$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa File: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (raw, json) Hash identifier: 4V6lPO7ag/YW0Vp0T9oZKnRuFp3L/Sg6PmpvkYR7JtQ= Subject key identifier: 8E:7A:DB:FF:9E:90:82:F7:14:E9:6C:3F:0A:6E:BB:75:85:F3:26:C8 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 0865 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa Signing time: Sat 04 Jul 2026 21:22:59 +0000 ROA not before: Sat 04 Jul 2026 21:22:59 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 58507 IP address blocks: 103.1.188.0/22 maxlen: 24 103.19.172.0/22 maxlen: 24 103.232.160.0/22 maxlen: 24 113.212.168.0/21 maxlen: 24 163.47.120.0/22 maxlen: 24 163.47.136.0/22 maxlen: 24 163.47.168.0/22 maxlen: 24 182.237.4.0/22 maxlen: 24 203.32.77.0/24 maxlen: 24 2400:5d00::/32 maxlen: 34 2400:5d00::/33 maxlen: 40 2400:5d00:8000::/34 maxlen: 40 2400:5d00:c000::/35 maxlen: 36 2400:5d00:c000::/36 maxlen: 40 2400:5d00:d000::/37 maxlen: 38 2400:5d00:d000::/38 maxlen: 40 2400:5d00:d400::/39 maxlen: 40 2404:59c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 21:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Jul 4 21:22:59 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4979b3-ee85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:0d:5b:23:4e:99:8e:a3:63:3d:9a:ac:cd: 1d:66:f9:e2:fb:a1:b6:f5:ae:47:0c:eb:39:04:2c: 7a:7e:39:01:0d:9f:b0:d1:df:24:9d:af:36:75:ba: d6:5e:c5:b2:bd:8b:56:9e:1e:b1:98:39:aa:cb:3e: 62:0a:1c:ee:b4:5a:7a:1a:65:e7:4e:c0:e0:61:88: 83:6a:8c:4f:7a:d1:df:ef:ad:bb:e9:77:12:fd:a9: c1:05:9f:5e:71:5d:23:53:6b:99:1c:9c:21:6e:e7: 20:32:05:35:90:75:75:c0:ae:98:46:dd:02:76:1b: c8:06:92:06:bf:ba:1c:09:7f:de:ee:2e:e6:e1:0d: 3c:ef:9c:69:41:e9:eb:ee:a9:1c:35:51:16:d4:b0: 32:37:f9:ce:97:4e:e7:89:c0:2d:73:05:fc:91:9a: 99:f8:1e:30:e2:46:c7:b9:8a:67:cf:81:20:e1:60: 7e:00:da:8c:f3:98:cc:0a:1b:84:df:32:42:16:45: f4:77:a0:81:19:bf:b9:57:0d:3c:fb:6f:4e:48:cb: c5:3f:ba:ba:78:94:4f:b0:99:4e:df:66:9c:33:51: 83:b8:4d:91:c3:a0:ac:3f:e1:72:68:f2:f4:e2:40: ca:d4:57:b0:8a:88:cc:f9:b5:75:38:2b:0e:d7:56: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7A:DB:FF:9E:90:82:F7:14:E9:6C:3F:0A:6E:BB:75:85:F3:26:C8 X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.1.188.0/22 103.19.172.0/22 103.232.160.0/22 113.212.168.0/21 163.47.120.0/22 163.47.136.0/22 163.47.168.0/22 182.237.4.0/22 203.32.77.0/24 IPv6: 2400:5d00::/32 2404:59c0::/32 Signature Algorithm: sha256WithRSAEncryption c7:39:f1:d7:d4:11:d9:6a:2a:80:40:e0:7c:b7:72:49:bf:b1: 49:9b:b0:f1:f8:dd:aa:47:c4:f9:24:2a:42:1a:0d:1f:40:06: cf:07:90:59:60:fd:57:6c:a0:10:5c:a9:f6:0e:31:71:19:c3: 73:0c:42:9c:e8:72:90:73:7b:67:0b:b1:42:3c:39:9f:9f:80: 28:3d:3a:cb:a7:bb:9c:34:45:b9:ef:cf:d7:5a:e5:35:1d:4a: f0:5d:3d:15:4a:93:2c:d8:3a:8d:dc:1f:b9:f3:1f:fe:85:3b: 43:0c:63:3e:b8:12:31:8e:21:46:72:f1:24:a0:72:7d:38:01: d0:e9:3e:7b:30:e1:d0:dd:8a:94:2b:03:72:9b:9f:a2:68:d9: 5a:9a:d8:b1:3b:7c:e8:07:48:05:6f:99:7a:ed:a1:30:82:10: 15:ef:16:f3:ae:f0:1f:25:5e:56:44:7c:c0:91:eb:3d:db:f4: cd:55:e6:df:3b:3c:ae:3c:70:93:a4:46:5a:65:d0:42:11:ca: 5f:64:69:66:c2:eb:48:d8:38:8c:70:e4:df:a3:84:97:74:f6: 22:2f:b0:85:69:45:bf:23:df:91:b8:f5:12:f8:1b:bc:16:b1: 2d:41:99:31:7e:43:b7:bb:9a:99:fe:c9:be:59:99:6d:95:56: 98:48:05:75 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjYwNzA0MjEyMjU5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5NzliMy1lZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZANWyNOmY6jYz2arM0dZvni+6G29a5HDOs5BCx6fjkBDZ+w0d8kna82dbrW XsWyvYtWnh6xmDmqyz5iChzutFp6GmXnTsDgYYiDaoxPetHf76276XcS/anBBZ9e cV0jU2uZHJwhbucgMgU1kHV1wK6YRt0CdhvIBpIGv7ocCX/e7i7m4Q0875xpQenr 7qkcNVEW1LAyN/nOl07nicAtcwX8kZqZ+B4w4kbHuYpnz4Eg4WB+ANqM85jMChuE 3zJCFkX0d6CBGb+5Vw08+29OSMvFP7q6eJRPsJlO32acM1GDuE2Rw6CsP+FyaPL0 4kDK1FewiojM+bV1OCsO11bjDQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFI562/+e kIL3FOlsPwpuu3WF8ybIMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUwMjcvMjUwNUNFREMyNTY4MTFFQkFDMkNBQzVBQzRGOUFFMDIvMTJEQkFEM0NE QUZGMTFFQ0E2N0RBMTBCQzRGOUFFMDIucm9hMGUGCCsGAQUFBwEHAQH/BFYwVDA8 BAIAATA2AwQCZwG8AwQCZxOsAwQCZ+igAwQDcdSoAwQCoy94AwQCoy+IAwQCoy+o AwQCtu0EAwQAyyBNMBQEAgACMA4DBQAkAF0AAwUAJARZwDANBgkqhkiG9w0BAQsF AAOCAQEAxznx19QR2WoqgEDgfLdySb+xSZuw8fjdqkfE+SQqQhoNH0AGzweQWWD9 V2ygEFyp9g4xcRnDcwxCnOhykHN7ZwuxQjw5n5+AKD06y6e7nDRFue/P11rlNR1K 8F09FUqTLNg6jdwfufMf/oU7QwxjPrgSMY4hRnLxJKByfTgB0Ok+ezDh0N2KlCsD cpufomjZWprYsTt86AdIBW+Zeu2hMIIQFe8W867wHyVeVkR8wJHrPdv0zVXm3zs8 rjxwk6RGWmXQQhHKX2RpZsLrSNg4jHDk36OEl3T2Ii+whWlFvyPfkbj1EvgbvBax LUGZMX5Dt7uamf7JvlmZbZVWmEgFdQ== -----END CERTIFICATE-----Generated at Tue Jul 21 18:17:27 2026 by rpki-client