$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A54063824C1911F0ABC8F656C4F9AE02.roa File: A54063824C1911F0ABC8F656C4F9AE02.roa (raw, json) Hash identifier: MTVvrIwshHSexTI2YqpDXITZF2lpiZMTDvrHVG+ObTk= Subject key identifier: 94:F4:E8:EA:F6:BD:2A:26:41:A1:A3:8B:5C:0E:83:B4:F2:90:9E:1C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BE77 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A54063824C1911F0ABC8F656C4F9AE02.roa Signing time: Wed 18 Jun 2025 07:55:48 +0000 ROA not before: Wed 18 Jun 2025 07:55:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153271 IP address blocks: 45.112.56.0/22 maxlen: 24 103.181.4.0/24 maxlen: 24 103.181.5.0/24 maxlen: 24 103.239.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48759 (0xbe77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 18 07:55:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68527104-da68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c5:86:6a:77:3d:45:64:ff:d3:b6:60:45:af: 32:1b:fd:27:8a:e0:74:de:16:63:f4:76:6c:9a:57: 78:d4:c1:a5:a3:78:6f:b9:4c:bc:a2:09:83:bd:e8: a8:84:41:02:44:c0:cf:54:e8:7b:c7:fe:a8:7c:6d: 93:82:08:31:06:43:71:81:08:46:14:05:cd:92:fe: ca:60:7f:ad:2c:15:0d:39:07:e9:94:11:c2:42:75: 49:84:37:c4:3b:be:e1:36:55:8e:bb:a2:ce:46:14: 76:01:3c:2f:f6:56:2e:f7:56:23:0c:a9:06:6a:02: b5:f6:b7:10:df:89:97:d3:bc:33:16:f2:6d:5b:47: c4:9b:84:8a:ed:bc:2a:ea:a2:44:b2:bc:fd:37:2f: ca:65:bf:61:6c:32:94:fe:a2:90:7f:06:d6:5e:cc: cf:5f:f0:5b:ca:0d:0e:b4:2f:2b:96:20:8e:34:fd: 23:7e:05:d7:7c:97:ae:0a:a5:ff:7e:5c:af:b5:d4: 35:dc:91:a4:4e:54:52:e1:dc:0c:f6:21:2a:5d:2d: 5a:52:4c:ae:ad:3f:12:98:a3:e3:07:53:09:3f:e4: 29:c4:b7:bd:fe:3f:14:8e:90:00:42:69:b5:11:66: 7f:6a:75:ea:d2:86:bf:de:76:ea:95:b2:d7:c8:22: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F4:E8:EA:F6:BD:2A:26:41:A1:A3:8B:5C:0E:83:B4:F2:90:9E:1C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A54063824C1911F0ABC8F656C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.112.56.0/22 103.181.4.0/23 103.239.168.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:1e:6c:a9:a4:6f:05:6f:97:c9:18:5d:4f:61:10:fc:52:98: 27:6c:19:bb:70:c7:3f:f8:92:21:d1:a6:22:79:3b:fa:bb:ce: 82:e5:63:b5:56:e4:06:eb:a1:32:1b:d5:76:07:f7:67:99:16: 4a:ff:d2:4b:5c:6d:22:0e:41:fa:a8:3f:6e:9b:35:1d:5e:42: ee:3e:7e:d6:25:55:9a:20:f3:a5:76:6e:0a:80:0b:a6:df:6f: 4f:25:11:a3:ac:e5:39:62:0e:59:cf:28:40:a9:55:fb:2c:a6: d7:09:7a:7f:e7:be:07:7e:44:4f:58:50:06:93:60:68:79:c7: a3:8f:31:84:aa:3a:b9:df:5b:b3:0b:06:c5:c2:bb:30:3f:b5: 3a:7c:11:17:4d:d1:9e:43:42:f5:35:c8:ec:42:50:d3:d9:00: d0:1d:55:5e:e8:8a:34:8e:82:6b:d2:7a:55:2d:b8:fd:fe:d2: c5:7e:59:6a:c2:4d:fd:92:e4:be:e1:fa:d8:20:b2:a7:9d:9b: d9:b7:35:fc:c6:b6:e1:76:8d:a0:1c:33:1c:49:ac:48:b7:b1: 1f:75:9d:bf:bf:cc:3c:e1:26:6d:22:ce:03:d7:8a:a7:e9:58: 79:bb:97:4c:28:04:4e:55:49:ad:0a:87:df:4d:ac:62:69:a0: ac:24:ed:ca -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIDAL53MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYxODA3NTU0OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg1MjcxMDQtZGE2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvFhmp3PUVk/9O2YEWvMhv9J4rgdN4WY/R2bJpXeNTBpaN4b7lMvKIJg73o qIRBAkTAz1Toe8f+qHxtk4IIMQZDcYEIRhQFzZL+ymB/rSwVDTkH6ZQRwkJ1SYQ3 xDu+4TZVjruizkYUdgE8L/ZWLvdWIwypBmoCtfa3EN+Jl9O8MxbybVtHxJuEiu28 KuqiRLK8/TcvymW/YWwylP6ikH8G1l7Mz1/wW8oNDrQvK5YgjjT9I34F13yXrgql /35cr7XUNdyRpE5UUuHcDPYhKl0tWlJMrq0/Epij4wdTCT/kKcS3vf4/FI6QAEJp tRFmf2p16tKGv9526pWy18giKz8CAwEAAaOCAqEwggKdMB0GA1UdDgQWBBSU9Ojq 9r0qJkGho4tcDoO08pCeHDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E1NDA2Mzgy NEMxOTExRjBBQkM4RjY1NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCsGCCsGAQUFBwEHAQH/ BBwwGjAYBAIAATASAwQCLXA4AwQBZ7UEAwQCZ++oMA0GCSqGSIb3DQEBCwUAA4IB AQBbHmyppG8Fb5fJGF1PYRD8UpgnbBm7cMc/+JIh0aYieTv6u86C5WO1VuQG66Ey G9V2B/dnmRZK/9JLXG0iDkH6qD9umzUdXkLuPn7WJVWaIPOldm4KgAum329PJRGj rOU5Yg5ZzyhAqVX7LKbXCXp/574HfkRPWFAGk2BoecejjzGEqjq531uzCwbFwrsw P7U6fBEXTdGeQ0L1NcjsQlDT2QDQHVVe6Io0joJr0npVLbj9/tLFfllqwk39kuS+ 4frYILKnnZvZtzX8xrbhdo2gHDMcSaxIt7EfdZ2/v8w84SZtIs4D14qn6Vh5u5dM KAROVUmtCoffTaxiaaCsJO3K -----END CERTIFICATE-----Generated at Thu Jul 3 07:08:15 2025 by rpki-client