$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AC0D30434A11EBA5C40A68C4F9AE02.roa File: F0AC0D30434A11EBA5C40A68C4F9AE02.roa (raw, json) Hash identifier: 1sLxMbMgPTmZ2ArlXdKnzuvZRhzCGtDonn356fEEEQg= Subject key identifier: 75:B1:AD:EC:EA:AC:FB:30:B1:82:7E:93:D2:EB:84:E7:1F:D7:E1:02 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B527 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AC0D30434A11EBA5C40A68C4F9AE02.roa Signing time: Thu 08 May 2025 16:11:52 +0000 ROA not before: Thu 08 May 2025 16:11:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138709 IP address blocks: 103.136.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46375 (0xb527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:11:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd7c8-3e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:77:8e:6f:c7:69:a5:a2:f5:a3:c1:2c:c8:2d: b0:2d:c2:ed:98:6f:b0:99:aa:57:6c:90:a5:6d:d9: 53:0c:77:a2:1b:03:12:d6:2b:f7:99:47:b6:69:de: c5:af:a9:67:8c:0a:5a:5f:e3:61:8e:a1:26:d9:04: 55:d8:c6:bb:83:3a:e6:1c:d3:57:cf:46:38:10:cb: 90:e4:3e:24:3d:a2:b7:e4:cc:34:a4:a0:a7:1f:14: 8d:1f:ab:2b:20:2f:63:5b:b9:33:fa:e9:72:1b:e3: 62:ee:45:f1:5a:db:a8:82:f6:ed:6e:f7:f1:4b:91: f8:4a:97:53:a4:46:53:27:66:fa:be:1c:de:5d:1c: 23:78:f9:5f:36:dd:4b:b9:88:05:92:e3:93:14:03: d5:e7:2c:86:a1:79:97:b5:32:8a:fa:95:e0:03:11: 2f:fb:a7:3a:e9:99:87:3e:f0:74:b0:77:57:79:3f: ba:77:86:d0:3b:25:f1:0c:1a:4a:2e:84:f6:48:9b: b4:78:d3:30:da:fe:92:36:54:18:ef:c9:9b:e0:e0: 60:be:a3:f8:15:69:cb:2b:0a:c5:27:d2:90:0a:47: d1:f2:18:57:9f:e0:7f:c3:47:4b:a4:58:a3:8e:9f: 99:df:41:c1:1d:85:9c:59:dc:a6:fa:99:75:01:3b: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B1:AD:EC:EA:AC:FB:30:B1:82:7E:93:D2:EB:84:E7:1F:D7:E1:02 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AC0D30434A11EBA5C40A68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.172.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:70:ca:5a:89:16:e4:49:2a:6a:59:a7:f2:5b:0e:dd:aa:01: 4f:0a:cf:c2:0e:3a:36:46:8a:cb:e8:20:17:85:6a:a5:21:d9: f5:f6:04:74:d9:d9:50:97:04:bd:e8:d3:4b:40:53:c2:8f:03: a9:d9:a1:b1:2b:68:8d:ba:fb:ef:0e:70:29:29:8d:d6:47:88: 96:34:c3:46:17:45:23:88:fa:dc:8e:38:ee:96:2d:23:d7:ad: 3a:ec:b0:ab:b8:2f:fd:0b:fd:0c:bb:24:a4:d6:33:3b:d3:13: 79:96:44:06:d5:51:9c:d4:dd:a0:98:be:d9:d2:5c:d5:40:36: 87:41:b2:56:c8:8c:07:f3:01:80:e8:d2:27:6d:98:6b:b6:24: a5:6c:fe:25:ee:45:dd:3f:c4:92:2d:37:bf:65:3a:81:9f:d7: ce:d6:e3:96:95:d7:c1:cb:d0:32:14:d8:cc:0a:b7:da:d9:64: 94:ac:ea:27:c1:1b:cb:19:26:3f:0a:44:38:a9:4b:d9:f5:ea: 73:2f:3a:e0:df:b8:b4:b5:b3:a5:12:d9:5d:8e:62:f5:c4:b8: 2a:43:e5:78:43:8a:07:f7:c8:77:19:81:dc:95:dc:db:6e:f9: 4d:87:0a:3b:cc:ee:37:f8:db:e1:8d:e8:77:7b:12:09:a0:76: 12:7e:42:e6 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALUnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTE1MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3YzgtM2UzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOl3jm/HaaWi9aPBLMgtsC3C7ZhvsJmqV2yQpW3ZUwx3ohsDEtYr95lHtmne xa+pZ4wKWl/jYY6hJtkEVdjGu4M65hzTV89GOBDLkOQ+JD2it+TMNKSgpx8UjR+r KyAvY1u5M/rpchvjYu5F8VrbqIL27W738UuR+EqXU6RGUydm+r4c3l0cI3j5Xzbd S7mIBZLjkxQD1ecshqF5l7UyivqV4AMRL/unOumZhz7wdLB3V3k/uneG0Dsl8Qwa Si6E9kibtHjTMNr+kjZUGO/Jm+DgYL6j+BVpyysKxSfSkApH0fIYV5/gf8NHS6RY o46fmd9BwR2FnFncpvqZdQE7GmcCAwEAAaOCApUwggKRMB0GA1UdDgQWBBR1sa3s 6qz7MLGCfpPS64TnH9fhAjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YwQUMwRDMw NDM0QTExRUJBNUM0MEE2OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ4isMA0GCSqGSIb3DQEBCwUAA4IBAQCbcMpaiRbkSSpq WafyWw7dqgFPCs/CDjo2RorL6CAXhWqlIdn19gR02dlQlwS96NNLQFPCjwOp2aGx K2iNuvvvDnApKY3WR4iWNMNGF0UjiPrcjjjuli0j16067LCruC/9C/0MuySk1jM7 0xN5lkQG1VGc1N2gmL7Z0lzVQDaHQbJWyIwH8wGA6NInbZhrtiSlbP4l7kXdP8SS LTe/ZTqBn9fO1uOWldfBy9AyFNjMCrfa2WSUrOonwRvLGSY/CkQ4qUvZ9epzLzrg 37i0tbOlEtldjmL1xLgqQ+V4Q4oH98h3GYHcldzbbvlNhwo7zO43+Nvhjeh3exIJ oHYSfkLm -----END CERTIFICATE-----Generated at Wed Nov 5 23:47:42 2025 by rpki-client