$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/7EFD7D08A10211EFBF75467FC4F9AE02.roa File: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (raw, json) Hash identifier: vsSxWPv3xEP3XML1AoQ7xUsTBNpQ7V7GqfC2jYKkI8o= Subject key identifier: 9B:0C:E4:E9:5F:7C:C8:47:CA:79:4E:49:3F:06:43:19:9D:6F:2F:47 Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: F3 Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/7EFD7D08A10211EFBF75467FC4F9AE02.roa Signing time: Tue 19 Aug 2025 06:44:32 +0000 ROA not before: Tue 19 Aug 2025 06:44:32 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 152475 IP address blocks: 103.129.52.0/24 maxlen: 24 103.129.53.0/24 maxlen: 24 103.129.54.0/24 maxlen: 24 103.129.55.0/24 maxlen: 24 2401:bbe0::/32 maxlen: 32 2401:bbe0::/36 maxlen: 36 2401:bbe0::/40 maxlen: 40 2401:bbe0:100::/40 maxlen: 40 2401:bbe0:200::/40 maxlen: 40 2401:bbe0:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Aug 19 06:44:32 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68a41d4f-3294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:a2:b2:77:6e:03:74:31:5b:26:fa:ca:7e: 53:d6:67:c4:08:4b:14:fc:d6:56:38:d6:b9:35:f1: 4b:0b:df:1b:0e:c7:8f:38:c5:b3:4d:5d:49:35:48: 36:92:32:66:58:2e:96:4d:2e:7e:f2:8c:42:fa:57: 33:0c:ae:d5:25:16:05:f4:90:1b:a6:dd:e9:39:50: f3:4e:13:e0:ad:76:e6:b9:83:85:66:21:b1:ae:cd: 02:bc:13:58:69:93:9f:ac:06:7f:d9:7e:86:4c:90: 86:31:18:e5:bf:b7:b2:f8:d9:f1:17:67:b5:37:e4: 45:ea:67:59:1f:48:ec:47:e5:ff:24:f0:f1:4e:10: 34:73:cb:d8:f8:9f:13:14:30:20:7b:15:7d:84:83: c5:27:5b:88:ce:88:f4:a0:eb:88:97:dd:aa:cb:81: c0:3a:43:33:e9:74:27:0d:e4:94:49:f4:1e:c7:92: 00:0e:4a:fd:75:48:c9:40:1e:2a:ea:7d:59:a4:b8: 71:70:70:92:0b:dc:04:65:a7:b5:bc:a4:78:f5:9a: ae:27:27:21:c7:db:61:a0:56:ed:f8:cf:36:30:87: 86:8d:91:5d:61:a0:87:ea:36:a8:db:53:2a:3a:d4: f8:b2:03:14:8b:1e:07:a4:84:92:bc:9c:bc:28:81: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0C:E4:E9:5F:7C:C8:47:CA:79:4E:49:3F:06:43:19:9D:6F:2F:47 X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/7EFD7D08A10211EFBF75467FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.129.52.0/22 IPv6: 2401:bbe0::/32 Signature Algorithm: sha256WithRSAEncryption 16:f8:11:67:b4:b8:d8:bf:10:0c:08:39:f2:c5:43:85:45:98: 0e:5e:41:2b:28:b7:85:28:6f:c3:5b:d8:17:59:33:90:2a:71: a2:f5:c5:b4:6a:a4:fb:1f:0a:05:cf:1b:3a:61:73:b1:69:6e: 23:6b:d0:73:3c:1a:3d:04:dc:6a:7e:7b:7e:ee:e5:12:dc:5a: 91:f1:d3:47:b8:3c:dd:8d:1c:e1:cb:eb:92:51:ab:44:ff:53: b3:d6:85:7d:9c:02:85:ff:9b:d5:e0:fb:9e:ac:72:b4:5c:ff: 36:03:00:ce:18:63:8b:9f:77:8e:18:99:bf:20:d8:89:65:1b: 7d:94:90:bb:1c:9b:1a:c7:5a:29:35:79:ad:c3:73:a3:00:94: 2d:29:b4:64:63:da:3e:09:09:d1:a1:f1:cf:0d:fb:6f:e7:9e: 7b:2a:e3:9f:73:91:0a:5e:d0:21:96:2b:14:f1:95:76:f2:4d: e9:a1:81:60:6d:5d:0d:f3:75:51:62:d9:50:80:98:0f:b3:7c: 3b:46:7f:2c:f4:19:d0:04:a0:78:fe:29:c4:6a:53:0e:fa:77: d5:d6:44:17:56:fd:f1:07:5f:ca:1d:09:dc:05:8f:37:85:63: 26:a3:85:24:36:29:11:8e:b4:a9:de:0c:e7:3e:f8:1f:b0:53: aa:f6:63:6b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjUwODE5MDY0NDMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE0MWQ0Zi0zMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D+isnduA3QxWyb6yn5T1mfECEsU/NZWONa5NfFLC98bDsePOMWzTV1JNUg2 kjJmWC6WTS5+8oxC+lczDK7VJRYF9JAbpt3pOVDzThPgrXbmuYOFZiGxrs0CvBNY aZOfrAZ/2X6GTJCGMRjlv7ey+NnxF2e1N+RF6mdZH0jsR+X/JPDxThA0c8vY+J8T FDAgexV9hIPFJ1uIzoj0oOuIl92qy4HAOkMz6XQnDeSUSfQex5IADkr9dUjJQB4q 6n1ZpLhxcHCSC9wEZae1vKR49ZquJychx9thoFbt+M82MIeGjZFdYaCH6jao21Mq OtT4sgMUix4HpISSvJy8KIELOwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJsM5Olf fMhHynlOST8GQxmdby9HMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZDOEYvRkEwRTA1QTQ2QjVBMTFFRkJDOTk5MjVDQzRGOUFFMDIvN0VGRDdEMDhB MTAyMTFFRkJGNzU0NjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJngTQwDQQCAAIwBwMFACQBu+AwDQYJKoZIhvcNAQELBQAD ggEBABb4EWe0uNi/EAwIOfLFQ4VFmA5eQSsot4Uob8Nb2BdZM5AqcaL1xbRqpPsf CgXPGzphc7FpbiNr0HM8Gj0E3Gp+e37u5RLcWpHx00e4PN2NHOHL65JRq0T/U7PW hX2cAoX/m9Xg+56scrRc/zYDAM4YY4ufd44Ymb8g2IllG32UkLscmxrHWik1ea3D c6MAlC0ptGRj2j4JCdGh8c8N+2/nnnsq459zkQpe0CGWKxTxlXbyTemhgWBtXQ3z dVFi2VCAmA+zfDtGfyz0GdAEoHj+KcRqUw76d9XWRBdW/fEHX8odCdwFjzeFYyaj hSQ2KRGOtKneDOc++B+wU6r2Y2s= -----END CERTIFICATE-----Generated at Sat Oct 25 02:56:18 2025 by rpki-client