$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa File: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (raw, json) Hash identifier: E4nT7oFtr1XMa2nYhYdcIV1SFfBRxDq27G/9G98Dpsw= Subject key identifier: 57:AC:F1:BD:C6:D9:04:39:04:3F:62:4D:7B:A1:42:EB:02:4E:57:EE Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Certificate serial: 073C Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa Signing time: Wed 08 Jul 2026 23:24:20 +0000 ROA not before: Wed 08 Jul 2026 23:24:20 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 58580 IP address blocks: 103.152.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1852 (0x73c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Validity Not Before: Jul 8 23:24:20 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4edc24-432e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:69:48:24:dd:86:99:f3:ce:2b:48:76:13: 65:22:ca:10:cf:ab:bd:67:e6:45:27:26:7b:d3:3d: 7e:49:8b:13:bf:d1:05:61:d0:b7:bd:7e:52:f3:aa: 0d:c9:60:07:c7:bf:77:04:51:bc:1f:1a:4b:f2:8d: 7d:e4:d2:a9:73:02:5e:17:67:93:f1:53:67:ff:b6: b1:b6:3c:05:19:0c:f5:a1:67:ef:f3:59:bb:4c:c2: 65:5a:83:d4:51:13:04:ae:8f:2f:2c:29:a4:37:a6: 60:ab:4b:94:dc:5b:53:cb:a0:0e:4b:a5:8b:b5:7c: 77:8f:dc:49:5c:a5:f9:11:60:fd:b0:a5:11:b1:04: 96:d2:d0:c1:ff:35:7a:23:3f:a4:c8:56:30:80:4b: d7:69:c6:67:75:90:3b:24:4b:fe:27:de:f9:fa:3e: 4c:9d:2b:b3:49:0b:e2:cc:df:8a:de:bb:2f:6f:27: d2:60:5b:23:9e:72:a4:45:6b:89:88:72:87:83:a7: b1:49:35:b8:17:17:fe:fc:3f:de:77:3a:c3:4c:e1: bc:d4:03:e3:ab:7f:ac:31:94:81:2a:da:ae:4b:1f: 03:71:16:8a:fc:df:46:8c:28:44:ef:42:0d:17:e0: 0c:a7:da:fa:c8:98:ad:2c:06:09:6b:b3:7d:45:87: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AC:F1:BD:C6:D9:04:39:04:3F:62:4D:7B:A1:42:EB:02:4E:57:EE X509v3 Authority Key Identifier: keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.2.0/23 Signature Algorithm: sha256WithRSAEncryption 18:27:21:5e:77:22:e7:a3:e3:6c:fe:37:69:5b:01:3d:03:09: b0:13:c5:e3:ba:6b:0c:05:8b:75:49:30:bb:16:94:a0:69:9d: 60:bd:0b:22:3a:c2:11:3f:a5:4d:6b:b0:a4:b4:c7:28:74:e5: 4d:64:a6:ae:c2:6f:bb:fd:37:ef:cb:a8:16:ad:7f:a2:66:db: 73:1c:57:1d:b0:6a:7f:e9:cc:52:8c:a0:8a:2e:3c:4b:f5:5b: 51:87:8c:aa:53:6a:07:85:9d:c3:09:d0:ad:bc:0f:ac:e6:ea: f1:3e:0c:11:1c:bf:3a:5f:62:e0:26:b2:1a:80:44:27:ce:dd: a3:01:62:1d:ec:2d:05:09:c6:8f:ef:ac:2a:e5:63:93:04:ff: 06:9b:d5:78:c1:27:aa:56:ed:dc:c2:55:ad:43:50:b6:f7:dd: 75:f7:06:3d:24:14:8a:8d:c1:d6:8a:13:59:8e:e8:03:bd:09: 89:b8:79:e1:85:21:93:0f:5c:25:ea:31:2d:51:3a:28:6f:ee: fa:ce:fd:fa:ce:c4:d0:fd:7d:dd:46:a4:95:76:98:8a:e4:75: 7b:01:a3:de:ef:37:d3:10:f2:43:29:c9:2e:11:9e:00:20:85: f4:ac:10:24:45:39:09:aa:0f:fa:1c:dd:16:42:45:d9:71:1f: 51:73:f3:bb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF QzEwQjc3NDUwHhcNMjYwNzA4MjMyNDIwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRlZGMyNC00MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5VpSCTdhpnzzitIdhNlIsoQz6u9Z+ZFJyZ70z1+SYsTv9EFYdC3vX5S86oN yWAHx793BFG8HxpL8o195NKpcwJeF2eT8VNn/7axtjwFGQz1oWfv81m7TMJlWoPU URMEro8vLCmkN6Zgq0uU3FtTy6AOS6WLtXx3j9xJXKX5EWD9sKURsQSW0tDB/zV6 Iz+kyFYwgEvXacZndZA7JEv+J975+j5MnSuzSQvizN+K3rsvbyfSYFsjnnKkRWuJ iHKHg6exSTW4Fxf+/D/edzrDTOG81APjq3+sMZSBKtquSx8DcRaK/N9GjChE70IN F+AMp9r6yJitLAYJa7N9RYfGWQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFes8b3G 2QQ5BD9iTXuhQusCTlfuMB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNDRjIvMUFFOTAzNDY4MUVFMTFFQkJFMzU0OTVGQzRGOUFFMDIvRDlFN0NGRjY4 MUVGMTFFQkFFRTlEMTdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5gCMA0GCSqGSIb3DQEBCwUAA4IBAQAYJyFedyLno+Ns/jdpWwE9 AwmwE8XjumsMBYt1STC7FpSgaZ1gvQsiOsIRP6VNa7CktMcodOVNZKauwm+7/Tfv y6gWrX+iZttzHFcdsGp/6cxSjKCKLjxL9VtRh4yqU2oHhZ3DCdCtvA+s5urxPgwR HL86X2LgJrIagEQnzt2jAWId7C0FCcaP76wq5WOTBP8Gm9V4wSeqVu3cwlWtQ1C2 99119wY9JBSKjcHWihNZjugDvQmJuHnhhSGTD1wl6jEtUToob+76zv36zsTQ/X3d RqSVdpiK5HV7AaPe7zfTEPJDKckuEZ4AIIX0rBAkRTkJqg/6HN0WQkXZcR9Rc/O7 -----END CERTIFICATE-----Generated at Fri Jul 24 09:25:08 2026 by rpki-client