$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa File: 718673B6BB7F11EC9E187F19C4F9AE02.roa (raw, json) Hash identifier: 9EwX1hJk88hy4tsE8XbMZbm/zeSwErPz4/BxXWXysts= Subject key identifier: B6:13:C8:DB:D4:BB:EF:0C:1A:AC:CB:B2:3C:BB:F2:53:49:6C:FE:D8 Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Certificate serial: 0391 Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa Signing time: Thu 25 Sep 2025 02:59:04 +0000 ROA not before: Thu 25 Sep 2025 02:59:04 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 45809 IP address blocks: 103.70.24.0/22 maxlen: 24 2001:dce:7::/48 maxlen: 48 2001:dce:8::/48 maxlen: 48 2001:dce:9::/48 maxlen: 48 2001:dce:a::/48 maxlen: 48 2001:dce:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Validity Not Before: Sep 25 02:59:04 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68d4aff8-8285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:2f:9c:8f:f3:5b:3d:db:90:0c:20:c2:88: e9:e0:cd:16:d0:7e:75:59:59:7f:2b:f7:5a:16:2a: 46:00:a4:2f:18:e9:4b:a4:79:5b:76:9f:72:e7:96: 66:35:48:2e:55:25:1c:76:32:7a:db:d8:fc:44:75: 17:af:27:e1:0e:8c:dc:ea:fd:c5:4a:71:55:04:27: 79:f9:76:e5:8d:98:38:0d:60:85:dd:22:86:0c:ce: 4f:77:15:3c:7f:54:ef:9e:98:36:6a:ff:4d:43:c6: 40:39:11:ec:60:dc:a5:bb:a1:c4:4e:30:4c:df:27: 48:d7:a6:28:b6:e1:7c:5e:c9:6d:e5:0f:8f:2b:24: 84:c4:d0:ab:e3:85:41:ba:9e:d4:76:61:1a:a5:9e: db:2c:be:be:02:10:ac:2a:08:5a:b8:a0:54:f5:46: 4b:8b:25:f1:4b:08:08:b4:94:f5:67:fc:ae:5d:a9: 56:ac:df:d8:19:78:3c:73:a3:ec:54:73:66:e5:12: 39:7b:ac:57:e5:c9:13:ed:ee:0e:db:7c:06:e0:76: 6f:e2:22:73:f7:e8:d5:e6:67:d8:25:eb:4e:de:2a: 5b:fc:37:52:c3:18:90:fb:16:49:cf:93:8c:6b:01: e8:a4:c4:b9:a4:f2:b3:07:7d:3e:cc:89:5c:24:6c: 4b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:13:C8:DB:D4:BB:EF:0C:1A:AC:CB:B2:3C:BB:F2:53:49:6C:FE:D8 X509v3 Authority Key Identifier: keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/718673B6BB7F11EC9E187F19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.24.0/22 IPv6: 2001:dce:7::-2001:dce:a:ffff:ffff:ffff:ffff:ffff 2001:dce:2000::/48 Signature Algorithm: sha256WithRSAEncryption 59:12:73:78:02:5f:1e:bc:0a:30:61:1c:b7:94:c9:29:b0:25: d4:d2:db:ce:63:08:c6:5c:c3:87:ac:64:24:57:a0:0b:a6:2a: e9:fc:06:1a:16:3b:2d:32:a9:1b:cb:e8:30:60:c8:10:95:38: 23:54:a1:87:1e:5f:90:34:17:54:9d:43:c9:16:1c:3a:71:fd: 58:7f:b3:4b:8a:8f:d3:2c:a8:7c:e7:fd:6b:22:d0:73:f5:80: f4:70:47:62:b2:61:bc:da:4f:8e:8f:1a:05:f9:88:4c:13:40: 73:72:94:82:e3:17:95:93:f2:da:ca:b2:3b:c3:44:43:c7:a2: 1f:f3:9a:46:bd:b9:87:a6:74:15:9e:12:50:05:11:3f:c7:dc: 1b:94:51:4d:9a:e4:37:24:ce:cb:5c:7f:19:ee:9c:ff:28:8a: 32:a4:a6:59:01:2a:41:56:be:a2:c6:64:80:96:72:2c:cf:20: 31:e0:63:bb:1d:68:91:d8:c6:3e:1d:39:b8:9b:b2:15:c9:e0: 3d:9c:7c:63:fc:1a:7f:8d:cf:8d:ff:7d:46:cd:77:e6:d8:7d: 00:dc:c2:66:96:73:8a:36:a3:1e:0f:ce:0c:f3:35:37:d4:d0: dc:68:e9:77:30:e5:f5:73:c3:8e:fc:ce:a2:4b:fb:1c:9f:31: ef:7f:d6:bd -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0 REQ3MDM1MDQwHhcNMjUwOTI1MDI1OTA0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ0YWZmOC04Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uAvnI/zWz3bkAwgwojp4M0W0H51WVl/K/daFipGAKQvGOlLpHlbdp9y55Zm NUguVSUcdjJ629j8RHUXryfhDozc6v3FSnFVBCd5+XbljZg4DWCF3SKGDM5PdxU8 f1Tvnpg2av9NQ8ZAORHsYNylu6HETjBM3ydI16YotuF8Xslt5Q+PKySExNCr44VB up7UdmEapZ7bLL6+AhCsKghauKBU9UZLiyXxSwgItJT1Z/yuXalWrN/YGXg8c6Ps VHNm5RI5e6xX5ckT7e4O23wG4HZv4iJz9+jV5mfYJetO3ipb/DdSwxiQ+xZJz5OM awHopMS5pPKzB30+zIlcJGxLCwIDAQABo4ICujCCArYwHQYDVR0OBBYEFLYTyNvU u+8MGqzLsjy78lNJbP7YMB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU5M0IvMTAzQzdEMUNCQjdBMTFFQzgyOUVFODBEQzRGOUFFMDIvNzE4NjczQjZC QjdGMTFFQzlFMTg3RjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMAwEAgABMAYDBAJnRhgwIwQCAAIwHTASAwcAIAENzgAHAwcAIAENzgAKAwcA IAENziAAMA0GCSqGSIb3DQEBCwUAA4IBAQBZEnN4Al8evAowYRy3lMkpsCXU0tvO YwjGXMOHrGQkV6ALpirp/AYaFjstMqkby+gwYMgQlTgjVKGHHl+QNBdUnUPJFhw6 cf1Yf7NLio/TLKh85/1rItBz9YD0cEdismG82k+OjxoF+YhME0BzcpSC4xeVk/La yrI7w0RDx6If85pGvbmHpnQVnhJQBRE/x9wblFFNmuQ3JM7LXH8Z7pz/KIoypKZZ ASpBVr6ixmSAlnIszyAx4GO7HWiR2MY+HTm4m7IVyeA9nHxj/Bp/jc+N/31GzXfm 2H0A3MJmlnOKNqMeD84M8zU31NDcaOl3MOX1c8OO/M6iS/scnzHvf9a9 -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:10 2025 by rpki-client