$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/7665CD0AFF7011E99CDC306AC4F9AE02.roa File: 7665CD0AFF7011E99CDC306AC4F9AE02.roa (raw, json) Hash identifier: z3upKKYJCOGZgcUebN34+AOq4O4dzcNdCU/gNvo/rxQ= Subject key identifier: D9:6C:22:E6:50:10:B1:6B:24:D6:D9:08:F9:A5:3E:83:46:82:7C:24 Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Certificate serial: 0C74 Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/7665CD0AFF7011E99CDC306AC4F9AE02.roa Signing time: Tue 24 Jun 2025 18:32:08 +0000 ROA not before: Tue 24 Jun 2025 18:32:08 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132898 IP address blocks: 103.27.216.0/22 maxlen: 22 103.27.216.0/24 maxlen: 24 103.27.217.0/24 maxlen: 24 103.27.218.0/24 maxlen: 24 103.27.219.0/24 maxlen: 24 2407:7f00::/32 maxlen: 32 2407:7f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E66, serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Validity Not Before: Jun 24 18:32:08 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=685aef27-db7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:59:ba:54:bf:8f:f9:14:c4:42:d9:6f:74: 54:6c:46:e3:e1:34:d9:7e:f0:4c:a0:79:da:cb:50: 3a:bc:05:87:26:27:5a:51:8e:c3:a3:2d:1c:94:42: bd:de:11:75:79:fe:5a:38:d2:5a:73:70:e2:b0:80: 6f:7f:ca:be:c4:71:0d:9a:5c:49:9a:92:4f:3f:da: ba:aa:bb:fc:2d:05:d2:d6:89:94:bf:44:f9:ea:c5: 21:1f:c3:86:70:89:52:ee:5c:d1:69:af:79:c6:00: 93:5e:62:e6:c6:21:ca:b9:e8:ed:10:92:8a:79:69: d4:96:61:bd:b7:86:d1:8b:b3:06:5a:61:d0:50:31: ff:d3:5c:16:e7:fc:b4:da:61:02:c4:01:28:9b:44: f4:1a:8b:5c:a2:1e:6d:f7:42:13:18:2a:c9:06:e4: a9:7d:32:2f:b7:7b:39:0b:ff:a2:85:04:cc:5e:69: 79:16:7c:08:b0:21:64:43:f3:c1:ec:7b:31:ea:ec: cf:3a:69:e0:55:ef:72:af:6e:0d:21:e4:a2:a0:f6: e8:8e:f1:97:ff:33:2c:3e:18:f9:9e:59:49:db:70: 71:0b:c9:b0:fa:52:90:0a:be:35:ca:80:0e:d5:e4: 60:c6:dc:ad:9b:68:51:8d:0b:c1:f1:3b:c2:4f:fa: e2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:22:E6:50:10:B1:6B:24:D6:D9:08:F9:A5:3E:83:46:82:7C:24 X509v3 Authority Key Identifier: keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/7665CD0AFF7011E99CDC306AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.27.216.0/22 IPv6: 2407:7f00::/32 Signature Algorithm: sha256WithRSAEncryption 5d:77:22:12:a1:35:45:77:c0:34:15:5b:a1:47:c7:f8:ba:21: fb:a5:47:82:6e:43:1b:7e:b5:1c:57:07:7a:ab:f9:40:24:ee: 27:44:57:8c:9d:e4:3d:7f:67:7a:70:64:ea:78:ff:52:25:28: eb:94:63:7b:81:14:d1:6b:67:16:15:0f:12:e3:d4:b9:01:3f: 2d:f7:f6:3d:b9:dd:59:3a:e3:93:bb:f4:8b:41:03:10:da:50: 7c:b6:d5:05:1e:d4:b0:56:f9:ff:31:17:78:57:25:18:3f:a4: 14:8e:a4:27:94:37:5f:4f:ff:61:2b:69:0d:12:84:40:22:c9: b9:23:b6:d4:ea:35:e1:49:72:2c:c0:03:70:2f:87:b1:dc:f9: 2b:ce:c7:67:80:2b:8e:14:20:1a:82:e1:22:e6:14:08:eb:d7: 20:43:68:16:49:b3:bc:05:d1:4c:f9:f7:c9:be:bf:e5:ed:84: c9:64:0f:83:8d:e7:2f:93:97:ca:d0:d3:59:a1:38:3e:65:8c: 1a:1a:d7:5e:85:6e:16:ce:c1:42:5a:ef:bf:0e:1c:0b:21:ee: 77:f6:13:2b:58:34:39:a8:ba:a2:ef:f9:1c:db:74:92:49:67: 16:ce:85:64:fb:6c:78:e7:f3:5f:35:76:e2:66:fa:fd:16:d5: 7b:e2:cf:01 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNjYxMTAvBgNVBAUTKERBNTQ3RUQ2OTI4QUFEMUVDRkI2ODQ3QTFCMDc0MzJC RDg3QjE5RUYwHhcNMjUwNjI0MTgzMjA4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVhZWYyNy1kYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUVZulS/j/kUxELZb3RUbEbj4TTZfvBMoHnay1A6vAWHJidaUY7Doy0clEK9 3hF1ef5aONJac3DisIBvf8q+xHENmlxJmpJPP9q6qrv8LQXS1omUv0T56sUhH8OG cIlS7lzRaa95xgCTXmLmxiHKuejtEJKKeWnUlmG9t4bRi7MGWmHQUDH/01wW5/y0 2mECxAEom0T0Gotcoh5t90ITGCrJBuSpfTIvt3s5C/+ihQTMXml5FnwIsCFkQ/PB 7Hsx6uzPOmngVe9yr24NIeSioPbojvGX/zMsPhj5nllJ23BxC8mw+lKQCr41yoAO 1eRgxtytm2hRjQvB8TvCT/risQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNlsIuZQ ELFrJNbZCPmlPoNGgnwkMB8GA1UdIwQYMBaAFNpUftaSiq0ez7aEehsHQyvYexnv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU2Ni83MDYzOUVGQ0ZG NkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JSN1B0b1I2R3dkREs5aDdH ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsUi0xcEtLclI3UHRvUjZHd2RESzloN0dlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDBFNjYvNzA2MzlFRkNGRjZFMTFFOTg1QTg4QzY3QzRGOUFFMDIvNzY2NUNEMEFG RjcwMTFFOTlDREMzMDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnG9gwDQQCAAIwBwMFACQHfwAwDQYJKoZIhvcNAQELBQAD ggEBAF13IhKhNUV3wDQVW6FHx/i6IfulR4JuQxt+tRxXB3qr+UAk7idEV4yd5D1/ Z3pwZOp4/1IlKOuUY3uBFNFrZxYVDxLj1LkBPy339j253Vk645O79ItBAxDaUHy2 1QUe1LBW+f8xF3hXJRg/pBSOpCeUN19P/2EraQ0ShEAiybkjttTqNeFJcizAA3Av h7Hc+SvOx2eAK44UIBqC4SLmFAjr1yBDaBZJs7wF0Uz598m+v+XthMlkD4ON5y+T l8rQ01mhOD5ljBoa116FbhbOwUJa778OHAsh7nf2EytYNDmouqLv+RzbdJJJZxbO hWT7bHjn8181duJm+v0W1XvizwE= -----END CERTIFICATE-----Generated at Thu Jul 3 21:46:48 2025 by rpki-client