$ rpki-client -vvf rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/FEC28FDE329511EDBF29A211C4F9AE02.roa File: FEC28FDE329511EDBF29A211C4F9AE02.roa (raw, json) Hash identifier: 4iOjtjfmzJCE4u7zP+bXpU1mVBY2hhE9hkxu0cfVDLM= Subject key identifier: A5:44:A8:90:96:D4:77:40:3D:44:12:81:27:C5:91:9E:ED:89:9E:5C Certificate issuer: /CN=A9184559/serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Certificate serial: 023B Authority key identifier: 05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/FEC28FDE329511EDBF29A211C4F9AE02.roa Signing time: Tue 29 Jul 2025 02:39:35 +0000 ROA not before: Tue 29 Jul 2025 02:39:35 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 142287 IP address blocks: 103.167.118.0/23 maxlen: 23 103.167.118.0/24 maxlen: 24 103.167.119.0/24 maxlen: 24 2001:df6:b180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184559, serialNumber=05CC83CF4B8B1B3789FFE4EC4460A16D89EA3277 Validity Not Before: Jul 29 02:39:35 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68883467-a4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:55:73:ed:d3:28:89:e0:0b:4f:c3:b2:ec: 4c:ac:3c:26:f8:47:57:19:ab:24:39:ed:ac:ab:97: b5:96:32:53:c4:24:4a:74:a2:8b:d9:5d:2b:45:3f: df:23:0e:6a:10:db:96:0b:f7:4f:08:fb:01:8d:00: be:48:dd:90:c4:05:34:31:0d:0f:69:c9:c6:bf:10: 1b:dc:7f:e1:53:08:4e:8a:73:50:5c:52:e5:03:1b: 7e:65:70:e4:73:76:37:52:13:fe:f0:56:db:a6:6d: 10:64:86:37:78:e5:96:97:d9:af:48:87:4c:77:c8: c9:0a:94:c1:c8:a7:ee:d9:a5:b4:7d:ba:ac:45:ce: 3d:db:fd:b5:40:d6:4a:4d:2d:c5:4a:87:c2:07:14: fc:3d:f1:57:e8:88:9e:34:ec:c0:bc:ef:4a:1a:73: b4:5f:26:7e:d4:91:a7:bc:17:08:52:a1:b4:37:79: 81:d4:c4:69:89:2e:2f:93:d7:1d:d9:94:cb:b7:c6: 70:c9:0f:05:26:36:64:3d:88:d3:b7:5f:25:01:bb: 04:63:3b:73:f4:1f:16:c3:2e:c3:36:11:15:c4:eb: ce:7e:67:5b:9b:3e:40:f3:24:ae:07:76:66:80:ce: cf:32:e2:1b:a7:4b:7b:7a:54:0d:f1:93:6e:7b:a8: ec:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:44:A8:90:96:D4:77:40:3D:44:12:81:27:C5:91:9E:ED:89:9E:5C X509v3 Authority Key Identifier: keyid:05:CC:83:CF:4B:8B:1B:37:89:FF:E4:EC:44:60:A1:6D:89:EA:32:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/BcyDz0uLGzeJ_-TsRGChbYnqMnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcyDz0uLGzeJ_-TsRGChbYnqMnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184559/777A304E329111ED98308019C4F9AE02/FEC28FDE329511EDBF29A211C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.118.0/23 IPv6: 2001:df6:b180::/48 Signature Algorithm: sha256WithRSAEncryption 59:74:da:73:6f:d8:6a:65:2d:ec:48:c1:49:3c:e2:cb:27:2c: d2:66:a1:9c:60:02:e1:6a:bb:a9:c4:63:f9:27:02:16:29:a5: a1:5c:12:0c:d1:f3:de:2a:6b:72:97:87:d9:d6:61:99:4f:61: 4a:2c:74:14:a7:01:5d:dd:cf:c1:38:d0:a6:cc:13:16:c8:6d: d4:6e:ce:2f:a8:66:5a:3a:19:36:b7:67:31:1a:88:c8:03:23: 1e:4b:4e:c9:6e:e7:87:e2:25:9d:e7:b2:f4:fb:c3:82:5c:5a: 0c:60:31:61:54:60:3b:45:46:c8:58:9c:92:83:ed:63:17:2e: cd:c7:38:4f:5f:7f:0b:9c:c5:34:d2:90:1b:bd:60:1e:57:6e: 36:7a:e4:9e:ca:ae:4d:54:4d:26:ba:ee:ca:9c:11:46:4b:32: ff:bb:48:2d:2c:6a:5e:38:4d:18:b4:0a:21:b8:c8:8d:20:5d: 53:57:e8:a3:57:63:fb:d1:aa:26:ae:6f:74:d8:91:67:ae:e5: 97:89:d0:f9:95:22:fd:e9:9d:6f:de:65:44:7f:52:6c:2d:51: fc:70:0d:24:3b:f6:48:ad:f0:53:65:42:de:a6:52:18:f8:99: ca:9b:e8:1a:33:9a:9c:6a:47:3c:14:40:55:38:eb:56:3c:c3: b4:29:c8:32 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ1NTkxMTAvBgNVBAUTKDA1Q0M4M0NGNEI4QjFCMzc4OUZGRTRFQzQ0NjBBMTZE ODlFQTMyNzcwHhcNMjUwNzI5MDIzOTM1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg4MzQ2Ny1hNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCZVc+3TKIngC0/DsuxMrDwm+EdXGaskOe2sq5e1ljJTxCRKdKKL2V0rRT/f Iw5qENuWC/dPCPsBjQC+SN2QxAU0MQ0PacnGvxAb3H/hUwhOinNQXFLlAxt+ZXDk c3Y3UhP+8Fbbpm0QZIY3eOWWl9mvSIdMd8jJCpTByKfu2aW0fbqsRc492/21QNZK TS3FSofCBxT8PfFX6IieNOzAvO9KGnO0XyZ+1JGnvBcIUqG0N3mB1MRpiS4vk9cd 2ZTLt8ZwyQ8FJjZkPYjTt18lAbsEYztz9B8Wwy7DNhEVxOvOfmdbmz5A8ySuB3Zm gM7PMuIbp0t7elQN8ZNue6jsdwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKVEqJCW 1HdAPUQSgSfFkZ7tiZ5cMB8GA1UdIwQYMBaAFAXMg89Lixs3if/k7ERgoW2J6jJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU1OS83NzdBMzA0RTMy OTExMUVEOTgzMDgwMTlDNEY5QUUwMi9CY3lEejB1TEd6ZUpfLVRzUkdDaGJZbnFN bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjeUR6MHVMR3plSl8tVHNSR0NoYllucU1uYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ1NTkvNzc3QTMwNEUzMjkxMTFFRDk4MzA4MDE5QzRGOUFFMDIvRkVDMjhGREUz Mjk1MTFFREJGMjlBMjExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnp3YwDwQCAAIwCQMHACABDfaxgDANBgkqhkiG9w0BAQsF AAOCAQEAWXTac2/YamUt7EjBSTziyycs0mahnGAC4Wq7qcRj+ScCFimloVwSDNHz 3iprcpeH2dZhmU9hSix0FKcBXd3PwTjQpswTFsht1G7OL6hmWjoZNrdnMRqIyAMj HktOyW7nh+Ilneey9PvDglxaDGAxYVRgO0VGyFickoPtYxcuzcc4T19/C5zFNNKQ G71gHlduNnrknsquTVRNJrruypwRRksy/7tILSxqXjhNGLQKIbjIjSBdU1foo1dj +9GqJq5vdNiRZ67ll4nQ+ZUi/emdb95lRH9SbC1R/HANJDv2SK3wU2VC3qZSGPiZ ypvoGjOanGpHPBRAVTjrVjzDtCnIMg== -----END CERTIFICATE-----Generated at Mon Aug 11 04:26:10 2025 by rpki-client