$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa File: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (raw, json) Hash identifier: 9WkU0MG65lqjQrS/cbUMSYyvQ66+hlJyNvzSbxcBRt0= Subject key identifier: 7A:D1:66:70:64:0F:7D:DD:15:94:AF:A7:9F:B6:2B:66:E8:55:AB:ED Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 081F Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:40:26 +0000 ROA not before: Fri 04 Jul 2025 22:02:43 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 58507 IP address blocks: 103.1.188.0/22 maxlen: 24 103.19.172.0/22 maxlen: 24 103.232.160.0/22 maxlen: 24 113.212.168.0/21 maxlen: 24 163.47.120.0/22 maxlen: 24 163.47.136.0/22 maxlen: 24 163.47.168.0/22 maxlen: 24 182.237.4.0/22 maxlen: 24 203.32.77.0/24 maxlen: 24 2400:5d00::/32 maxlen: 34 2400:5d00::/33 maxlen: 40 2400:5d00:8000::/34 maxlen: 40 2400:5d00:c000::/35 maxlen: 36 2400:5d00:c000::/36 maxlen: 40 2400:5d00:d000::/37 maxlen: 38 2400:5d00:d000::/38 maxlen: 40 2400:5d00:d400::/39 maxlen: 40 2404:59c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2079 (0x81f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Jul 4 22:02:43 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4098a-0b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:4a:31:dd:00:fa:a2:39:e9:da:66:b3:c1: 78:82:90:a3:8d:b1:fa:65:64:3c:41:35:ad:43:77: 97:fa:af:44:94:dc:5f:91:fa:45:53:56:cf:ac:3f: c3:fb:b6:48:98:a5:45:c6:14:0e:97:00:73:be:06: 95:c6:42:92:af:15:af:d1:51:bf:34:38:a3:4a:e8: 5e:aa:ef:82:09:a0:8f:27:28:a0:47:25:a1:97:e7: 3a:4a:62:a6:ee:17:da:b5:45:ab:cd:6c:94:32:73: fa:f1:3d:75:63:33:92:36:66:8d:7a:5f:dd:ab:96: f1:7f:06:cc:49:d1:e5:a3:91:4b:80:00:d0:99:f4: 55:94:fc:5d:f3:a7:2f:8c:2a:af:3a:86:2d:23:1f: 9a:99:4e:2c:d6:04:05:0f:bb:90:e0:d8:ae:43:30: 80:f5:48:f6:ad:3b:4e:fd:60:1d:e2:67:fd:24:b8: cd:ad:7d:18:7d:f7:e6:e2:b1:b8:f2:97:40:1c:ec: 9a:32:b3:f7:68:25:4f:bd:ab:14:e0:43:25:ce:35: 08:c5:6f:ae:a4:96:39:63:88:b3:0e:8b:55:af:69: 5d:8d:f9:96:eb:fb:3b:18:68:1c:3c:b9:fa:e7:dc: f4:bd:a2:9c:73:d6:6d:7c:f3:d0:42:85:91:2d:24: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D1:66:70:64:0F:7D:DD:15:94:AF:A7:9F:B6:2B:66:E8:55:AB:ED X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.1.188.0/22 103.19.172.0/22 103.232.160.0/22 113.212.168.0/21 163.47.120.0/22 163.47.136.0/22 163.47.168.0/22 182.237.4.0/22 203.32.77.0/24 IPv6: 2400:5d00::/32 2404:59c0::/32 Signature Algorithm: sha256WithRSAEncryption b3:3b:41:21:a7:fa:bf:77:82:6b:0c:1c:0b:eb:bc:85:31:75: 1d:2d:d4:95:62:57:32:82:9f:91:e3:c9:4a:79:83:f1:ca:10: 75:80:f3:a6:7b:28:89:cf:a6:5d:9c:02:90:e1:4b:6c:a9:2f: 44:41:d5:69:a6:42:d3:a9:f5:0d:22:68:f1:f0:80:ce:d8:60: 95:41:9c:52:96:8d:0e:b6:3e:e6:ac:5a:d4:3a:b0:46:45:7b: 26:26:47:85:81:06:84:a9:3d:42:34:ab:e8:fc:4c:d4:ab:74: ac:cb:1b:f9:07:d6:55:1b:b8:6e:2c:34:99:87:59:c7:77:b8: 19:26:a3:de:fd:27:7f:79:35:0b:b9:13:cf:2e:96:31:e4:dc: 3c:6e:13:35:b2:13:b2:30:c0:32:ab:a6:3a:b3:d4:ea:de:87: 35:c1:61:be:3a:0f:0c:3c:45:f8:33:b2:4d:7f:19:ad:4a:55: 0d:27:56:e6:cf:b5:87:4b:a8:fe:7c:56:62:52:12:4b:63:29: 6e:0f:e6:50:aa:be:fa:44:60:f4:01:e6:42:7b:4e:6a:ba:29: 38:29:40:1d:1c:78:29:fa:5a:07:c5:df:53:05:9a:f5:72:f3: 53:92:13:19:c8:d9:a9:74:9b:bb:6d:d9:62:a8:b1:4f:5f:1c: 57:a9:92:0a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjUwNzA0MjIwMjQzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDk4YS0wYjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUtKMd0A+qI56dpms8F4gpCjjbH6ZWQ8QTWtQ3eX+q9ElNxfkfpFU1bPrD/D +7ZImKVFxhQOlwBzvgaVxkKSrxWv0VG/NDijSuhequ+CCaCPJyigRyWhl+c6SmKm 7hfatUWrzWyUMnP68T11YzOSNmaNel/dq5bxfwbMSdHlo5FLgADQmfRVlPxd86cv jCqvOoYtIx+amU4s1gQFD7uQ4NiuQzCA9Uj2rTtO/WAd4mf9JLjNrX0Yfffm4rG4 8pdAHOyaMrP3aCVPvasU4EMlzjUIxW+upJY5Y4izDotVr2ldjfmW6/s7GGgcPLn6 59z0vaKcc9ZtfPPQQoWRLSTntQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHrRZnBk D33dFZSvp5+2K2boVavtMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUwMjcvMjUwNUNFREMyNTY4MTFFQkFDMkNBQzVBQzRGOUFFMDIvMTJEQkFEM0NE QUZGMTFFQ0E2N0RBMTBCQzRGOUFFMDIucm9hMGUGCCsGAQUFBwEHAQH/BFYwVDA8 BAIAATA2AwQCZwG8AwQCZxOsAwQCZ+igAwQDcdSoAwQCoy94AwQCoy+IAwQCoy+o AwQCtu0EAwQAyyBNMBQEAgACMA4DBQAkAF0AAwUAJARZwDANBgkqhkiG9w0BAQsF AAOCAQEAsztBIaf6v3eCawwcC+u8hTF1HS3UlWJXMoKfkePJSnmD8coQdYDzpnso ic+mXZwCkOFLbKkvREHVaaZC06n1DSJo8fCAzthglUGcUpaNDrY+5qxa1DqwRkV7 JiZHhYEGhKk9QjSr6PxM1Kt0rMsb+QfWVRu4biw0mYdZx3e4GSaj3v0nf3k1C7kT zy6WMeTcPG4TNbITsjDAMqumOrPU6t6HNcFhvjoPDDxF+DOyTX8ZrUpVDSdW5s+1 h0uo/nxWYlISS2Mpbg/mUKq++kRg9AHmQntOaropOClAHRx4KfpaB8XfUwWa9XLz U5ITGcjZqXSbu23ZYqixT18cV6mSCg== -----END CERTIFICATE-----Generated at Thu Mar 26 11:05:09 2026 by rpki-client