$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2D0509BC078511ED87041524C4F9AE02.roa File: 2D0509BC078511ED87041524C4F9AE02.roa (raw, json) Hash identifier: OhD3vjT84Ykw6Uqb+DhKbwC3X7GSCVv4M4crx5/Gxaw= Subject key identifier: 8A:91:43:51:15:B3:84:7D:D7:93:57:6E:26:6D:77:DA:6B:95:66:98 Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Certificate serial: 0C52 Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2D0509BC078511ED87041524C4F9AE02.roa Signing time: Wed 16 Jul 2025 18:58:50 +0000 ROA not before: Wed 16 Jul 2025 18:58:50 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 137834 IP address blocks: 103.115.118.0/23 maxlen: 23 103.115.118.0/24 maxlen: 24 103.115.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B Validity Not Before: Jul 16 18:58:50 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6877f66a-a658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:00:30:40:f8:16:52:88:03:ae:9d:16:51:09: 5b:59:5e:75:18:81:0c:28:27:e5:d0:d9:45:25:d6: 59:3f:db:33:4a:1d:e8:11:8f:c0:4b:6b:68:75:66: 65:64:96:89:37:31:4f:d4:91:38:63:6c:a0:e9:48: 3a:0e:9b:90:b5:0f:ac:11:80:45:4e:fb:ec:17:94: b1:4c:98:09:6d:1a:7b:73:d3:b1:d1:49:21:54:4c: 11:e9:27:b3:ea:c3:22:c7:94:17:ac:91:5d:ff:c2: 52:13:12:73:2d:c7:f7:ec:51:0a:e3:ed:7e:35:7f: aa:aa:6f:32:25:28:55:b4:28:b1:bd:27:e2:f4:e2: d0:28:f4:46:82:45:51:95:5f:ef:de:60:b1:2c:c7: 86:20:d0:f2:0a:5e:a0:02:5a:ac:91:f7:83:52:2d: 8c:7c:91:43:7c:6b:22:db:a2:b4:92:51:95:30:3f: c4:e9:54:0c:f7:d9:c4:fd:9b:a3:56:20:bf:eb:65: 88:b0:09:a2:6c:8b:ad:21:7b:dd:7e:7a:5f:c2:55: eb:da:fd:f5:67:f6:31:1b:b5:68:c3:b4:50:5a:5f: 14:49:c7:6e:78:d3:8c:98:30:34:80:28:6e:6e:0f: b4:c3:24:0c:34:ae:6e:4b:f3:67:91:16:f8:ac:e1: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:91:43:51:15:B3:84:7D:D7:93:57:6E:26:6D:77:DA:6B:95:66:98 X509v3 Authority Key Identifier: keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/2D0509BC078511ED87041524C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.118.0/23 Signature Algorithm: sha256WithRSAEncryption 98:cd:96:19:45:94:69:16:18:d0:d9:48:3e:e2:45:73:0b:8d: e4:e2:d6:76:68:a8:74:b4:0b:91:46:53:0f:12:14:5d:61:ef: 89:a1:cd:b8:7f:b6:6c:e2:6e:ad:9e:d6:a7:02:1c:2d:2d:bc: 18:80:7d:6e:17:f1:f5:71:5e:d2:88:13:52:6e:ae:00:90:25: 78:ab:29:9e:2e:67:0f:f8:1a:83:5b:4d:32:fc:35:72:4e:41: 33:f5:16:16:c5:42:98:74:95:df:b7:c6:29:4f:83:b0:b4:b3: da:02:4b:19:32:31:51:f9:18:11:43:69:50:13:31:c4:a5:6c: a4:94:da:4d:88:7d:86:c0:3a:60:3a:ba:bd:e8:fb:2d:94:f1: 89:38:bf:7d:5a:0a:52:a1:ad:a0:6e:9a:6a:8e:35:77:f4:21: 0c:af:1c:d1:53:30:19:81:d8:2f:f9:18:b1:05:5a:64:c2:2c: d8:82:c3:c6:57:42:e4:bb:0f:e3:0a:af:88:eb:9f:41:f5:7c: ea:36:f8:fb:79:cd:6f:89:16:96:02:4c:2e:43:b5:9e:cd:35: cd:30:a5:58:a0:0c:81:ec:82:d5:d9:65:58:a0:1d:d9:9e:67: 66:d1:62:ca:11:e1:9e:95:87:f3:62:40:a5:2b:aa:b0:70:0c: 16:d0:81:b5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx QTZBREIwNUIwHhcNMjUwNzE2MTg1ODUwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3ZjY2YS1hNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wAwQPgWUogDrp0WUQlbWV51GIEMKCfl0NlFJdZZP9szSh3oEY/AS2todWZl ZJaJNzFP1JE4Y2yg6Ug6DpuQtQ+sEYBFTvvsF5SxTJgJbRp7c9Ox0UkhVEwR6Sez 6sMix5QXrJFd/8JSExJzLcf37FEK4+1+NX+qqm8yJShVtCixvSfi9OLQKPRGgkVR lV/v3mCxLMeGINDyCl6gAlqskfeDUi2MfJFDfGsi26K0klGVMD/E6VQM99nE/Zuj ViC/62WIsAmibIutIXvdfnpfwlXr2v31Z/YxG7Vow7RQWl8UScdueNOMmDA0gChu bg+0wyQMNK5uS/NnkRb4rOEcpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIqRQ1EV s4R915NXbiZtd9prlWaYMB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjZFMkIvMjdFN0NBQTYwQzJEMTFFQUIwMjlEQjUzQzRGOUFFMDIvMkQwNTA5QkMw Nzg1MTFFRDg3MDQxNTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnc3YwDQYJKoZIhvcNAQELBQADggEBAJjNlhlFlGkWGNDZ SD7iRXMLjeTi1nZoqHS0C5FGUw8SFF1h74mhzbh/tmzibq2e1qcCHC0tvBiAfW4X 8fVxXtKIE1JurgCQJXirKZ4uZw/4GoNbTTL8NXJOQTP1FhbFQph0ld+3xilPg7C0 s9oCSxkyMVH5GBFDaVATMcSlbKSU2k2IfYbAOmA6ur3o+y2U8Yk4v31aClKhraBu mmqONXf0IQyvHNFTMBmB2C/5GLEFWmTCLNiCw8ZXQuS7D+MKr4jrn0H1fOo2+Pt5 zW+JFpYCTC5DtZ7NNc0wpVigDIHsgtXZZVigHdmeZ2bRYsoR4Z6Vh/NiQKUrqrBw DBbQgbU= -----END CERTIFICATE-----Generated at Tue Jul 22 12:29:35 2025 by rpki-client