$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/F22AC4E253FA11F0ACEFB91BC4F9AE02.roa File: F22AC4E253FA11F0ACEFB91BC4F9AE02.roa (raw, json) Hash identifier: zV/07wRUVY1rurlMX/hm5KuzjNtGcUHEDL2bs1ve1Lk= Subject key identifier: BF:13:8E:5C:F1:79:7F:62:3C:19:33:62:AF:C9:E6:F2:D0:85:1C:CE Certificate issuer: /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Certificate serial: 17 Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/F22AC4E253FA11F0ACEFB91BC4F9AE02.roa Signing time: Sat 28 Jun 2025 08:37:23 +0000 ROA not before: Sat 28 Jun 2025 08:37:23 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150811 IP address blocks: 103.65.240.0/23 maxlen: 23 103.65.240.0/24 maxlen: 24 103.65.241.0/24 maxlen: 24 2001:df1:c9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Validity Not Before: Jun 28 08:37:23 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=685fa9c3-c694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:28:f1:e3:46:9f:8c:32:c6:bb:8c:2e:5b: e0:32:68:0d:18:3d:31:de:46:4b:62:c6:bd:6c:78: f0:d3:0f:a9:0a:ea:bb:58:b1:50:0c:6e:6b:68:da: 19:11:00:32:de:4b:43:92:d1:6e:35:60:7a:32:7f: c5:ff:54:c8:1b:9b:7c:26:a0:07:ae:bd:a9:5a:ce: c8:2b:40:8f:ed:5c:44:e1:ad:54:f3:cd:6f:06:cb: e8:ca:53:82:de:a6:c1:eb:46:ff:08:96:1d:11:60: 9e:ab:39:4f:80:0e:e9:30:6a:4f:56:10:e3:6e:27: 3f:9d:4b:6a:1e:a8:16:02:6b:a6:ac:0a:51:d7:5e: 5e:04:42:db:eb:3c:88:75:b2:92:ac:1b:be:42:9b: fe:b6:7f:f5:92:1f:85:cb:e0:75:7e:08:50:58:9b: c5:c9:2c:0e:e7:33:c9:ea:25:c9:3d:84:cc:41:3e: 96:76:2e:ba:98:6a:78:5e:a6:03:05:78:e4:06:c2: c4:53:e0:92:c0:63:f9:3a:06:23:1b:94:98:70:02: 49:e1:74:47:a4:16:e5:9f:9c:9f:70:6d:15:eb:20: db:a2:dd:63:19:ad:2a:22:a4:c9:82:2d:15:b5:20: b7:2d:24:5b:be:4d:b7:37:50:f5:71:59:46:50:67: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:13:8E:5C:F1:79:7F:62:3C:19:33:62:AF:C9:E6:F2:D0:85:1C:CE X509v3 Authority Key Identifier: keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/F22AC4E253FA11F0ACEFB91BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.65.240.0/23 IPv6: 2001:df1:c9c0::/48 Signature Algorithm: sha256WithRSAEncryption 48:5f:8a:b1:e6:b3:5e:2f:40:5b:78:9b:d1:c3:68:24:61:c6: 5e:98:80:10:26:54:dc:c6:16:20:1c:04:e1:b7:4f:77:3f:a3: 59:c8:b5:0a:26:49:39:06:c0:5e:a7:23:59:fd:f3:30:46:18: be:66:0e:84:44:98:13:cc:ce:08:38:99:73:51:0d:36:9c:b0: 2c:63:d7:70:37:c8:b2:12:61:97:e6:84:27:b7:2f:34:61:9a: ac:78:7b:23:61:8f:0e:5d:4f:be:2a:d8:dc:d5:c9:bb:39:d8: e4:4a:89:ea:14:02:46:51:ba:e0:90:62:4a:42:8e:51:9f:bd: 38:7f:83:c5:ad:42:91:0b:79:e0:9e:70:2e:e0:4c:86:6c:47: a4:a1:a4:a0:e1:45:d7:98:6a:4f:a3:74:42:e9:e5:ef:ea:3c: b7:ad:2a:2f:d6:1b:1e:62:02:9f:5c:d8:30:c5:98:2f:02:dd: 8b:7c:49:fe:b8:13:32:f5:64:ac:cd:15:10:88:72:68:c9:38: 61:12:59:7d:9e:92:82:03:6f:e1:da:b4:ab:ff:e6:05:ca:38: d2:be:b8:97:25:6b:49:95:c8:e5:03:4a:76:80:15:53:17:97: 55:77:9b:b1:c7:60:a2:96:fb:1c:43:c0:0b:0c:aa:ea:31:96: 93:72:a5:0d -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkU0QjExMC8GA1UEBRMoRDBBNDY2NkFGMzVCNEI2NTREODE4MUM0Q0QxQzkxMUFF Rjk5NDVCQjAeFw0yNTA2MjgwODM3MjNaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NWZhOWMzLWM2OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCviSjx40afjDLGu4wuW+AyaA0YPTHeRktixr1sePDTD6kK6rtYsVAMbmto2hkR ADLeS0OS0W41YHoyf8X/VMgbm3wmoAeuvalazsgrQI/tXEThrVTzzW8Gy+jKU4Le psHrRv8Ilh0RYJ6rOU+ADukwak9WEONuJz+dS2oeqBYCa6asClHXXl4EQtvrPIh1 spKsG75Cm/62f/WSH4XL4HV+CFBYm8XJLA7nM8nqJck9hMxBPpZ2LrqYanhepgMF eOQGwsRT4JLAY/k6BiMblJhwAknhdEekFuWfnJ9wbRXrINui3WMZrSoipMmCLRW1 ILctJFu+Tbc3UPVxWUZQZwZ7AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUvxOOXPF5 f2I8GTNir8nm8tCFHM4wHwYDVR0jBBgwFoAU0KRmavNbS2VNgYHEzRyRGu+ZRbsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGRTRCL0MxNDAxNkI0OEQ3 RjExRURCN0RCODU0Q0M0RjlBRTAyLzBLUm1hdk5iUzJWTmdZSEV6UnlSR3UtWlJi cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMEtSbWF2TmJTMlZOZ1lIRXpSeVJHdS1aUmJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkU0Qi9DMTQwMTZCNDhEN0YxMUVEQjdEQjg1NENDNEY5QUUwMi9GMjJBQzRFMjUz RkExMUYwQUNFRkI5MUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWdB8DAPBAIAAjAJAwcAIAEN8cnAMA0GCSqGSIb3DQEBCwUA A4IBAQBIX4qx5rNeL0BbeJvRw2gkYcZemIAQJlTcxhYgHATht093P6NZyLUKJkk5 BsBepyNZ/fMwRhi+Zg6ERJgTzM4IOJlzUQ02nLAsY9dwN8iyEmGX5oQnty80YZqs eHsjYY8OXU++Ktjc1cm7OdjkSonqFAJGUbrgkGJKQo5Rn704f4PFrUKRC3ngnnAu 4EyGbEekoaSg4UXXmGpPo3RC6eXv6jy3rSov1hseYgKfXNgwxZgvAt2LfEn+uBMy 9WSszRUQiHJoyThhEll9npKCA2/h2rSr/+YFyjjSvriXJWtJlcjlA0p2gBVTF5dV d5uxx2CilvscQ8ALDKrqMZaTcqUN -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:22 2025 by rpki-client