$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/ACFA076483A611EE9C62DE0CC4F9AE02.roa File: ACFA076483A611EE9C62DE0CC4F9AE02.roa (raw, json) Hash identifier: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI= Subject key identifier: 92:C1:78:A8:8B:68:EE:D2:29:B7:32:EF:C8:F7:06:4C:11:3F:D1:FE Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0AA0 Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/ACFA076483A611EE9C62DE0CC4F9AE02.roa Signing time: Mon 14 Jul 2025 13:58:36 +0000 ROA not before: Mon 14 Jul 2025 13:58:36 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 138492 IP address blocks: 103.127.0.0/23 maxlen: 23 103.127.0.0/24 maxlen: 24 103.127.1.0/24 maxlen: 24 2404:16c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: Jul 14 13:58:36 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68750d0c-b53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:d5:66:31:21:c7:2f:28:ad:20:74:96:91: 05:a6:79:3f:5d:bd:d0:dc:52:7e:81:62:7b:b1:32: ce:c7:fb:86:3c:67:5c:85:83:5d:29:f9:fe:2d:4d: da:84:72:82:5d:15:27:e1:7e:ef:11:85:a7:9a:b7: 99:c0:42:b3:a7:a4:45:cb:7e:04:9f:12:ac:03:7a: 3d:ed:85:c8:ed:be:09:90:3b:e0:6f:b2:7e:d8:22: d9:66:18:39:7d:15:ad:53:00:fa:53:06:79:d2:06: fc:df:ca:02:1c:3c:fb:78:8f:26:ca:e1:00:88:25: d9:17:84:01:94:59:61:a6:6a:a1:cd:3a:f7:49:11: 44:ba:b4:df:9e:ca:69:75:23:9f:67:ec:bd:af:39: 00:bf:a1:e1:08:88:74:3c:1c:e3:1b:44:f0:54:ef: c3:b9:0b:ee:57:b8:42:56:8d:18:13:6f:be:16:c4: 1b:a9:50:1b:69:e6:0b:6b:be:25:4b:ac:38:51:76: 3f:38:15:f7:38:c0:2b:2c:fc:52:a4:3d:91:ea:fb: 3a:cc:58:d2:2e:78:85:e8:ca:76:51:cc:4e:5b:5c: 8d:f0:c7:8f:6a:ae:c8:76:ef:65:9c:8a:5e:36:a4: fb:f4:42:2b:55:0c:50:6a:ff:94:fa:6c:31:f1:34: 9c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C1:78:A8:8B:68:EE:D2:29:B7:32:EF:C8:F7:06:4C:11:3F:D1:FE X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/ACFA076483A611EE9C62DE0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.0.0/23 IPv6: 2404:16c0::/32 Signature Algorithm: sha256WithRSAEncryption 65:58:8b:6c:68:47:f3:b6:9a:19:d7:ca:20:20:1a:30:a5:d8: 08:de:25:12:5a:22:1f:f3:02:e1:be:09:57:b2:6d:83:4b:af: 71:f9:f4:8c:e5:96:6a:10:69:34:ff:28:66:c9:3c:ce:cf:ac: b0:62:a4:19:74:5b:82:58:08:bc:db:09:d8:cf:64:e2:2a:23: b3:bd:13:a0:db:0b:7f:66:1f:1f:48:90:54:dc:19:f6:82:7e: 1a:24:15:10:8e:fe:ff:40:02:ef:d0:16:ab:8c:72:f1:bd:80: bf:1c:5f:d9:49:4c:c3:ec:e0:4b:52:e1:38:e0:83:67:53:b8: 2a:c9:25:0c:c9:01:a2:a3:75:46:46:94:cc:fa:45:12:4b:6d: 5f:40:1c:a2:d3:5e:25:ef:77:f2:b5:f9:cb:95:16:a5:a4:55: 4d:d9:e1:e0:fb:df:a2:93:92:e0:28:c0:80:ee:14:30:dc:1e: 6d:d6:8b:35:d9:5a:a6:91:53:98:ec:f5:cc:07:d9:65:d8:c9: 45:49:75:f8:a1:02:dc:0c:be:7a:6b:6b:90:51:c2:7b:f4:df: 67:c6:6d:5b:c8:ed:a5:3b:f1:8a:e3:af:a0:2d:09:17:de:a7: 9a:11:5b:4e:fa:0d:89:85:29:8d:fa:28:a4:2e:eb:4b:1f:19: 0e:e4:a3:77 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjUwNzE0MTM1ODM2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MGQwYy1iNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wfVZjEhxy8orSB0lpEFpnk/Xb3Q3FJ+gWJ7sTLOx/uGPGdchYNdKfn+LU3a hHKCXRUn4X7vEYWnmreZwEKzp6RFy34EnxKsA3o97YXI7b4JkDvgb7J+2CLZZhg5 fRWtUwD6UwZ50gb838oCHDz7eI8myuEAiCXZF4QBlFlhpmqhzTr3SRFEurTfnspp dSOfZ+y9rzkAv6HhCIh0PBzjG0TwVO/DuQvuV7hCVo0YE2++FsQbqVAbaeYLa74l S6w4UXY/OBX3OMArLPxSpD2R6vs6zFjSLniF6Mp2UcxOW1yN8MePaq7Idu9lnIpe NqT79EIrVQxQav+U+mwx8TScYwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJLBeKiL aO7SKbcy78j3BkwRP9H+MB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0NCRDcvMTkyM0JGNjg2NDI4MTFFQUE3MDQxRDQ4QzRGOUFFMDIvQUNGQTA3NjQ4 M0E2MTFFRTlDNjJERTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnfwAwDQQCAAIwBwMFACQEFsAwDQYJKoZIhvcNAQELBQAD ggEBAGVYi2xoR/O2mhnXyiAgGjCl2AjeJRJaIh/zAuG+CVeybYNLr3H59IzllmoQ aTT/KGbJPM7PrLBipBl0W4JYCLzbCdjPZOIqI7O9E6DbC39mHx9IkFTcGfaCfhok FRCO/v9AAu/QFquMcvG9gL8cX9lJTMPs4EtS4Tjgg2dTuCrJJQzJAaKjdUZGlMz6 RRJLbV9AHKLTXiXvd/K1+cuVFqWkVU3Z4eD736KTkuAowIDuFDDcHm3WizXZWqaR U5js9cwH2WXYyUVJdfihAtwMvnpra5BRwnv032fGbVvI7aU78Yrjr6AtCRfep5oR W076DYmFKY36KKQu60sfGQ7ko3c= -----END CERTIFICATE-----Generated at Sun Jul 20 04:25:14 2025 by rpki-client