$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B7AC2FC90B811EC99577E23C4F9AE02.roa File: 1B7AC2FC90B811EC99577E23C4F9AE02.roa (raw, json) Hash identifier: 3HHeYxL6ulssH4PpcFMlLuf0GaLCTzsxC/8ANg48Z6c= Subject key identifier: 44:B1:0F:5F:5B:B2:19:2A:A7:D0:27:61:0F:69:F9:6C:AC:7A:96:32 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B794 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B7AC2FC90B811EC99577E23C4F9AE02.roa Signing time: Thu 08 May 2025 16:21:18 +0000 ROA not before: Thu 08 May 2025 16:21:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147271 IP address blocks: 103.177.62.0/23 maxlen: 24 2001:df0:1dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46996 (0xb794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:21:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9fe-4ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:35:26:bd:35:48:0a:1b:d2:e5:94:41:a4: 8a:3b:df:79:77:a9:c8:64:da:48:be:a5:06:17:b0: c5:b4:68:8e:ba:d1:17:5e:e9:83:3e:9d:2c:bf:7c: c0:3b:d8:21:95:98:93:54:3e:49:09:83:5d:7b:3f: 4c:e0:39:ac:0d:e9:1a:c1:63:74:f5:7d:ec:f4:6f: 87:e5:ee:b6:18:45:4b:e4:61:fd:0a:12:52:8b:15: c8:dd:0e:c7:7c:bf:50:9f:04:71:ec:72:d8:e5:9d: 37:3a:0e:34:02:e3:41:e4:fd:b5:df:83:7c:ac:26: f2:58:70:82:30:3d:f3:f2:19:73:7a:f2:e8:e3:70: d9:d1:5b:b6:ee:d8:c3:ec:df:d3:1e:a3:c8:6e:36: 5a:42:ef:b9:f4:38:77:15:b0:09:9e:7a:6d:65:14: fe:7d:5c:9a:82:c3:46:5f:8c:bf:75:8d:68:7a:b2: 9d:ed:47:5e:21:61:84:02:67:57:68:41:23:37:25: 71:c2:c0:8e:15:b8:5c:24:83:62:9b:42:35:26:6a: 8a:65:af:ec:01:7b:7e:a4:31:4e:86:a3:ca:10:16: d4:b3:71:92:7e:c3:70:95:33:b5:ec:ce:8e:99:d8: 60:fa:b9:a2:e5:e6:c4:b8:5d:c0:c3:82:bf:c3:a5: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B1:0F:5F:5B:B2:19:2A:A7:D0:27:61:0F:69:F9:6C:AC:7A:96:32 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B7AC2FC90B811EC99577E23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.62.0/23 IPv6: 2001:df0:1dc0::/48 Signature Algorithm: sha256WithRSAEncryption 19:74:ff:2a:a6:ba:d0:cf:d3:09:21:0a:c2:1f:0c:ff:1a:78: 62:9f:1d:bf:05:79:5c:53:55:76:84:e6:77:0b:eb:a3:df:89: a0:df:82:16:ec:67:b5:aa:50:b8:80:76:00:16:2f:65:8e:df: 9c:eb:3d:42:23:a3:4e:e4:71:53:4d:cf:cc:92:9b:3f:bd:3e: bd:fc:5b:1a:91:ec:25:2e:86:e6:e4:a9:15:f9:9d:27:a2:8e: 75:b1:c9:af:57:98:a5:88:e3:cf:58:1c:ff:ed:58:50:21:ab: 3f:5b:33:3e:cf:65:63:70:05:33:2e:0b:20:e6:54:b4:e5:7c: 1d:df:a2:d9:f2:59:83:92:46:6a:c9:ce:4a:16:de:0b:2b:10: 6d:b4:0a:3a:46:35:1e:18:16:6c:c0:26:a9:05:5b:a7:e3:57: 8f:c2:ea:cb:f8:53:d0:2e:64:99:73:92:51:7f:ff:2d:4c:4e: 49:de:fa:77:91:0e:49:f1:db:74:56:99:08:d0:b8:5a:3a:9f: dd:0f:a3:f3:4d:a4:21:63:fe:01:da:20:9a:58:d7:0c:3c:53: 2d:ee:f1:75:d9:2e:0f:cd:a4:e2:02:9a:44:46:cf:e8:53:0c: 59:e7:7d:d8:e9:4c:7e:87:8e:db:0b:18:15:b5:1a:c2:eb:08: cb:50:9f:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALeUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjExOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5ZmUtNGVlODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4oNSa9NUgKG9LllEGkijvfeXepyGTaSL6lBhewxbRojrrRF17pgz6dLL98 wDvYIZWYk1Q+SQmDXXs/TOA5rA3pGsFjdPV97PRvh+XuthhFS+Rh/QoSUosVyN0O x3y/UJ8Ecexy2OWdNzoONALjQeT9td+DfKwm8lhwgjA98/IZc3ry6ONw2dFbtu7Y w+zf0x6jyG42WkLvufQ4dxWwCZ56bWUU/n1cmoLDRl+Mv3WNaHqyne1HXiFhhAJn V2hBIzclccLAjhW4XCSDYptCNSZqimWv7AF7fqQxToajyhAW1LNxkn7DcJUztezO jpnYYPq5ouXmxLhdwMOCv8Ol+uUCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBREsQ9f W7IZKqfQJ2EPaflsrHqWMjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFCN0FDMkZD OTBCODExRUM5OTU3N0UyM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ7E+MA8EAgACMAkDBwAgAQ3wHcAwDQYJKoZIhvcNAQEL BQADggEBABl0/yqmutDP0wkhCsIfDP8aeGKfHb8FeVxTVXaE5ncL66PfiaDfghbs Z7WqULiAdgAWL2WO35zrPUIjo07kcVNNz8ySmz+9Pr38WxqR7CUuhubkqRX5nSei jnWxya9XmKWI489YHP/tWFAhqz9bMz7PZWNwBTMuCyDmVLTlfB3fotnyWYOSRmrJ zkoW3gsrEG20CjpGNR4YFmzAJqkFW6fjV4/C6sv4U9AuZJlzklF//y1MTkne+neR Dknx23RWmQjQuFo6n90Po/NNpCFj/gHaIJpY1ww8Uy3u8XXZLg/NpOICmkRGz+hT DFnnfdjpTH6HjtsLGBW1GsLrCMtQn8E= -----END CERTIFICATE-----Generated at Wed Nov 5 17:52:23 2025 by rpki-client