$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa File: B188CE748E7011F08CF3B91AC4F9AE02.roa (raw, json) Hash identifier: z9aB/eMQsAs4dx5UPgq7iMP6FyNI1Namac/Cs27VAaA= Subject key identifier: 54:F1:45:43:4F:71:AF:51:F1:59:45:CF:92:A9:EC:02:D2:89:BF:D8 Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Certificate serial: 01C6 Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa Signing time: Wed 10 Sep 2025 18:05:11 +0000 ROA not before: Wed 10 Sep 2025 18:05:11 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137259 IP address blocks: 103.31.222.0/23 maxlen: 24 2001:df2:50c0::/48 maxlen: 50 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Validity Not Before: Sep 10 18:05:11 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68c1bdd7-7315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9c:0b:2a:e0:9d:fd:4f:1a:b0:09:78:e0:b0: 32:ae:94:2b:18:80:f7:53:4c:11:a3:a9:db:55:a7: 20:7c:1a:75:f6:50:3f:31:91:1c:91:d3:cf:fa:19: 16:33:b4:34:d9:3d:2c:5b:1f:f4:31:d0:9e:56:7c: 8e:17:be:2f:e3:99:b6:4c:c8:e7:bd:47:3b:39:da: df:ec:da:95:63:69:97:36:00:6f:85:81:63:15:ca: a8:1a:e5:f8:28:cb:6c:dc:f9:89:26:8c:8c:25:91: 9c:a6:e6:40:5c:3b:9b:1f:98:92:30:3d:a7:ff:42: f1:7f:6c:23:a7:f7:aa:85:4c:24:47:36:69:33:50: d6:29:f4:68:62:22:c8:0d:5f:82:e0:e2:2c:66:ac: c9:aa:8a:a4:8e:0f:f5:f5:0c:cf:92:7a:b3:4a:62: a4:57:b5:d4:f8:5a:19:f3:c0:aa:ea:6a:7b:71:3e: bd:c9:18:09:db:3f:5f:fd:55:a4:27:f3:4b:8e:cf: 50:c7:59:03:65:2e:d8:d6:5d:fc:eb:d2:b3:db:9a: 67:82:a3:59:37:66:5f:df:3a:23:8f:ff:4d:23:c1: 63:32:e5:77:e5:b1:e8:d8:bf:7e:c2:29:9c:00:04: 1f:a8:8a:14:fe:8e:7b:dd:78:dc:5f:5e:8b:90:48: 58:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F1:45:43:4F:71:AF:51:F1:59:45:CF:92:A9:EC:02:D2:89:BF:D8 X509v3 Authority Key Identifier: keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.31.222.0/23 IPv6: 2001:df2:50c0::/48 Signature Algorithm: sha256WithRSAEncryption 85:c3:6c:d8:85:bf:42:24:a7:8e:eb:28:7c:2d:d3:30:89:90: 17:6a:e4:08:73:ac:6d:0a:ae:7f:03:e2:1e:fb:e1:b6:75:be: 9b:11:01:72:2b:ba:40:73:83:9e:a1:ae:b1:58:14:0e:a8:48: 02:20:93:f4:05:37:7a:3d:5f:2c:f5:ba:79:d5:db:09:39:e4: 2e:eb:0f:b7:57:d7:9b:8b:7a:f3:14:55:20:53:4b:ee:6d:cb: ae:e1:fb:7c:2a:e1:7e:0c:73:ca:5d:61:f8:9a:20:5b:aa:f3: 86:ec:27:56:ce:1b:bf:68:26:31:48:b8:fc:26:0a:d7:7b:6d: 0b:48:90:59:20:1c:da:a8:00:5d:f9:19:9e:30:8d:3c:53:1c: b6:f5:f3:c3:b6:d7:23:ee:5a:2e:7e:bf:5e:4b:7b:ae:bb:d0: 51:32:f2:a7:d6:28:da:54:dc:04:46:62:25:f2:d2:56:e5:f6: cf:55:bb:4a:2b:b0:9c:50:c4:a0:10:8c:a8:0b:79:2f:60:27: e8:bb:fc:01:48:72:33:da:53:27:de:ce:ba:30:0d:87:e0:28: cf:83:23:f8:39:ea:2a:08:1a:ab:42:ef:1f:e6:7f:b4:a3:41: 37:42:37:43:6e:e3:50:2e:96:44:ab:af:0f:c0:60:44:e3:68: 23:e4:6a:17 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQTIxMTAvBgNVBAUTKDM2Q0Y1Q0MwQTYwRTBCN0Q1NDYxMkExMkVCNUI5ODky ODQ2ODZEQjAwHhcNMjUwOTEwMTgwNTExWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMxYmRkNy03MzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZwLKuCd/U8asAl44LAyrpQrGID3U0wRo6nbVacgfBp19lA/MZEckdPP+hkW M7Q02T0sWx/0MdCeVnyOF74v45m2TMjnvUc7Odrf7NqVY2mXNgBvhYFjFcqoGuX4 KMts3PmJJoyMJZGcpuZAXDubH5iSMD2n/0Lxf2wjp/eqhUwkRzZpM1DWKfRoYiLI DV+C4OIsZqzJqoqkjg/19QzPknqzSmKkV7XU+FoZ88Cq6mp7cT69yRgJ2z9f/VWk J/NLjs9Qx1kDZS7Y1l3869Kz25pngqNZN2Zf3zojj/9NI8FjMuV35bHo2L9+wimc AAQfqIoU/o573XjcX16LkEhYtQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFTxRUNP ca9R8VlFz5Kp7ALSib/YMB8GA1UdIwQYMBaAFDbPXMCmDgt9VGEqEutbmJKEaG2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNBMi8wMjgyN0NGOEU0 MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0MzMVVZU29TNjF1WWtvUm9i YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zOWN3S1lPQzMxVVlTb1M2MXVZa29Sb2JiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VDQTIvMDI4MjdDRjhFNDM3MTFFREE4NjU2MzFBQzRGOUFFMDIvQjE4OENFNzQ4 RTcwMTFGMDhDRjNCOTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnH94wDwQCAAIwCQMHACABDfJQwDANBgkqhkiG9w0BAQsF AAOCAQEAhcNs2IW/QiSnjusofC3TMImQF2rkCHOsbQqufwPiHvvhtnW+mxEBciu6 QHODnqGusVgUDqhIAiCT9AU3ej1fLPW6edXbCTnkLusPt1fXm4t68xRVIFNL7m3L ruH7fCrhfgxzyl1h+JogW6rzhuwnVs4bv2gmMUi4/CYK13ttC0iQWSAc2qgAXfkZ njCNPFMctvXzw7bXI+5aLn6/Xkt7rrvQUTLyp9Yo2lTcBEZiJfLSVuX2z1W7Siuw nFDEoBCMqAt5L2An6Lv8AUhyM9pTJ97OujANh+Aoz4Mj+DnqKggaq0LvH+Z/tKNB N0I3Q27jUC6WRKuvD8BgRONoI+RqFw== -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:25 2025 by rpki-client