$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa File: EB4C036EDF6311EEB15F0859C4F9AE02.roa (raw, json) Hash identifier: RS4M/SVbhpWKsV0TAYiTJw7c6XB0mT67NTKP/Wvos/Y= Subject key identifier: 64:66:43:AF:0D:AD:85:19:8B:C4:65:BE:8A:CB:21:93:C0:56:9E:B0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B93A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa Signing time: Thu 08 May 2025 16:27:39 +0000 ROA not before: Thu 08 May 2025 16:27:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151714 IP address blocks: 103.67.92.0/23 maxlen: 24 103.139.226.0/24 maxlen: 24 2001:df3:2940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47418 (0xb93a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:27:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb7b-d5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:6a:6b:4e:3a:25:5e:e6:1c:b4:3e:60:68: 55:7b:cb:c9:fa:09:d8:f0:82:77:69:51:37:8a:d9: f2:0c:c8:ed:10:7e:09:9d:2f:ff:cd:c6:98:32:06: 3d:5c:3e:35:c1:8a:d6:8f:36:58:b0:4b:e3:06:fb: bb:56:ea:dd:b6:d5:cf:77:b7:f6:c4:e5:e5:b3:20: fa:e9:f3:85:f9:21:09:f9:e1:2e:4d:4a:7c:0a:cc: 63:59:48:83:bf:2f:56:77:b8:cd:d3:4c:73:c4:4f: 29:fd:29:f8:09:ad:c4:5c:45:86:72:7c:12:20:05: 86:3a:9e:1b:4c:7c:d1:35:5b:24:63:c4:cf:37:4d: 70:e4:e9:d9:cc:52:25:10:a8:26:d7:af:4f:37:f5: 52:26:f8:af:03:d2:04:09:ee:48:30:28:2a:da:08: ea:23:da:28:8c:97:60:c3:01:7d:24:ea:e3:71:23: cc:ae:e0:ca:5e:b8:90:a7:f5:8f:9c:2a:fc:79:8a: 97:e4:bb:8f:ff:35:d6:56:ff:43:cf:4d:b8:8e:70: 3a:53:e0:e9:98:74:f5:0a:b6:d0:ef:ea:46:54:23: e0:da:98:ef:48:fe:ce:7d:cc:ff:a6:29:9b:ba:b9: 66:3d:51:a2:1d:81:4b:e4:b4:5a:4b:cb:39:df:42: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:66:43:AF:0D:AD:85:19:8B:C4:65:BE:8A:CB:21:93:C0:56:9E:B0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB4C036EDF6311EEB15F0859C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.92.0/23 103.139.226.0/24 IPv6: 2001:df3:2940::/48 Signature Algorithm: sha256WithRSAEncryption b8:01:f3:46:7c:8c:6e:b4:32:84:91:ca:d8:e4:a4:f7:41:63: 00:34:de:09:60:06:02:3f:09:6f:e7:25:02:b6:2c:d3:2c:a5: 2a:0b:d7:5a:62:0c:fe:ad:03:07:a8:e6:35:62:7b:84:d5:82: 44:3d:01:2a:04:85:7e:22:97:c4:0f:4f:f4:0d:e9:6d:ed:fd: 86:0d:93:56:db:24:c4:fd:88:24:46:f4:32:a1:3c:a1:20:88: 75:a4:24:74:a7:9e:b5:da:64:d3:de:5e:eb:66:de:ce:2d:7a: d3:e2:b8:ad:c9:c4:8d:08:d9:21:6f:bb:01:9e:8b:67:2a:36: 34:b6:2a:a2:5d:f4:a2:28:70:96:b2:04:18:f3:e6:5f:f8:3f: b8:8b:72:e6:7e:e6:0b:3c:29:2a:6d:a3:e9:99:7c:17:64:e0: ae:15:86:85:f9:8b:45:8f:a2:88:3e:18:98:5b:21:47:73:61: 6f:7f:64:bd:b1:6b:c6:93:2d:68:a3:06:b6:33:05:90:3e:03: fd:5b:6d:47:5a:24:8d:7e:d9:f2:a8:df:64:6a:90:87:19:41: 48:a7:ef:98:a3:65:6c:7a:7b:e0:ea:0c:8e:e0:b8:d2:d8:4d: 81:d7:ee:96:64:32:d1:d6:15:00:c6:cb:cc:3a:79:d4:94:69: b8:57:0f:79 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDALk6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjczOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiN2ItZDVmNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPMamtOOiVe5hy0PmBoVXvLyfoJ2PCCd2lRN4rZ8gzI7RB+CZ0v/83GmDIG PVw+NcGK1o82WLBL4wb7u1bq3bbVz3e39sTl5bMg+unzhfkhCfnhLk1KfArMY1lI g78vVne4zdNMc8RPKf0p+AmtxFxFhnJ8EiAFhjqeG0x80TVbJGPEzzdNcOTp2cxS JRCoJtevTzf1Uib4rwPSBAnuSDAoKtoI6iPaKIyXYMMBfSTq43EjzK7gyl64kKf1 j5wq/HmKl+S7j/811lb/Q89NuI5wOlPg6Zh09Qq20O/qRlQj4NqY70j+zn3M/6Yp m7q5Zj1Roh2BS+S0WkvLOd9CpXsCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBRkZkOv Da2FGYvEZb6KyyGTwFaesDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VCNEMwMzZF REY2MzExRUVCMTVGMDg1OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQBZ0NcAwQAZ4viMA8EAgACMAkDBwAgAQ3zKUAwDQYJKoZI hvcNAQELBQADggEBALgB80Z8jG60MoSRytjkpPdBYwA03glgBgI/CW/nJQK2LNMs pSoL11piDP6tAweo5jVie4TVgkQ9ASoEhX4il8QPT/QN6W3t/YYNk1bbJMT9iCRG 9DKhPKEgiHWkJHSnnrXaZNPeXutm3s4tetPiuK3JxI0I2SFvuwGei2cqNjS2KqJd 9KIocJayBBjz5l/4P7iLcuZ+5gs8KSpto+mZfBdk4K4VhoX5i0WPoog+GJhbIUdz YW9/ZL2xa8aTLWijBrYzBZA+A/1bbUdaJI1+2fKo32RqkIcZQUin75ijZWx6e+Dq DI7guNLYTYHX7pZkMtHWFQDGy8w6edSUabhXD3k= -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:53 2025 by rpki-client