$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5310FDCBDD011EA9702FC12C4F9AE02.roa File: E5310FDCBDD011EA9702FC12C4F9AE02.roa (raw, json) Hash identifier: gcqcHY3L9k+Heo4stXd5HLvRpkA+UIo0a7DTfuHBzmA= Subject key identifier: AA:38:AF:F6:83:AE:1F:60:B8:FB:D1:8E:27:80:EE:60:D6:DE:C8:49 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B5A4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5310FDCBDD011EA9702FC12C4F9AE02.roa Signing time: Thu 08 May 2025 16:13:45 +0000 ROA not before: Thu 08 May 2025 16:13:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139559 IP address blocks: 103.147.250.0/24 maxlen: 24 103.148.230.0/24 maxlen: 24 2001:df5:b380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46500 (0xb5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:13:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd839-acfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:9a:2a:02:2d:41:77:2e:50:2f:ce:2e:37: d7:61:a9:b7:b2:d4:0c:74:7e:d4:63:5c:c4:88:55: a9:cf:58:99:c3:b7:16:8f:3e:5e:16:33:ce:ef:fa: 4a:8e:de:1e:92:b4:54:15:18:35:34:06:14:94:82: 30:0f:2f:95:a5:af:04:9a:bc:1c:69:c7:57:72:89: 18:85:15:c4:8b:58:ef:8b:8e:0f:67:3c:05:9b:d7: c7:e0:27:b2:85:b3:8d:29:6e:ec:b8:80:25:20:d4: 8c:e2:91:48:30:31:ce:2d:a6:a2:02:7c:33:ce:47: 81:ce:6b:7c:1e:10:96:eb:46:8c:8d:cf:38:7b:91: b2:d5:99:36:99:be:97:f2:8a:0d:fd:d6:8d:84:c6: 18:8f:5f:2b:0c:7f:28:cf:13:c7:7f:af:3c:7d:33: f2:53:a9:d2:68:f5:8e:84:bc:8b:42:43:19:b2:17: 96:7e:c5:89:73:04:2e:58:3a:6d:ab:7d:23:8f:38: 97:5b:1d:56:d8:50:91:23:4c:a4:5e:4c:c7:14:a1: 88:3d:24:a3:f1:25:fe:09:4f:fe:41:a3:5d:01:fa: 74:ea:28:3f:6f:98:62:50:a1:f1:cc:5c:e2:f7:f0: 06:0b:47:1b:ee:c6:ba:b8:65:4c:dd:04:07:87:59: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:38:AF:F6:83:AE:1F:60:B8:FB:D1:8E:27:80:EE:60:D6:DE:C8:49 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5310FDCBDD011EA9702FC12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.250.0/24 103.148.230.0/24 IPv6: 2001:df5:b380::/48 Signature Algorithm: sha256WithRSAEncryption b2:7e:09:cd:dc:bc:d0:2a:7b:2e:c3:04:c2:5a:b7:09:21:37: 72:14:59:cc:41:43:2c:dd:33:a0:27:b6:20:f4:76:a2:01:db: 8a:d0:c1:a4:aa:9d:30:21:5d:58:c9:da:18:98:95:fb:3a:cc: 3c:50:39:9a:e4:03:e3:59:4e:aa:10:44:ba:f7:d0:7b:af:01: 3f:41:37:35:dc:45:c9:db:59:20:8a:27:82:e8:63:87:10:ce: 7c:c5:e7:42:26:e9:4a:bf:2f:5e:cc:d9:42:8a:a5:37:0a:db: 88:25:31:e4:00:82:3b:06:87:7b:b0:1d:93:34:84:5b:00:4f: 90:7e:1c:39:d0:e0:30:20:f5:68:d6:f4:e8:f2:59:0d:6f:32: d5:76:25:40:05:e5:30:83:27:4b:69:8a:8f:3d:87:40:9c:29: b0:61:82:3d:67:cf:b0:e5:9b:70:38:73:e1:2d:dd:56:0f:b1: ae:dd:66:fa:90:cd:32:9c:b7:d5:a1:7d:a0:31:90:e8:dc:39: 48:9b:d6:d6:9c:14:c2:aa:f9:24:1e:84:5c:38:83:c4:aa:2a: c2:10:34:cb:2d:03:27:b0:34:b2:cb:42:1a:f1:a5:33:bf:83: ab:aa:bb:be:63:12:5a:0e:07:37:ac:49:39:d4:80:27:90:e5: fa:36:41:2a -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDALWkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTM0NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4MzktYWNmZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUkmioCLUF3LlAvzi4312Gpt7LUDHR+1GNcxIhVqc9YmcO3Fo8+XhYzzu/6 So7eHpK0VBUYNTQGFJSCMA8vlaWvBJq8HGnHV3KJGIUVxItY74uOD2c8BZvXx+An soWzjSlu7LiAJSDUjOKRSDAxzi2mogJ8M85Hgc5rfB4QlutGjI3POHuRstWZNpm+ l/KKDf3WjYTGGI9fKwx/KM8Tx3+vPH0z8lOp0mj1joS8i0JDGbIXln7FiXMELlg6 bat9I484l1sdVthQkSNMpF5MxxShiD0ko/El/glP/kGjXQH6dOooP2+YYlCh8cxc 4vfwBgtHG+7GurhlTN0EB4dZwZkCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBSqOK/2 g64fYLj70Y4ngO5g1t7ISTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U1MzEwRkRD QkREMDExRUE5NzAyRkMxMkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQAZ5P6AwQAZ5TmMA8EAgACMAkDBwAgAQ31s4AwDQYJKoZI hvcNAQELBQADggEBALJ+Cc3cvNAqey7DBMJatwkhN3IUWcxBQyzdM6AntiD0dqIB 24rQwaSqnTAhXVjJ2hiYlfs6zDxQOZrkA+NZTqoQRLr30HuvAT9BNzXcRcnbWSCK J4LoY4cQznzF50Im6Uq/L17M2UKKpTcK24glMeQAgjsGh3uwHZM0hFsAT5B+HDnQ 4DAg9WjW9OjyWQ1vMtV2JUAF5TCDJ0tpio89h0CcKbBhgj1nz7Dlm3A4c+Et3VYP sa7dZvqQzTKct9WhfaAxkOjcOUib1tacFMKq+SQehFw4g8SqKsIQNMstAyewNLLL QhrxpTO/g6uqu75jEloOBzesSTnUgCeQ5fo2QSo= -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:23 2025 by rpki-client