$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8982D54056511EC886D271DC4F9AE02.roa File: D8982D54056511EC886D271DC4F9AE02.roa (raw, json) Hash identifier: V1g3EN6B66qb+SJEbDDgwZTJje2/4BKUhsSRcL/inlI= Subject key identifier: D7:02:F2:80:05:12:A4:D2:84:6C:98:75:A1:93:79:42:49:42:AA:F1 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C289 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8982D54056511EC886D271DC4F9AE02.roa Signing time: Wed 13 Aug 2025 09:42:30 +0000 ROA not before: Wed 13 Aug 2025 09:42:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142501 IP address blocks: 43.246.105.0/24 maxlen: 24 103.65.32.0/22 maxlen: 24 103.66.137.0/24 maxlen: 24 103.66.145.0/24 maxlen: 24 103.218.116.0/22 maxlen: 24 103.218.232.0/22 maxlen: 24 103.220.228.0/22 maxlen: 24 103.220.236.0/22 maxlen: 24 121.46.96.0/20 maxlen: 24 160.202.192.0/20 maxlen: 24 2407:ca40:137::/48 maxlen: 48 2407:e040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49801 (0xc289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 13 09:42:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=689c5e06-2026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b0:8e:67:fa:83:a2:ad:22:ce:03:aa:3c:57: 84:66:2b:44:37:00:ee:58:c3:c9:25:32:39:d1:37: d0:c5:66:c4:be:b0:10:76:e0:5e:b9:1b:ae:e5:72: f7:25:77:98:0f:04:58:02:0f:1d:bd:92:40:d1:03: 63:11:ae:15:42:83:b7:bc:59:c1:fa:36:9b:06:25: 50:34:b4:1f:3c:9d:f9:1d:88:65:cb:45:0f:de:83: a9:bd:62:1e:8b:a5:d5:e3:1a:d0:2f:ff:72:02:ad: fd:86:60:55:2a:61:37:4f:ca:18:01:01:fb:38:d4: 7e:03:0c:a4:45:7d:54:3b:81:8d:e1:f4:6b:e1:03: ad:9d:ce:15:f2:9a:11:f0:fc:a4:4b:5f:af:2f:ea: 07:38:7d:17:ed:49:c0:b0:27:3d:de:7e:0b:90:68: f0:d6:16:b0:b8:54:2b:e2:06:90:d6:d4:20:a3:cf: 14:84:c9:fe:f5:b2:13:45:23:b3:0b:c2:70:6c:14: 87:51:3e:c3:2e:b7:9c:0d:89:78:74:67:0a:2c:6f: 66:85:8d:a5:1a:c5:85:8d:b7:d5:c5:58:e7:43:33: b6:0d:7e:82:23:a8:96:3c:06:a6:ba:16:63:39:d2: 3a:23:f4:0a:cd:12:44:cd:06:8e:59:3c:46:b4:f8: 98:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:02:F2:80:05:12:A4:D2:84:6C:98:75:A1:93:79:42:49:42:AA:F1 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8982D54056511EC886D271DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.105.0/24 103.65.32.0/22 103.66.137.0/24 103.66.145.0/24 103.218.116.0/22 103.218.232.0/22 103.220.228.0/22 103.220.236.0/22 121.46.96.0/20 160.202.192.0/20 IPv6: 2407:ca40:137::/48 2407:e040::/32 Signature Algorithm: sha256WithRSAEncryption 48:6c:bb:28:89:70:dd:11:ab:c0:6f:eb:88:73:93:24:cd:09: ea:a9:30:08:de:10:dc:a1:1d:c5:40:3d:8c:a7:25:83:1c:30: 10:7c:59:8b:a2:91:0f:df:98:0e:b5:a1:90:ca:d5:c9:1f:9e: 18:38:2f:a8:f4:ea:3f:ee:a3:2e:c2:bb:82:b7:2d:e5:0b:80: ca:60:15:12:59:ca:86:fa:9b:41:91:54:cd:96:0c:dd:0f:69: 1f:08:f7:1e:d0:19:e4:71:d3:f1:e7:51:e1:4c:d4:93:ed:3c: b1:83:7d:7d:61:49:43:41:79:0a:9f:00:79:e3:61:85:9e:b2: 66:3d:51:a1:f0:03:11:94:1b:56:5b:34:0c:f5:80:6e:92:e0: 44:fe:29:a2:13:68:54:94:c0:21:35:f1:fc:d2:3e:a7:46:ee: e4:41:3f:2a:c0:91:3f:a8:18:3f:d3:99:a8:81:49:93:9f:7d: b3:2a:6a:83:46:52:db:e4:8e:fe:ba:5b:a8:ba:58:17:b0:1e: 29:1e:0e:d3:e7:33:45:13:63:a1:ab:18:34:e3:6c:d6:32:0b: 51:17:f0:37:8e:4b:ce:39:56:f6:f8:91:b4:ec:a7:30:22:35: 4f:dc:70:22:52:2f:26:d7:d6:74:60:55:5a:30:ae:60:13:8e: 18:5f:b9:f7 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIDAMKJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgxMzA5NDIzMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg5YzVlMDYtMjAyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMiwjmf6g6KtIs4DqjxXhGYrRDcA7ljDySUyOdE30MVmxL6wEHbgXrkbruVy 9yV3mA8EWAIPHb2SQNEDYxGuFUKDt7xZwfo2mwYlUDS0Hzyd+R2IZctFD96Dqb1i Houl1eMa0C//cgKt/YZgVSphN0/KGAEB+zjUfgMMpEV9VDuBjeH0a+EDrZ3OFfKa EfD8pEtfry/qBzh9F+1JwLAnPd5+C5Bo8NYWsLhUK+IGkNbUIKPPFITJ/vWyE0Uj swvCcGwUh1E+wy63nA2JeHRnCixvZoWNpRrFhY231cVY50Mztg1+giOoljwGproW YznSOiP0Cs0SRM0Gjlk8RrT4mLECAwEAAaOCAuMwggLfMB0GA1UdDgQWBBTXAvKA BRKk0oRsmHWhk3lCSUKq8TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q4OTgyRDU0 MDU2NTExRUM4ODZEMjcxREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMG0GCCsGAQUFBwEHAQH/ BF4wXDBCBAIAATA8AwQAK/ZpAwQCZ0EgAwQAZ0KJAwQAZ0KRAwQCZ9p0AwQCZ9ro AwQCZ9zkAwQCZ9zsAwQEeS5gAwQEoMrAMBYEAgACMBADBwAkB8pAATcDBQAkB+BA MA0GCSqGSIb3DQEBCwUAA4IBAQBIbLsoiXDdEavAb+uIc5MkzQnqqTAI3hDcoR3F QD2MpyWDHDAQfFmLopEP35gOtaGQytXJH54YOC+o9Oo/7qMuwruCty3lC4DKYBUS WcqG+ptBkVTNlgzdD2kfCPce0BnkcdPx51HhTNST7Tyxg319YUlDQXkKnwB542GF nrJmPVGh8AMRlBtWWzQM9YBukuBE/imiE2hUlMAhNfH80j6nRu7kQT8qwJE/qBg/ 05mogUmTn32zKmqDRlLb5I7+uluoulgXsB4pHg7T5zNFE2Ohqxg042zWMgtRF/A3 jkvOOVb2+JG07KcwIjVP3HAiUi8m19Z0YFVaMK5gE44YX7n3 -----END CERTIFICATE-----Generated at Sun Aug 24 02:31:29 2025 by rpki-client