$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC82D4BE6AB611EB8A5B574EC4F9AE02.roa File: CC82D4BE6AB611EB8A5B574EC4F9AE02.roa (raw, json) Hash identifier: MQs2+BVQL13olOXapzZDQ5BV37S4drpzRwElmoAyokk= Subject key identifier: B5:96:D1:58:23:15:20:24:13:4A:D3:26:EA:AF:1C:8B:4E:66:40:FB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B184 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC82D4BE6AB611EB8A5B574EC4F9AE02.roa Signing time: Thu 08 May 2025 15:57:29 +0000 ROA not before: Thu 08 May 2025 15:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132984 IP address blocks: 103.241.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45444 (0xb184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd469-ad35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:b6:9b:ad:6d:e9:fc:0b:7d:85:4b:d2:a4: c7:b3:78:00:ad:7a:a2:dd:bf:19:6f:04:98:f2:fa: 93:9e:ac:a9:94:27:47:e5:96:ac:3f:fe:d6:a7:c8: 3d:d8:8f:8a:86:0f:68:59:a9:2a:e6:72:4b:49:cc: 96:c3:e7:3d:bd:1b:3e:09:b4:54:00:f8:54:ae:66: 18:69:d0:23:51:05:b9:dd:34:9f:6b:a1:aa:cf:8d: 8b:72:d3:d6:1c:0d:19:80:8d:05:6f:4d:63:7d:2a: f0:58:a3:9d:e9:7f:fc:52:1b:81:3d:6e:ce:97:07: 46:09:31:d9:83:2d:44:c3:af:fd:fa:bb:8d:a9:20: 78:17:91:44:ab:e3:12:e3:c3:df:e7:b0:74:aa:03: c6:f0:51:21:20:03:2a:00:9e:58:75:cb:46:a0:24: da:19:f8:79:fc:d7:92:f3:99:2c:8b:1f:dc:5e:0c: e3:0e:69:e4:9e:6f:16:81:54:97:7a:9b:8a:61:76: 61:0a:c3:21:27:1f:27:08:f5:92:85:fa:1e:53:b8: 62:ff:50:43:b3:2b:0d:a1:ea:5c:32:2b:2b:ac:bf: 95:cd:f3:a7:05:fa:d9:df:08:6c:98:97:05:90:f7: 70:7c:f1:46:85:b1:66:ed:9e:14:c1:87:38:f9:7f: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:96:D1:58:23:15:20:24:13:4A:D3:26:EA:AF:1C:8B:4E:66:40:FB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC82D4BE6AB611EB8A5B574EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.241.244.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:fa:48:45:84:4e:a9:31:d0:3b:a9:c0:80:3e:71:77:a5:b2: 94:64:6e:87:c3:2a:9b:06:d9:73:89:95:f7:f6:41:4e:e0:63: ae:73:41:84:99:d6:89:3e:51:d9:04:9f:0b:fa:35:19:0f:22: a4:ae:a0:54:a3:3b:90:95:29:7e:fe:50:de:3f:5d:7d:ab:bd: b4:8d:98:05:c4:36:d3:c0:84:d3:7b:fa:a3:02:68:71:11:02: f1:88:55:37:a8:2f:e0:2b:d1:6f:f2:e0:31:be:02:83:8c:29: e0:59:25:01:46:8d:9d:86:03:c3:b1:0c:95:33:1a:48:47:28: 91:c7:95:90:43:98:53:a5:f6:d9:c9:dc:9f:4f:52:a2:14:ff: 9f:27:c8:a4:47:a7:37:58:fb:47:b9:ee:de:bd:d6:5f:b3:fd: 23:7e:9c:4e:8d:ab:85:70:b0:23:23:d2:65:b7:8a:ab:7d:b8: e6:ff:6c:c5:c7:28:30:a1:12:9d:c0:ad:67:12:43:44:42:01: e5:8b:1b:ef:f8:aa:cd:12:fc:ca:88:54:73:b2:98:27:cc:12: 7a:06:fe:9b:59:aa:cc:e5:a3:69:4f:c2:2d:e6:84:fa:e1:5a: 80:42:26:2b:9e:c3:d5:a8:85:e9:b1:64:9f:9f:65:42:c7:fb: 1e:b2:ca:59 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALGEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTcyOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0NjktYWQzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALI5tputben8C32FS9Kkx7N4AK16ot2/GW8EmPL6k56sqZQnR+WWrD/+1qfI PdiPioYPaFmpKuZyS0nMlsPnPb0bPgm0VAD4VK5mGGnQI1EFud00n2uhqs+Ni3LT 1hwNGYCNBW9NY30q8Fijnel//FIbgT1uzpcHRgkx2YMtRMOv/fq7jakgeBeRRKvj EuPD3+ewdKoDxvBRISADKgCeWHXLRqAk2hn4efzXkvOZLIsf3F4M4w5p5J5vFoFU l3qbimF2YQrDIScfJwj1koX6HlO4Yv9QQ7MrDaHqXDIrK6y/lc3zpwX62d8IbJiX BZD3cHzxRoWxZu2eFMGHOPl/oEECAwEAAaOCApUwggKRMB0GA1UdDgQWBBS1ltFY IxUgJBNK0ybqrxyLTmZA+zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NDODJENEJF NkFCNjExRUI4QTVCNTc0RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ/H0MA0GCSqGSIb3DQEBCwUAA4IBAQBa+khFhE6pMdA7 qcCAPnF3pbKUZG6HwyqbBtlziZX39kFO4GOuc0GEmdaJPlHZBJ8L+jUZDyKkrqBU ozuQlSl+/lDeP119q720jZgFxDbTwITTe/qjAmhxEQLxiFU3qC/gK9Fv8uAxvgKD jCngWSUBRo2dhgPDsQyVMxpIRyiRx5WQQ5hTpfbZydyfT1KiFP+fJ8ikR6c3WPtH ue7evdZfs/0jfpxOjauFcLAjI9Jlt4qrfbjm/2zFxygwoRKdwK1nEkNEQgHlixvv +KrNEvzKiFRzspgnzBJ6Bv6bWarM5aNpT8It5oT64VqAQiYrnsPVqIXpsWSfn2VC x/sesspZ -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:28 2025 by rpki-client