$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa File: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (raw, json) Hash identifier: IU2n2x/NVgQOUwGjqFagszzivCXrq63+ZL+OISFLwDE= Subject key identifier: 29:C3:ED:45:E6:D9:6B:F7:C5:48:E4:4F:EB:18:FC:54:F7:D8:1F:16 Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Certificate serial: 0181 Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa Signing time: Thu 03 Jul 2025 04:08:13 +0000 ROA not before: Thu 03 Jul 2025 04:08:13 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151413 IP address blocks: 103.149.218.0/24 maxlen: 24 163.223.212.0/24 maxlen: 24 2001:df2:9940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 03:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Validity Not Before: Jul 3 04:08:13 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6866022d-825f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:df:db:44:95:e5:bd:f0:79:fc:80:e0:62: 9b:96:69:58:9f:cd:53:98:40:41:c6:6b:88:b2:66: e7:91:20:d4:21:9b:8d:86:16:e5:fc:b4:1a:aa:37: 3d:0b:1a:6c:6e:07:7b:3e:4c:c7:83:4c:45:ac:14: 36:b5:89:64:cc:b4:a9:e8:06:39:c8:0f:33:53:fa: 62:ec:bd:79:c1:3f:69:d0:1f:14:1c:38:8d:b7:1a: 2a:13:ba:b2:be:17:25:4e:0b:8e:1a:ff:4d:74:d0: e6:e6:dc:19:6b:01:ad:40:f0:7e:c8:b1:97:14:3e: e8:2c:c3:81:1e:1b:21:3e:63:6e:68:e1:03:25:5c: 3a:78:34:f3:7c:55:69:32:97:04:7c:17:41:28:b6: 10:95:87:dc:10:33:c1:7f:94:4f:09:30:25:84:eb: 74:98:23:33:fa:5e:17:71:4c:97:bb:8a:bb:45:fe: cf:6f:a9:c9:66:53:d7:b6:7d:08:7d:f6:be:56:12: 2c:3d:3a:90:80:73:62:fb:20:b2:c7:20:df:15:0b: 5c:81:3e:20:3d:7f:3c:39:51:95:5f:3b:e4:46:63: 45:64:eb:68:8e:66:55:41:6e:53:a4:f3:41:19:53: b8:45:35:9e:e5:78:c6:86:58:91:85:bc:e5:a8:0a: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C3:ED:45:E6:D9:6B:F7:C5:48:E4:4F:EB:18:FC:54:F7:D8:1F:16 X509v3 Authority Key Identifier: keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.218.0/24 163.223.212.0/24 IPv6: 2001:df2:9940::/48 Signature Algorithm: sha256WithRSAEncryption 4b:7c:0b:91:aa:26:1d:6a:35:7b:fc:73:5a:83:4c:a1:ea:67: fa:f1:77:5a:97:ac:9b:05:ef:c2:09:87:53:73:1b:e1:72:78: 49:c3:b9:d7:95:58:0e:43:6d:63:ee:61:4a:81:ae:4a:ce:ef: 9b:d1:49:de:28:cc:97:1b:8b:94:fc:cb:87:b6:1a:f0:f6:7a: 0f:19:47:8a:e6:87:36:d9:bc:58:c1:cb:95:ef:94:ea:cc:6c: 6e:c0:00:bc:ce:2b:65:86:f8:8a:47:44:52:43:c1:db:6f:94: d4:a8:f9:f9:3d:5d:96:8d:7a:4f:86:21:45:0b:fd:7f:66:8a: f6:02:f6:c8:ac:40:99:c5:a4:45:22:fb:cd:0c:21:a2:5c:7f: 62:f5:bd:20:c7:24:7c:06:4b:74:94:21:75:60:e7:eb:75:95: bf:e1:58:cb:55:da:11:53:73:0d:a0:39:85:c8:f9:f5:a9:94: c1:d0:3a:ea:c5:e5:0a:09:b6:51:0c:c3:ba:e6:e4:ac:99:35: 7a:57:73:bb:e4:c8:f3:14:b3:4e:e1:98:e5:cf:d1:10:31:05: c5:47:b3:92:78:0d:63:1f:47:94:95:09:80:9f:01:fb:56:ef: 45:18:4a:01:a2:7c:24:36:52:2b:60:b1:a7:42:21:c1:a9:09: 73:0a:96:2e -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyMDgxMTAvBgNVBAUTKDE2MTQ0QzgyMzVCNDUxOUY1MEVERDU1NTM2ODExODg0 NEQxNzExQTUwHhcNMjUwNzAzMDQwODEzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY2MDIyZC04MjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJbf20SV5b3wefyA4GKblmlYn81TmEBBxmuIsmbnkSDUIZuNhhbl/LQaqjc9 Cxpsbgd7PkzHg0xFrBQ2tYlkzLSp6AY5yA8zU/pi7L15wT9p0B8UHDiNtxoqE7qy vhclTguOGv9NdNDm5twZawGtQPB+yLGXFD7oLMOBHhshPmNuaOEDJVw6eDTzfFVp MpcEfBdBKLYQlYfcEDPBf5RPCTAlhOt0mCMz+l4XcUyXu4q7Rf7Pb6nJZlPXtn0I ffa+VhIsPTqQgHNi+yCyxyDfFQtcgT4gPX88OVGVXzvkRmNFZOtojmZVQW5TpPNB GVO4RTWe5XjGhliRhbzlqAooFQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFCnD7UXm 2Wv3xUjkT+sY/FT32B8WMB8GA1UdIwQYMBaAFBYUTII1tFGfUO3VVTaBGIRNFxGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzIwOC9DNkQ5NkQ5RTFB MTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVaOVE3ZFZWTm9FWWhFMFhF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODcyMDgvQzZEOTZEOUUxQTE3MTFFRTgyMDYzNjgxQzRGOUFFMDIvN0Y1QzJDRkEx QTFCMTFFRUJDMDgzNDg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnldoDBACj39QwDwQCAAIwCQMHACABDfKZQDANBgkqhkiG 9w0BAQsFAAOCAQEAS3wLkaomHWo1e/xzWoNMoepn+vF3WpesmwXvwgmHU3Mb4XJ4 ScO515VYDkNtY+5hSoGuSs7vm9FJ3ijMlxuLlPzLh7Ya8PZ6DxlHiuaHNtm8WMHL le+U6sxsbsAAvM4rZYb4ikdEUkPB22+U1Kj5+T1dlo16T4YhRQv9f2aK9gL2yKxA mcWkRSL7zQwholx/YvW9IMckfAZLdJQhdWDn63WVv+FYy1XaEVNzDaA5hcj59amU wdA66sXlCgm2UQzDuubkrJk1eldzu+TI8xSzTuGY5c/REDEFxUezkngNYx9HlJUJ gJ8B+1bvRRhKAaJ8JDZSK2Cxp0IhwakJcwqWLg== -----END CERTIFICATE-----Generated at Wed Aug 13 17:57:42 2025 by rpki-client