$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B3B00907DBF11F0B50C8B2EC4F9AE02.roa File: 9B3B00907DBF11F0B50C8B2EC4F9AE02.roa (raw, json) Hash identifier: N+zbsXg97MZdXy4ZrU11lQy8Yk66xQue1oNCnL+YKHE= Subject key identifier: 7B:1C:39:76:64:CC:73:2A:CD:43:E8:61:75:78:1B:69:CC:C8:01:E2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C2FB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B3B00907DBF11F0B50C8B2EC4F9AE02.roa Signing time: Wed 20 Aug 2025 12:17:14 +0000 ROA not before: Wed 20 Aug 2025 12:17:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134020 IP address blocks: 103.55.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49915 (0xc2fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 20 12:17:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68a5bcca-1f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:63:a6:4c:89:37:83:23:24:ba:0f:a5:6a: 9a:51:c9:83:f1:76:1f:b9:71:ef:04:8b:a4:77:2c: 35:1a:e9:b2:5e:78:44:02:2a:de:66:69:55:3e:6f: 25:a4:ad:4e:0c:36:b0:e0:95:12:fc:5b:95:2f:73: f7:03:0a:4f:60:38:5e:a6:dd:2c:2b:5e:d5:55:dd: 80:44:8a:ef:6e:a1:5a:32:bc:fe:74:94:6d:27:64: 96:73:1b:17:63:5f:63:4d:2a:4c:a3:06:fb:91:f7: b7:20:0d:96:f9:60:39:db:c7:67:58:62:00:c5:bc: 44:ef:64:b9:ba:ae:ad:72:09:3d:2b:77:6e:97:09: 60:3b:25:c7:b1:b1:11:8e:1f:50:83:e9:97:88:c5: 22:f4:2d:8f:85:f0:57:d6:03:11:e9:b7:a3:06:e5: 50:bb:14:f8:a3:f1:cf:3d:fa:5d:88:6e:4a:82:58: 64:e6:be:19:c6:14:74:2e:ba:35:e0:e9:3d:a9:a6: 02:05:4f:23:cd:ae:7f:a0:da:d5:0c:35:86:e1:43: aa:4d:ee:4b:03:e2:3b:5a:7c:75:4d:01:17:e9:ba: 37:43:33:55:4d:4d:f6:d0:c0:30:ef:82:85:f2:a0: 2d:d5:4b:33:d1:02:5e:25:67:da:79:33:fd:9b:fc: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1C:39:76:64:CC:73:2A:CD:43:E8:61:75:78:1B:69:CC:C8:01:E2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B3B00907DBF11F0B50C8B2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.55.64.0/22 Signature Algorithm: sha256WithRSAEncryption 66:2c:17:10:8f:06:e2:30:7a:ee:3a:6c:34:e3:e1:69:a8:1a: 7c:18:b3:17:87:4e:ce:cd:22:7b:cf:f6:f2:ff:13:48:d0:93: db:e2:1b:b4:ac:e0:1d:03:f7:e8:8a:2b:84:0a:d4:76:35:65: 43:98:25:49:ef:ca:0c:25:ce:a1:53:1b:c2:d1:a5:b0:45:0b: 87:c0:90:10:22:16:49:5e:b4:48:2d:f3:b1:bf:2e:3b:6e:7e: 32:b2:2b:f4:2b:07:b6:32:68:08:68:d8:ab:42:6a:9b:de:3b: a2:04:1a:4c:70:b8:a4:b4:f2:71:05:99:5f:cb:2d:de:b1:b5: 7a:25:4b:11:cb:82:91:66:b4:a0:e6:b6:3f:f5:da:92:90:69: d7:0f:a7:a0:01:10:ba:67:8e:84:15:36:23:7d:22:dc:98:a2: a6:1c:7e:ba:dc:c2:30:1a:73:a7:92:44:cc:23:57:c5:2f:5c: df:cd:f4:96:b5:64:38:de:1a:d2:9f:0e:42:2e:c1:cc:ee:f7: bf:63:d4:1a:f0:9b:20:de:6f:02:df:67:88:c2:51:d6:9e:14: 29:c6:53:fc:56:82:44:aa:a0:df:53:9f:53:45:d3:8e:15:55: 03:0c:7a:e6:22:4b:9d:28:aa:8e:9c:bb:64:7c:00:35:ee:40: 3a:fb:c8:6a -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAML7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgyMDEyMTcxNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhhNWJjY2EtMWYzYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIrY6ZMiTeDIyS6D6VqmlHJg/F2H7lx7wSLpHcsNRrpsl54RAIq3mZpVT5v JaStTgw2sOCVEvxblS9z9wMKT2A4XqbdLCte1VXdgESK726hWjK8/nSUbSdklnMb F2NfY00qTKMG+5H3tyANlvlgOdvHZ1hiAMW8RO9kubqurXIJPSt3bpcJYDslx7Gx EY4fUIPpl4jFIvQtj4XwV9YDEem3owblULsU+KPxzz36XYhuSoJYZOa+GcYUdC66 NeDpPammAgVPI82uf6Da1Qw1huFDqk3uSwPiO1p8dU0BF+m6N0MzVU1N9tDAMO+C hfKgLdVLM9ECXiVn2nkz/Zv8Ot0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBR7HDl2 ZMxzKs1D6GF1eBtpzMgB4jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlCM0IwMDkw N0RCRjExRjBCNTBDOEIyRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZzdAMA0GCSqGSIb3DQEBCwUAA4IBAQBmLBcQjwbiMHru Omw04+FpqBp8GLMXh07OzSJ7z/by/xNI0JPb4hu0rOAdA/foiiuECtR2NWVDmCVJ 78oMJc6hUxvC0aWwRQuHwJAQIhZJXrRILfOxvy47bn4ysiv0Kwe2MmgIaNirQmqb 3juiBBpMcLiktPJxBZlfyy3esbV6JUsRy4KRZrSg5rY/9dqSkGnXD6egARC6Z46E FTYjfSLcmKKmHH663MIwGnOnkkTMI1fFL1zfzfSWtWQ43hrSnw5CLsHM7ve/Y9Qa 8Jsg3m8C32eIwlHWnhQpxlP8VoJEqqDfU59TRdOOFVUDDHrmIkudKKqOnLtkfAA1 7kA6+8hq -----END CERTIFICATE-----Generated at Sun Aug 24 02:32:51 2025 by rpki-client