$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/208C7D2E066C11EDB31C2239C4F9AE02.roa File: 208C7D2E066C11EDB31C2239C4F9AE02.roa (raw, json) Hash identifier: sWRu/KJ6P64VeS1L+PAelF/6BKr+SrI1ab0xsyyupmc= Subject key identifier: DF:36:BD:15:25:C3:C2:14:A7:42:BA:E9:F9:F0:C1:B9:FF:B5:4C:60 Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355 Certificate serial: 02DB Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/208C7D2E066C11EDB31C2239C4F9AE02.roa Signing time: Wed 06 Aug 2025 03:34:06 +0000 ROA not before: Wed 06 Aug 2025 03:34:06 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139285 IP address blocks: 103.140.236.0/23 maxlen: 23 103.140.236.0/24 maxlen: 24 103.140.237.0/24 maxlen: 24 103.148.228.0/23 maxlen: 23 103.148.228.0/24 maxlen: 24 103.148.229.0/24 maxlen: 24 103.227.172.0/22 maxlen: 22 103.227.172.0/23 maxlen: 23 103.227.172.0/24 maxlen: 24 103.227.173.0/24 maxlen: 24 103.227.174.0/23 maxlen: 23 103.227.174.0/24 maxlen: 24 103.227.175.0/24 maxlen: 24 114.134.190.0/23 maxlen: 23 114.134.190.0/24 maxlen: 24 114.134.191.0/24 maxlen: 24 116.214.26.0/23 maxlen: 23 116.214.26.0/24 maxlen: 24 116.214.27.0/24 maxlen: 24 116.214.28.0/23 maxlen: 23 116.214.28.0/24 maxlen: 24 116.214.29.0/24 maxlen: 24 2400:96a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355 Validity Not Before: Aug 6 03:34:06 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6892cd2e-0187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:fb:9c:f5:df:dd:20:3a:2c:88:70:de:94: 2b:da:88:33:e5:a6:9a:8b:ac:1d:e7:d8:40:bc:79: ef:f1:e6:4e:32:e7:9b:ac:a4:92:b3:dc:43:da:d4: 87:4d:40:eb:ac:75:36:3a:01:37:5d:e3:bc:d2:45: 00:46:41:d1:1d:07:ae:83:5a:ad:d9:41:d5:f0:a6: ca:42:66:e3:15:45:fc:3c:f9:e5:74:38:66:b9:b3: ba:84:58:e6:0b:49:55:3c:21:42:df:b6:14:6a:4d: 43:36:31:f1:44:60:42:4a:35:69:a5:8d:9f:24:1f: f0:14:f5:0e:14:7a:30:a6:5f:0e:40:99:5f:ed:2f: 48:fa:fb:5d:8a:37:5e:8f:77:ef:a3:ee:fe:a2:73: 3e:57:98:ee:33:9d:d0:b0:3b:b6:bb:3f:b0:6b:25: e4:6f:82:8a:a6:9a:00:b1:d5:4e:d0:86:33:f4:92: fe:9f:29:b6:89:eb:92:d5:eb:ce:a2:35:6f:dc:e1: cf:25:67:00:31:4d:62:67:5b:e8:cb:77:d7:55:49: fe:59:2a:60:0f:35:a3:88:17:b6:0d:67:7f:ad:0f: 2f:f3:85:c9:43:e7:fb:ab:ee:a6:05:62:ee:64:aa: fb:82:90:8e:32:78:4d:d8:dc:27:1b:26:1a:8b:db: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:36:BD:15:25:C3:C2:14:A7:42:BA:E9:F9:F0:C1:B9:FF:B5:4C:60 X509v3 Authority Key Identifier: keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/208C7D2E066C11EDB31C2239C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.236.0/23 103.148.228.0/23 103.227.172.0/22 114.134.190.0/23 116.214.26.0-116.214.29.255 IPv6: 2400:96a0::/32 Signature Algorithm: sha256WithRSAEncryption 75:36:e5:78:c2:dc:9a:df:09:bc:0f:5f:95:d1:7e:9b:fa:48: 0a:0e:9d:f4:1e:6d:68:b1:80:0a:be:77:64:06:f0:78:4e:4c: f5:78:a4:34:71:e4:bf:ff:64:d1:1e:9a:10:e7:d7:3b:57:2b: d0:43:45:11:b2:2d:dc:4b:4a:72:0c:f5:04:f7:8b:fe:2d:3d: 24:64:ee:d3:97:33:1a:9b:dc:3e:4e:25:62:44:3f:a8:fe:0e: 11:57:4e:9c:a7:ec:9b:3d:3a:28:ce:65:a0:a5:30:2d:c8:80: 9d:2f:72:e7:59:bd:bb:72:8f:aa:60:19:51:0a:90:07:17:ad: 9d:01:1b:3c:0b:e3:5c:10:e5:80:8f:11:74:36:d4:c9:e1:05: 99:bc:5b:96:b1:21:e9:55:33:e9:35:5a:eb:27:8d:c4:2b:d2: e7:10:33:61:17:39:1f:cc:ef:bb:0a:37:f2:de:e7:19:aa:78: 6e:58:bf:35:f2:b6:14:5b:e1:1e:b5:7b:5e:c6:ae:2c:29:5e: ae:0f:9a:46:f2:62:ba:92:57:19:60:d8:d4:2c:0f:03:55:b6: 9d:9b:a5:3b:cc:dd:d3:05:f6:d5:80:ac:50:89:08:b3:9b:d1: 50:36:4a:f0:0f:2b:5d:f1:5a:59:90:5e:64:02:07:ef:76:3d: 29:15:a8:b8 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFQjIxMTAvBgNVBAUTKDg2MDNBMEFDQTcyMDRCMEVGRUQ2NERCNzBERTUxQzc1 QkEwMzkzNTUwHhcNMjUwODA2MDMzNDA2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkyY2QyZS0wMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFT7nPXf3SA6LIhw3pQr2ogz5aaai6wd59hAvHnv8eZOMuebrKSSs9xD2tSH TUDrrHU2OgE3XeO80kUARkHRHQeug1qt2UHV8KbKQmbjFUX8PPnldDhmubO6hFjm C0lVPCFC37YUak1DNjHxRGBCSjVppY2fJB/wFPUOFHowpl8OQJlf7S9I+vtdijde j3fvo+7+onM+V5juM53QsDu2uz+wayXkb4KKppoAsdVO0IYz9JL+nym2ieuS1evO ojVv3OHPJWcAMU1iZ1voy3fXVUn+WSpgDzWjiBe2DWd/rQ8v84XJQ+f7q+6mBWLu ZKr7gpCOMnhN2NwnGyYai9uAYwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFN82vRUl w8IUp0K66fnwwbn/tUxgMB8GA1UdIwQYMBaAFIYDoKynIEsO/tZNtw3lHHW6A5NV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVCMi83QUM3NjdERTA2 NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3Ny0xazIzRGVVY2Rib0Rr MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnT2dyS2NnU3c3LTFrMjNEZVVjZGJvRGsxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MThFQjIvN0FDNzY3REUwNjY5MTFFREIwQUU4RTM3QzRGOUFFMDIvMjA4QzdEMkUw NjZDMTFFREIzMUMyMjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E PzA9MCwEAgABMCYDBAFnjOwDBAFnlOQDBAJn46wDBAFyhr4wDAMEAXTWGgMEAXTW HDANBAIAAjAHAwUAJACWoDANBgkqhkiG9w0BAQsFAAOCAQEAdTbleMLcmt8JvA9f ldF+m/pICg6d9B5taLGACr53ZAbweE5M9XikNHHkv/9k0R6aEOfXO1cr0ENFEbIt 3EtKcgz1BPeL/i09JGTu05czGpvcPk4lYkQ/qP4OEVdOnKfsmz06KM5loKUwLciA nS9y51m9u3KPqmAZUQqQBxetnQEbPAvjXBDlgI8RdDbUyeEFmbxblrEh6VUz6TVa 6yeNxCvS5xAzYRc5H8zvuwo38t7nGap4bli/NfK2FFvhHrV7XsauLClerg+aRvJi upJXGWDY1CwPA1W2nZulO8zd0wX21YCsUIkIs5vRUDZK8A8rXfFaWZBeZAIH73Y9 KRWouA== -----END CERTIFICATE-----Generated at Mon Aug 11 10:37:29 2025 by rpki-client