$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4A6DBCA89A211EC8994F911C4F9AE02.roa File: D4A6DBCA89A211EC8994F911C4F9AE02.roa (raw, json) Hash identifier: /XHOfilFc53y7ODmqvVrJIwqWgBogNlerUqamNY+6EU= Subject key identifier: 4A:A3:2C:B9:88:07:BE:3F:D6:FF:2B:90:EF:10:2F:4D:7F:04:68:7C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B3B2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4A6DBCA89A211EC8994F911C4F9AE02.roa Signing time: Thu 08 May 2025 16:06:11 +0000 ROA not before: Thu 08 May 2025 16:06:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136278 IP address blocks: 103.180.46.0/24 maxlen: 24 103.180.47.0/24 maxlen: 24 2001:df2:3d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46002 (0xb3b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:06:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd672-fdab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:0b:3f:c1:34:e7:5c:83:45:64:20:1e:d9: 22:1d:bc:9b:54:b0:7e:69:57:e5:b0:ac:1b:9c:01: 17:8e:76:40:0c:e8:09:6f:33:7a:e9:5f:b6:c0:77: b1:77:83:5f:03:9a:10:8a:52:56:28:12:c9:d1:ba: 66:54:a5:f7:e9:69:ff:fb:41:f9:05:84:a0:44:9f: 04:1f:f0:8e:d1:cc:13:55:98:cc:98:1e:41:e3:ca: bd:26:4b:4c:93:0a:a2:27:5c:af:f6:a4:30:b1:03: 51:16:05:3c:20:d7:a9:a2:ed:75:c6:43:ea:58:c7: 81:37:ab:14:c0:ac:9d:52:1e:ce:c4:fc:b8:91:46: ef:19:1b:0a:dd:f6:0c:c6:68:d9:89:de:32:6a:5f: 24:ef:08:10:2e:d8:24:fa:08:7a:8a:35:5f:6d:fe: 8b:5c:4e:24:f4:13:16:48:20:e6:15:34:7b:69:41: bd:14:89:63:8e:cc:fa:de:c4:c7:5b:77:7e:5e:b2: 93:28:ed:c2:cd:56:a7:b9:6a:26:86:a3:07:f4:c8: 55:7e:14:6b:74:17:5b:88:2b:01:a2:01:0a:31:d1: 6e:bd:3e:9b:7b:be:67:72:2d:4d:67:c7:72:0c:e7: cd:9b:b7:1e:b2:18:d2:d2:48:6d:ae:9b:97:1f:2a: 52:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A3:2C:B9:88:07:BE:3F:D6:FF:2B:90:EF:10:2F:4D:7F:04:68:7C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4A6DBCA89A211EC8994F911C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.180.46.0/23 IPv6: 2001:df2:3d40::/48 Signature Algorithm: sha256WithRSAEncryption 26:53:c1:81:da:31:f5:8a:04:f9:64:b0:c6:58:2f:7b:69:ea: 48:5e:ce:b3:d7:fa:b9:ff:d2:b4:3a:73:3b:19:ce:a2:6e:7a: 19:e7:7a:16:a0:6a:60:af:07:78:fc:02:ad:22:30:76:2d:2c: 34:b4:ca:f3:8f:84:6a:78:e8:9e:e4:bf:b6:f6:e3:fd:27:0d: 63:ca:06:52:3a:85:4f:59:9e:61:b4:bd:cd:ec:cf:71:07:1a: 86:77:b6:c7:0d:23:86:f6:a7:cf:fa:da:43:5b:03:26:7a:e4: 6c:1a:bc:68:f7:b7:ac:bc:fb:ef:4a:c6:39:ae:aa:bc:b7:19: ad:86:f2:8c:58:6b:44:3a:0a:9a:80:2b:6e:43:84:b0:e4:ae: 2d:7e:19:a8:0d:63:80:7d:7a:30:eb:97:64:db:ef:9a:78:f7: fa:9c:04:a1:06:8c:ee:1d:c5:6a:c6:02:00:c1:38:ef:d2:a3: 70:eb:f4:a5:70:d5:0f:9f:bd:6e:b9:f8:7f:ab:a2:5c:88:e3: 29:5e:50:cf:d0:9d:1f:14:f7:a5:8b:50:a8:35:1e:78:a0:47: d0:63:4a:dc:bd:2a:0c:69:96:3a:1e:cb:0f:5b:58:98:04:85: 35:f0:2d:09:e0:30:9c:04:ae:eb:f4:0b:a7:f4:b1:71:23:82: dd:81:18:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALOyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDYxMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2NzItZmRhYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANeRCz/BNOdcg0VkIB7ZIh28m1SwfmlX5bCsG5wBF452QAzoCW8zeulftsB3 sXeDXwOaEIpSVigSydG6ZlSl9+lp//tB+QWEoESfBB/wjtHME1WYzJgeQePKvSZL TJMKoidcr/akMLEDURYFPCDXqaLtdcZD6ljHgTerFMCsnVIezsT8uJFG7xkbCt32 DMZo2YneMmpfJO8IEC7YJPoIeoo1X23+i1xOJPQTFkgg5hU0e2lBvRSJY47M+t7E x1t3fl6ykyjtws1Wp7lqJoajB/TIVX4Ua3QXW4grAaIBCjHRbr0+m3u+Z3ItTWfH cgznzZu3HrIY0tJIba6blx8qUoMCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRKoyy5 iAe+P9b/K5DvEC9NfwRofDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q0QTZEQkNB ODlBMjExRUM4OTk0RjkxMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7QuMA8EAgACMAkDBwAgAQ3yPUAwDQYJKoZIhvcNAQEL BQADggEBACZTwYHaMfWKBPlksMZYL3tp6khezrPX+rn/0rQ6czsZzqJuehnnehag amCvB3j8Aq0iMHYtLDS0yvOPhGp46J7kv7b24/0nDWPKBlI6hU9ZnmG0vc3sz3EH GoZ3tscNI4b2p8/62kNbAyZ65GwavGj3t6y8++9Kxjmuqry3Ga2G8oxYa0Q6CpqA K25DhLDkri1+GagNY4B9ejDrl2Tb75p49/qcBKEGjO4dxWrGAgDBOO/So3Dr9KVw 1Q+fvW65+H+rolyI4yleUM/QnR8U96WLUKg1HnigR9BjSty9Kgxpljoeyw9bWJgE hTXwLQngMJwEruv0C6f0sXEjgt2BGEE= -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:25 2025 by rpki-client