$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C6537C4AAC5B11EDA8C03215C4F9AE02.roa File: C6537C4AAC5B11EDA8C03215C4F9AE02.roa (raw, json) Hash identifier: UvZajA3QOtiWLJMPFHl2u8Ljo+3aZL1Rw+O9FE2ts1k= Subject key identifier: BC:24:B0:21:17:81:15:C2:C6:49:0C:05:6E:72:F1:D9:E1:AE:D5:F1 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 03B4 Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C6537C4AAC5B11EDA8C03215C4F9AE02.roa Signing time: Fri 18 Jul 2025 06:34:10 +0000 ROA not before: Fri 18 Jul 2025 06:34:10 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 58487 IP address blocks: 103.247.8.0/22 maxlen: 24 202.155.8.0/21 maxlen: 24 202.155.16.0/20 maxlen: 24 203.175.8.0/22 maxlen: 24 203.194.112.0/22 maxlen: 24 218.33.92.0/22 maxlen: 24 218.33.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Jul 18 06:34:10 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6879eae2-0913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:48:c7:cb:04:34:0b:55:42:9f:36:86:46:a9: 9b:ea:3b:66:db:d0:55:5d:f0:ba:1b:0b:b5:d7:ed: f2:03:a9:18:c8:24:83:5f:2e:51:bd:d7:fd:77:1f: d1:c0:c1:52:2a:96:06:16:3c:9d:62:d0:44:1d:f5: 0f:9e:28:39:0d:97:41:73:e9:89:91:79:9e:22:5f: 1e:45:85:43:de:26:67:cb:af:ff:57:ca:04:86:15: 92:4c:d1:f8:b4:60:4b:0b:ce:a1:06:9b:ec:20:b3: cc:35:83:a0:93:25:e6:e3:f1:05:1e:52:fd:93:d0: 38:eb:41:29:22:31:e5:65:3f:90:16:20:51:a1:79: 29:4f:cc:26:90:da:9c:2c:08:cc:51:ce:17:15:c6: ee:a3:0b:dc:cd:04:5f:f9:74:0d:47:07:40:86:ef: da:88:c6:f3:2c:3d:80:67:2d:46:90:67:9b:5d:ee: 33:04:01:f9:28:47:93:63:62:2b:b4:b9:a8:16:93: 08:17:0f:73:c9:eb:2e:3c:90:90:e9:56:81:12:2e: 00:3d:30:f8:8d:ac:34:d1:35:5d:d7:27:a9:6f:34: ea:bd:61:06:64:35:c9:06:8f:8c:c9:9e:39:45:02: 4d:3a:7b:9a:df:2c:2f:95:30:1b:b7:48:39:8b:64: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:24:B0:21:17:81:15:C2:C6:49:0C:05:6E:72:F1:D9:E1:AE:D5:F1 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C6537C4AAC5B11EDA8C03215C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.8.0/22 202.155.8.0-202.155.31.255 203.175.8.0/22 203.194.112.0/22 218.33.92.0/22 218.33.100.0/22 Signature Algorithm: sha256WithRSAEncryption cf:22:77:a2:51:bb:20:9b:6b:57:bb:c1:1c:c0:e4:da:a2:09: b6:ce:eb:4e:f8:8e:4d:5f:0f:21:bc:4b:6c:13:6e:17:97:e5: 80:4e:29:0c:d0:22:ee:5c:21:51:35:4b:7f:e9:f5:61:5f:0a: 26:d9:e8:d8:9a:0f:75:2b:01:9a:3c:e5:87:74:02:4f:b8:a6: db:19:23:6d:14:c6:c2:52:43:ec:3c:99:13:df:fb:b9:cc:c5: 2c:17:98:c1:e2:39:69:f4:30:55:37:fe:58:e2:b5:23:d1:38: 4c:13:3c:7f:6c:a5:f3:f0:00:eb:2f:bc:67:ce:25:2d:32:aa: 87:b7:e1:ab:88:6f:1b:7e:4e:92:c6:6a:5a:a5:33:ae:ca:f6: cf:52:88:fb:5d:39:63:92:e5:86:3a:8b:a3:b0:d9:ac:07:63: 9d:49:9b:35:f2:a3:b5:66:ec:00:69:ba:e4:74:f3:df:6b:f4: 26:da:2d:2c:18:40:16:02:97:e4:79:1b:82:39:0a:5c:5e:d9: 88:8d:23:f4:9a:ad:c6:b0:ae:8b:91:eb:6f:2d:49:3d:02:92: 33:bd:59:47:b1:f5:be:ba:7f:63:d7:41:3d:63:f2:1e:83:d9: ff:79:29:fa:d2:53:f2:c4:d9:a7:cb:37:fc:49:34:5a:ca:4c: 82:04:5d:60 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwNzE4MDYzNDEwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc5ZWFlMi0wOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UjHywQ0C1VCnzaGRqmb6jtm29BVXfC6Gwu11+3yA6kYyCSDXy5Rvdf9dx/R wMFSKpYGFjydYtBEHfUPnig5DZdBc+mJkXmeIl8eRYVD3iZny6//V8oEhhWSTNH4 tGBLC86hBpvsILPMNYOgkyXm4/EFHlL9k9A460EpIjHlZT+QFiBRoXkpT8wmkNqc LAjMUc4XFcbuowvczQRf+XQNRwdAhu/aiMbzLD2AZy1GkGebXe4zBAH5KEeTY2Ir tLmoFpMIFw9zyesuPJCQ6VaBEi4APTD4jaw00TVd1yepbzTqvWEGZDXJBo+MyZ45 RQJNOnua3ywvlTAbt0g5i2RETwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFLwksCEX gRXCxkkMBW5y8dnhrtXxMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQzY1MzdDNEFB QzVCMTFFREE4QzAzMjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwDBAJn9wgwDAMEA8qbCAMEBcqbAAMEAsuvCAMEAsvCcAMEAtoh XAMEAtohZDANBgkqhkiG9w0BAQsFAAOCAQEAzyJ3olG7IJtrV7vBHMDk2qIJts7r TviOTV8PIbxLbBNuF5flgE4pDNAi7lwhUTVLf+n1YV8KJtno2JoPdSsBmjzlh3QC T7im2xkjbRTGwlJD7DyZE9/7uczFLBeYweI5afQwVTf+WOK1I9E4TBM8f2yl8/AA 6y+8Z84lLTKqh7fhq4hvG35OksZqWqUzrsr2z1KI+105Y5LlhjqLo7DZrAdjnUmb NfKjtWbsAGm65HTz32v0JtotLBhAFgKX5HkbgjkKXF7ZiI0j9JqtxrCui5Hrby1J PQKSM71ZR7H1vrp/Y9dBPWPyHoPZ/3kp+tJT8sTZp8s3/Ek0WspMggRdYA== -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:25 2025 by rpki-client