$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CA99080403A11F0B7403886C4F9AE02.roa File: 9CA99080403A11F0B7403886C4F9AE02.roa (raw, json) Hash identifier: nJq2fz0uEvK4VGKb3Qva+KuPdQaVIWAU8Fl3pZlzZAM= Subject key identifier: BC:61:2C:77:2C:D4:71:43:6D:79:DF:7E:76:19:25:E3:C0:E1:1C:1A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C315 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CA99080403A11F0B7403886C4F9AE02.roa Signing time: Fri 22 Aug 2025 05:01:21 +0000 ROA not before: Fri 22 Aug 2025 05:01:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132772 IP address blocks: 163.61.148.0/23 maxlen: 24 2001:df5:2240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49941 (0xc315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 22 05:01:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68a7f9a0-c831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:eb:d9:ba:39:cc:ab:40:85:06:52:10:7b: a6:e9:7d:4c:c4:17:2e:25:73:70:4e:18:fd:a6:0f: 44:5a:d5:4d:c5:69:97:ba:7f:e0:34:30:c3:d6:1a: 4b:b4:47:32:3d:5e:01:88:74:4e:45:14:d7:f9:02: cf:d5:63:f4:5a:f9:b1:5b:a5:9e:2c:f6:b5:96:38: 88:a7:e8:46:30:7c:50:9f:89:6f:c0:5f:91:be:18: cf:75:fa:c2:97:d1:aa:9e:26:c1:af:86:a0:1e:ed: 81:d1:46:00:88:54:df:27:f2:ec:cd:3b:e0:ad:ea: 80:ec:74:c9:a6:6f:ca:63:ff:aa:c7:d7:0e:19:c7: fc:27:d1:42:37:ab:d2:2d:b9:62:f5:9f:a5:1a:f3: 60:ef:72:99:92:a8:f1:df:1b:81:4d:93:99:ba:96: a5:e4:c7:ca:58:5f:0c:47:02:6b:a5:1e:97:3e:88: c0:71:a6:51:e6:04:fa:b3:ad:e8:8b:2c:c6:e5:59: 60:68:75:df:8c:ef:ce:78:13:47:87:a3:b0:d2:b0: 9b:5d:0d:1d:4f:81:40:94:f3:a3:20:38:e0:29:87: cf:6f:98:b6:98:dc:bc:86:30:2a:db:87:47:93:2a: 8b:d6:c8:3d:8a:33:32:f8:fa:89:83:79:3a:d9:3f: 93:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:61:2C:77:2C:D4:71:43:6D:79:DF:7E:76:19:25:E3:C0:E1:1C:1A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9CA99080403A11F0B7403886C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.148.0/23 IPv6: 2001:df5:2240::/48 Signature Algorithm: sha256WithRSAEncryption 65:fb:25:24:76:91:7b:8a:47:31:ee:4f:d1:15:b6:52:b8:14: 6b:34:21:65:4c:5b:7f:d3:50:ec:54:8c:58:ee:b1:01:63:3d: ea:c8:b7:ac:e9:26:34:84:31:a9:18:a1:c7:f0:fc:2d:60:37: 97:c6:f8:e9:f5:d0:5f:c0:05:fa:9e:c2:fd:43:65:68:38:e5: a4:71:af:f1:b3:39:78:1d:1f:fe:bb:13:1f:70:3f:69:d0:87: 8b:ac:75:04:55:f9:c0:9a:a3:aa:32:9f:f5:70:6a:ac:77:86: b0:82:ad:d5:5d:92:c5:3e:55:42:3e:bc:71:e2:f3:5b:60:10: 10:6e:20:cf:eb:8a:f7:9b:b8:02:75:0b:38:37:1b:2d:b1:98: a9:67:7b:f9:23:fa:53:20:aa:54:81:8e:41:d8:43:55:7a:d5: c9:cf:7e:18:9a:9e:f1:94:67:a6:b4:b6:f3:cd:1a:6d:bc:fb: fc:fd:e3:7f:92:7d:f6:c3:be:79:8c:3d:fe:67:2a:29:af:43: 2a:d4:0f:ed:db:ac:29:63:64:38:41:fc:32:8d:67:b9:48:4a: 4b:32:16:a0:62:38:ba:1e:51:e6:7e:4a:33:f0:3d:d2:80:f5: 9b:41:9c:3e:ef:57:bc:42:67:6f:83:a4:d3:44:e5:0d:d0:e5: ab:8a:5a:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAMMVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgyMjA1MDEyMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhhN2Y5YTAtYzgzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkB69m6OcyrQIUGUhB7pul9TMQXLiVzcE4Y/aYPRFrVTcVpl7p/4DQww9Ya S7RHMj1eAYh0TkUU1/kCz9Vj9Fr5sVulniz2tZY4iKfoRjB8UJ+Jb8Bfkb4Yz3X6 wpfRqp4mwa+GoB7tgdFGAIhU3yfy7M074K3qgOx0yaZvymP/qsfXDhnH/CfRQjer 0i25YvWfpRrzYO9ymZKo8d8bgU2TmbqWpeTHylhfDEcCa6Uelz6IwHGmUeYE+rOt 6IssxuVZYGh134zvzngTR4ejsNKwm10NHU+BQJTzoyA44CmHz2+YtpjcvIYwKtuH R5Mqi9bIPYozMvj6iYN5Otk/k3UCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBS8YSx3 LNRxQ2153352GSXjwOEcGjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlDQTk5MDgw NDAzQTExRjBCNzQwMzg4NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBoz2UMA8EAgACMAkDBwAgAQ31IkAwDQYJKoZIhvcNAQEL BQADggEBAGX7JSR2kXuKRzHuT9EVtlK4FGs0IWVMW3/TUOxUjFjusQFjPerIt6zp JjSEMakYocfw/C1gN5fG+On10F/ABfqewv1DZWg45aRxr/GzOXgdH/67Ex9wP2nQ h4usdQRV+cCao6oyn/Vwaqx3hrCCrdVdksU+VUI+vHHi81tgEBBuIM/rivebuAJ1 Czg3Gy2xmKlne/kj+lMgqlSBjkHYQ1V61cnPfhianvGUZ6a0tvPNGm28+/z943+S ffbDvnmMPf5nKimvQyrUD+3brCljZDhB/DKNZ7lISksyFqBiOLoeUeZ+SjPwPdKA 9ZtBnD7vV7xCZ2+DpNNE5Q3Q5auKWiI= -----END CERTIFICATE-----Generated at Sun Aug 24 08:32:08 2025 by rpki-client