$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/7B86E2347F0711F0B9016941C4F9AE02.roa File: 7B86E2347F0711F0B9016941C4F9AE02.roa (raw, json) Hash identifier: wZT27F3LQkOVM0f/2rSyNQsd/VoaPgZq7TdT9xnpo2w= Subject key identifier: 2C:BB:1B:C3:75:8E:4C:27:61:83:9F:D3:BE:BB:A7:4D:AB:39:AF:D3 Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Certificate serial: 04 Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/7B86E2347F0711F0B9016941C4F9AE02.roa Signing time: Fri 22 Aug 2025 03:24:16 +0000 ROA not before: Fri 22 Aug 2025 03:24:16 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150706 IP address blocks: 103.147.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Validity Not Before: Aug 22 03:24:16 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68a7e2e0-236a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:be:9f:cd:53:b5:47:42:a3:0b:97:e6:27: 10:27:3f:6d:db:85:12:e8:1e:a1:cf:a9:07:e2:8b: 4b:05:8e:9d:9d:76:76:cb:72:7a:0e:0b:58:8e:85: 0a:de:89:9c:6d:c5:e3:b6:29:da:b9:6f:99:8d:9e: 0b:7e:e0:fd:38:89:1b:92:f7:1d:d2:96:25:65:22: 06:9f:ab:bd:d0:62:c0:8f:44:a6:b7:e9:39:14:69: 46:c6:f7:28:26:07:fd:ac:25:7a:45:ec:66:4c:2f: 24:de:66:92:22:b0:f1:e4:55:5d:e7:25:45:af:d6: c6:0d:0d:ee:a7:bd:9c:58:1a:25:de:f7:4f:7d:4d: dd:00:4c:86:50:7a:5f:ed:a1:74:32:e2:2a:3c:f7: 95:67:29:1a:ca:39:37:d8:ee:d5:a8:7c:76:d7:bc: 01:c3:d4:cc:d9:60:58:3c:b3:08:f2:29:f0:3a:08: f7:d7:ca:f9:58:72:57:b4:39:79:c4:55:37:a0:0f: 30:c6:9e:00:a6:29:db:ef:12:ba:59:95:81:6b:cf: 15:14:67:a9:05:bd:c8:73:08:ac:75:98:48:12:4b: 11:17:ab:3a:06:ed:12:3d:00:b6:7c:3e:44:fc:05: 01:1b:62:df:be:50:ff:79:80:4e:44:f6:3b:b2:62: 31:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BB:1B:C3:75:8E:4C:27:61:83:9F:D3:BE:BB:A7:4D:AB:39:AF:D3 X509v3 Authority Key Identifier: keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/7B86E2347F0711F0B9016941C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.202.0/24 Signature Algorithm: sha256WithRSAEncryption 82:43:08:67:ae:27:10:67:ff:c6:f1:89:1f:05:37:52:f7:f3: ef:0f:56:03:ef:30:59:0e:88:90:cb:ed:11:05:58:1c:24:f7: e5:a1:8a:ab:35:f6:65:d7:5e:98:dd:dc:c9:1f:2d:9f:2b:72: b9:64:f6:c5:0f:7c:8c:2e:56:f5:54:38:8d:55:e9:28:47:36: db:01:19:38:79:de:87:9f:8d:e9:67:ff:93:2f:3a:7a:b8:8d: 74:2d:1c:d8:bd:8c:5e:db:79:71:81:35:2f:8d:79:e7:a7:c5: 17:08:37:36:c9:2c:4d:f1:9f:f5:ca:64:e4:5c:61:62:33:f4: 32:67:4b:39:36:c8:57:0a:5a:00:f6:d0:f9:03:69:07:55:b4: 1a:7b:40:c8:60:09:c1:3d:9f:ca:ae:fb:dc:6f:ab:94:96:20: 63:f5:a6:8d:de:79:72:5b:fd:bf:44:af:ca:15:07:36:23:f0: 84:2b:c9:8b:70:9d:19:e3:af:29:56:3c:e2:ca:b4:02:af:36: 64:e3:52:06:f5:10:5d:66:61:03:ff:a2:0c:2e:1b:3f:9a:e1: 52:6e:f3:60:e3:91:28:b9:41:71:5a:bc:ef:be:4b:d4:8c:ee: 3f:41:f0:41:05:2b:7f:99:00:f5:66:0b:20:61:cb:72:8a:69: ba:c7:5a:39 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0Q1ODExMC8GA1UEBRMoMTgzRkE5MERDMzU1NkMxRDE2NTY4RUJFQkIxOEUyRkM1 QTc4MUQ5MzAeFw0yNTA4MjIwMzI0MTZaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YTdlMmUwLTIzNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr676fzVO1R0KjC5fmJxAnP23bhRLoHqHPqQfii0sFjp2ddnbLcnoOC1iOhQre iZxtxeO2Kdq5b5mNngt+4P04iRuS9x3SliVlIgafq73QYsCPRKa36TkUaUbG9ygm B/2sJXpF7GZMLyTeZpIisPHkVV3nJUWv1sYNDe6nvZxYGiXe9099Td0ATIZQel/t oXQy4io895VnKRrKOTfY7tWofHbXvAHD1MzZYFg8swjyKfA6CPfXyvlYcle0OXnE VTegDzDGngCmKdvvErpZlYFrzxUUZ6kFvchzCKx1mEgSSxEXqzoG7RI9ALZ8PkT8 BQEbYt++UP95gE5E9juyYjG7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULLsbw3WO TCdhg5/TvrunTas5r9MwHwYDVR0jBBgwFoAUGD+pDcNVbB0WVo6+uxji/Fp4HZMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RDU4LzU5RDA2QTEyN0Yw NjExRjA5NTIwNTkzQUM0RjlBRTAyL0dELXBEY05WYkIwV1ZvNi11eGppX0ZwNEha TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0QtcERjTlZiQjBXVm82LXV4amlfRnA0SFpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0Q1OC81OUQwNkExMjdGMDYxMUYwOTUyMDU5M0FDNEY5QUUwMi83Qjg2RTIzNDdG MDcxMUYwQjkwMTY5NDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeTyjANBgkqhkiG9w0BAQsFAAOCAQEAgkMIZ64nEGf/xvGJ HwU3Uvfz7w9WA+8wWQ6IkMvtEQVYHCT35aGKqzX2ZddemN3cyR8tnytyuWT2xQ98 jC5W9VQ4jVXpKEc22wEZOHneh5+N6Wf/ky86eriNdC0c2L2MXtt5cYE1L41556fF Fwg3NsksTfGf9cpk5FxhYjP0MmdLOTbIVwpaAPbQ+QNpB1W0GntAyGAJwT2fyq77 3G+rlJYgY/Wmjd55clv9v0SvyhUHNiPwhCvJi3CdGeOvKVY84sq0Aq82ZONSBvUQ XWZhA/+iDC4bP5rhUm7zYOORKLlBcVq8775L1IzuP0HwQQUrf5kA9WYLIGHLcopp usdaOQ== -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:29 2025 by rpki-client