$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2D49C7EE6EE011F0AE7C9D10C4F9AE02.roa File: 2D49C7EE6EE011F0AE7C9D10C4F9AE02.roa (raw, json) Hash identifier: 5ZM/AYD4IyE3xPKkbT4wkcwofrzRE8wCJAqTsHSEAPk= Subject key identifier: 3E:F9:59:AB:AD:78:C5:4B:3B:06:69:E7:D7:76:9E:47:5F:CE:D5:69 Certificate issuer: /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Certificate serial: 02 Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2D49C7EE6EE011F0AE7C9D10C4F9AE02.roa Signing time: Fri 01 Aug 2025 14:02:37 +0000 ROA not before: Fri 01 Aug 2025 14:02:37 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 24084 IP address blocks: 203.105.176.0/23 maxlen: 23 203.105.176.0/24 maxlen: 24 203.105.177.0/24 maxlen: 24 203.105.178.0/23 maxlen: 23 203.105.178.0/24 maxlen: 24 203.105.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB Validity Not Before: Aug 1 14:02:37 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=688cc8fc-1be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:98:39:54:90:72:4f:47:c3:38:2a:69:96:5f: b7:35:63:70:01:a7:64:78:a8:60:40:f6:db:58:02: d2:cf:c7:82:c3:b4:56:d3:d3:69:23:af:da:cc:d2: f5:3f:95:6d:2f:f1:a8:b2:11:00:c9:49:e6:f1:a8: f0:2a:c7:eb:c7:98:18:52:d0:33:1e:36:27:b5:37: a1:78:f5:1e:12:4d:a5:cf:1b:f6:b7:c4:81:6f:f7: 41:fa:28:57:bf:b6:aa:08:3b:b6:c7:0a:29:6e:ac: e4:58:98:70:e0:bf:5a:e0:b7:2a:a4:d8:eb:0f:11: 2c:5f:e5:f9:3d:91:d9:c4:f7:02:87:17:a2:41:94: ed:36:34:44:73:3d:ef:20:98:3c:c5:ce:70:9a:44: 21:be:17:6d:76:93:77:61:98:8f:8e:c5:1a:c7:e3: c7:99:63:6f:1b:6e:33:60:de:8c:62:94:36:60:79: 7e:58:e9:d0:df:ea:c2:42:e2:93:d3:0d:d5:6c:82: 58:fb:56:87:2e:1c:e1:35:45:95:01:11:b1:48:29: 2c:bc:8c:04:07:2b:7f:75:e8:bb:a3:37:e6:03:d0: f2:95:b0:44:0b:1a:6e:c9:c0:b7:8f:4e:d9:3d:ec: 3c:fe:aa:01:0e:24:4e:54:4c:4f:3f:24:56:6c:96: 94:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F9:59:AB:AD:78:C5:4B:3B:06:69:E7:D7:76:9E:47:5F:CE:D5:69 X509v3 Authority Key Identifier: keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2D49C7EE6EE011F0AE7C9D10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.105.176.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:47:2e:3c:11:de:fc:92:85:75:b4:c0:65:80:d3:7b:27:2e: 22:82:79:b4:7a:6d:52:32:4e:f8:3e:7a:f0:20:8f:fa:b8:95: 89:cd:b1:56:bd:4d:16:93:bd:4b:72:db:c1:d8:98:1e:41:09: 7d:fd:d9:05:3d:02:db:ef:f9:b5:21:da:06:f2:36:3e:5d:5c: bd:e1:0d:49:4e:6b:56:bc:da:f0:5d:a2:37:9a:1a:44:0f:52: 0a:bb:48:94:fd:40:03:68:c0:55:5a:0b:2a:14:24:77:b5:7c: 25:a3:97:f3:34:71:1e:36:78:6a:19:cc:c3:ff:55:52:b8:2e: b9:b0:b6:cb:98:d6:a4:a8:02:45:2e:c6:95:d3:83:6f:b0:57: 5c:2e:92:a9:0d:0a:5d:04:1d:b6:cb:e0:b4:ba:05:56:84:97: 8b:e3:74:32:cc:30:d4:ec:02:ee:1b:0b:93:af:5f:84:93:22: 56:cd:7a:e4:fd:a9:10:74:61:f4:01:06:57:83:3b:73:bf:fb: 68:b5:0c:dd:9c:5b:2e:cd:63:0e:1a:d0:a1:9a:6a:56:dc:47: 32:a9:e1:0b:82:17:0c:44:e7:1d:a7:06:1a:50:8d:d7:62:d6: 79:8c:40:2a:9d:bf:33:76:9e:fc:3c:ce:7b:82:37:56:fb:a4: ce:81:21:c2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjExNjExMC8GA1UEBRMoREIyREQ0RkVGRjM3MDkxMjU3RjYwMTlENTBBMjM5MzBF QzQ2RTFGQjAeFw0yNTA4MDExNDAyMzdaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OGNjOGZjLTFiZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXmDlUkHJPR8M4KmmWX7c1Y3ABp2R4qGBA9ttYAtLPx4LDtFbT02kjr9rM0vU/ lW0v8aiyEQDJSebxqPAqx+vHmBhS0DMeNie1N6F49R4STaXPG/a3xIFv90H6KFe/ tqoIO7bHCilurORYmHDgv1rgtyqk2OsPESxf5fk9kdnE9wKHF6JBlO02NERzPe8g mDzFznCaRCG+F212k3dhmI+OxRrH48eZY28bbjNg3oxilDZgeX5Y6dDf6sJC4pPT DdVsglj7VocuHOE1RZUBEbFIKSy8jAQHK3916LujN+YD0PKVsEQLGm7JwLePTtk9 7Dz+qgEOJE5UTE8/JFZslpTfAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUPvlZq614 xUs7Bmnn13aeR1/O1WkwHwYDVR0jBBgwFoAU2y3U/v83CRJX9gGdUKI5MOxG4fsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGMTE2LzhCQ0ZGRjA2NkVE RTExRjA5MUUwMkEyMUM0RjlBRTAyLzJ5M1VfdjgzQ1JKWDlnR2RVS0k1TU94RzRm cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnkzVV92ODNDUkpYOWdHZFVLSTVNT3hHNGZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjExNi84QkNGRkYwNjZFREUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yRDQ5QzdFRTZF RTAxMUYwQUU3QzlEMTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAstpsDANBgkqhkiG9w0BAQsFAAOCAQEAXkcuPBHe/JKFdbTA ZYDTeycuIoJ5tHptUjJO+D568CCP+riVic2xVr1NFpO9S3LbwdiYHkEJff3ZBT0C 2+/5tSHaBvI2Pl1cveENSU5rVrza8F2iN5oaRA9SCrtIlP1AA2jAVVoLKhQkd7V8 JaOX8zRxHjZ4ahnMw/9VUrguubC2y5jWpKgCRS7GldODb7BXXC6SqQ0KXQQdtsvg tLoFVoSXi+N0Msww1OwC7hsLk69fhJMiVs165P2pEHRh9AEGV4M7c7/7aLUM3Zxb Ls1jDhrQoZpqVtxHMqnhC4IXDETnHacGGlCN12LWeYxAKp2/M3ae/DzOe4I3Vvuk zoEhwg== -----END CERTIFICATE-----Generated at Tue Aug 12 18:54:27 2025 by rpki-client