$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa File: 2BA0624C078511ED87041524C4F9AE02.roa (raw, json) Hash identifier: OgDpE/kLbNvrNHxmlaFE7wjr3tmLX0c3S1JS4qIXLMQ= Subject key identifier: 85:7C:ED:65:F7:3D:0D:11:3D:AA:42:45:A7:6E:9D:AC:4D:F2:92:50 Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Certificate serial: 0C54 Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa Signing time: Wed 16 Jul 2025 18:58:52 +0000 ROA not before: Wed 16 Jul 2025 18:58:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140229 IP address blocks: 103.115.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3156 (0xc54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Validity Not Before: Jul 16 18:58:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6877f66c-89a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:49:40:f8:69:8a:3d:6d:47:24:ee:83:b5: 42:6b:96:03:b1:94:e9:3b:11:00:c3:8c:fa:84:0f: 26:f1:eb:e8:b6:f4:48:c7:b3:5e:1b:3e:91:c2:44: ac:d9:29:6a:42:3b:3e:47:50:16:af:08:f9:0b:e8: 63:73:f2:48:9d:d6:c0:bf:5d:99:4f:26:d1:5b:83: 60:e1:01:2c:b0:3f:01:44:26:9b:cc:8b:9a:03:cb: 4e:a7:4f:47:a1:b5:13:fc:67:42:bb:7d:f4:17:8a: 36:72:6f:b2:26:33:6b:94:4d:b8:6a:06:32:55:83: ae:c2:f9:c8:e4:85:fb:24:d4:3b:91:bc:44:16:79: 89:0d:df:97:af:db:9b:39:71:e3:89:2e:47:f4:71: b1:7e:0c:59:22:d8:80:97:97:2a:b7:ac:0f:59:5c: 23:d4:54:8a:b9:94:08:5a:2f:e3:a4:51:97:e0:8c: f3:cf:8b:d5:c2:d9:54:8c:83:1c:19:eb:f2:9f:60: d8:d1:c0:36:42:d6:51:8b:aa:19:3b:f0:fc:4b:2c: 72:28:28:9f:bd:b7:fe:5a:6c:01:b9:45:42:bd:67: 99:d1:cf:ff:93:ac:4a:5c:ae:be:4d:f4:4d:16:96: 15:1e:c5:c6:97:6b:18:80:b0:da:31:a1:f0:98:39: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7C:ED:65:F7:3D:0D:11:3D:AA:42:45:A7:6E:9D:AC:4D:F2:92:50 X509v3 Authority Key Identifier: keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2BA0624C078511ED87041524C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.116.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:3d:2b:63:d2:be:bd:e7:22:16:f4:19:b5:96:7f:15:79:23: b9:23:e3:59:99:eb:d9:03:b0:e3:8f:51:5b:39:ab:02:34:88: f7:ec:b2:20:7c:9b:02:c4:7d:4d:55:f4:49:4e:ab:4c:9b:ff: 34:06:c6:11:36:4d:9b:a2:4e:d0:98:14:22:e4:46:1b:94:3a: 7b:61:a4:3f:40:18:a5:06:9c:7b:4b:28:34:b7:16:c8:02:56: 34:8b:20:1d:64:29:59:aa:a0:7a:d0:4c:43:52:d1:56:ff:05: 5f:e5:ae:ac:54:b0:3a:ec:a4:58:1e:7e:67:a7:7b:88:94:a1: fe:06:ae:41:e2:44:1c:a3:70:03:5a:9b:eb:c9:44:67:4b:60: b6:41:27:62:71:0e:f9:c7:52:9d:f4:57:17:f9:49:c0:c1:f9: 86:5f:37:10:af:dc:28:af:ba:9d:e8:7b:bf:83:ad:49:0a:fa: 53:ab:36:bb:96:d8:76:93:b6:58:51:48:a6:e3:07:10:91:9a: c0:d3:fd:28:80:fe:1c:83:6f:00:ac:27:e0:8e:5b:96:10:7e: 93:f6:b4:d4:f4:51:43:d7:36:d7:1d:33:a3:31:2e:fc:45:11: 15:3f:ef:fd:aa:1f:bd:92:0e:50:c8:2b:d1:a6:b5:9f:8b:df: 89:0c:7a:c9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx QTZBREIwNUIwHhcNMjUwNzE2MTg1ODUyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3ZjY2Yy04OWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxx5JQPhpij1tRyTug7VCa5YDsZTpOxEAw4z6hA8m8evotvRIx7NeGz6RwkSs 2SlqQjs+R1AWrwj5C+hjc/JIndbAv12ZTybRW4Ng4QEssD8BRCabzIuaA8tOp09H obUT/GdCu330F4o2cm+yJjNrlE24agYyVYOuwvnI5IX7JNQ7kbxEFnmJDd+Xr9ub OXHjiS5H9HGxfgxZItiAl5cqt6wPWVwj1FSKuZQIWi/jpFGX4Izzz4vVwtlUjIMc Gevyn2DY0cA2QtZRi6oZO/D8SyxyKCifvbf+WmwBuUVCvWeZ0c//k6xKXK6+TfRN FpYVHsXGl2sYgLDaMaHwmDnznQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIV87WX3 PQ0RPapCRadunaxN8pJQMB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjZFMkIvMjdFN0NBQTYwQzJEMTFFQUIwMjlEQjUzQzRGOUFFMDIvMkJBMDYyNEMw Nzg1MTFFRDg3MDQxNTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnc3QwDQYJKoZIhvcNAQELBQADggEBAG89K2PSvr3nIhb0 GbWWfxV5I7kj41mZ69kDsOOPUVs5qwI0iPfssiB8mwLEfU1V9ElOq0yb/zQGxhE2 TZuiTtCYFCLkRhuUOnthpD9AGKUGnHtLKDS3FsgCVjSLIB1kKVmqoHrQTENS0Vb/ BV/lrqxUsDrspFgefmene4iUof4GrkHiRByjcANam+vJRGdLYLZBJ2JxDvnHUp30 Vxf5ScDB+YZfNxCv3Civup3oe7+DrUkK+lOrNruW2HaTtlhRSKbjBxCRmsDT/SiA /hyDbwCsJ+COW5YQfpP2tNT0UUPXNtcdM6MxLvxFERU/7/2qH72SDlDIK9GmtZ+L 34kMesk= -----END CERTIFICATE-----Generated at Tue Jul 22 12:29:35 2025 by rpki-client