$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4C9165A3EEE11EB99B2332AC4F9AE02.roa File: C4C9165A3EEE11EB99B2332AC4F9AE02.roa (raw, json) Hash identifier: mjw5pUGUFU4b0XAWccyYcvqT702XVb7sl1JRZ2xKASk= Subject key identifier: EC:EF:27:79:DA:B0:6E:65:51:3B:EC:BB:31:D2:7E:25:18:D7:33:D4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B621 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4C9165A3EEE11EB99B2332AC4F9AE02.roa Signing time: Thu 08 May 2025 16:15:41 +0000 ROA not before: Thu 08 May 2025 16:15:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141300 IP address blocks: 103.160.108.0/23 maxlen: 24 2001:df2:9dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46625 (0xb621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:15:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd8ac-44da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:83:07:02:eb:ad:8a:e6:fb:25:83:69:bf:61: 6c:87:80:e4:65:e0:3e:ae:41:58:11:a1:27:c8:80: 25:0e:bb:31:cf:de:7f:dc:90:b3:69:71:29:cf:47: 9c:76:4e:f4:0a:b7:2a:b7:b1:28:fe:cd:81:a2:8d: e1:85:d7:fe:2c:2f:2a:f7:74:9f:78:1b:1c:a3:3f: 2c:0c:80:20:5a:58:c3:72:e0:11:fd:35:95:d6:ee: e8:39:fe:7c:e9:4b:ae:d4:29:28:99:d8:23:4d:6a: ef:e4:15:bb:11:e6:ab:8b:cc:77:eb:51:04:86:13: f1:a3:a0:3c:93:43:5f:d1:10:d8:1b:30:23:7d:ec: 5f:3f:61:99:e1:29:8d:4f:d9:62:a9:a3:6d:85:7d: dd:e0:e9:c5:ff:f9:19:a6:9f:7f:23:14:89:7e:fb: c5:51:74:4f:5d:22:e1:b7:5b:95:ac:7e:1a:7f:3d: 7f:6d:ae:84:ac:da:14:17:61:fd:aa:b3:7c:e6:10: 3e:d6:00:90:62:8b:66:75:ae:61:6a:20:32:53:94: 12:50:d9:07:f8:d4:f9:68:e8:05:8a:f2:6c:4c:bd: 19:ba:0b:c9:fc:3e:92:8f:fd:c6:35:c9:78:da:a6: e3:0a:bc:6c:7b:bc:00:8b:0f:6d:95:0e:8b:d5:1e: c7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EF:27:79:DA:B0:6E:65:51:3B:EC:BB:31:D2:7E:25:18:D7:33:D4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4C9165A3EEE11EB99B2332AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.108.0/23 IPv6: 2001:df2:9dc0::/48 Signature Algorithm: sha256WithRSAEncryption 61:4d:31:bf:96:2d:6b:34:5b:47:0f:fb:26:d7:1a:dc:3b:88: c0:42:43:f2:2d:74:22:3b:09:c0:c7:e5:42:b9:f2:c2:18:b0: 67:a0:e8:b8:37:78:de:21:65:3c:71:49:91:e7:ee:d2:2b:92: 15:65:34:7f:07:3e:ec:c6:88:3d:ba:12:e8:d2:75:4d:0e:45: 88:75:f7:45:e6:6f:79:27:75:9f:d9:7e:b7:6f:85:ce:66:fa: 03:51:e5:f5:b0:37:95:dc:1f:fb:8e:29:c2:c1:3b:7f:fa:d0: 75:71:cd:70:66:1e:3f:ba:d9:47:6a:f3:3b:b2:c5:e2:b4:c2: f4:7a:3d:92:be:26:c3:6f:ad:10:14:e2:6e:87:07:be:eb:73: 69:89:35:b2:7c:57:b6:e8:96:ba:41:2e:00:36:37:d5:0b:29: 11:65:ad:2f:ea:2b:3f:6e:d5:b7:71:a1:64:c7:01:51:ee:5d: 69:20:f3:2f:92:01:3c:50:68:21:91:dd:1f:40:d7:0d:c4:c0: 29:07:8c:2d:8b:5f:40:a7:a5:9a:7c:a7:54:e2:6e:58:c9:21: ce:c4:ec:f3:d6:ea:bc:4c:67:2a:b0:1f:09:94:22:14:5e:19: 13:f8:c0:eb:c0:22:90:3b:0a:d2:2b:ce:8a:35:26:b1:d2:2e: be:4c:1f:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALYhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTU0MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4YWMtNDRkYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWDBwLrrYrm+yWDab9hbIeA5GXgPq5BWBGhJ8iAJQ67Mc/ef9yQs2lxKc9H nHZO9Aq3KrexKP7NgaKN4YXX/iwvKvd0n3gbHKM/LAyAIFpYw3LgEf01ldbu6Dn+ fOlLrtQpKJnYI01q7+QVuxHmq4vMd+tRBIYT8aOgPJNDX9EQ2BswI33sXz9hmeEp jU/ZYqmjbYV93eDpxf/5GaaffyMUiX77xVF0T10i4bdblax+Gn89f22uhKzaFBdh /aqzfOYQPtYAkGKLZnWuYWogMlOUElDZB/jU+WjoBYrybEy9GboLyfw+ko/9xjXJ eNqm4wq8bHu8AIsPbZUOi9Uex0sCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTs7yd5 2rBuZVE77Lsx0n4lGNcz1DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M0QzkxNjVB M0VFRTExRUI5OUIyMzMyQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ6BsMA8EAgACMAkDBwAgAQ3yncAwDQYJKoZIhvcNAQEL BQADggEBAGFNMb+WLWs0W0cP+ybXGtw7iMBCQ/ItdCI7CcDH5UK58sIYsGeg6Lg3 eN4hZTxxSZHn7tIrkhVlNH8HPuzGiD26EujSdU0ORYh190Xmb3kndZ/Zfrdvhc5m +gNR5fWwN5XcH/uOKcLBO3/60HVxzXBmHj+62Udq8zuyxeK0wvR6PZK+JsNvrRAU 4m6HB77rc2mJNbJ8V7bolrpBLgA2N9ULKRFlrS/qKz9u1bdxoWTHAVHuXWkg8y+S ATxQaCGR3R9A1w3EwCkHjC2LX0CnpZp8p1TibljJIc7E7PPW6rxMZyqwHwmUIhRe GRP4wOvAIpA7CtIrzoo1JrHSLr5MH4o= -----END CERTIFICATE-----Generated at Wed Nov 5 16:32:07 2025 by rpki-client