$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/456CC51C78CF11F08DDE1755C4F9AE02.roa File: 456CC51C78CF11F08DDE1755C4F9AE02.roa (raw, json) Hash identifier: si8jUropWsO/hyZ7wA/Ue9ozhVhYRMSixPMwJTGLvG0= Subject key identifier: 09:56:AB:FC:DE:03:DF:3F:1A:E1:DB:5C:94:54:6D:14:56:5F:2A:0A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C299 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/456CC51C78CF11F08DDE1755C4F9AE02.roa Signing time: Thu 14 Aug 2025 05:32:00 +0000 ROA not before: Thu 14 Aug 2025 05:32:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154136 IP address blocks: 110.172.30.0/23 maxlen: 24 2402:2260::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49817 (0xc299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 14 05:32:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=689d74cf-e0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:5e:6a:bd:eb:77:f3:d8:ea:b5:26:01:74: 3d:b3:51:22:2b:63:6c:7e:b7:2f:1c:bd:fd:e7:ea: 2a:c1:15:89:b4:ea:c4:90:7f:c4:a1:68:90:6f:f2: f0:58:b5:ba:fa:a5:fc:55:38:3d:95:50:4a:d3:fa: c4:98:78:7b:91:ed:a8:b4:1f:ed:84:0f:cc:5c:5c: ec:e9:c6:42:d7:1c:03:94:46:e0:62:58:fa:a6:55: e2:35:4c:ee:9a:80:76:35:ed:e3:30:2d:05:b5:63: d3:0a:92:e4:54:f7:05:75:d7:2f:17:98:bd:99:0c: 81:75:23:61:d8:34:e7:d2:12:d9:db:a4:0c:1b:c5: f0:e3:5b:01:50:e1:32:72:a3:22:d4:69:fd:d8:5d: 7f:81:5f:e5:83:76:3a:f3:06:dc:8f:bf:20:ac:57: 1f:00:3c:1b:c1:63:f6:46:34:da:1d:18:0a:96:17: 17:4b:56:75:1b:55:7b:36:33:2a:27:b4:56:3e:c7: ed:af:dd:65:1e:e3:18:a6:f5:04:2c:cb:83:8c:b9: f0:30:65:21:59:b2:e6:37:15:c5:9f:ab:9c:36:3a: 9d:07:e7:37:87:e5:ec:4c:d6:9b:e7:bc:0b:9f:58: 24:76:51:b8:84:0b:b5:4e:71:89:d2:d8:05:56:e1: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:56:AB:FC:DE:03:DF:3F:1A:E1:DB:5C:94:54:6D:14:56:5F:2A:0A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/456CC51C78CF11F08DDE1755C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.172.30.0/23 IPv6: 2402:2260::/32 Signature Algorithm: sha256WithRSAEncryption 28:ec:f0:94:f0:40:da:f9:3e:f2:fd:b4:50:1e:3d:bc:bf:ad: 4c:de:4a:da:24:6e:3c:62:3b:7d:1a:25:bd:fc:ee:ec:a3:7c: c4:e3:73:a9:50:04:c5:a0:b8:59:78:d3:b1:f5:a3:a2:b0:07: 27:91:14:82:6d:06:d7:cc:bb:34:06:71:ac:50:be:15:06:fb: fb:a1:9c:67:62:92:e1:de:af:a0:7a:ed:76:44:b2:59:29:95: 1a:6d:4e:64:5e:17:12:13:54:a7:0c:2e:e4:f0:59:c4:c7:d8: f3:09:48:e2:5b:4f:be:02:fe:da:3e:4c:8c:d9:36:44:5d:21: bc:23:20:ab:0d:be:57:0d:8d:d5:d6:1d:60:7f:4e:e8:16:49: 3a:57:56:9c:f5:4a:e4:3d:0d:3d:33:e6:d2:66:72:db:07:53: 0d:26:4b:c6:bc:1e:75:14:65:ea:a7:4a:52:42:a6:4c:a4:94: 3c:e3:2a:09:61:be:34:ef:e8:eb:b2:88:24:80:b5:72:54:72: c6:83:7d:0c:42:70:40:f8:f1:f8:53:a1:ea:9c:9d:de:a7:2c: 9b:ae:13:6a:70:89:e5:c3:e3:d7:db:9f:8f:d9:cf:b8:86:1a: 9e:44:8d:d1:ca:df:b7:03:db:0e:ed:0b:00:81:3f:26:a7:29: 17:81:49:e0 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAMKZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgxNDA1MzIwMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg5ZDc0Y2YtZTBkNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/4Xmq963fz2Oq1JgF0PbNRIitjbH63Lxy9/efqKsEVibTqxJB/xKFokG/y 8Fi1uvql/FU4PZVQStP6xJh4e5HtqLQf7YQPzFxc7OnGQtccA5RG4GJY+qZV4jVM 7pqAdjXt4zAtBbVj0wqS5FT3BXXXLxeYvZkMgXUjYdg059IS2dukDBvF8ONbAVDh MnKjItRp/dhdf4Ff5YN2OvMG3I+/IKxXHwA8G8Fj9kY02h0YCpYXF0tWdRtVezYz Kie0Vj7H7a/dZR7jGKb1BCzLg4y58DBlIVmy5jcVxZ+rnDY6nQfnN4fl7EzWm+e8 C59YJHZRuIQLtU5xidLYBVbh4acCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQJVqv8 3gPfPxrh21yUVG0UVl8qCjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ1NkNDNTFD NzhDRjExRjA4RERFMTc1NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBbqweMA0EAgACMAcDBQAkAiJgMA0GCSqGSIb3DQEBCwUA A4IBAQAo7PCU8EDa+T7y/bRQHj28v61M3kraJG48Yjt9GiW9/O7so3zE43OpUATF oLhZeNOx9aOisAcnkRSCbQbXzLs0BnGsUL4VBvv7oZxnYpLh3q+geu12RLJZKZUa bU5kXhcSE1SnDC7k8FnEx9jzCUjiW0++Av7aPkyM2TZEXSG8IyCrDb5XDY3V1h1g f07oFkk6V1ac9UrkPQ09M+bSZnLbB1MNJkvGvB51FGXqp0pSQqZMpJQ84yoJYb40 7+jrsogkgLVyVHLGg30MQnBA+PH4U6HqnJ3epyybrhNqcInlw+PX25+P2c+4hhqe RI3Ryt+3A9sO7QsAgT8mpykXgUng -----END CERTIFICATE-----Generated at Sun Aug 24 04:44:16 2025 by rpki-client