$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa File: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (raw, json) Hash identifier: jWpGewbGAxCVZEy9uZnR7Tfw1mCynOwqfq2TLC2QUUM= Subject key identifier: 93:81:23:3E:BA:44:B7:0F:FE:C0:50:C6:BC:BD:6B:05:C4:19:CC:3C Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Certificate serial: 34B0 Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa Signing time: Wed 02 Jul 2025 15:20:50 +0000 ROA not before: Wed 02 Jul 2025 15:20:50 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45926 IP address blocks: 103.245.212.0/22 maxlen: 22 110.173.224.0/22 maxlen: 22 203.15.141.0/24 maxlen: 24 2001:df0:9e80::/48 maxlen: 48 2403:dc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 15:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Validity Not Before: Jul 2 15:20:50 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68654e52-9956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:70:f3:9c:c5:72:b3:e5:54:49:61:3c:ff: 54:c6:31:a5:d5:3c:fe:cf:b5:05:d2:13:10:b0:dd: 51:b9:9c:0d:52:58:fd:8d:55:93:bf:b1:94:fb:a2: 62:3c:ab:80:79:70:0a:ac:fb:35:67:f5:f4:cc:73: cf:de:36:aa:87:c3:44:0f:14:2c:d2:26:c0:36:c0: 7d:40:54:81:56:89:fa:21:ce:51:c1:bb:1d:1a:4d: 65:8a:92:7c:e2:5a:47:b6:a2:ac:12:76:52:95:42: a2:81:16:d2:6f:b1:18:0e:89:81:2c:e7:5e:c2:ca: d8:21:54:ea:52:63:8b:8a:41:cd:15:d7:c3:f8:37: d5:11:ee:2a:ec:bf:69:0a:d3:4d:4e:e5:20:ce:98: d8:cf:85:89:54:91:ec:e6:b1:95:71:ba:1e:30:a0: 71:1a:45:ef:29:ad:9d:bb:3f:2b:34:2c:a7:84:0e: 5d:fa:15:5f:50:3e:f2:11:e7:35:e4:a4:a8:c3:27: 69:58:0e:48:cd:7f:97:09:16:8c:76:e8:9f:dc:80: 28:d0:5f:fa:ee:1e:78:60:9d:ba:86:0e:8b:0d:84: 66:46:fb:11:91:06:d8:71:63:74:16:ae:ef:66:74: 0e:69:2a:96:08:13:02:41:f2:81:5b:13:6d:5c:e4: 79:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:81:23:3E:BA:44:B7:0F:FE:C0:50:C6:BC:BD:6B:05:C4:19:CC:3C X509v3 Authority Key Identifier: keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/7859AE6A0B5511EABCBC343DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.245.212.0/22 110.173.224.0/22 203.15.141.0/24 IPv6: 2001:df0:9e80::/48 2403:dc00::/32 Signature Algorithm: sha256WithRSAEncryption 9d:06:bd:c1:76:30:ec:37:5d:e5:33:71:e6:b5:d0:a2:2b:42: 3f:39:50:48:ae:ce:9b:1d:3b:05:58:7a:b8:7c:ea:50:e5:a4: eb:08:0a:f8:1e:20:e2:4b:d9:4b:93:cd:0d:a4:8e:fc:8e:52: 56:02:7e:f6:6b:fb:74:eb:40:70:46:37:22:be:f6:c9:fb:0f: 64:c5:7b:76:87:21:08:05:d5:10:3a:3a:38:f1:09:68:76:fb: 00:b2:a5:09:ee:cc:dd:4c:98:a0:8d:3d:5c:ae:f1:fb:f1:b7: ec:b8:18:b5:df:20:4c:41:1c:3c:bd:12:58:55:33:0e:03:92: 31:6d:9a:c6:ad:3a:d2:57:b6:7f:6a:85:81:19:7b:eb:fd:e9: c6:5f:49:60:e5:ff:8d:67:1d:75:48:f7:c7:37:38:9a:2a:d6: ef:aa:21:ac:b4:ef:9f:fd:7b:75:79:48:65:da:f2:8c:b0:1a: ed:d6:78:c4:17:2f:3c:e7:fc:6c:84:83:30:d8:80:07:96:d6: 85:d8:2b:f3:34:e8:5a:a1:2e:7a:d1:66:ee:c6:6f:84:b3:8a: 20:1f:52:27:fd:65:8d:98:ec:00:71:cc:8f:25:ed:65:0c:10: 37:c8:46:de:4b:c7:d5:28:54:0a:31:54:06:d7:33:75:d0:06: 95:8e:b0:73 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE MUUzODVFRTcwHhcNMjUwNzAyMTUyMDUwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1NGU1Mi05OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaBw85zFcrPlVElhPP9UxjGl1Tz+z7UF0hMQsN1RuZwNUlj9jVWTv7GU+6Ji PKuAeXAKrPs1Z/X0zHPP3jaqh8NEDxQs0ibANsB9QFSBVon6Ic5RwbsdGk1lipJ8 4lpHtqKsEnZSlUKigRbSb7EYDomBLOdewsrYIVTqUmOLikHNFdfD+DfVEe4q7L9p CtNNTuUgzpjYz4WJVJHs5rGVcboeMKBxGkXvKa2duz8rNCynhA5d+hVfUD7yEec1 5KSowydpWA5IzX+XCRaMduif3IAo0F/67h54YJ26hg6LDYRmRvsRkQbYcWN0Fq7v ZnQOaSqWCBMCQfKBWxNtXOR56wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFJOBIz66 RLcP/sBQxry9awXEGcw8MB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEE5RkMvMzE5MzM3QUExRDlFMTFFMjg2RTlEMThEMDhCMDJDRDIvNzg1OUFFNkEw QjU1MTFFQUJDQkMzNDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMBgEAgABMBIDBAJn9dQDBAJureADBADLD40wFgQCAAIwEAMHACABDfCegAMF ACQD3AAwDQYJKoZIhvcNAQELBQADggEBAJ0GvcF2MOw3XeUzcea10KIrQj85UEiu zpsdOwVYerh86lDlpOsICvgeIOJL2UuTzQ2kjvyOUlYCfvZr+3TrQHBGNyK+9sn7 D2TFe3aHIQgF1RA6OjjxCWh2+wCypQnuzN1MmKCNPVyu8fvxt+y4GLXfIExBHDy9 ElhVMw4DkjFtmsatOtJXtn9qhYEZe+v96cZfSWDl/41nHXVI98c3OJoq1u+qIay0 75/9e3V5SGXa8oywGu3WeMQXLzzn/GyEgzDYgAeW1oXYK/M06FqhLnrRZu7Gb4Sz iiAfUif9ZY2Y7ABxzI8l7WUMEDfIRt5Lx9UoVAoxVAbXM3XQBpWOsHM= -----END CERTIFICATE-----Generated at Fri Aug 1 18:35:37 2025 by rpki-client