$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/118AD6DE11C611EEA9D06D11C4F9AE02.roa File: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (raw, json) Hash identifier: 0SOkm+BXSDSpdPzUTvjh1AEylkmoBHEkQgyOqkC+tHQ= Subject key identifier: 07:FD:AE:04:AA:09:4C:AF:31:FC:A4:19:C0:6A:B7:47:3C:6E:57:40 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 044B Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/118AD6DE11C611EEA9D06D11C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:04:23 +0000 ROA not before: Wed 07 May 2025 01:38:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 43.243.195.0/24 maxlen: 24 103.229.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 7 01:38:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a47fa7-30fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:20:4e:6d:a9:9a:1b:17:a6:d9:c0:9a:9b: 6a:36:d4:ac:13:de:a0:b9:e2:f1:f6:2a:e7:77:7f: 3b:ae:e2:66:53:1e:33:80:3e:d1:2b:36:8b:44:df: 8d:b0:07:69:af:ad:4b:38:71:f9:4e:0c:c3:06:c4: 86:99:ca:d2:09:99:ae:6e:c7:79:45:f0:33:97:cd: f2:5c:b8:ba:6a:8a:0d:c8:21:98:0f:e7:36:d5:eb: 26:c7:80:e1:34:cb:f3:58:57:76:11:29:d9:5a:3c: 99:75:8f:bb:df:ab:c4:10:ed:d3:94:01:ec:92:fc: d1:dd:ea:bf:04:5e:75:dc:41:b3:a1:ed:7f:1d:01: c5:00:3f:33:68:75:ef:ff:a5:3d:e7:24:db:ce:d5: ff:e6:ae:84:a0:f1:3e:7d:c2:cf:0b:09:86:56:6c: 4f:e8:a8:26:b1:48:95:67:d5:bb:0d:43:63:b3:55: 19:b3:c7:1f:3f:74:25:b9:e6:13:a0:42:44:b4:45: c8:a9:69:ae:39:a2:41:76:8e:d1:1a:d4:b5:f1:7c: 4f:d8:c6:6a:e2:b5:59:8f:fa:ec:22:ff:d1:06:75: d2:9a:ec:fc:91:d1:17:89:33:b3:ef:eb:9c:2e:b1: 72:95:4f:9c:01:79:cb:4d:3f:36:bf:9f:c3:ec:a6: 39:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FD:AE:04:AA:09:4C:AF:31:FC:A4:19:C0:6A:B7:47:3C:6E:57:40 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/118AD6DE11C611EEA9D06D11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.195.0/24 103.229.117.0/24 Signature Algorithm: sha256WithRSAEncryption de:86:70:2f:65:5b:9e:25:67:5e:17:5a:23:0a:c1:49:ad:6b: 6c:8b:7d:0f:0c:ed:fb:94:9d:36:43:4c:cf:e2:8e:9e:84:c6: 76:6c:1f:af:70:1d:5f:aa:6a:83:8c:67:94:12:c2:bb:f5:c9: 11:17:51:b3:51:99:29:b8:81:b0:1a:39:d6:c4:26:d2:4e:d0: 07:5c:66:96:6a:ad:18:a7:d5:db:d5:65:41:55:e5:20:2c:ec: 5c:40:49:37:bf:d6:bc:64:22:46:4c:5f:26:6b:45:bc:03:ea: ab:ca:35:44:18:f3:35:8e:30:1b:67:eb:d6:d8:94:84:ee:6b: 60:6d:17:78:ab:55:8d:da:e3:95:a1:23:5c:81:c6:3b:dd:7e: c5:30:37:64:dd:43:b9:6e:b9:32:39:0a:56:50:9c:c4:0b:eb: b5:59:c0:d0:41:a4:a1:f8:a7:75:62:fc:c0:ad:83:5b:30:4a: db:54:5b:6b:72:31:76:8f:bf:3d:93:c0:36:0b:3a:04:08:6c: 5f:e1:6b:0a:d0:f9:b7:e7:0f:56:f0:89:02:89:35:b6:e4:85: 49:3a:c9:42:79:12:67:92:b7:ce:5a:16:81:17:03:05:59:c1: 87:25:a6:c6:30:4b:c5:84:96:47:72:82:ab:bc:21:4d:c2:25: a2:26:ff:4b -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwNTA3MDEzODIxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2ZhNy0zMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYcgTm2pmhsXptnAmptqNtSsE96gueLx9irnd387ruJmUx4zgD7RKzaLRN+N sAdpr61LOHH5TgzDBsSGmcrSCZmubsd5RfAzl83yXLi6aooNyCGYD+c21esmx4Dh NMvzWFd2ESnZWjyZdY+736vEEO3TlAHskvzR3eq/BF513EGzoe1/HQHFAD8zaHXv /6U95yTbztX/5q6EoPE+fcLPCwmGVmxP6KgmsUiVZ9W7DUNjs1UZs8cfP3QlueYT oEJEtEXIqWmuOaJBdo7RGtS18XxP2MZq4rVZj/rsIv/RBnXSmuz8kdEXiTOz7+uc LrFylU+cAXnLTT82v5/D7KY5oQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAf9rgSq CUyvMfykGcBqt0c8bldAMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvMTE4QUQ2REUx MUM2MTFFRUE5RDA2RDExQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK/PDAwQAZ+V1MA0GCSqGSIb3DQEBCwUAA4IBAQDehnAvZVueJWde F1ojCsFJrWtsi30PDO37lJ02Q0zP4o6ehMZ2bB+vcB1fqmqDjGeUEsK79ckRF1Gz UZkpuIGwGjnWxCbSTtAHXGaWaq0Yp9Xb1WVBVeUgLOxcQEk3v9a8ZCJGTF8ma0W8 A+qryjVEGPM1jjAbZ+vW2JSE7mtgbRd4q1WN2uOVoSNcgcY73X7FMDdk3UO5brky OQpWUJzEC+u1WcDQQaSh+Kd1YvzArYNbMErbVFtrcjF2j789k8A2CzoECGxf4WsK 0Pm35w9W8IkCiTW25IVJOslCeRJnkrfOWhaBFwMFWcGHJabGMEvFhJZHcoKrvCFN wiWiJv9L -----END CERTIFICATE-----Generated at Thu Mar 26 07:24:20 2026 by rpki-client