$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/883E5442DFA411EF9CB4EB68C4F9AE02.roa File: 883E5442DFA411EF9CB4EB68C4F9AE02.roa (raw, json) Hash identifier: CKQv4vCU29XAGNZOz8i8qVc5TknLyZezZUHxeExuElI= Subject key identifier: 43:D1:91:C2:75:71:FF:A3:1E:7B:06:24:66:D6:7C:05:F5:CD:68:91 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C31E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/883E5442DFA411EF9CB4EB68C4F9AE02.roa Signing time: Fri 22 Aug 2025 08:06:09 +0000 ROA not before: Fri 22 Aug 2025 08:06:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 131210 IP address blocks: 103.2.232.0/22 maxlen: 24 103.21.232.0/22 maxlen: 24 103.163.14.0/24 maxlen: 24 118.151.208.0/22 maxlen: 24 150.129.60.0/22 maxlen: 24 150.129.88.0/22 maxlen: 24 2400:18e0:1::/48 maxlen: 48 2400:18e0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49950 (0xc31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 22 08:06:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68a824f0-7e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:72:87:a2:8a:54:e9:ba:c2:13:48:13:4b:6c: a2:45:ba:97:66:1a:a0:e8:ce:41:09:0c:a7:e7:20: a6:eb:40:0b:f8:38:8b:9e:38:60:44:2d:49:54:fc: 19:9f:ce:d5:a3:53:df:cb:84:2d:59:18:10:fc:52: 12:71:6d:e8:65:cd:7c:04:73:6c:63:67:77:fc:76: 9c:e6:93:cf:62:48:64:e7:5d:ab:31:14:93:44:f1: 05:2d:51:93:8e:80:ee:2e:c6:0a:26:3e:09:e4:fd: 52:4b:74:7b:ce:6e:16:62:c1:b4:7d:8c:dd:cf:2e: bc:90:27:26:e0:09:0d:89:01:93:16:59:8e:57:60: bf:a3:83:e2:17:2e:3c:23:08:44:fb:bb:72:6a:cb: 9e:bc:88:6b:0a:a2:27:00:58:31:3d:12:c1:b0:e8: bd:2c:bc:01:9d:71:a5:2d:01:f7:60:5b:19:ca:ff: 80:83:da:d7:f6:43:d9:3a:9c:58:2b:71:90:c8:08: 57:8d:53:b2:9c:79:65:c1:f8:11:2c:e4:c9:0e:da: 33:94:9f:57:ee:b0:06:1c:a4:29:a4:8d:70:6a:2c: 23:f6:64:6f:9a:89:a6:cd:d8:1c:1c:de:5b:e4:2b: 11:22:5e:ae:27:e8:d6:47:e6:43:fc:08:30:f9:03: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D1:91:C2:75:71:FF:A3:1E:7B:06:24:66:D6:7C:05:F5:CD:68:91 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/883E5442DFA411EF9CB4EB68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.2.232.0/22 103.21.232.0/22 103.163.14.0/24 118.151.208.0/22 150.129.60.0/22 150.129.88.0/22 IPv6: 2400:18e0:1::-2400:18e0:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6f:df:69:2c:0f:a3:ad:49:69:b0:25:0e:10:00:dd:4e:8f:b5: 98:ab:17:f8:be:7c:d5:1f:59:98:68:70:0c:ca:d2:71:6b:b1: 27:38:fd:5c:87:bb:9e:bc:46:de:20:0d:7c:d0:85:7f:a6:a3: 61:be:dc:e3:3f:fa:69:58:f2:c4:8e:13:13:e1:1d:b1:d2:f8: 23:f2:75:4a:48:f6:31:cf:b9:9a:0b:96:c1:51:c0:2d:e6:73: 3f:38:09:20:8c:e4:a1:eb:e9:a3:12:b9:e5:80:c6:aa:e5:b2: a9:f4:f1:dd:e9:bd:f6:a6:0f:f7:b3:68:ac:b8:7b:a5:08:32: e4:23:14:9b:90:8f:33:ae:f9:69:c1:02:cf:b8:07:9f:cf:3f: f0:fd:40:45:4a:5d:c7:6b:d6:42:00:02:3f:68:e4:97:ca:90: 0b:19:dc:94:93:8c:6b:11:98:df:52:6a:16:c3:88:3b:18:d5: 1b:04:4e:5a:9b:58:29:2c:06:56:e4:66:94:a3:01:38:5a:70: d3:d7:d2:a4:a4:22:cd:4a:75:d5:03:8c:7d:52:05:27:fc:e4: f6:09:48:76:35:02:59:a2:1b:44:44:ef:72:7a:36:5a:ce:a6: f0:d9:4e:7f:c2:2c:c2:a9:5f:00:93:d1:11:56:71:d5:5c:7b: 6d:77:cf:d0 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgIDAMMeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgyMjA4MDYwOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhhODI0ZjAtN2U4ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKxyh6KKVOm6whNIE0tsokW6l2YaoOjOQQkMp+cgputAC/g4i544YEQtSVT8 GZ/O1aNT38uELVkYEPxSEnFt6GXNfARzbGNnd/x2nOaTz2JIZOddqzEUk0TxBS1R k46A7i7GCiY+CeT9Ukt0e85uFmLBtH2M3c8uvJAnJuAJDYkBkxZZjldgv6OD4hcu PCMIRPu7cmrLnryIawqiJwBYMT0SwbDovSy8AZ1xpS0B92BbGcr/gIPa1/ZD2Tqc WCtxkMgIV41Tspx5ZcH4ESzkyQ7aM5SfV+6wBhykKaSNcGosI/Zkb5qJps3YHBze W+QrESJerifo1kfmQ/wIMPkDJfECAwEAAaOCAs8wggLLMB0GA1UdDgQWBBRD0ZHC dXH/ox57BiRm1nwF9c1okTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg4M0U1NDQy REZBNDExRUY5Q0I0RUI2OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFkGCCsGAQUFBwEHAQH/ BEowSDAqBAIAATAkAwQCZwLoAwQCZxXoAwQAZ6MOAwQCdpfQAwQCloE8AwQCloFY MBoEAgACMBQwEgMHACQAGOAAAQMHACQAGOAAAjANBgkqhkiG9w0BAQsFAAOCAQEA b99pLA+jrUlpsCUOEADdTo+1mKsX+L581R9ZmGhwDMrScWuxJzj9XIe7nrxG3iAN fNCFf6ajYb7c4z/6aVjyxI4TE+EdsdL4I/J1Skj2Mc+5mguWwVHALeZzPzgJIIzk oevpoxK55YDGquWyqfTx3em99qYP97NorLh7pQgy5CMUm5CPM675acECz7gHn88/ 8P1ARUpdx2vWQgACP2jkl8qQCxnclJOMaxGY31JqFsOIOxjVGwROWptYKSwGVuRm lKMBOFpw09fSpKQizUp11QOMfVIFJ/zk9glIdjUCWaIbRETvcno2Ws6m8NlOf8Is wqlfAJPREVZx1Vx7bXfP0A== -----END CERTIFICATE-----Generated at Sun Aug 24 06:37:11 2025 by rpki-client