$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/18DDC828563A11F092DD586EC4F9AE02.roa File: 18DDC828563A11F092DD586EC4F9AE02.roa (raw, json) Hash identifier: RG7TCR+hu/+Ok550Z5N0qOkdev6k9kUyJ/FaV+2X5Ic= Subject key identifier: 06:FB:F3:D9:12:9A:29:AD:CC:8D:92:B2:17:CD:4E:2A:E7:5E:96:76 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0759 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/18DDC828563A11F092DD586EC4F9AE02.roa Signing time: Tue 02 Sep 2025 23:44:28 +0000 ROA not before: Tue 02 Sep 2025 23:44:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 932 IP address blocks: 43.247.132.0/22 maxlen: 24 43.254.164.0/22 maxlen: 24 43.255.120.0/22 maxlen: 24 43.255.156.0/22 maxlen: 24 103.30.76.0/22 maxlen: 24 103.171.34.0/23 maxlen: 24 2401:2660:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 00:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 2 23:44:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b7815c-802f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:bf:73:1c:81:18:0c:91:69:46:e6:ce:4d: 19:8c:4c:5f:76:85:6e:9c:cf:15:ae:cb:1f:8c:5e: a6:90:a9:96:ff:c8:b1:0e:a7:75:98:3a:cb:84:53: 78:17:f6:41:3e:ba:da:28:e1:95:73:18:52:68:31: d2:9f:3f:99:51:90:6c:8e:c1:86:27:e1:d6:b2:ba: 12:0a:60:3b:ae:75:64:e3:0a:d9:a2:a5:95:38:f1: 2b:99:7d:92:4e:55:a7:65:89:81:31:55:e3:a3:37: d4:78:e3:cb:1d:9b:95:6d:e0:df:12:0a:80:29:d1: 3d:f5:3b:a3:8f:08:0d:79:53:46:1d:c5:dc:4f:03: 30:b3:2e:80:2d:7a:c4:3d:8e:a2:79:b3:39:86:ce: 88:52:54:8d:1a:3d:2c:55:6d:34:01:d0:da:10:18: 70:00:44:dd:9e:1d:74:6b:64:e8:d4:db:b2:7d:7c: 6f:aa:00:0d:df:dd:b4:bb:c9:76:70:18:3a:1b:ef: c5:60:a8:3a:be:c0:0e:5a:01:2d:a8:f3:92:4b:9a: 8a:10:d0:df:ee:d9:e1:b4:4b:c0:b0:dd:09:3c:47: bb:a0:38:2b:53:5b:85:3a:50:9b:06:18:05:97:e9: 9e:6c:9d:ce:50:af:78:a8:88:4d:a1:aa:b8:f5:94: 49:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FB:F3:D9:12:9A:29:AD:CC:8D:92:B2:17:CD:4E:2A:E7:5E:96:76 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/18DDC828563A11F092DD586EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.132.0/22 43.254.164.0/22 43.255.120.0/22 43.255.156.0/22 103.30.76.0/22 103.171.34.0/23 IPv6: 2401:2660:1000::/36 Signature Algorithm: sha256WithRSAEncryption 2c:c8:12:1c:92:43:c5:13:13:0e:08:eb:ff:98:19:67:88:84: 5f:80:69:75:be:69:83:ea:f6:31:71:a6:b1:1e:4d:20:89:dd: 14:05:fc:43:67:84:d4:ca:c0:75:f9:a5:9e:ed:df:3f:ec:f8: b1:c5:aa:d6:77:d6:29:09:03:57:29:1d:13:2e:99:52:c9:3d: a4:0c:8e:5c:51:c1:58:1a:50:66:48:ae:aa:79:e6:2a:0e:ee: 8f:62:5b:00:c0:6e:ba:74:1e:bd:15:ab:ac:b0:e8:53:86:2a: 86:64:72:1e:f0:82:67:ec:12:8d:dc:ea:fb:0f:8d:48:5d:ac: a1:97:e1:71:0b:bb:32:d1:85:4e:73:6c:65:d0:2c:ff:fd:b7: b1:a9:aa:9c:84:b7:3a:a9:0d:23:95:f2:c7:67:3c:f0:4c:07: ec:65:00:6e:ed:71:f1:fb:e8:cc:ad:79:3f:22:07:d7:56:c1: a5:f2:4a:7f:10:9b:77:ba:e2:79:ed:9d:e3:cb:da:5d:7e:f7: ea:36:ba:96:cd:b8:9a:5f:2e:7c:0d:3d:2a:6d:55:0f:00:8d: 55:16:f3:7e:2b:e2:98:a3:6b:7f:d2:43:73:14:fe:dc:6a:8e: 41:a7:9f:4e:85:a5:5f:da:2b:0e:86:6d:f3:1f:6b:81:8c:10: 1c:ef:48:cc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjUwOTAyMjM0NDI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3ODE1Yy04MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwC/cxyBGAyRaUbmzk0ZjExfdoVunM8VrssfjF6mkKmW/8ixDqd1mDrLhFN4 F/ZBPrraKOGVcxhSaDHSnz+ZUZBsjsGGJ+HWsroSCmA7rnVk4wrZoqWVOPErmX2S TlWnZYmBMVXjozfUeOPLHZuVbeDfEgqAKdE99TujjwgNeVNGHcXcTwMwsy6ALXrE PY6iebM5hs6IUlSNGj0sVW00AdDaEBhwAETdnh10a2To1NuyfXxvqgAN3920u8l2 cBg6G+/FYKg6vsAOWgEtqPOSS5qKENDf7tnhtEvAsN0JPEe7oDgrU1uFOlCbBhgF l+mebJ3OUK94qIhNoaq49ZRJswIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFAb789kS mimtzI2SshfNTirnXpZ2MB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvMThEREM4Mjg1 NjNBMTFGMDkyREQ1ODZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MCoEAgABMCQDBAIr94QDBAIr/qQDBAIr/3gDBAIr/5wDBAJnHkwDBAFnqyIw DgQCAAIwCAMGBCQBJmAQMA0GCSqGSIb3DQEBCwUAA4IBAQAsyBIckkPFExMOCOv/ mBlniIRfgGl1vmmD6vYxcaaxHk0gid0UBfxDZ4TUysB1+aWe7d8/7PixxarWd9Yp CQNXKR0TLplSyT2kDI5cUcFYGlBmSK6qeeYqDu6PYlsAwG66dB69FaussOhThiqG ZHIe8IJn7BKN3Or7D41IXayhl+FxC7sy0YVOc2xl0Cz//bexqaqchLc6qQ0jlfLH ZzzwTAfsZQBu7XHx++jMrXk/IgfXVsGl8kp/EJt3uuJ57Z3jy9pdfvfqNrqWzbia Xy58DT0qbVUPAI1VFvN+K+KYo2t/0kNzFP7cao5Bp59OhaVf2isOhm3zH2uBjBAc 70jM -----END CERTIFICATE-----Generated at Sat Oct 25 01:35:34 2025 by rpki-client