$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75729ABE784511F083ABF579C4F9AE02.roa File: 75729ABE784511F083ABF579C4F9AE02.roa (raw, json) Hash identifier: nY2SUd8yznwZSL/XvZyVtXTQr4TtLDFeYuXeUD7Jxp4= Subject key identifier: 10:9C:30:0E:78:B4:91:72:9C:2B:EE:23:B5:0F:7A:E1:5F:CF:91:82 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C349 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75729ABE784511F083ABF579C4F9AE02.roa Signing time: Tue 26 Aug 2025 11:32:10 +0000 ROA not before: Tue 26 Aug 2025 11:32:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134032 IP address blocks: 45.118.32.0/22 maxlen: 24 103.57.150.0/24 maxlen: 24 103.58.64.0/22 maxlen: 24 103.58.115.0/24 maxlen: 24 103.58.116.0/23 maxlen: 24 103.135.46.0/24 maxlen: 24 103.135.47.0/24 maxlen: 24 103.148.8.0/24 maxlen: 24 103.163.44.0/23 maxlen: 24 103.168.198.0/23 maxlen: 24 103.171.12.0/23 maxlen: 24 103.178.158.0/23 maxlen: 24 103.186.172.0/23 maxlen: 24 2001:df2:9900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49993 (0xc349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 26 11:32:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68ad9b3a-1dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:f9:ad:73:9f:16:b0:80:f1:73:5c:b8:c4: bf:45:c4:28:81:38:cb:6c:6e:c3:3c:4e:aa:b2:90: df:e5:d2:5d:f7:0d:b1:0a:70:44:5f:64:a1:1c:cc: 02:a1:ae:02:33:6e:06:c5:2c:0d:e2:70:5a:4f:bb: 81:7a:d2:8a:f7:2a:ad:45:c6:14:60:bc:63:d8:eb: 80:4e:9c:f4:b0:f0:08:f0:ea:d2:18:8f:88:29:38: 24:65:8e:99:03:a0:98:e0:8c:dc:53:ac:60:48:f4: 60:cc:54:43:07:bb:7d:0a:a3:42:6f:70:61:25:c0: f6:38:c7:ed:92:06:d0:f2:eb:fa:31:13:3a:94:14: 8b:0f:9d:de:2d:fb:2f:a5:34:41:22:c6:3d:28:4e: ba:3b:ac:4b:da:ba:9d:e0:8c:28:5d:95:9d:16:4c: 01:0b:98:04:e8:a4:c0:bb:4c:c6:55:d8:9f:04:14: d3:d4:60:ae:c1:71:bd:b6:e0:5e:ca:2e:d9:e5:fe: 60:11:e6:3a:87:5a:10:84:7c:db:a1:2f:3b:75:f7: d8:8e:0f:25:b2:f9:21:83:bf:59:bb:46:81:31:5a: ca:a2:12:68:f6:b5:be:c2:02:06:57:dc:0e:21:90: 1b:25:ba:da:2e:2b:2d:56:9e:cf:e8:eb:61:93:a1: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9C:30:0E:78:B4:91:72:9C:2B:EE:23:B5:0F:7A:E1:5F:CF:91:82 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75729ABE784511F083ABF579C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.32.0/22 103.57.150.0/24 103.58.64.0/22 103.58.115.0-103.58.117.255 103.135.46.0/23 103.148.8.0/24 103.163.44.0/23 103.168.198.0/23 103.171.12.0/23 103.178.158.0/23 103.186.172.0/23 IPv6: 2001:df2:9900::/48 Signature Algorithm: sha256WithRSAEncryption 85:81:37:64:8d:f9:0a:f1:99:42:f7:d0:4b:e5:04:b2:26:74: a9:02:cf:31:af:9c:79:c1:78:18:69:bf:f9:3f:ca:f7:7b:68: 48:5f:ec:37:bd:6d:65:87:a9:9d:c7:eb:cf:d1:86:49:26:02: ce:38:70:76:08:aa:f1:90:c1:66:6c:fc:ea:9f:06:75:f8:8a: 04:93:0a:1c:1b:e5:d3:b4:04:7c:e0:71:5f:ed:fc:de:04:6c: 5b:91:19:5a:20:bc:ee:d6:d8:36:e4:8d:6a:9a:1d:db:2b:46: 71:00:9f:d6:22:2c:67:c3:5c:01:5a:ec:cd:fa:19:f8:75:88: d8:dd:aa:90:7d:bb:65:13:9c:ef:f4:ea:e4:8e:cb:bd:1b:61: ee:91:21:e8:2a:c3:25:d7:d1:95:dd:37:57:09:ce:cd:a0:b3: c0:2b:67:76:2d:ab:a7:7b:cd:7e:27:a8:d7:ea:b8:cd:22:c7: d5:a8:45:c1:16:82:bb:b3:fb:59:88:d5:01:e8:68:05:a7:4d: b2:82:a3:84:42:e3:5c:ef:f4:c2:ad:7d:9d:88:12:c8:fe:74: 41:9e:d9:55:14:43:62:84:6f:cc:35:72:b1:e7:94:ab:b4:56: 7f:92:93:c3:f9:82:9a:c4:6f:65:66:63:86:bf:ba:f3:ee:db: 00:81:c8:6d -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIDAMNJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgyNjExMzIxMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhhZDliM2EtMWRjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnG+a1znxawgPFzXLjEv0XEKIE4y2xuwzxOqrKQ3+XSXfcNsQpwRF9koRzM AqGuAjNuBsUsDeJwWk+7gXrSivcqrUXGFGC8Y9jrgE6c9LDwCPDq0hiPiCk4JGWO mQOgmOCM3FOsYEj0YMxUQwe7fQqjQm9wYSXA9jjH7ZIG0PLr+jETOpQUiw+d3i37 L6U0QSLGPShOujusS9q6neCMKF2VnRZMAQuYBOikwLtMxlXYnwQU09RgrsFxvbbg Xsou2eX+YBHmOodaEIR826EvO3X32I4PJbL5IYO/WbtGgTFayqISaPa1vsICBlfc DiGQGyW62i4rLVaez+jrYZOhEasCAwEAAaOCAuowggLmMB0GA1UdDgQWBBQQnDAO eLSRcpwr7iO1D3rhX8+RgjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc1NzI5QUJF Nzg0NTExRjA4M0FCRjU3OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMHQGCCsGAQUFBwEHAQH/ BGUwYzBQBAIAATBKAwQCLXYgAwQAZzmWAwQCZzpAMAwDBABnOnMDBAFnOnQDBAFn hy4DBABnlAgDBAFnoywDBAFnqMYDBAFnqwwDBAFnsp4DBAFnuqwwDwQCAAIwCQMH ACABDfKZADANBgkqhkiG9w0BAQsFAAOCAQEAhYE3ZI35CvGZQvfQS+UEsiZ0qQLP Ma+cecF4GGm/+T/K93toSF/sN71tZYepncfrz9GGSSYCzjhwdgiq8ZDBZmz86p8G dfiKBJMKHBvl07QEfOBxX+383gRsW5EZWiC87tbYNuSNapod2ytGcQCf1iIsZ8Nc AVrszfoZ+HWI2N2qkH27ZROc7/Tq5I7LvRth7pEh6CrDJdfRld03VwnOzaCzwCtn di2rp3vNfieo1+q4zSLH1ahFwRaCu7P7WYjVAehoBadNsoKjhELjXO/0wq19nYgS yP50QZ7ZVRRDYoRvzDVyseeUq7RWf5KTw/mCmsRvZWZjhr+68+7bAIHIbQ== -----END CERTIFICATE-----Generated at Sun Oct 19 22:54:03 2025 by rpki-client