$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE18C4EEAE1511EEB9D55E46C4F9AE02.roa File: EE18C4EEAE1511EEB9D55E46C4F9AE02.roa (raw, json) Hash identifier: 0JqK5jaSRpWr9VjOGq/kbpk7fOT5l/fw7w+a2iuYDDg= Subject key identifier: 97:45:AB:E5:A9:FD:F2:EB:D7:39:E4:2C:60:1C:AD:51:BD:1A:01:98 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C16A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE18C4EEAE1511EEB9D55E46C4F9AE02.roa Signing time: Fri 01 Aug 2025 10:31:30 +0000 ROA not before: Fri 01 Aug 2025 10:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138238 IP address blocks: 103.126.196.0/22 maxlen: 24 2402:1ae0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49514 (0xc16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 1 10:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=688c9782-9185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dc:ea:ec:3b:35:10:bd:04:67:c6:2e:9d:c8: 65:85:fc:c0:7e:24:2e:34:ef:83:d5:c7:2b:7a:c9: 9c:de:29:eb:6f:45:54:d8:d1:bf:b6:f0:23:a8:86: 56:c2:67:22:0a:64:35:af:0d:36:7d:71:aa:8e:2a: f6:8a:c4:35:49:10:ae:8b:e2:de:b2:0d:32:c9:a8: ad:92:44:45:46:e2:05:29:ac:c8:c5:89:66:75:5b: d1:1b:45:55:38:3e:36:fe:72:53:45:04:78:e5:8c: f1:6d:98:21:05:25:81:18:06:8e:f8:25:f0:62:20: a4:3c:b5:38:70:c8:10:e7:7c:6d:ea:2c:f7:ee:ff: 4a:45:34:4b:cc:b8:57:1d:6c:66:75:09:b0:ed:86: 30:31:27:12:95:be:6e:ff:f5:1f:0b:fc:77:14:29: 06:c3:0a:26:59:73:c2:ee:20:eb:59:e5:44:55:88: 48:f9:74:c1:14:b0:7a:5c:31:66:63:cb:1a:ac:4b: 1d:7f:79:46:31:85:c1:28:30:ec:cc:4d:42:a6:a5: cb:c6:e0:ad:0f:7b:3c:ef:c0:9c:d1:47:87:b3:e8: 7e:bc:f5:ad:c6:a9:9c:36:15:93:e5:63:f3:2f:13: 5a:82:59:d3:7d:05:1e:1b:ee:71:24:58:18:c4:78: d6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:45:AB:E5:A9:FD:F2:EB:D7:39:E4:2C:60:1C:AD:51:BD:1A:01:98 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE18C4EEAE1511EEB9D55E46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.196.0/22 IPv6: 2402:1ae0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:cc:c8:ca:c3:62:62:67:00:55:e6:97:25:3f:58:7f:09:c5: fc:76:37:9a:51:b6:fe:08:66:aa:53:58:36:17:d9:59:4b:e5: f2:c4:a5:c8:51:15:ed:a9:78:1c:99:02:e1:af:11:b2:c7:9e: d0:62:0c:1f:27:ac:7d:74:44:e7:c1:01:79:96:6b:11:d0:06: 3c:68:7d:8d:ca:b0:d5:fe:a3:36:5a:f5:da:5e:86:5a:87:bf: 4a:09:45:a7:d0:a9:2c:c5:15:d9:b2:8a:f3:cd:0e:fc:0c:64: 4e:73:f6:94:f7:64:d9:d8:69:22:6f:4a:21:a9:fb:c7:19:d9: 9b:a8:a8:a4:d0:b0:54:15:fd:a3:c5:04:15:80:dc:83:42:a2: ae:d2:bd:4a:e4:f1:2b:0c:d5:37:25:99:cc:99:29:57:5f:24: 4b:1f:d7:27:d5:ca:95:01:93:f1:5e:89:f4:41:43:27:57:1d: 6e:95:cb:d3:2e:9f:05:99:9a:c1:5b:ff:34:a5:2b:f5:86:f6: 80:62:16:23:7f:e5:fc:57:e5:34:63:57:27:9d:e4:bf:b0:ca: 54:69:fe:ad:62:bd:d4:72:d2:62:f7:34:4b:ed:42:6b:3c:12: 2b:7d:b5:fa:ce:c7:28:eb:fc:e9:97:18:8a:62:a0:83:8a:c1: 5c:25:53:9e -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAMFqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgwMTEwMzEzMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg4Yzk3ODItOTE4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzc6uw7NRC9BGfGLp3IZYX8wH4kLjTvg9XHK3rJnN4p629FVNjRv7bwI6iG VsJnIgpkNa8NNn1xqo4q9orENUkQrovi3rINMsmorZJERUbiBSmsyMWJZnVb0RtF VTg+Nv5yU0UEeOWM8W2YIQUlgRgGjvgl8GIgpDy1OHDIEOd8beos9+7/SkU0S8y4 Vx1sZnUJsO2GMDEnEpW+bv/1Hwv8dxQpBsMKJllzwu4g61nlRFWISPl0wRSwelwx ZmPLGqxLHX95RjGFwSgw7MxNQqaly8bgrQ97PO/AnNFHh7Pofrz1rcapnDYVk+Vj 8y8TWoJZ030FHhvucSRYGMR41qUCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBSXRavl qf3y69c55CxgHK1RvRoBmDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VFMThDNEVF QUUxNTExRUVCOUQ1NUU0NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCZ37EMA0EAgACMAcDBQAkAhrgMA0GCSqGSIb3DQEBCwUA A4IBAQA8zMjKw2JiZwBV5pclP1h/CcX8djeaUbb+CGaqU1g2F9lZS+XyxKXIURXt qXgcmQLhrxGyx57QYgwfJ6x9dETnwQF5lmsR0AY8aH2NyrDV/qM2WvXaXoZah79K CUWn0KksxRXZsorzzQ78DGROc/aU92TZ2Gkib0ohqfvHGdmbqKik0LBUFf2jxQQV gNyDQqKu0r1K5PErDNU3JZnMmSlXXyRLH9cn1cqVAZPxXon0QUMnVx1ulcvTLp8F mZrBW/80pSv1hvaAYhYjf+X8V+U0Y1cnneS/sMpUaf6tYr3UctJi9zRL7UJrPBIr fbX6zsco6/zplxiKYqCDisFcJVOe -----END CERTIFICATE-----Generated at Wed Nov 5 16:27:47 2025 by rpki-client