$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa File: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (raw, json) Hash identifier: hFRxkLpFxynkLA+bgk7ZWKTxrIef2z810IITJ3Z3KSc= Subject key identifier: 09:0D:3D:FF:4C:14:C2:22:AD:73:FE:A7:92:06:2E:40:9B:64:E1:0B Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 07A2 Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa Signing time: Fri 04 Jul 2025 22:02:43 +0000 ROA not before: Fri 04 Jul 2025 22:02:43 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 58507 IP address blocks: 103.1.188.0/22 maxlen: 24 103.19.172.0/22 maxlen: 24 103.232.160.0/22 maxlen: 24 113.212.168.0/21 maxlen: 24 163.47.120.0/22 maxlen: 24 163.47.136.0/22 maxlen: 24 163.47.168.0/22 maxlen: 24 182.237.4.0/22 maxlen: 24 203.32.77.0/24 maxlen: 24 2400:5d00::/32 maxlen: 34 2400:5d00::/33 maxlen: 40 2400:5d00:8000::/34 maxlen: 40 2400:5d00:c000::/35 maxlen: 36 2400:5d00:c000::/36 maxlen: 40 2400:5d00:d000::/37 maxlen: 38 2400:5d00:d000::/38 maxlen: 40 2400:5d00:d400::/39 maxlen: 40 2404:59c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 22:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Jul 4 22:02:43 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68684f83-70ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:d2:b2:e3:08:cb:53:b6:74:50:27:14:8e: ab:27:77:5c:5e:0d:ce:1d:42:85:36:ce:95:78:20: 93:d0:66:05:c7:54:1d:86:b3:25:97:bc:5a:0a:0e: df:29:eb:01:62:76:7a:4e:de:2d:25:67:0c:bf:7c: 88:48:1b:0e:23:84:a5:3b:bf:73:33:71:21:45:a3: 2c:9c:28:05:c0:f0:40:8f:69:d2:37:c6:0d:50:24: 4d:64:d9:6c:37:13:1e:b7:12:59:f0:4c:8f:fc:f5: d1:0c:01:2b:ee:b9:74:6f:50:5b:43:09:93:11:6b: e7:f5:e0:36:ad:69:85:bb:22:a4:ca:9c:ca:ef:cf: 81:ed:e7:18:97:48:cd:91:3b:64:80:c7:59:0c:b3: 01:90:1c:dc:b8:cc:76:9f:38:54:3f:bf:86:04:c7: 76:c8:f7:bd:76:e3:54:a2:eb:f4:64:09:91:84:42: 55:0f:57:92:a3:ce:f0:ad:d2:03:67:2f:58:74:db: 61:0f:44:77:f6:ab:03:93:04:57:bb:14:05:a0:dc: 20:c0:c0:32:20:97:c9:02:bd:d1:4c:c6:4b:c9:c8: d9:01:b8:a7:d7:5d:87:87:ac:b1:07:b0:3c:f9:12: 9d:82:90:8c:cc:9a:e8:ad:5b:1d:25:f8:c1:17:42: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:3D:FF:4C:14:C2:22:AD:73:FE:A7:92:06:2E:40:9B:64:E1:0B X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.188.0/22 103.19.172.0/22 103.232.160.0/22 113.212.168.0/21 163.47.120.0/22 163.47.136.0/22 163.47.168.0/22 182.237.4.0/22 203.32.77.0/24 IPv6: 2400:5d00::/32 2404:59c0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:4a:d0:37:fa:9f:3e:e3:63:29:60:2f:3e:8e:9a:ae:c4:23: d7:7d:f6:58:fc:ed:5a:4f:9b:df:46:6a:59:4d:50:02:43:46: f9:09:aa:21:4b:a3:ec:37:d0:7a:86:b6:0a:7f:c4:25:ee:55: f5:d5:5d:9e:d9:fc:68:7f:89:2a:3e:31:ff:e2:33:e3:a0:39: a8:7d:e8:24:89:50:da:7c:b7:85:3a:5b:c6:fb:0c:91:f7:03: 3f:8c:53:1a:27:54:14:3b:65:8e:67:2b:75:1e:41:5e:4f:28: 72:09:e8:f7:bb:79:76:4e:9e:65:8e:d8:81:b6:8c:5e:24:ec: ae:ad:c2:4a:99:98:71:c6:12:9e:3e:15:78:bd:e5:b8:c4:81: 05:2d:41:76:29:1e:24:6d:09:09:84:bc:50:7c:40:50:13:b1: d8:ad:3c:57:fe:5e:f7:86:3d:b3:67:19:3d:67:7b:bf:8d:42: 71:b3:87:1c:71:e2:52:59:08:ca:44:1c:47:5f:11:6c:d3:7a: 75:b3:cb:50:90:16:44:33:0c:d2:d7:8e:ed:17:9f:00:b2:99: e0:9c:44:0e:6e:2f:5d:19:ff:41:b2:d9:45:a0:fc:d6:3f:5c: 87:56:16:cf:d0:d3:3a:25:4b:c9:84:b9:93:6e:95:e1:e0:e9: de:79:d0:15 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjUwNzA0MjIwMjQzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NGY4My03MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxLSsuMIy1O2dFAnFI6rJ3dcXg3OHUKFNs6VeCCT0GYFx1QdhrMll7xaCg7f KesBYnZ6Tt4tJWcMv3yISBsOI4SlO79zM3EhRaMsnCgFwPBAj2nSN8YNUCRNZNls NxMetxJZ8EyP/PXRDAEr7rl0b1BbQwmTEWvn9eA2rWmFuyKkypzK78+B7ecYl0jN kTtkgMdZDLMBkBzcuMx2nzhUP7+GBMd2yPe9duNUouv0ZAmRhEJVD1eSo87wrdID Zy9YdNthD0R39qsDkwRXuxQFoNwgwMAyIJfJAr3RTMZLycjZAbin112Hh6yxB7A8 +RKdgpCMzJrorVsdJfjBF0Kf3QIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFAkNPf9M FMIirXP+p5IGLkCbZOELMB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUwMjcvMjUwNUNFREMyNTY4MTFFQkFDMkNBQzVBQzRGOUFFMDIvMTJEQkFEM0NE QUZGMTFFQ0E2N0RBMTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZQYIKwYBBQUHAQcBAf8E VjBUMDwEAgABMDYDBAJnAbwDBAJnE6wDBAJn6KADBANx1KgDBAKjL3gDBAKjL4gD BAKjL6gDBAK27QQDBADLIE0wFAQCAAIwDgMFACQAXQADBQAkBFnAMA0GCSqGSIb3 DQEBCwUAA4IBAQB9StA3+p8+42MpYC8+jpquxCPXffZY/O1aT5vfRmpZTVACQ0b5 CaohS6PsN9B6hrYKf8Ql7lX11V2e2fxof4kqPjH/4jPjoDmofegkiVDafLeFOlvG +wyR9wM/jFMaJ1QUO2WOZyt1HkFeTyhyCej3u3l2Tp5ljtiBtoxeJOyurcJKmZhx xhKePhV4veW4xIEFLUF2KR4kbQkJhLxQfEBQE7HYrTxX/l73hj2zZxk9Z3u/jUJx s4ccceJSWQjKRBxHXxFs03p1s8tQkBZEMwzS147tF58AspngnEQObi9dGf9BstlF oPzWP1yHVhbP0NM6JUvJhLmTbpXh4OneedAV -----END CERTIFICATE-----Generated at Fri Oct 24 09:08:28 2025 by rpki-client