$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/118AD6DE11C611EEA9D06D11C4F9AE02.roa File: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (raw, json) Hash identifier: +3hQasWjCag/cMHiyoXiUBni3g6BDychTfyDRlqefpQ= Subject key identifier: 87:95:77:D4:A7:8D:4E:FA:6D:16:89:F5:B7:0B:FB:98:AA:2D:4C:08 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 0488 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/118AD6DE11C611EEA9D06D11C4F9AE02.roa Signing time: Mon 25 May 2026 01:34:57 +0000 ROA not before: Mon 25 May 2026 01:34:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 43.243.195.0/24 maxlen: 24 103.229.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 00:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 25 01:34:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a13a741-f798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0b:d0:b3:d5:a2:4d:76:d2:d0:f6:15:31:0e: 6c:cd:37:4d:61:71:0a:af:98:c1:6d:fe:58:ea:30: a3:2a:6e:dc:cb:9f:57:45:80:d6:ca:e6:73:85:a0: f3:8c:e4:de:fb:a9:87:82:a6:66:46:3c:db:cc:b4: 05:1f:a3:33:a8:7c:f6:91:4f:dc:b7:e6:fa:d5:f2: ff:b0:fe:b3:0f:5a:76:22:83:6a:2a:8c:75:57:d7: c6:b3:65:f7:45:84:d7:3e:f7:1f:19:a0:2d:95:67: 3b:40:5e:61:39:38:27:32:a8:43:ef:a6:85:dd:dd: 3f:79:04:78:47:c3:ac:e0:ab:13:f8:0b:e1:27:95: 2f:9d:1c:e9:ea:be:79:7c:47:3b:42:cf:8a:e4:c3: a0:ed:14:f7:56:27:a9:66:63:72:4c:aa:80:45:de: cd:12:d5:e8:4e:4b:c8:11:92:04:92:e6:c2:6a:cc: 17:41:4e:65:c1:5c:89:fe:46:69:26:54:de:f3:a5: d7:d9:7d:d7:8b:0d:6b:65:4d:f9:8c:9c:da:37:02: 1a:c3:81:10:3b:8c:86:de:c6:c9:df:20:9a:c7:c6: 8f:a6:98:a4:10:31:95:ff:83:47:2d:29:b5:31:1c: 81:62:0f:51:35:2a:68:d9:e9:d6:14:e2:a8:fa:b9: 02:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:95:77:D4:A7:8D:4E:FA:6D:16:89:F5:B7:0B:FB:98:AA:2D:4C:08 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/118AD6DE11C611EEA9D06D11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.195.0/24 103.229.117.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:92:a3:f3:b3:de:cc:81:04:e7:e4:de:8e:33:84:17:11:d6: ea:57:bd:d1:45:ab:55:1a:c7:82:f4:be:93:95:48:d1:9f:07: 24:7f:c3:0c:df:fd:38:2d:e5:da:ed:8a:a5:82:1c:43:23:b5: 9f:05:c0:af:73:e9:e7:43:d4:5c:94:fc:1f:e3:a0:31:27:85: b6:f4:61:51:5f:31:7b:cc:42:86:32:22:86:cc:b3:44:72:d6: 93:49:84:9e:89:65:91:e8:1e:d2:32:b3:6d:f8:63:b0:36:29: 72:46:a3:ac:0c:8e:c1:1a:78:3e:ce:b7:a1:65:aa:24:33:cd: 88:ae:9b:fb:c5:27:f7:ad:b5:d2:b2:bf:aa:49:b4:f9:25:4d: 2f:22:0b:2a:dc:e0:48:12:f1:5f:18:1c:2d:f4:2f:d8:1d:77: ac:35:fa:f0:89:94:22:27:9a:8f:80:8c:0d:42:b0:9a:80:c0: 22:db:9c:33:ef:dc:b6:6c:e5:2e:63:67:94:b9:53:35:92:ca: 3c:59:a3:0c:3d:24:dc:58:eb:12:32:71:5f:9a:6b:73:a6:23: ff:41:07:02:a2:55:02:f8:16:36:84:4e:34:d0:5f:f9:0d:1d: 20:24:9c:4c:ec:9a:79:be:9e:60:42:5e:a9:55:e1:02:18:3b: ae:8c:af:30 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjYwNTI1MDEzNDU3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTEzYTc0MS1mNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQvQs9WiTXbS0PYVMQ5szTdNYXEKr5jBbf5Y6jCjKm7cy59XRYDWyuZzhaDz jOTe+6mHgqZmRjzbzLQFH6MzqHz2kU/ct+b61fL/sP6zD1p2IoNqKox1V9fGs2X3 RYTXPvcfGaAtlWc7QF5hOTgnMqhD76aF3d0/eQR4R8Os4KsT+AvhJ5UvnRzp6r55 fEc7Qs+K5MOg7RT3ViepZmNyTKqARd7NEtXoTkvIEZIEkubCaswXQU5lwVyJ/kZp JlTe86XX2X3Xiw1rZU35jJzaNwIaw4EQO4yG3sbJ3yCax8aPppikEDGV/4NHLSm1 MRyBYg9RNSpo2enWFOKo+rkCmQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIeVd9Sn jU76bRaJ9bcL+5iqLUwIMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvMTE4QUQ2REUx MUM2MTFFRUE5RDA2RDExQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK/PDAwQAZ+V1MA0GCSqGSIb3DQEBCwUAA4IBAQBKkqPzs97MgQTn 5N6OM4QXEdbqV73RRatVGseC9L6TlUjRnwckf8MM3/04LeXa7YqlghxDI7WfBcCv c+nnQ9RclPwf46AxJ4W29GFRXzF7zEKGMiKGzLNEctaTSYSeiWWR6B7SMrNt+GOw NilyRqOsDI7BGng+zrehZaokM82Irpv7xSf3rbXSsr+qSbT5JU0vIgsq3OBIEvFf GBwt9C/YHXesNfrwiZQiJ5qPgIwNQrCagMAi25wz79y2bOUuY2eUuVM1kso8WaMM PSTcWOsSMnFfmmtzpiP/QQcColUC+BY2hE400F/5DR0gJJxM7Jp5vp5gQl6pVeEC GDuujK8w -----END CERTIFICATE-----Generated at Tue Jun 9 10:42:21 2026 by rpki-client