$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1EF22734F11F0A458FF49C4F9AE02.roa File: 87B1EF22734F11F0A458FF49C4F9AE02.roa (raw, json) Hash identifier: RnfpLawqklYTf7JMnygIkWcNq2MBTEjZF58qaQB6+LM= Subject key identifier: 7C:61:9F:7F:86:13:A6:7F:86:74:54:D2:F8:8C:04:3A:02:2C:B4:FB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C1F7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1EF22734F11F0A458FF49C4F9AE02.roa Signing time: Thu 07 Aug 2025 05:29:46 +0000 ROA not before: Thu 07 Aug 2025 05:29:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151763 IP address blocks: 103.158.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49655 (0xc1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 7 05:29:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=689439ca-c9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:a3:08:0e:cf:57:96:83:f8:0b:fe:c4:3a: 4f:de:2c:ac:cf:0a:7c:5c:0f:39:e0:d4:49:77:93: 49:95:0e:0d:44:a5:e5:4e:dc:cc:85:e5:d1:96:ab: ca:fc:b4:42:a9:83:4c:8c:45:ed:f4:10:9c:3e:c0: 2e:0b:33:bd:de:12:02:b0:56:ca:61:79:e0:c6:de: 4e:32:a4:bf:da:db:6e:2c:1e:45:68:cd:67:54:dd: f0:bf:fb:cc:0b:39:58:af:9c:f2:c3:05:af:e3:7f: b1:e9:22:f7:a3:1d:c3:90:ca:59:0a:0b:3e:10:03: ac:43:ce:62:f0:8d:aa:c4:d1:1d:fb:33:95:8e:9d: 76:02:e3:dd:30:dd:39:2a:b9:19:f0:a0:bd:63:4f: a1:90:fb:42:3a:3a:41:1b:39:9c:5c:af:77:e5:24: 5e:87:7c:b3:40:f5:e7:11:bc:c1:05:68:9f:a4:ea: 4c:9c:e4:01:db:3e:f9:4e:90:af:80:f7:0b:50:e8: 43:0a:5e:a0:0e:f5:6c:28:ca:22:5d:f7:b5:bf:d7: cb:9b:5f:78:0e:8d:51:37:b6:ef:91:48:20:a7:9e: 55:ee:8b:69:db:bf:ea:a7:f9:48:e0:6d:f3:65:85: 86:7a:e6:9c:37:25:74:3f:28:e8:ec:30:78:b9:19: cb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:61:9F:7F:86:13:A6:7F:86:74:54:D2:F8:8C:04:3A:02:2C:B4:FB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/87B1EF22734F11F0A458FF49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.185.0/24 Signature Algorithm: sha256WithRSAEncryption b3:f1:5d:83:5f:fa:1d:bb:a0:53:4b:8b:59:20:76:8b:f5:65: 80:41:49:6c:de:93:b4:2a:65:d2:c2:e4:cd:7a:25:73:ec:cb: 7f:94:45:96:6f:54:b8:6d:6d:5e:e8:b3:00:2e:c9:1e:75:64: 54:c9:25:4c:3c:34:f0:bc:90:76:e8:f5:52:76:f1:c1:25:4f: 80:47:16:2b:98:fe:04:ee:9f:d4:11:88:3b:1f:fb:4a:e6:57: a1:f9:10:a6:48:20:41:74:db:ca:e6:c8:e7:73:dc:91:5f:a7: ea:a6:29:71:43:55:ab:20:a9:b7:02:eb:46:9a:73:d7:d9:b8: f0:e7:f4:33:ac:38:94:5b:33:2b:5d:4d:d2:1d:d9:ea:da:aa: b9:5b:62:31:3b:ed:aa:ee:74:33:62:29:de:94:91:95:d1:68: 15:d2:02:2e:77:42:3d:1c:d8:57:57:5d:f1:4b:09:0f:ad:31: 1f:ba:e0:ef:0e:36:90:9a:63:17:d1:44:5c:4a:67:02:82:b0: 41:55:75:31:1e:87:61:3e:f0:eb:26:ef:67:6f:72:0d:a8:7f: 2a:8d:84:0b:22:60:7a:33:60:2a:28:80:4e:17:5a:f0:21:25: 92:18:b2:49:2b:7c:6c:93:66:6d:17:66:33:d5:28:9a:a3:ec: 0f:e8:5b:73 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAMH3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgwNzA1Mjk0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg5NDM5Y2EtYzllOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMn1owgOz1eWg/gL/sQ6T94srM8KfFwPOeDUSXeTSZUODUSl5U7czIXl0Zar yvy0QqmDTIxF7fQQnD7ALgszvd4SArBWymF54MbeTjKkv9rbbiweRWjNZ1Td8L/7 zAs5WK+c8sMFr+N/seki96Mdw5DKWQoLPhADrEPOYvCNqsTRHfszlY6ddgLj3TDd OSq5GfCgvWNPoZD7Qjo6QRs5nFyvd+UkXod8s0D15xG8wQVon6TqTJzkAds++U6Q r4D3C1DoQwpeoA71bCjKIl33tb/Xy5tfeA6NUTe275FIIKeeVe6Ladu/6qf5SOBt 82WFhnrmnDcldD8o6OwweLkZy7cCAwEAAaOCApUwggKRMB0GA1UdDgQWBBR8YZ9/ hhOmf4Z0VNL4jAQ6Aiy0+zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg3QjFFRjIy NzM0RjExRjBBNDU4RkY0OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ565MA0GCSqGSIb3DQEBCwUAA4IBAQCz8V2DX/odu6BT S4tZIHaL9WWAQUls3pO0KmXSwuTNeiVz7Mt/lEWWb1S4bW1e6LMALskedWRUySVM PDTwvJB26PVSdvHBJU+ARxYrmP4E7p/UEYg7H/tK5leh+RCmSCBBdNvK5sjnc9yR X6fqpilxQ1WrIKm3AutGmnPX2bjw5/QzrDiUWzMrXU3SHdnq2qq5W2IxO+2q7nQz YinelJGV0WgV0gIud0I9HNhXV13xSwkPrTEfuuDvDjaQmmMX0URcSmcCgrBBVXUx HodhPvDrJu9nb3INqH8qjYQLImB6M2AqKIBOF1rwISWSGLJJK3xsk2ZtF2Yz1Sia o+wP6Ftz -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:40 2025 by rpki-client