$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/9D08DA3E583311F0AA48A80AC4F9AE02.roa File: 9D08DA3E583311F0AA48A80AC4F9AE02.roa (raw, json) Hash identifier: AL1JMXy1RB8REJ+5zhEsJp8t8CMFdCo3SoHeLew0wC4= Subject key identifier: C6:48:C3:C3:16:44:EE:A9:77:17:11:84:8D:7A:63:E9:E7:A8:8A:8E Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Certificate serial: 04D7 Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/9D08DA3E583311F0AA48A80AC4F9AE02.roa Signing time: Thu 03 Jul 2025 17:31:55 +0000 ROA not before: Thu 03 Jul 2025 17:31:55 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 142839 IP address blocks: 103.168.154.0/24 maxlen: 24 103.168.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 00:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Validity Not Before: Jul 3 17:31:55 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6866be8b-69fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:7d:ca:c6:4b:cc:9d:c7:e5:73:3e:35:a3: d0:8e:86:a5:98:d5:08:d4:a8:4e:53:9d:e7:d1:c7: 14:47:e0:59:49:21:d8:af:bd:77:ad:80:d9:3c:e3: fe:86:13:49:76:37:4d:00:6b:5e:20:66:b9:12:c6: 17:22:09:6b:24:f6:58:e0:f9:7b:e2:a9:24:01:dd: 31:13:9f:0d:f1:09:b6:5f:7b:69:ab:c3:06:78:cf: 69:93:a3:f9:78:55:32:de:f9:66:b0:0d:ed:65:07: 6d:83:e7:62:24:6b:f0:da:a1:3e:bd:50:fc:92:21: fd:83:20:bf:ee:b2:1c:8d:8d:d7:bb:38:26:e0:57: 8b:8d:78:51:5d:62:38:5a:70:e2:63:50:ff:e0:92: 01:04:07:31:79:87:38:55:e4:b9:2f:7d:7a:93:36: 56:33:ba:b2:7d:15:7e:e3:3e:f7:3d:56:db:44:34: f6:b4:50:fa:4b:1b:aa:5b:4a:30:69:62:26:c9:d3: 50:a0:0b:6f:8e:88:fe:c6:26:3e:87:f7:d2:6b:95: 71:35:95:49:fb:b8:e9:19:b3:51:e4:cd:06:e4:5a: 97:a8:c9:a0:4c:f5:1f:8d:7b:c9:39:f0:3e:ac:52: f1:9b:04:18:61:5f:93:fe:72:a0:e2:c8:e0:8f:92: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:48:C3:C3:16:44:EE:A9:77:17:11:84:8D:7A:63:E9:E7:A8:8A:8E X509v3 Authority Key Identifier: keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/9D08DA3E583311F0AA48A80AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.154.0/23 Signature Algorithm: sha256WithRSAEncryption 83:8a:b1:b0:93:9c:48:27:51:6d:a0:3f:61:47:72:3a:bd:2d: a3:d7:a5:f4:64:33:c7:d0:e9:02:46:ba:c9:1d:00:7b:05:c7: ec:25:97:2d:e8:a9:85:64:b1:dc:ca:2a:8c:b1:bd:42:a5:db: 0a:ad:d3:76:cf:09:a8:33:0a:97:0a:52:34:d6:6a:27:36:30: bc:f2:e7:44:3c:ad:c1:51:74:15:33:d2:d8:bd:c1:cc:35:e5: aa:7d:80:8a:c2:69:94:f8:e1:21:d8:b2:22:cb:16:5d:54:e8: fc:a8:38:30:d7:c5:5b:10:56:ec:37:fd:76:92:09:65:f7:13: f9:7b:fc:fa:74:e6:c1:fd:9b:d7:68:9c:41:07:b4:91:5d:f0: 50:14:e6:3a:2e:9d:cb:cb:c7:cc:74:27:09:61:c4:d1:fd:a5: e2:1d:40:78:eb:05:8e:ef:8a:c9:75:42:09:ab:cf:5b:b9:21: 7e:f3:b0:5c:00:e6:a7:df:6c:b4:43:b0:8f:49:8c:20:6b:4c: bf:24:9a:74:01:88:77:86:0f:0a:76:f1:90:c5:75:c8:fc:c9: 45:fd:37:0c:d5:2b:7f:6c:0e:3b:93:d3:a0:e6:4e:18:90:9c: 4a:2e:f1:03:32:f8:f1:92:16:97:56:f3:77:11:ab:b3:2a:16: b6:55:54:b0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5 MkQ0REZCNzcwHhcNMjUwNzAzMTczMTU1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY2YmU4Yi02OWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRl9ysZLzJ3H5XM+NaPQjoalmNUI1KhOU53n0ccUR+BZSSHYr713rYDZPOP+ hhNJdjdNAGteIGa5EsYXIglrJPZY4Pl74qkkAd0xE58N8Qm2X3tpq8MGeM9pk6P5 eFUy3vlmsA3tZQdtg+diJGvw2qE+vVD8kiH9gyC/7rIcjY3Xuzgm4FeLjXhRXWI4 WnDiY1D/4JIBBAcxeYc4VeS5L316kzZWM7qyfRV+4z73PVbbRDT2tFD6SxuqW0ow aWImydNQoAtvjoj+xiY+h/fSa5VxNZVJ+7jpGbNR5M0G5FqXqMmgTPUfjXvJOfA+ rFLxmwQYYV+T/nKg4sjgj5KNrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMZIw8MW RO6pdxcRhI16Y+nnqIqOMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvOUQwOERBM0U1 ODMzMTFGMEFBNDhBODBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnqJowDQYJKoZIhvcNAQELBQADggEBAIOKsbCTnEgnUW2g P2FHcjq9LaPXpfRkM8fQ6QJGuskdAHsFx+wlly3oqYVksdzKKoyxvUKl2wqt03bP CagzCpcKUjTWaic2MLzy50Q8rcFRdBUz0ti9wcw15ap9gIrCaZT44SHYsiLLFl1U 6PyoODDXxVsQVuw3/XaSCWX3E/l7/Pp05sH9m9donEEHtJFd8FAU5jouncvLx8x0 JwlhxNH9peIdQHjrBY7visl1Qgmrz1u5IX7zsFwA5qffbLRDsI9JjCBrTL8kmnQB iHeGDwp28ZDFdcj8yUX9NwzVK39sDjuT06DmThiQnEou8QMy+PGSFpdW83cRq7Mq FrZVVLA= -----END CERTIFICATE-----Generated at Wed Jul 23 12:18:04 2025 by rpki-client