$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C233A4D4402D11EF89EEAC62C4F9AE02.roa File: C233A4D4402D11EF89EEAC62C4F9AE02.roa (raw, json) Hash identifier: jCh2YsH/ST8QV9dkeNbLb0Ejrd5c/U96V2Xk5WXxKwU= Subject key identifier: 35:B7:23:9E:13:B1:32:69:7F:BE:8E:CF:B5:05:F3:BB:A6:53:A9:F3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B1B6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C233A4D4402D11EF89EEAC62C4F9AE02.roa Signing time: Thu 08 May 2025 15:58:17 +0000 ROA not before: Thu 08 May 2025 15:58:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133270 IP address blocks: 103.81.212.0/22 maxlen: 24 2401:b1a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45494 (0xb1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:58:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd498-db55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:97:a1:9e:14:90:6d:33:30:43:6b:03:a5:e3: 75:59:ab:a1:1e:cf:42:6c:25:4b:8c:04:b7:28:3b: a7:39:c5:b5:33:52:af:2d:dd:1a:97:2c:56:6f:81: 85:38:b2:78:f7:b3:03:5e:a4:64:b5:5a:f1:fd:50: 7c:92:90:b0:3e:88:3c:71:9c:14:b8:7b:72:ad:a5: fd:30:16:7b:df:43:c3:35:db:67:f5:71:85:a5:71: 0f:fc:0c:97:04:fc:cd:96:bb:ed:f0:14:04:14:c8: bb:a7:77:ee:41:80:cb:5a:d0:e2:00:6d:58:93:aa: dc:12:37:70:66:49:2d:dc:27:03:06:bf:39:cc:6c: 92:d2:4c:13:c6:30:ef:75:41:5a:bb:e9:a2:8e:35: 2b:05:10:0f:9b:6e:20:1c:76:c5:f4:25:57:a4:0d: bb:21:d8:ff:89:18:cd:bf:48:5b:4c:04:1e:6d:ee: 5b:e6:22:be:c0:cd:a2:ba:79:17:34:1a:bf:20:1a: f6:e9:a5:01:08:3b:e4:63:fc:2f:f0:99:f4:1f:01: df:7b:7b:d1:17:9f:1a:a4:3d:6f:ce:a5:d8:85:b6: 1c:aa:be:11:70:1b:8e:dd:52:26:05:71:c9:ff:9c: 90:15:3e:5a:10:e5:93:1b:b6:1a:80:51:87:44:3e: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B7:23:9E:13:B1:32:69:7F:BE:8E:CF:B5:05:F3:BB:A6:53:A9:F3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C233A4D4402D11EF89EEAC62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.212.0/22 IPv6: 2401:b1a0::/32 Signature Algorithm: sha256WithRSAEncryption 17:2a:05:57:7c:3b:df:7b:cf:4b:05:a8:04:8f:38:ed:c6:a7: b3:8b:5b:f1:45:2f:9d:3d:78:c7:61:d6:fb:0f:6e:6e:9d:d6: f9:72:7e:f4:fc:62:e8:10:f8:af:1d:fe:da:ee:60:fa:c5:a8: 75:cc:c5:27:8f:41:e0:cd:3b:e3:44:4c:8e:b1:ab:b0:f8:0b: c7:bb:40:20:42:69:31:2e:1a:51:4a:2b:97:e7:17:ca:89:9d: 4c:2e:d8:f6:65:d6:9c:78:a3:b4:22:8b:96:82:11:8d:7a:a0: a7:89:6f:bc:26:73:6c:31:3e:bb:a8:43:e7:d4:9c:a3:d3:e0: 71:a9:10:29:3d:1f:d2:af:88:1b:35:36:68:95:ac:74:88:76: 7b:12:f3:16:e9:f9:31:1b:dd:48:e1:53:20:37:a7:f6:8a:e6: 25:b8:35:eb:d3:5c:06:49:6b:e2:89:dd:98:91:75:e1:cf:ef: 47:80:68:2f:e7:61:34:d4:cf:c3:ff:c9:08:c2:a1:e2:fc:80: ef:4c:83:9b:03:bf:2c:e8:0d:13:df:dc:28:3e:86:1b:df:85: 17:bd:e0:6d:c6:32:7e:5c:98:28:0f:5e:ec:69:ec:7b:d1:ce: 15:e3:87:63:40:fb:cf:f0:07:7f:e3:0d:f5:6b:6c:a5:94:2c: ac:3b:2d:2e -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDALG2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTgxN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0OTgtZGI1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWXoZ4UkG0zMENrA6XjdVmroR7PQmwlS4wEtyg7pznFtTNSry3dGpcsVm+B hTiyePezA16kZLVa8f1QfJKQsD6IPHGcFLh7cq2l/TAWe99DwzXbZ/VxhaVxD/wM lwT8zZa77fAUBBTIu6d37kGAy1rQ4gBtWJOq3BI3cGZJLdwnAwa/OcxsktJME8Yw 73VBWrvpoo41KwUQD5tuIBx2xfQlV6QNuyHY/4kYzb9IW0wEHm3uW+YivsDNorp5 FzQavyAa9umlAQg75GP8L/CZ9B8B33t70RefGqQ9b86l2IW2HKq+EXAbjt1SJgVx yf+ckBU+WhDlkxu2GoBRh0Q+EVsCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQ1tyOe E7EyaX++js+1BfO7plOp8zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MyMzNBNEQ0 NDAyRDExRUY4OUVFQUM2MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCZ1HUMA0EAgACMAcDBQAkAbGgMA0GCSqGSIb3DQEBCwUA A4IBAQAXKgVXfDvfe89LBagEjzjtxqezi1vxRS+dPXjHYdb7D25undb5cn70/GLo EPivHf7a7mD6xah1zMUnj0HgzTvjREyOsauw+AvHu0AgQmkxLhpRSiuX5xfKiZ1M Ltj2ZdaceKO0IouWghGNeqCniW+8JnNsMT67qEPn1Jyj0+BxqRApPR/Sr4gbNTZo lax0iHZ7EvMW6fkxG91I4VMgN6f2iuYluDXr01wGSWviid2YkXXhz+9HgGgv52E0 1M/D/8kIwqHi/IDvTIObA78s6A0T39woPoYb34UXveBtxjJ+XJgoD17saex70c4V 44djQPvP8Ad/4w31a2yllCysOy0u -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:22 2025 by rpki-client