$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6928B2E7D8611F09C505E5AC4F9AE02.roa File: D6928B2E7D8611F09C505E5AC4F9AE02.roa (raw, json) Hash identifier: xeUP/pMU+5ZayyG0lMf4fAck46hLfVni4WwfQ2NukIs= Subject key identifier: 60:AF:3E:07:7A:11:BD:64:0C:AE:78:6C:BB:00:DE:14:90:FE:94:02 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C2E1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6928B2E7D8611F09C505E5AC4F9AE02.roa Signing time: Wed 20 Aug 2025 05:30:53 +0000 ROA not before: Wed 20 Aug 2025 05:30:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55947 IP address blocks: 43.247.156.0/22 maxlen: 24 103.5.132.0/22 maxlen: 24 103.39.126.0/23 maxlen: 24 103.87.92.0/22 maxlen: 24 103.132.16.0/23 maxlen: 24 103.157.238.0/23 maxlen: 24 103.161.74.0/23 maxlen: 24 103.173.170.0/23 maxlen: 24 124.40.244.0/22 maxlen: 24 2400:c2a0::/32 maxlen: 40 2404:1f00::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49889 (0xc2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 20 05:30:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68a55d8d-fd6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:7f:97:c0:00:26:88:cd:88:18:50:3a:f2: e9:81:e6:43:4e:cd:ad:e5:4c:97:f1:a4:05:35:b6: a5:eb:f5:04:85:76:fa:06:e8:64:fd:77:83:da:4e: 9e:be:0b:42:06:db:a3:6e:31:e4:bb:39:5d:a7:d2: 73:de:5a:bd:84:d8:62:92:79:e9:ab:0c:f5:3c:15: a5:7d:e9:e4:9e:95:63:71:20:51:ee:37:ad:2a:84: 0e:2f:82:32:e3:82:62:c4:3b:79:ed:f9:f5:7f:80: 6f:7a:b8:48:ec:9c:7d:39:49:f7:d8:d9:17:b4:1a: 11:a9:39:08:72:92:e5:d6:d0:5f:7c:be:a0:37:e4: 3b:53:06:69:2b:c7:66:57:00:be:5a:24:3e:70:df: ec:7c:1e:8d:20:b4:0b:d4:df:86:85:68:81:49:96: de:5e:8d:6d:c5:cb:3d:1d:7b:51:ff:9b:0b:67:4b: 29:30:58:af:11:88:06:9e:51:09:56:a5:41:9b:2b: 86:04:b5:a3:22:69:e4:e0:54:51:1e:9e:e8:a3:7d: 1c:59:ba:ad:59:11:b8:8d:d6:11:8c:29:9d:2b:c8: 02:26:1a:e4:95:65:38:d4:d8:f1:4b:92:d7:af:53: f1:bf:d3:0c:33:19:ba:b0:0c:a6:b2:69:bd:c4:05: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AF:3E:07:7A:11:BD:64:0C:AE:78:6C:BB:00:DE:14:90:FE:94:02 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6928B2E7D8611F09C505E5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.156.0/22 103.5.132.0/22 103.39.126.0/23 103.87.92.0/22 103.132.16.0/23 103.157.238.0/23 103.161.74.0/23 103.173.170.0/23 124.40.244.0/22 IPv6: 2400:c2a0::/32 2404:1f00::/32 Signature Algorithm: sha256WithRSAEncryption 71:87:d4:14:c4:bc:4c:56:b0:2e:12:ae:d5:6e:93:ee:29:b0: 29:b3:42:6e:d1:2f:c2:5d:18:35:e9:a6:cc:ec:67:cb:6d:5e: 9c:ad:38:94:a0:ad:6e:82:d0:00:47:3e:d6:fa:7f:59:ed:d6: ca:93:6f:91:cd:f2:7e:43:53:41:e6:82:d8:cb:f2:01:0d:44: 3d:de:c2:b2:81:b6:05:cd:41:53:d7:07:42:9a:e4:00:b9:88: 1f:f3:59:ab:0d:88:ca:3a:34:36:30:b1:ee:dd:4c:11:b7:2c: f8:31:2f:71:62:a3:5b:9b:59:4a:b4:d5:ad:db:01:68:bc:c0: 54:0c:28:18:8c:50:6f:78:c3:bd:7c:ee:bf:ae:15:d4:cf:ec: fb:25:e8:3a:34:41:de:7a:b7:da:e7:ff:26:4d:31:1e:41:93: 7c:3b:62:29:70:69:11:15:bc:da:94:1d:c4:bd:b4:69:7a:eb: b2:ac:17:0c:ee:0d:18:48:9d:fa:92:70:c8:06:8a:6f:a7:e8: 39:e6:9a:0c:a7:ee:71:53:3d:c3:cf:03:bb:a4:b2:ab:20:04: ba:b9:f0:ee:46:09:bb:89:e4:44:b6:c4:25:9c:55:45:54:9d: 1f:59:4b:30:7c:8d:37:5b:f2:23:68:88:b5:66:5d:00:a0:d7: 6b:e3:49:f3 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgIDAMLhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgyMDA1MzA1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhhNTVkOGQtZmQ2ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbmf5fAACaIzYgYUDry6YHmQ07NreVMl/GkBTW2pev1BIV2+gboZP13g9pO nr4LQgbbo24x5Ls5XafSc95avYTYYpJ56asM9TwVpX3p5J6VY3EgUe43rSqEDi+C MuOCYsQ7ee359X+Ab3q4SOycfTlJ99jZF7QaEak5CHKS5dbQX3y+oDfkO1MGaSvH ZlcAvlokPnDf7HwejSC0C9TfhoVogUmW3l6NbcXLPR17Uf+bC2dLKTBYrxGIBp5R CValQZsrhgS1oyJp5OBUUR6e6KN9HFm6rVkRuI3WEYwpnSvIAiYa5JVlONTY8UuS 169T8b/TDDMZurAMprJpvcQFB3ECAwEAAaOCAtswggLXMB0GA1UdDgQWBBRgrz4H ehG9ZAyueGy7AN4UkP6UAjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q2OTI4QjJF N0Q4NjExRjA5QzUwNUU1QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGUGCCsGAQUFBwEHAQH/ BFYwVDA8BAIAATA2AwQCK/ecAwQCZwWEAwQBZyd+AwQCZ1dcAwQBZ4QQAwQBZ53u AwQBZ6FKAwQBZ62qAwQCfCj0MBQEAgACMA4DBQAkAMKgAwUAJAQfADANBgkqhkiG 9w0BAQsFAAOCAQEAcYfUFMS8TFawLhKu1W6T7imwKbNCbtEvwl0YNemmzOxny21e nK04lKCtboLQAEc+1vp/We3WypNvkc3yfkNTQeaC2MvyAQ1EPd7CsoG2Bc1BU9cH QprkALmIH/NZqw2Iyjo0NjCx7t1MEbcs+DEvcWKjW5tZSrTVrdsBaLzAVAwoGIxQ b3jDvXzuv64V1M/s+yXoOjRB3nq32uf/Jk0xHkGTfDtiKXBpERW82pQdxL20aXrr sqwXDO4NGEid+pJwyAaKb6foOeaaDKfucVM9w88Du6SyqyAEurnw7kYJu4nkRLbE JZxVRVSdH1lLMHyNN1vyI2iItWZdAKDXa+NJ8w== -----END CERTIFICATE-----Generated at Sun Aug 24 06:37:14 2025 by rpki-client