$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D65557A20BE411EDA3980F75C4F9AE02.roa File: D65557A20BE411EDA3980F75C4F9AE02.roa (raw, json) Hash identifier: htx5gmLZ0tUJ51XDFwGqAfbMcuOKp+sC7RgBWVis3IY= Subject key identifier: 29:46:6B:9C:17:8B:A2:0C:E5:5E:08:7E:A7:15:6A:4E:00:8A:B9:CC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C1A2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D65557A20BE411EDA3980F75C4F9AE02.roa Signing time: Tue 05 Aug 2025 07:51:01 +0000 ROA not before: Tue 05 Aug 2025 07:51:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135236 IP address blocks: 103.189.56.0/23 maxlen: 24 2001:df5:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49570 (0xc1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 5 07:51:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6891b7e5-0d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:b1:8d:96:14:1e:2a:37:a9:97:8a:0b:a5: f4:02:c1:44:67:03:28:93:7d:27:38:74:64:51:44: fe:73:ce:ed:7d:53:72:39:53:ca:e7:df:11:59:84: c4:30:29:65:d7:aa:72:c3:0b:3b:aa:03:75:a0:f2: f3:15:7a:b1:b3:e7:e5:e6:82:36:bf:c0:5e:c1:fc: bd:11:9a:26:c0:6b:17:20:0f:4b:83:65:99:c2:30: 98:6d:79:98:4b:d7:fd:ce:e6:da:96:e3:76:86:e8: 5c:56:66:0b:f1:68:57:a3:a5:fe:45:4a:09:c7:66: 34:a7:7b:2d:b3:75:59:0b:f2:6e:76:d5:4b:d4:54: 4e:92:ce:1e:2c:74:2d:f2:16:ca:1d:7e:00:70:f4: d2:a3:13:0d:0d:27:40:60:0a:5b:74:5f:31:4e:67: 5d:d6:74:63:8e:b9:84:24:0d:d7:48:ef:40:9b:a3: 42:b6:4d:16:93:42:07:f9:db:64:ba:ef:08:72:14: 5c:3d:23:06:bc:1b:22:b0:19:e1:e6:2f:33:32:b7: dd:49:69:d4:7e:61:ea:b2:66:33:56:04:fa:ab:b0: d3:d5:b6:f0:48:f3:8f:48:c8:41:39:22:a7:c0:07: 21:c7:88:bd:80:b5:3c:10:6b:da:c4:b9:ff:c3:02: ec:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:46:6B:9C:17:8B:A2:0C:E5:5E:08:7E:A7:15:6A:4E:00:8A:B9:CC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D65557A20BE411EDA3980F75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.56.0/23 IPv6: 2001:df5:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 16:58:78:99:a4:4f:41:68:d2:d7:73:f6:23:9d:78:94:d7:f9: bf:e5:47:30:c1:a2:be:47:f8:a6:7e:e3:31:4e:2c:4b:97:75: fc:e5:08:74:95:06:c7:e9:55:93:f9:b7:a1:a0:a0:a7:2e:13: 57:9d:af:4a:22:7c:ca:33:e0:c2:7b:f8:30:8e:35:53:ad:27: ae:3e:34:cc:1d:76:b7:e2:bd:7b:62:5a:4a:b9:fc:33:df:9c: ca:79:f9:c3:f5:0f:ec:1c:74:fa:3a:b0:ce:96:96:ee:b6:54: 1e:dd:66:a9:ce:62:c4:c0:05:c4:66:6c:50:65:37:c4:8d:b8: 9f:41:a3:cf:44:42:45:0e:52:98:49:15:69:20:b2:5e:ba:18: df:36:22:da:e2:4b:11:26:ce:53:72:19:96:53:12:9c:f2:08: 78:cb:ca:9c:8c:17:05:84:ec:76:fc:20:a4:79:0a:27:6b:4f: b7:62:34:ea:37:67:2d:b7:b4:77:9d:16:14:41:4e:ea:15:e5: 41:9d:31:d2:f2:9a:ef:51:60:3f:c9:31:4b:88:c3:44:df:b5: 7d:8d:8f:d0:91:a5:16:a1:bb:f7:7c:19:92:48:3d:06:c2:25: f4:f0:0f:cb:b7:37:4d:4c:57:11:48:0a:e8:b7:7c:d6:b6:c8: 6d:f5:9c:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAMGiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgwNTA3NTEwMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg5MWI3ZTUtMGQ1ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQJsY2WFB4qN6mXigul9ALBRGcDKJN9Jzh0ZFFE/nPO7X1TcjlTyuffEVmE xDApZdeqcsMLO6oDdaDy8xV6sbPn5eaCNr/AXsH8vRGaJsBrFyAPS4NlmcIwmG15 mEvX/c7m2pbjdoboXFZmC/FoV6Ol/kVKCcdmNKd7LbN1WQvybnbVS9RUTpLOHix0 LfIWyh1+AHD00qMTDQ0nQGAKW3RfMU5nXdZ0Y465hCQN10jvQJujQrZNFpNCB/nb ZLrvCHIUXD0jBrwbIrAZ4eYvMzK33Ulp1H5h6rJmM1YE+quw09W28Ejzj0jIQTki p8AHIceIvYC1PBBr2sS5/8MC7M8CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQpRmuc F4uiDOVeCH6nFWpOAIq5zDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q2NTU1N0Ey MEJFNDExRURBMzk4MEY3NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ704MA8EAgACMAkDBwAgAQ318MAwDQYJKoZIhvcNAQEL BQADggEBABZYeJmkT0Fo0tdz9iOdeJTX+b/lRzDBor5H+KZ+4zFOLEuXdfzlCHSV BsfpVZP5t6GgoKcuE1edr0oifMoz4MJ7+DCONVOtJ64+NMwddrfivXtiWkq5/DPf nMp5+cP1D+wcdPo6sM6Wlu62VB7dZqnOYsTABcRmbFBlN8SNuJ9Bo89EQkUOUphJ FWkgsl66GN82ItriSxEmzlNyGZZTEpzyCHjLypyMFwWE7Hb8IKR5CidrT7diNOo3 Zy23tHedFhRBTuoV5UGdMdLymu9RYD/JMUuIw0TftX2Nj9CRpRahu/d8GZJIPQbC JfTwD8u3N01MVxFICui3fNa2yG31nGE= -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:06 2025 by rpki-client