$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE1CC52293A811F09554747AC4F9AE02.roa File: BE1CC52293A811F09554747AC4F9AE02.roa (raw, json) Hash identifier: btZOAu4OCyiARCfBmU0hqzEFb2GbTC1hcly+bfGIw/E= Subject key identifier: 25:0D:6D:4B:5C:D9:DE:32:D7:A9:E7:19:86:32:DF:76:20:E5:43:8C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C574 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE1CC52293A811F09554747AC4F9AE02.roa Signing time: Wed 24 Sep 2025 04:50:45 +0000 ROA not before: Wed 24 Sep 2025 04:50:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134858 IP address blocks: 103.39.116.0/22 maxlen: 24 103.80.22.0/23 maxlen: 24 103.105.96.0/23 maxlen: 24 103.127.224.0/22 maxlen: 24 103.157.52.0/23 maxlen: 24 103.158.239.0/24 maxlen: 24 103.170.152.0/23 maxlen: 24 2407:8c0::/32 maxlen: 32 2407:8c0:1900::/51 maxlen: 51 2407:8c0:2000::/51 maxlen: 51 2407:8c0:2100::/48 maxlen: 48 2407:8c0:2200::/48 maxlen: 48 2407:8c0:2300::/48 maxlen: 48 2407:8c0:2400::/48 maxlen: 48 2407:8c0:2500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50548 (0xc574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 24 04:50:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68d378a4-ff4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:88:04:30:81:a0:92:4b:21:c3:65:70:68:86: 12:c3:0c:d0:c2:b2:5c:d7:28:0d:a0:90:fc:78:db: bf:f8:99:8d:43:11:9d:03:bf:dc:08:cf:ad:32:2f: 8f:33:bf:cd:cd:28:b9:3d:07:cd:df:f2:2e:52:a1: fd:ed:50:0c:aa:05:18:8b:0d:86:d1:6e:97:dc:8f: 7a:ca:d6:51:cf:ff:62:29:c9:72:9b:3c:48:55:26: 40:86:5e:79:c2:79:0d:58:db:6d:67:5d:e0:af:c3: f8:88:4b:af:50:31:b7:c2:20:dc:88:17:fc:4b:3f: c5:bc:1d:1f:d8:71:8c:07:8c:51:4c:f3:5b:7b:68: 8e:d9:c7:8f:b3:66:90:7d:c5:32:0c:59:d4:45:4e: 4c:50:73:15:ec:aa:bc:02:91:7f:f0:90:92:85:3b: 88:ce:53:3b:9e:1c:40:1d:92:35:ca:99:08:79:dc: 1b:ac:1f:2b:3e:98:5c:bd:dd:28:2e:10:a3:64:59: f7:5d:e0:8a:bd:7e:a3:8c:d0:a0:eb:8a:93:9c:e2: c1:bb:48:aa:d7:57:f0:ba:c4:91:e6:d9:e9:55:2b: d5:ab:3a:93:6d:fa:9b:cb:4b:f5:ae:ff:d3:f2:ad: 20:80:30:79:17:e7:5b:2e:2a:8a:4f:04:fa:4a:26: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0D:6D:4B:5C:D9:DE:32:D7:A9:E7:19:86:32:DF:76:20:E5:43:8C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE1CC52293A811F09554747AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.116.0/22 103.80.22.0/23 103.105.96.0/23 103.127.224.0/22 103.157.52.0/23 103.158.239.0/24 103.170.152.0/23 IPv6: 2407:8c0::/32 Signature Algorithm: sha256WithRSAEncryption 60:42:a3:bd:a1:6f:a1:31:27:dc:63:de:0f:17:a7:15:f3:3e: d9:87:d4:c2:0a:53:e2:15:54:8c:25:9e:b6:2d:51:5a:02:5f: 54:83:25:be:71:95:68:90:6e:5b:da:0d:a5:ca:e5:c0:38:7d: e1:1d:b1:34:5d:7b:ef:d5:3c:68:f4:c4:10:35:48:75:09:0a: 8c:4e:4e:a3:43:f0:10:df:c8:fa:95:eb:cc:23:5a:31:2c:0f: 31:35:21:99:13:f1:eb:91:d0:82:2d:23:1b:85:3e:87:d1:ca: 38:04:8d:f5:d7:14:47:f5:d9:18:61:37:fd:68:e0:82:6d:79: 15:7b:50:e7:82:7b:cb:e3:08:b0:5b:51:d6:ad:ae:4c:47:6d: 3f:40:81:24:b8:2b:8d:2e:34:5b:c5:ae:f9:87:0e:3d:4c:2d: ab:fc:dd:43:e6:74:ac:16:d9:ab:4b:fd:9f:03:4d:95:fa:b0: 7e:65:ea:c4:7b:08:1c:fd:e2:de:89:8e:cd:46:41:c7:95:27: 11:02:66:2b:88:f1:ef:89:f7:c3:7b:69:04:c7:54:60:46:7b: f6:8c:78:ee:e2:a4:68:73:8c:0a:c8:ef:8f:43:f6:35:43:10: 67:96:3a:c1:41:5a:21:64:57:1e:43:7e:78:a4:3a:27:f0:02: 21:cf:5e:6e -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgIDAMV0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkyNDA0NTA0NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhkMzc4YTQtZmY0ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOuIBDCBoJJLIcNlcGiGEsMM0MKyXNcoDaCQ/Hjbv/iZjUMRnQO/3AjPrTIv jzO/zc0ouT0Hzd/yLlKh/e1QDKoFGIsNhtFul9yPesrWUc//YinJcps8SFUmQIZe ecJ5DVjbbWdd4K/D+IhLr1Axt8Ig3IgX/Es/xbwdH9hxjAeMUUzzW3tojtnHj7Nm kH3FMgxZ1EVOTFBzFeyqvAKRf/CQkoU7iM5TO54cQB2SNcqZCHncG6wfKz6YXL3d KC4Qo2RZ913gir1+o4zQoOuKk5ziwbtIqtdX8LrEkebZ6VUr1as6k236m8tL9a7/ 0/KtIIAweRfnWy4qik8E+komI3ECAwEAAaOCAsgwggLEMB0GA1UdDgQWBBQlDW1L XNneMtep5xmGMt92IOVDjDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JFMUNDNTIy OTNBODExRjA5NTU0NzQ3QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFIGCCsGAQUFBwEHAQH/ BEMwQTAwBAIAATAqAwQCZyd0AwQBZ1AWAwQBZ2lgAwQCZ3/gAwQBZ500AwQAZ57v AwQBZ6qYMA0EAgACMAcDBQAkBwjAMA0GCSqGSIb3DQEBCwUAA4IBAQBgQqO9oW+h MSfcY94PF6cV8z7Zh9TCClPiFVSMJZ62LVFaAl9UgyW+cZVokG5b2g2lyuXAOH3h HbE0XXvv1Txo9MQQNUh1CQqMTk6jQ/AQ38j6levMI1oxLA8xNSGZE/HrkdCCLSMb hT6H0co4BI311xRH9dkYYTf9aOCCbXkVe1DngnvL4wiwW1HWra5MR20/QIEkuCuN LjRbxa75hw49TC2r/N1D5nSsFtmrS/2fA02V+rB+ZerEewgc/eLeiY7NRkHHlScR AmYriPHviffDe2kEx1RgRnv2jHju4qRoc4wKyO+PQ/Y1QxBnljrBQVohZFceQ354 pDon8AIhz15u -----END CERTIFICATE-----Generated at Mon Oct 20 09:08:47 2025 by rpki-client