$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED9D43DC728B11F087B1AA81C4F9AE02.roa File: ED9D43DC728B11F087B1AA81C4F9AE02.roa (raw, json) Hash identifier: j1p361y26UFXZzLaRyRxHi2yGJjDK7eLk6KBN0w/Q8I= Subject key identifier: 00:4A:A9:45:43:56:88:72:9E:27:64:79:BB:19:90:DB:C5:E5:88:31 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C1CB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED9D43DC728B11F087B1AA81C4F9AE02.roa Signing time: Wed 06 Aug 2025 06:09:36 +0000 ROA not before: Wed 06 Aug 2025 06:09:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153785 IP address blocks: 163.227.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49611 (0xc1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 6 06:09:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6892f1a0-6665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6b:a4:66:9a:d2:e7:b1:e5:1a:41:e2:c9:1d: c4:4f:6f:2e:a7:14:39:6b:40:8a:1f:5c:13:a4:8c: d8:53:db:0a:9f:9d:8d:64:83:9a:1b:09:61:c0:a4: 05:e5:c9:9b:c2:23:93:cb:48:a1:76:f5:b7:ff:e5: 10:76:bf:18:a9:00:5d:37:d8:e1:39:41:a4:95:31: 35:87:a0:e6:88:33:20:93:15:07:5e:f3:87:1c:1b: 5d:9b:98:29:00:ba:08:c6:c3:ac:4e:7a:93:9c:f5: ec:51:e5:cf:5d:a7:e6:24:4c:78:cb:46:94:1e:ce: 13:76:87:7a:8a:40:1c:a4:cb:60:f4:b9:c1:83:20: f7:6b:c4:47:40:57:10:45:a1:5f:91:04:e9:0f:60: ae:0a:c5:57:6e:df:fe:e2:ad:d3:b5:78:fe:93:f9: ba:c1:0a:f3:41:39:a0:95:8c:ce:ca:2d:5f:29:07: 2c:6f:79:77:a4:5b:0f:44:da:bf:a6:08:8a:91:a6: 9b:32:3e:ea:1a:b3:8a:99:15:fc:41:24:74:f6:be: 57:67:b3:01:49:d7:39:8d:e6:de:db:3e:95:85:03: 94:0a:9f:c1:f3:cb:c3:31:a7:06:0c:92:13:ef:8e: 9d:a9:63:b0:95:ed:7e:75:00:57:f8:b6:8f:2f:41: f2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4A:A9:45:43:56:88:72:9E:27:64:79:BB:19:90:DB:C5:E5:88:31 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED9D43DC728B11F087B1AA81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.72.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:4d:b3:45:4a:83:5e:05:7a:93:58:94:b9:76:3b:31:a8:95: 7d:a3:3d:24:af:78:da:39:24:0a:67:1c:c6:8d:09:81:ac:30: 36:0d:c6:9f:1d:48:f1:ab:f1:54:a2:f4:24:57:66:fa:62:49: 51:fc:19:ff:8a:67:56:08:de:cd:31:d4:95:fb:01:3d:e1:b8: 1b:ae:5d:bb:aa:01:c7:38:bb:8a:51:f3:12:83:ba:00:3c:33: f0:fc:71:82:d2:4f:5e:3d:72:73:8b:ce:fc:47:33:4f:90:32: 43:8c:3d:50:ce:00:ae:22:c7:2a:47:98:1d:05:37:76:75:9d: f9:3c:bf:69:3b:a3:8a:8c:8d:14:26:93:61:73:05:79:ff:1f: a6:1e:1b:69:68:e6:ce:11:e5:df:55:ae:8e:2d:32:44:e8:df: 5a:84:9a:50:29:b1:1e:23:97:30:f9:cf:b1:e6:c2:b0:63:6b: 05:35:af:5f:ae:f3:99:50:36:53:3c:e6:50:61:78:73:cb:54: 19:14:69:80:6e:3b:f4:91:75:e3:97:1d:46:7f:81:d1:99:d6: 10:3a:cb:d4:9b:3b:7b:9a:4f:ab:79:4b:e8:71:71:90:75:73: dc:19:cb:2b:18:d6:3b:12:85:d1:aa:a3:71:6b:58:71:64:38: b6:55:53:f3 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAMHLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgwNjA2MDkzNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg5MmYxYTAtNjY2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANtrpGaa0uex5RpB4skdxE9vLqcUOWtAih9cE6SM2FPbCp+djWSDmhsJYcCk BeXJm8Ijk8tIoXb1t//lEHa/GKkAXTfY4TlBpJUxNYeg5ogzIJMVB17zhxwbXZuY KQC6CMbDrE56k5z17FHlz12n5iRMeMtGlB7OE3aHeopAHKTLYPS5wYMg92vER0BX EEWhX5EE6Q9grgrFV27f/uKt07V4/pP5usEK80E5oJWMzsotXykHLG95d6RbD0Ta v6YIipGmmzI+6hqzipkV/EEkdPa+V2ezAUnXOY3m3ts+lYUDlAqfwfPLwzGnBgyS E++OnaljsJXtfnUAV/i2jy9B8r0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBQASqlF Q1aIcp4nZHm7GZDbxeWIMTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VEOUQ0M0RD NzI4QjExRjA4N0IxQUE4MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBo+NIMA0GCSqGSIb3DQEBCwUAA4IBAQAdTbNFSoNeBXqT WJS5djsxqJV9oz0kr3jaOSQKZxzGjQmBrDA2DcafHUjxq/FUovQkV2b6YklR/Bn/ imdWCN7NMdSV+wE94bgbrl27qgHHOLuKUfMSg7oAPDPw/HGC0k9ePXJzi878RzNP kDJDjD1QzgCuIscqR5gdBTd2dZ35PL9pO6OKjI0UJpNhcwV5/x+mHhtpaObOEeXf Va6OLTJE6N9ahJpQKbEeI5cw+c+x5sKwY2sFNa9frvOZUDZTPOZQYXhzy1QZFGmA bjv0kXXjlx1Gf4HRmdYQOsvUmzt7mk+reUvocXGQdXPcGcsrGNY7EoXRqqNxa1hx ZDi2VVPz -----END CERTIFICATE-----Generated at Sun Aug 10 16:11:07 2025 by rpki-client