$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBE298DE45E111ECB7263A7DC4F9AE02.roa File: DBE298DE45E111ECB7263A7DC4F9AE02.roa (raw, json) Hash identifier: 3hX8XyjyAGIKfvwKSRfIso0ZxHDxaPXE16t8lqpvowU= Subject key identifier: CF:D4:09:CE:5E:F5:58:74:11:A8:85:30:11:9B:67:36:4A:98:A6:86 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B768 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBE298DE45E111ECB7263A7DC4F9AE02.roa Signing time: Thu 08 May 2025 16:20:38 +0000 ROA not before: Thu 08 May 2025 16:20:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147210 IP address blocks: 43.231.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46952 (0xb768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:20:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9d5-a338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0f:53:b6:74:21:1b:ec:0b:7b:d4:9f:a5:b2: c8:19:99:fc:85:c8:1c:08:a7:7c:ba:1c:6e:5d:31: 2f:5b:81:6c:99:b2:2d:eb:f4:d1:30:86:1d:8c:8e: 71:c9:97:ab:83:bb:d0:6b:83:e6:8e:8d:01:b2:5e: af:3d:80:96:62:ba:ca:a8:77:c4:6f:27:99:6b:b5: df:c2:c2:d2:4c:9f:86:db:3b:1b:c6:6f:4f:9c:de: 18:77:40:9c:fc:4c:5c:eb:d4:6f:b8:c2:59:7b:17: 24:31:0b:f2:d7:d1:ae:86:39:1c:e2:f5:e1:64:b3: 2d:d7:a2:c2:01:79:e9:76:95:ed:16:6c:14:b9:e4: 92:82:b8:1a:a1:e5:f5:b7:20:eb:1d:da:61:45:ad: 8a:7d:46:3f:ee:1f:ef:bf:59:51:39:4e:46:5b:fd: b2:a2:3c:6d:db:35:0c:dd:65:d9:7f:31:e9:1f:08: 14:5e:c7:20:93:84:87:0b:64:4d:2d:43:da:97:2b: 58:b8:98:76:3c:4e:dd:aa:43:4d:98:82:d4:b6:f5: 47:63:f0:ab:a9:2f:15:ed:14:13:b9:d0:00:4b:ec: 48:a8:30:7a:aa:82:51:bb:ad:c7:58:a3:a8:13:10: 8a:eb:24:4a:a3:61:e9:cc:c1:f5:87:f0:42:eb:6e: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D4:09:CE:5E:F5:58:74:11:A8:85:30:11:9B:67:36:4A:98:A6:86 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DBE298DE45E111ECB7263A7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.52.0/22 Signature Algorithm: sha256WithRSAEncryption 75:be:9b:82:75:7e:6f:95:5c:25:f1:14:3a:d1:d6:da:01:7a: c0:a2:6b:55:89:23:06:ae:76:50:80:0e:63:94:d5:11:a5:c9: 05:3b:b8:d9:0b:08:78:1b:0e:b0:1c:ea:5b:20:83:2c:55:d9: 96:07:e2:92:15:2f:64:45:63:62:c1:29:25:f0:92:79:42:71: 9d:62:9b:c4:37:78:e6:89:78:72:91:b9:f3:c6:d7:f9:cc:96: 02:ce:a8:a1:ce:1c:d8:a5:b0:6a:91:fa:5d:68:b4:4b:7c:3c: 79:cb:7b:5e:e5:a5:f9:f8:cd:18:7a:23:33:66:1f:0e:eb:99: 6c:a0:27:f4:bb:6a:25:44:4b:17:fb:cf:dc:54:9a:50:98:0c: 7a:75:de:93:7d:f7:af:fe:af:75:93:bd:b4:34:24:0b:57:63: 23:c8:ef:82:af:fa:c1:34:03:d6:04:8b:13:6a:79:f1:90:1c: 3f:ef:c1:bb:08:05:ca:f0:ee:90:8a:6a:98:29:08:57:ce:33: b1:3d:75:bb:34:f6:c4:f7:9f:b7:54:2a:a6:38:4f:36:e4:3b: f2:cd:1f:55:7f:dd:c1:4f:4a:14:d9:07:c6:99:cc:72:2c:4e: 53:89:34:f7:ba:4a:e7:6f:a7:fa:47:fc:15:77:48:d1:eb:60: 90:71:4d:c7 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALdoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjAzOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5ZDUtYTMzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANEPU7Z0IRvsC3vUn6WyyBmZ/IXIHAinfLocbl0xL1uBbJmyLev00TCGHYyO ccmXq4O70GuD5o6NAbJerz2AlmK6yqh3xG8nmWu138LC0kyfhts7G8ZvT5zeGHdA nPxMXOvUb7jCWXsXJDEL8tfRroY5HOL14WSzLdeiwgF56XaV7RZsFLnkkoK4GqHl 9bcg6x3aYUWtin1GP+4f779ZUTlORlv9sqI8bds1DN1l2X8x6R8IFF7HIJOEhwtk TS1D2pcrWLiYdjxO3apDTZiC1Lb1R2Pwq6kvFe0UE7nQAEvsSKgweqqCUbutx1ij qBMQiuskSqNh6czB9YfwQutu6qMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTP1AnO XvVYdBGohTARm2c2SpimhjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RCRTI5OERF NDVFMTExRUNCNzI2M0E3REM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCK+c0MA0GCSqGSIb3DQEBCwUAA4IBAQB1vpuCdX5vlVwl 8RQ60dbaAXrAomtViSMGrnZQgA5jlNURpckFO7jZCwh4Gw6wHOpbIIMsVdmWB+KS FS9kRWNiwSkl8JJ5QnGdYpvEN3jmiXhykbnzxtf5zJYCzqihzhzYpbBqkfpdaLRL fDx5y3te5aX5+M0YeiMzZh8O65lsoCf0u2olREsX+8/cVJpQmAx6dd6Tffev/q91 k720NCQLV2MjyO+Cr/rBNAPWBIsTannxkBw/78G7CAXK8O6QimqYKQhXzjOxPXW7 NPbE95+3VCqmOE825DvyzR9Vf93BT0oU2QfGmcxyLE5TiTT3ukrnb6f6R/wVd0jR 62CQcU3H -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:37 2025 by rpki-client