$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EBEEC5A244511EDA7AC3B43C4F9AE02.roa File: 2EBEEC5A244511EDA7AC3B43C4F9AE02.roa (raw, json) Hash identifier: dtOm8YTxCVupQqBh1w9J4mAyKcTijvbmaIOXUXbN2so= Subject key identifier: CB:51:EA:3C:FD:0C:63:B4:50:19:63:43:BA:87:D5:36:40:DC:AA:2E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BE39 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EBEEC5A244511EDA7AC3B43C4F9AE02.roa Signing time: Mon 16 Jun 2025 09:40:16 +0000 ROA not before: Mon 16 Jun 2025 09:40:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150022 IP address blocks: 103.92.106.0/23 maxlen: 24 103.161.52.0/23 maxlen: 24 103.190.238.0/23 maxlen: 24 2001:df1:1740::/48 maxlen: 48 2001:df2:4b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48697 (0xbe39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 16 09:40:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=684fe680-e80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:da:14:ea:82:92:0b:4e:01:71:04:7d:b5: d2:71:05:45:85:c4:cb:c0:f0:29:9a:a9:ce:d6:a2: 31:9e:f1:c2:46:18:0c:70:c6:b7:35:5b:f1:16:be: 18:2c:f4:d1:0a:00:fa:f9:53:67:79:b5:75:2d:59: e9:4f:6b:93:f7:d7:e2:38:dc:b9:2b:b3:ef:11:ff: 04:bc:1e:26:a7:db:1d:57:ef:13:f4:7e:bf:e6:6a: c0:8a:74:1c:65:c5:02:e1:16:d4:47:7d:02:bc:bb: 74:97:51:2c:f7:fa:c0:9e:ff:60:4f:c5:33:2e:0b: ba:3d:d3:02:8e:b2:bb:11:e3:2a:4f:26:43:7a:09: e4:38:54:e5:d6:17:05:1c:6a:4f:1d:35:fc:ab:53: ab:bb:45:aa:77:a1:f8:f1:a4:62:38:7c:ae:0c:e5: a9:1a:95:13:d5:80:f6:f5:bf:c4:9b:4a:11:18:2d: c2:2f:99:ab:b8:a7:78:2f:91:c8:76:ea:25:4a:ba: 5f:fa:3e:b6:82:60:7e:ff:7a:71:c3:aa:c6:7e:89: 86:69:2c:f8:22:96:8e:5c:a3:66:90:67:a8:f0:3b: 37:58:2b:37:62:2e:dd:1f:f1:69:73:98:60:3f:9d: 3c:ea:51:50:1c:2c:e3:67:00:c1:99:de:75:ef:e9: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:51:EA:3C:FD:0C:63:B4:50:19:63:43:BA:87:D5:36:40:DC:AA:2E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2EBEEC5A244511EDA7AC3B43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.92.106.0/23 103.161.52.0/23 103.190.238.0/23 IPv6: 2001:df1:1740::/48 2001:df2:4b40::/48 Signature Algorithm: sha256WithRSAEncryption 90:15:66:d3:cc:13:fa:6a:a7:ca:09:15:63:46:0a:89:ef:1b: f0:7d:10:a7:44:13:9c:67:1c:f0:38:24:21:e7:ce:ec:58:bc: 23:e6:87:9e:b9:d9:35:39:09:8a:6a:fa:ff:25:fe:2a:bf:8e: 77:0b:01:c5:79:26:fa:d6:86:69:0e:16:21:0e:e5:21:b5:20: b0:b8:7a:03:82:71:76:b5:52:f4:85:f2:84:ad:f3:80:59:5c: 2b:e8:bd:bc:35:6f:2f:df:5f:fc:f6:be:d6:b2:d9:2c:fd:7b: 27:61:99:fe:ba:90:e0:78:38:73:fa:11:7b:02:25:3f:22:02: 3d:03:bf:a0:e2:c7:25:fb:15:11:2d:d4:25:74:da:48:80:ce: df:e2:e1:f2:00:04:b7:61:39:a0:62:89:88:7c:8a:9f:a2:f0: 51:93:c1:70:5f:1f:da:79:00:fb:b5:e5:64:e9:23:95:7a:04: 35:50:7f:83:f6:b6:1a:e4:52:f2:57:ec:1d:2d:b0:45:e3:b7: 64:91:59:c7:e4:a9:90:05:2a:a1:bc:ef:b4:7f:26:2f:5c:a5: ea:98:ad:c5:da:c4:13:08:ce:60:cd:07:9c:f6:3e:13:7f:f7: a7:02:5a:1b:8a:c4:80:4b:2d:32:77:09:4d:58:56:f6:f8:6c: 30:cf:b7:a4 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIDAL45MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYxNjA5NDAxNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg0ZmU2ODAtZTgwYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/+2hTqgpILTgFxBH210nEFRYXEy8DwKZqpztaiMZ7xwkYYDHDGtzVb8Ra+ GCz00QoA+vlTZ3m1dS1Z6U9rk/fX4jjcuSuz7xH/BLweJqfbHVfvE/R+v+ZqwIp0 HGXFAuEW1Ed9Ary7dJdRLPf6wJ7/YE/FMy4Luj3TAo6yuxHjKk8mQ3oJ5DhU5dYX BRxqTx01/KtTq7tFqneh+PGkYjh8rgzlqRqVE9WA9vW/xJtKERgtwi+Zq7ineC+R yHbqJUq6X/o+toJgfv96ccOqxn6Jhmks+CKWjlyjZpBnqPA7N1grN2Iu3R/xaXOY YD+dPOpRUBws42cAwZnede/pWO8CAwEAAaOCArswggK3MB0GA1UdDgQWBBTLUeo8 /QxjtFAZY0O6h9U2QNyqLjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJFQkVFQzVB MjQ0NTExRURBN0FDM0I0M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEUGCCsGAQUFBwEHAQH/ BDYwNDAYBAIAATASAwQBZ1xqAwQBZ6E0AwQBZ77uMBgEAgACMBIDBwAgAQ3xF0AD BwAgAQ3yS0AwDQYJKoZIhvcNAQELBQADggEBAJAVZtPME/pqp8oJFWNGConvG/B9 EKdEE5xnHPA4JCHnzuxYvCPmh5652TU5CYpq+v8l/iq/jncLAcV5JvrWhmkOFiEO 5SG1ILC4egOCcXa1UvSF8oSt84BZXCvovbw1by/fX/z2vtay2Sz9eydhmf66kOB4 OHP6EXsCJT8iAj0Dv6DixyX7FREt1CV02kiAzt/i4fIABLdhOaBiiYh8ip+i8FGT wXBfH9p5APu15WTpI5V6BDVQf4P2thrkUvJX7B0tsEXjt2SRWcfkqZAFKqG877R/ Ji9cpeqYrcXaxBMIzmDNB5z2PhN/96cCWhuKxIBLLTJ3CU1YVvb4bDDPt6Q= -----END CERTIFICATE-----Generated at Thu Jul 3 03:48:05 2025 by rpki-client