$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/B7FDD0B031E711EF9FBC7372C4F9AE02.roa File: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (raw, json) Hash identifier: d7Yg2G8iGCmUekKjYtBEorDHzHbZJ7UzJDRjYURu2SE= Subject key identifier: F9:6C:08:95:11:37:59:FB:45:65:74:86:DF:BC:AB:4A:70:DD:A3:C9 Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Certificate serial: 017B Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/B7FDD0B031E711EF9FBC7372C4F9AE02.roa Signing time: Fri 19 Jun 2026 05:35:06 +0000 ROA not before: Fri 19 Jun 2026 05:35:06 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 152908 IP address blocks: 202.0.67.0/24 maxlen: 24 202.0.68.0/24 maxlen: 24 203.18.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Validity Not Before: Jun 19 05:35:06 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a34d50a-53d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:fd:a5:0a:e2:48:2c:68:07:7c:37:61:01: f0:01:7d:5b:07:09:1a:3e:d5:92:7b:0a:2b:47:c9: ef:39:51:b9:3e:0d:ea:1b:28:b8:12:44:4b:7a:9e: 84:86:2f:1c:f7:c3:f2:98:79:bb:63:f9:af:84:b2: 24:b5:4c:8e:cc:71:b0:3f:17:9f:1b:21:82:d1:02: 02:a8:df:5e:67:a4:fc:3a:08:30:20:88:79:d7:87: 21:13:28:de:b9:9a:f3:07:bb:6a:61:a5:68:97:d6: b2:54:45:9a:27:a7:89:e0:7c:75:bc:ce:12:13:1d: e5:3f:82:e7:d9:63:22:46:cd:0b:85:e3:07:ba:d5: 1d:01:0e:f9:04:5a:94:d4:87:53:b7:85:aa:af:f9: f7:23:fc:42:ca:e0:12:37:0c:49:16:22:d7:ce:7a: 07:ef:a1:ad:7d:a5:a7:0a:32:99:6b:e7:93:41:e0: 4f:89:54:c3:37:82:a6:bc:d0:62:c6:66:68:1e:fc: 33:6e:71:1f:a5:55:16:4b:5b:10:ef:cd:d8:3b:10: 56:43:28:d4:30:c1:3e:dc:d0:ca:8f:f8:8d:c9:03: 7a:96:6e:8c:c2:11:96:10:76:71:40:ef:fe:11:05: 67:a7:df:b3:99:7c:66:8b:ac:07:11:18:8c:a0:78: 46:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6C:08:95:11:37:59:FB:45:65:74:86:DF:BC:AB:4A:70:DD:A3:C9 X509v3 Authority Key Identifier: keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/B7FDD0B031E711EF9FBC7372C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.0.67.0-202.0.68.255 203.18.231.0/24 Signature Algorithm: sha256WithRSAEncryption 75:98:a6:a2:6d:9e:1a:8a:a8:1d:0b:a1:7b:0a:87:ea:11:93: d8:63:23:f8:f1:f5:59:c1:ce:f2:8a:e1:8e:f8:1a:bf:a8:0d: 19:85:fe:f8:05:de:5e:b9:04:17:92:01:aa:86:b4:af:3c:7b: 1a:03:bf:0b:19:ed:f4:d1:f0:44:1c:f5:cb:fa:99:1f:fb:e8: 2f:04:3b:ef:e9:4d:ba:eb:82:2f:77:02:55:de:62:95:19:a4: 26:3d:68:bc:ba:0a:ef:66:e7:bd:f9:93:c6:8a:83:90:c1:82: cb:fd:50:e2:f0:da:52:fa:f1:0c:70:b0:22:a0:67:24:c1:de: 48:96:71:c7:8e:cb:7d:f8:0d:99:a8:43:4b:f9:79:86:d2:74: b5:fb:14:77:fc:3c:4e:8e:fd:28:62:03:ac:5c:bf:d4:c4:ef: 31:d7:24:fb:39:0f:c0:62:1e:58:11:1a:d5:3c:c7:5b:34:27: 88:33:03:81:a8:7f:6a:7e:2c:e8:8e:f6:23:79:c8:1f:b2:d1: bd:7c:91:81:e0:c2:09:a0:ee:ac:b6:dc:90:e3:50:5a:68:fa: 53:c8:86:76:8a:5a:60:42:a6:77:f4:4b:2b:96:6f:73:7a:9f: 42:6f:f8:aa:87:09:63:ac:a3:96:d0:25:53:9a:1b:10:0e:21: d0:57:0a:ce -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0NzIxMTAvBgNVBAUTKDE4OUYyREVDNUE3MDNGN0Q2Q0ZENUY5NkFBQjVBMkU4 QThERDk0MDYwHhcNMjYwNjE5MDUzNTA2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM0ZDUwYS01M2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2L9pQriSCxoB3w3YQHwAX1bBwkaPtWSeworR8nvOVG5Pg3qGyi4EkRLep6E hi8c98PymHm7Y/mvhLIktUyOzHGwPxefGyGC0QICqN9eZ6T8OggwIIh514chEyje uZrzB7tqYaVol9ayVEWaJ6eJ4Hx1vM4SEx3lP4Ln2WMiRs0LheMHutUdAQ75BFqU 1IdTt4Wqr/n3I/xCyuASNwxJFiLXznoH76GtfaWnCjKZa+eTQeBPiVTDN4KmvNBi xmZoHvwzbnEfpVUWS1sQ783YOxBWQyjUMME+3NDKj/iNyQN6lm6MwhGWEHZxQO/+ EQVnp9+zmXxmi6wHERiMoHhGAwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFPlsCJUR N1n7RWV0ht+8q0pw3aPJMB8GA1UdIwQYMBaAFBifLexacD99bP1flqq1ouio3ZQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ3Mi8xM0E4RkI0NDMx RTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1AzMXNfVi1XcXJXaTZLamRs QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q0NzIvMTNBOEZCNDQzMUU2MTFFRkFFOUVFNDYwQzRGOUFFMDIvQjdGREQwQjAz MUU3MTFFRjlGQkM3MzcyQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBADKAEMDBADKAEQDBADLEucwDQYJKoZIhvcNAQELBQADggEBAHWY pqJtnhqKqB0LoXsKh+oRk9hjI/jx9VnBzvKK4Y74Gr+oDRmF/vgF3l65BBeSAaqG tK88exoDvwsZ7fTR8EQc9cv6mR/76C8EO+/pTbrrgi93AlXeYpUZpCY9aLy6Cu9m 5735k8aKg5DBgsv9UOLw2lL68QxwsCKgZyTB3kiWcceOy334DZmoQ0v5eYbSdLX7 FHf8PE6O/ShiA6xcv9TE7zHXJPs5D8BiHlgRGtU8x1s0J4gzA4Gof2p+LOiO9iN5 yB+y0b18kYHgwgmg7qy23JDjUFpo+lPIhnaKWmBCpnf0SyuWb3N6n0Jv+KqHCWOs o5bQJVOaGxAOIdBXCs4= -----END CERTIFICATE-----Generated at Fri Jul 24 19:02:57 2026 by rpki-client