$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/18F343922A5711EBB59D6526C4F9AE02.roa File: 18F343922A5711EBB59D6526C4F9AE02.roa (raw, json) Hash identifier: 67FA0fogoOEO8ZhRY0Z7X/jNdUDR2kpHHHAZ7zc0DNU= Subject key identifier: BB:A1:EE:83:D2:8C:22:DA:FE:C6:52:BD:D7:70:97:03:87:91:85:17 Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7 Certificate serial: 08AE Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/18F343922A5711EBB59D6526C4F9AE02.roa Signing time: Thu 12 Jun 2025 20:58:46 +0000 ROA not before: Thu 12 Jun 2025 20:58:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 9498 IP address blocks: 106.210.199.0/24 maxlen: 24 117.96.0.0/16 maxlen: 16 117.96.0.0/17 maxlen: 22 117.96.0.0/18 maxlen: 24 117.96.64.0/19 maxlen: 24 117.96.96.0/20 maxlen: 24 117.96.112.0/21 maxlen: 24 117.96.120.0/22 maxlen: 24 117.97.0.0/16 maxlen: 16 117.97.0.0/17 maxlen: 18 117.97.0.0/18 maxlen: 24 117.97.64.0/19 maxlen: 20 117.97.64.0/20 maxlen: 24 117.97.80.0/21 maxlen: 21 117.97.80.0/22 maxlen: 23 117.97.80.0/23 maxlen: 24 117.97.82.0/24 maxlen: 24 223.224.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7 Validity Not Before: Jun 12 20:58:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=684b3f85-8f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5c:ad:a7:45:d2:12:20:21:83:3d:58:34:66: 3e:4c:cd:46:15:00:e2:f1:10:c0:f7:0f:dc:fa:7c: ea:fe:3d:39:bd:c3:fb:46:9d:02:a8:25:c8:92:16: 28:68:6a:b4:6a:37:fb:3c:4b:4e:e2:0b:36:22:7a: 76:04:e2:46:a3:d1:80:3c:2e:39:63:d2:e6:a3:67: 49:75:8b:aa:ee:0c:2b:5c:7b:a2:12:21:ed:f8:c0: 0d:dc:ef:2c:dd:03:fe:67:d7:e0:cc:a5:32:bd:5f: d5:57:d7:5b:45:c3:93:a0:b4:a7:88:4b:ed:c5:da: ea:e7:c3:ac:e5:17:ed:f4:dd:67:83:da:c5:de:6c: 26:90:89:c9:47:d6:2e:ec:7a:90:54:a2:ee:6e:ea: f3:8e:c8:74:02:f6:a0:71:d7:bb:5b:ea:37:60:b5: f0:9f:37:d1:be:d0:d3:3e:ef:5e:df:d6:a9:97:5a: 12:20:8e:f8:57:51:a7:34:d6:53:bc:6f:f9:1b:d3: 4d:1a:f0:12:37:49:ae:0f:83:22:ed:8e:9f:ff:7a: b7:e5:7a:c0:b4:10:6b:dc:6e:78:b0:b7:30:a0:c0: 0b:c0:e6:e4:3f:81:0d:d7:8f:e8:9c:51:c2:2f:97: 6c:41:20:77:f1:6a:4d:20:83:28:2d:73:e2:d8:ec: 5b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A1:EE:83:D2:8C:22:DA:FE:C6:52:BD:D7:70:97:03:87:91:85:17 X509v3 Authority Key Identifier: keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/18F343922A5711EBB59D6526C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 106.210.199.0/24 117.96.0.0/15 223.224.38.0/24 Signature Algorithm: sha256WithRSAEncryption e7:38:66:ec:63:42:40:19:c2:81:e4:c3:fe:34:c2:f9:95:24: 0b:1a:2d:76:19:87:90:02:72:5d:fd:d2:67:c7:55:2b:bd:23: fc:fc:64:f5:b8:ca:27:29:a2:27:59:fc:8d:0a:2a:3d:e0:60: d0:91:b1:9e:62:41:02:6a:db:30:97:29:43:66:8f:aa:12:cd: cc:f4:95:fb:22:2a:03:0f:3e:26:90:ea:ce:0e:10:a6:c0:e7: 88:9b:94:a3:03:be:09:4e:cb:d3:b7:80:cf:e8:fe:c7:12:65: 2b:2a:8a:2c:80:90:82:ed:6a:50:99:f0:25:b6:0b:ab:79:f4: 2d:46:2a:a3:60:3f:0c:4c:47:ee:6b:3e:a0:9e:7a:07:8b:a6: 01:3e:5a:81:ad:97:1c:3a:53:67:1a:60:65:5f:ed:9e:b9:6b: e6:52:3a:07:3a:9a:16:ac:ba:18:e1:e3:6c:08:46:de:47:fd: 46:9d:df:1a:9e:e2:f9:fb:8c:6a:fb:14:91:72:a0:25:b0:4a: 71:15:f9:0b:80:dd:63:90:4f:b9:f8:79:18:b9:87:ac:b6:da: ee:35:f0:a9:46:67:98:e7:ce:cf:ec:13:fb:e9:80:6c:7b:50: 54:1b:38:a9:71:f2:4b:0f:0d:ee:6e:06:39:b2:60:90:c3:14: 2b:87:44:af -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxOTcxMTAvBgNVBAUTKDY4MzVEREZCODQzOEQyNEJCNkM1OTc5MzE2RTU0ODkx MDY2MDkwQTcwHhcNMjUwNjEyMjA1ODQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiM2Y4NS04ZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlytp0XSEiAhgz1YNGY+TM1GFQDi8RDA9w/c+nzq/j05vcP7Rp0CqCXIkhYo aGq0ajf7PEtO4gs2Inp2BOJGo9GAPC45Y9Lmo2dJdYuq7gwrXHuiEiHt+MAN3O8s 3QP+Z9fgzKUyvV/VV9dbRcOToLSniEvtxdrq58Os5Rft9N1ng9rF3mwmkInJR9Yu 7HqQVKLuburzjsh0Avagcde7W+o3YLXwnzfRvtDTPu9e39apl1oSII74V1GnNNZT vG/5G9NNGvASN0muD4Mi7Y6f/3q35XrAtBBr3G54sLcwoMALwObkP4EN14/onFHC L5dsQSB38WpNIIMoLXPi2OxbeQIDAQABo4ICoDCCApwwHQYDVR0OBBYEFLuh7oPS jCLa/sZSvddwlwOHkYUXMB8GA1UdIwQYMBaAFGg13fuEONJLtsWXkxblSJEGYJCn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTE5Ny84NEIyRUM5OEYy N0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBrdTJ4WmVURnVWSWtRWmdr S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FEWGQtNFE0MGt1MnhaZVRGdVZJa1FaZ2tLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkxOTcvODRCMkVDOThGMjdEMTFFQTk0NTZFRTYwQzRGOUFFMDIvMThGMzQzOTIy QTU3MTFFQkI1OUQ2NTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKgYIKwYBBQUHAQcBAf8E GzAZMBcEAgABMBEDBABq0scDAwF1YAMEAN/gJjANBgkqhkiG9w0BAQsFAAOCAQEA 5zhm7GNCQBnCgeTD/jTC+ZUkCxotdhmHkAJyXf3SZ8dVK70j/Pxk9bjKJymiJ1n8 jQoqPeBg0JGxnmJBAmrbMJcpQ2aPqhLNzPSV+yIqAw8+JpDqzg4QpsDniJuUowO+ CU7L07eAz+j+xxJlKyqKLICQgu1qUJnwJbYLq3n0LUYqo2A/DExH7ms+oJ56B4um AT5aga2XHDpTZxpgZV/tnrlr5lI6BzqaFqy6GOHjbAhG3kf9Rp3fGp7i+fuMavsU kXKgJbBKcRX5C4DdY5BPufh5GLmHrLba7jXwqUZnmOfOz+wT++mAbHtQVBs4qXHy Sw8N7m4GObJgkMMUK4dErw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:21 2025 by rpki-client