$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/D26D6D160BF111EDBBF4F61BC4F9AE02.roa File: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (raw, json) Hash identifier: nnR9EPSyG4Kq21NgPkJ1y+q1NVNPyw5fBJX9VgzqqTg= Subject key identifier: D7:F1:50:72:56:81:69:BB:D3:F6:65:E5:1B:3D:85:B8:F0:AF:95:9F Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Certificate serial: 02A6 Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/D26D6D160BF111EDBBF4F61BC4F9AE02.roa Signing time: Tue 05 Aug 2025 02:40:18 +0000 ROA not before: Tue 05 Aug 2025 02:40:18 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150135 IP address blocks: 103.191.174.0/23 maxlen: 23 103.191.174.0/24 maxlen: 24 103.191.175.0/24 maxlen: 24 2001:df1:7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Validity Not Before: Aug 5 02:40:18 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68916f12-ee0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bb:98:53:7f:b2:cd:01:de:87:99:14:94:11: 74:5a:88:28:d0:cf:02:7a:f5:c8:1a:77:1d:0e:37: 39:bc:a8:87:cb:ef:22:7e:61:a9:2e:68:1c:05:36: 34:d2:2d:0a:73:3b:dc:e7:d5:67:2f:75:f2:9c:a0: fc:e7:ce:07:4e:91:c3:86:c6:7e:69:86:c0:a9:86: 9a:3c:fa:f3:65:1a:f3:6d:bd:1c:9c:0a:ca:43:11: a4:83:5d:be:e0:3e:73:f3:63:65:9b:9e:fa:ec:96: 6b:42:bb:3c:65:96:d9:fa:85:41:50:15:a1:75:80: bb:41:d7:d2:b7:2b:da:c3:a4:4b:4a:25:70:2d:d0: a0:a7:cf:cf:fc:4e:6f:35:de:51:48:72:9a:ab:75: e9:47:d6:98:0d:50:15:4f:c9:b4:87:26:91:4e:cc: 10:6e:e2:98:54:9c:17:b8:c3:68:2b:90:fb:a5:00: 36:0f:19:9a:7b:d2:04:30:11:80:94:f2:2d:94:79: 11:a0:16:76:a6:c8:cb:6d:21:d5:19:6b:80:c2:99: b5:ed:56:ce:b1:9b:5e:38:89:57:c3:95:11:fa:a9: 42:10:53:f2:e6:44:c2:88:a6:6f:3e:91:71:0a:2c: 01:98:e0:d9:83:ab:d4:98:be:f6:db:a1:71:99:da: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F1:50:72:56:81:69:BB:D3:F6:65:E5:1B:3D:85:B8:F0:AF:95:9F X509v3 Authority Key Identifier: keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/D26D6D160BF111EDBBF4F61BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.174.0/23 IPv6: 2001:df1:7c0::/48 Signature Algorithm: sha256WithRSAEncryption 7d:95:29:65:cf:f0:20:73:7b:70:cb:25:a7:62:26:9e:25:2a: 1a:08:01:9d:b5:3a:1a:7c:29:8a:38:3c:e1:7c:52:41:d1:64: f3:34:8b:5f:fd:5c:5a:d5:65:f2:69:38:54:cb:9a:77:e6:ba: 18:3b:c7:9d:d4:1e:63:95:95:59:5a:c8:c7:bf:94:d9:de:79: 57:fc:e5:51:b6:8f:07:cf:f6:a7:29:58:1c:3f:54:d3:72:ed: 86:b9:33:ab:48:f9:05:61:99:f7:e3:9f:48:01:43:54:b2:44: 36:2b:ab:3b:d5:7c:ff:11:95:63:44:14:ba:cd:4d:f2:29:dc: 99:48:59:eb:b0:0c:05:62:6c:a6:95:16:b8:f2:23:08:62:a3: 01:dc:a7:91:14:7d:5a:6a:78:d9:e6:a1:82:68:ef:a3:39:0a: 0e:52:af:c1:64:ba:58:67:7a:c3:e2:d3:b2:26:70:b6:f5:2e: 03:00:89:2a:fa:d8:72:d8:a7:48:b0:11:b2:c0:b2:c2:bf:df: 80:37:c7:22:77:8c:76:3f:4e:b5:33:a2:28:04:06:26:6e:fd: 3f:7b:3e:55:5d:e3:e1:79:3b:2c:98:b4:b5:68:d9:e7:5d:8c: 78:47:1e:25:b1:19:8d:4f:67:6b:19:6b:2f:c3:86:e9:9f:a0: 80:3f:fa:83 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy MDMwRTIzNDcwHhcNMjUwODA1MDI0MDE4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxNmYxMi1lZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxruYU3+yzQHeh5kUlBF0Wogo0M8CevXIGncdDjc5vKiHy+8ifmGpLmgcBTY0 0i0Kczvc59VnL3XynKD8584HTpHDhsZ+aYbAqYaaPPrzZRrzbb0cnArKQxGkg12+ 4D5z82Nlm5767JZrQrs8ZZbZ+oVBUBWhdYC7QdfStyvaw6RLSiVwLdCgp8/P/E5v Nd5RSHKaq3XpR9aYDVAVT8m0hyaRTswQbuKYVJwXuMNoK5D7pQA2Dxmae9IEMBGA lPItlHkRoBZ2psjLbSHVGWuAwpm17VbOsZteOIlXw5UR+qlCEFPy5kTCiKZvPpFx CiwBmODZg6vUmL7226FxmdoM/wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNfxUHJW gWm70/Zl5Rs9hbjwr5WfMB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIxNkUvQUZGRUM0MTAwQjZFMTFFRDk3MzU4ODEwQzRGOUFFMDIvRDI2RDZEMTYw QkYxMTFFREJCRjRGNjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnv64wDwQCAAIwCQMHACABDfEHwDANBgkqhkiG9w0BAQsF AAOCAQEAfZUpZc/wIHN7cMslp2ImniUqGggBnbU6Gnwpijg84XxSQdFk8zSLX/1c WtVl8mk4VMuad+a6GDvHndQeY5WVWVrIx7+U2d55V/zlUbaPB8/2pylYHD9U03Lt hrkzq0j5BWGZ9+OfSAFDVLJENiurO9V8/xGVY0QUus1N8incmUhZ67AMBWJsppUW uPIjCGKjAdynkRR9Wmp42eahgmjvozkKDlKvwWS6WGd6w+LTsiZwtvUuAwCJKvrY ctinSLARssCywr/fgDfHIneMdj9OtTOiKAQGJm79P3s+VV3j4Xk7LJi0tWjZ512M eEceJbEZjU9naxlrL8OG6Z+ggD/6gw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:14 2025 by rpki-client