$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB42B95CBD4511EB9A852313C4F9AE02.roa File: CB42B95CBD4511EB9A852313C4F9AE02.roa (raw, json) Hash identifier: JLzEAQB2mVv26oJvc6ZtHj9Ner0Y6+PYuRUMSaqzMEA= Subject key identifier: C2:13:AB:3D:4C:8A:56:70:2E:9A:B9:63:C2:90:34:0B:21:0A:B7:F5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B9D9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB42B95CBD4511EB9A852313C4F9AE02.roa Signing time: Thu 08 May 2025 16:29:57 +0000 ROA not before: Thu 08 May 2025 16:29:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17771 IP address blocks: 45.127.188.0/22 maxlen: 24 49.238.32.0/19 maxlen: 24 103.246.44.0/22 maxlen: 24 202.63.96.0/19 maxlen: 24 2405:1e00::/32 maxlen: 32 2405:1e00::/40 maxlen: 48 2405:1e00:100::/40 maxlen: 48 2405:1e00:200::/40 maxlen: 48 2405:1e00:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47577 (0xb9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:29:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdc05-41ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:56:c3:dc:e5:74:2b:c9:1d:e1:bf:ec:58: 39:af:2b:21:08:ed:b5:9e:48:3b:58:8b:0d:06:91: 6d:c2:dd:ec:aa:04:04:96:67:50:6b:6a:4d:1a:96: 53:b1:a0:25:40:08:de:87:82:78:53:94:e5:db:93: 07:85:0e:d6:67:55:7d:08:ae:9a:50:3a:31:10:e6: 0e:08:27:9e:1c:cf:ce:66:50:8f:19:ce:1d:a7:4e: c1:14:f6:cc:a4:27:b4:37:d0:43:a9:23:df:f9:7a: f6:90:cf:11:5f:5d:48:13:f6:cc:f3:6f:87:00:18: b4:c2:74:a9:70:f8:7d:4c:ad:47:d6:6a:38:24:08: 74:5e:df:58:ab:cb:c6:d4:3c:44:2f:24:9e:00:b0: 59:8f:a5:e9:89:c4:39:64:4b:65:81:a0:ca:a1:d7: 2a:4a:0a:ab:93:43:e0:e6:d5:44:28:db:f9:2a:5b: 5e:fc:21:1e:f8:fe:2c:50:af:89:7f:d7:56:91:77: f6:b3:0d:78:40:6e:2b:38:ce:3d:50:91:82:d3:77: 65:df:3e:18:77:5e:2a:50:39:dc:78:d5:22:70:1a: 95:a2:c2:dd:b2:92:cd:dc:8a:ee:30:c3:d8:b6:70: d7:e6:3c:28:e6:4d:f0:9c:d9:ea:bf:1c:2e:aa:32: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:13:AB:3D:4C:8A:56:70:2E:9A:B9:63:C2:90:34:0B:21:0A:B7:F5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB42B95CBD4511EB9A852313C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.127.188.0/22 49.238.32.0/19 103.246.44.0/22 202.63.96.0/19 IPv6: 2405:1e00::/32 Signature Algorithm: sha256WithRSAEncryption 4f:2b:73:fc:4d:b2:d0:77:4f:47:04:75:a8:c8:48:c1:f7:58: 30:48:a6:d8:d6:0c:37:03:dc:08:20:b1:4b:82:af:f8:51:a7: 96:91:10:b6:87:b2:f7:1d:d9:67:5c:bd:6f:69:01:32:7a:3c: 11:7e:cc:cd:b9:07:ad:5b:6d:51:c9:c7:64:9b:68:e0:5e:52: d6:3a:81:ca:d0:4c:bb:75:a1:83:07:f6:77:5c:da:c4:0c:e2: de:89:08:43:73:4c:88:75:25:c1:c5:26:59:97:b0:f6:53:6d: 18:fc:e8:01:77:43:0e:f2:7e:2e:18:67:11:91:9c:05:c1:c6: 79:39:9b:30:30:cd:16:58:da:49:5d:53:b6:fe:f1:55:69:db: 64:18:17:7d:e1:f4:62:d5:ff:50:b6:dc:2e:ba:9d:93:32:3b: 47:bd:33:ae:c6:7c:3f:2d:8b:9b:1c:37:a9:ca:65:55:12:e1: 18:f5:e0:eb:2f:b7:7b:b2:53:28:89:98:ee:24:76:21:fe:35: 44:e1:17:aa:9a:c8:55:c8:37:7c:5a:a6:e6:6c:7b:2a:9d:09: 3b:4b:bb:3b:2c:e5:db:da:6b:93:ed:65:28:d1:cc:b7:5a:93: 3a:9a:7f:69:ec:50:14:be:28:47:66:2a:5a:ef:26:1a:7b:34: f0:e9:9c:dd -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgIDALnZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2Mjk1N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RjMDUtNDFlYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdmVsPc5XQryR3hv+xYOa8rIQjttZ5IO1iLDQaRbcLd7KoEBJZnUGtqTRqW U7GgJUAI3oeCeFOU5duTB4UO1mdVfQiumlA6MRDmDggnnhzPzmZQjxnOHadOwRT2 zKQntDfQQ6kj3/l69pDPEV9dSBP2zPNvhwAYtMJ0qXD4fUytR9ZqOCQIdF7fWKvL xtQ8RC8kngCwWY+l6YnEOWRLZYGgyqHXKkoKq5ND4ObVRCjb+SpbXvwhHvj+LFCv iX/XVpF39rMNeEBuKzjOPVCRgtN3Zd8+GHdeKlA53HjVInAalaLC3bKSzdyK7jDD 2LZw1+Y8KOZN8JzZ6r8cLqoyAjkCAwEAAaOCArYwggKyMB0GA1UdDgQWBBTCE6s9 TIpWcC6auWPCkDQLIQq39TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NCNDJCOTVD QkQ0NTExRUI5QTg1MjMxM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEAGCCsGAQUFBwEHAQH/ BDEwLzAeBAIAATAYAwQCLX+8AwQFMe4gAwQCZ/YsAwQFyj9gMA0EAgACMAcDBQAk BR4AMA0GCSqGSIb3DQEBCwUAA4IBAQBPK3P8TbLQd09HBHWoyEjB91gwSKbY1gw3 A9wIILFLgq/4UaeWkRC2h7L3HdlnXL1vaQEyejwRfszNuQetW21Rycdkm2jgXlLW OoHK0Ey7daGDB/Z3XNrEDOLeiQhDc0yIdSXBxSZZl7D2U20Y/OgBd0MO8n4uGGcR kZwFwcZ5OZswMM0WWNpJXVO2/vFVadtkGBd94fRi1f9Qttwuup2TMjtHvTOuxnw/ LYubHDepymVVEuEY9eDrL7d7slMoiZjuJHYh/jVE4ReqmshVyDd8WqbmbHsqnQk7 S7s7LOXb2muT7WUo0cy3WpM6mn9p7FAUvihHZipa7yYaezTw6Zzd -----END CERTIFICATE-----Generated at Wed Nov 5 16:30:55 2025 by rpki-client