$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E324E2F6F40611EAA5B2244FC4F9AE02.roa File: E324E2F6F40611EAA5B2244FC4F9AE02.roa (raw, json) Hash identifier: JjlHcRfhosfD6kjrFJUxOquQczoFwZ+SbHdvTDfS9h8= Subject key identifier: 0D:E5:35:FE:59:2E:78:A9:C4:BF:6D:5D:47:E4:FD:E4:56:4A:1F:74 Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Certificate serial: 0B87 Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E324E2F6F40611EAA5B2244FC4F9AE02.roa Signing time: Thu 16 Oct 2025 20:28:44 +0000 ROA not before: Thu 16 Oct 2025 20:28:43 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 45650 IP address blocks: 103.75.49.0/24 maxlen: 24 103.121.172.0/23 maxlen: 24 2405:c540:10::/44 maxlen: 44 2405:c540:10::/48 maxlen: 48 2405:c540:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Validity Not Before: Oct 16 20:28:43 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f1557b-b117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:78:52:e2:05:75:80:a3:0a:7e:c8:2f:f1: 38:b3:fd:8e:d5:da:21:61:62:b8:bb:e0:1a:7b:55: f8:89:26:55:d3:35:cd:3b:09:42:72:ae:93:13:41: 7c:c5:56:db:e4:04:df:af:a2:a7:a5:b5:95:01:3b: b1:c5:44:86:cb:03:51:de:7a:be:47:93:4d:a8:dc: 08:36:3a:7e:78:4a:be:10:20:bc:1c:ae:5e:9f:77: 10:9a:5e:32:eb:8d:31:14:e9:67:0e:45:84:6b:e5: 57:32:42:b3:1a:b9:6d:30:cd:14:88:b0:36:56:29: 66:54:85:78:d5:59:67:21:be:82:d6:57:39:cf:12: ab:55:70:f5:07:fa:3c:a5:de:d4:28:36:d0:70:e5: 0a:af:98:9b:59:fb:75:5b:20:37:68:6c:d4:c7:86: c8:51:c6:e1:fe:a5:91:52:37:37:a2:fd:49:7d:d1: f5:ed:f8:c7:29:2b:8f:00:24:e0:4e:85:5a:11:30: 4c:ac:ad:b9:ee:72:11:b7:41:dd:bb:ef:5d:3a:cc: 63:90:30:72:5b:33:00:7e:b8:c5:20:6c:20:72:a7: 7a:16:89:0b:a3:3a:ea:61:45:55:26:ce:df:d8:14: 9e:9b:6e:ea:29:53:e6:70:fa:6e:e3:b9:b7:cd:72: ef:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E5:35:FE:59:2E:78:A9:C4:BF:6D:5D:47:E4:FD:E4:56:4A:1F:74 X509v3 Authority Key Identifier: keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E324E2F6F40611EAA5B2244FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.75.49.0/24 103.121.172.0/23 IPv6: 2405:c540:10::-2405:c540:2f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption d8:36:75:6a:83:a3:d8:66:0d:37:7e:78:bd:35:d1:ee:fd:ea: f4:cc:be:15:f9:f4:6a:aa:a0:2f:0c:1d:e5:ca:0f:3b:7a:05: 9c:f6:61:4b:50:7c:38:41:bc:1d:44:28:02:35:07:48:f7:03: 60:76:30:b1:13:43:06:62:6d:be:d1:7e:19:1a:34:16:f9:96: 76:90:1d:3b:6b:37:b5:85:2c:b1:aa:16:f8:8d:54:cc:dc:d5: e2:3c:65:38:a0:f2:35:19:ff:27:66:d7:9b:56:30:ba:ca:19: 88:d8:11:56:30:9c:bc:a7:4f:b4:fd:04:a0:d5:27:41:31:16: 89:aa:a3:1a:c7:4f:be:b4:24:f2:06:17:c2:5e:1e:07:ac:a9: bf:8c:15:0f:25:d6:f7:35:d3:9d:f6:99:ca:c3:ac:b3:c6:3f: 37:4b:b3:eb:3e:1e:95:b6:26:6a:3a:fa:f2:83:55:52:d5:00: 21:df:fc:a4:c2:3e:d5:4b:05:c1:d9:fd:6e:3a:1e:cb:05:91: a8:7c:34:5f:3f:01:68:ae:af:95:a5:e7:9c:02:df:c3:9a:dc: fa:b9:56:fb:50:1b:2b:53:d6:42:cf:73:36:e4:19:3f:3e:b8: f1:02:4a:47:61:bc:b8:b6:96:4e:1d:b6:2d:90:64:e9:f1:ed: ca:4c:e2:a8 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5 NjA4RTQzQTgwHhcNMjUxMDE2MjAyODQzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYxNTU3Yi1iMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHx4UuIFdYCjCn7IL/E4s/2O1dohYWK4u+Aae1X4iSZV0zXNOwlCcq6TE0F8 xVbb5ATfr6KnpbWVATuxxUSGywNR3nq+R5NNqNwINjp+eEq+ECC8HK5en3cQml4y 640xFOlnDkWEa+VXMkKzGrltMM0UiLA2VilmVIV41VlnIb6C1lc5zxKrVXD1B/o8 pd7UKDbQcOUKr5ibWft1WyA3aGzUx4bIUcbh/qWRUjc3ov1JfdH17fjHKSuPACTg ToVaETBMrK257nIRt0Hdu+9dOsxjkDByWzMAfrjFIGwgcqd6FokLozrqYUVVJs7f 2BSem27qKVPmcPpu47m3zXLvjwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFA3lNf5Z LnipxL9tXUfk/eRWSh90MB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM4OEQvMzhBQjU5MUUzREMxMTFFQUFGMkI2NzM1QzRGOUFFMDIvRTMyNEUyRjZG NDA2MTFFQUE1QjIyNDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMBIEAgABMAwDBABnSzEDBAFneawwGgQCAAIwFDASAwcEJAXFQAAQAwcEJAXF QAAgMA0GCSqGSIb3DQEBCwUAA4IBAQDYNnVqg6PYZg03fni9NdHu/er0zL4V+fRq qqAvDB3lyg87egWc9mFLUHw4QbwdRCgCNQdI9wNgdjCxE0MGYm2+0X4ZGjQW+ZZ2 kB07aze1hSyxqhb4jVTM3NXiPGU4oPI1Gf8nZtebVjC6yhmI2BFWMJy8p0+0/QSg 1SdBMRaJqqMax0++tCTyBhfCXh4HrKm/jBUPJdb3NdOd9pnKw6yzxj83S7PrPh6V tiZqOvryg1VS1QAh3/ykwj7VSwXB2f1uOh7LBZGofDRfPwForq+VpeecAt/Dmtz6 uVb7UBsrU9ZCz3M25Bk/PrjxAkpHYby4tpZOHbYtkGTp8e3KTOKo -----END CERTIFICATE-----Generated at Mon Oct 20 11:39:54 2025 by rpki-client