKg7g0LCmFKTDP S5XcseVUGo2Iqksl3KsZaqnk7w4laW2HKOVP8RBxIgqnSCw53uP0qhyidyMYn2/E u5NXBJlqD2VydIaDZQ5VPZZIzILAIrd79t8O4CdE7Uo5Id6FoHePkDDlPKExKdKs shv+9T8V -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:06 2025 by rpki-client