$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa File: 983A5536450611F093EC3A65C4F9AE02.roa (raw, json) Hash identifier: jXDJFKBYyl2AMr2aBeeaX3dJKta1vZTtNnECUVWIxl8= Subject key identifier: 73:B8:30:B3:8C:00:68:18:59:62:75:B1:03:48:74:64:59:78:D4:B9 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1446 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa Signing time: Wed 16 Jul 2025 18:05:19 +0000 ROA not before: Wed 16 Jul 2025 18:05:19 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 401701 IP address blocks: 103.106.188.0/22 maxlen: 24 103.116.244.0/22 maxlen: 24 116.204.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5190 (0x1446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jul 16 18:05:19 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6877e9de-27c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:09:1a:b7:78:de:df:61:4c:c9:d0:c9:49:94: 6c:f9:7f:d2:a8:76:6d:8c:fe:06:40:88:1a:c1:a1: 62:48:00:c1:2d:83:98:3a:05:70:74:19:83:0c:04: da:3e:20:87:19:59:78:f7:53:07:04:6a:41:2a:15: bc:4c:0d:96:ef:e0:f1:b8:d6:c7:4b:c6:c0:0b:02: 23:ba:bb:28:b7:cf:70:26:17:3c:66:8a:b6:df:a4: 04:8b:8e:a0:ff:24:04:9b:85:cb:f0:10:a1:49:a3: eb:a8:cb:6f:b9:d0:f4:e3:e6:22:c3:8b:07:5f:78: 0a:8a:d9:e9:bb:da:25:19:03:83:26:64:1f:7b:d8: 8e:a9:f7:18:97:fa:15:d3:b4:29:9e:69:ef:15:41: 17:ad:8d:b0:56:34:cd:22:0c:13:92:f1:45:ba:54: ca:68:d8:24:fb:68:98:cd:8d:d6:e1:1c:4c:fd:0e: c8:2c:9c:90:f1:4f:ec:29:f6:58:fc:e3:9b:35:28: 4d:77:3f:28:48:b8:be:25:51:ec:d6:35:ec:ce:f8: 7e:1d:be:27:f0:77:db:cf:37:bb:65:1b:89:85:0c: 35:8b:1e:57:b4:32:a6:55:79:f5:d7:fd:96:3f:3c: 71:85:21:4c:9c:69:b9:63:65:ee:21:81:68:00:43: 2e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B8:30:B3:8C:00:68:18:59:62:75:B1:03:48:74:64:59:78:D4:B9 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/983A5536450611F093EC3A65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.188.0/22 103.116.244.0/22 116.204.132.0/22 Signature Algorithm: sha256WithRSAEncryption 83:87:27:d6:a0:91:39:73:2e:c3:e4:11:b6:f7:e5:4a:b9:fa: ed:3d:d0:59:cb:76:ef:4c:66:d2:55:98:ad:76:28:75:d6:32: 25:31:0a:a8:7c:fb:82:72:31:b1:b5:d5:e5:c3:e0:15:f6:2f: 77:8c:87:2d:56:10:9f:2d:5c:b6:98:3d:ec:79:88:f4:5b:d0: 9f:d3:c7:e6:59:38:84:21:bc:03:0e:9a:9d:f4:76:64:a4:3e: ad:fc:dd:b4:3e:b7:30:67:38:8f:87:6c:f4:c9:87:c4:4c:76: 24:a6:74:e7:12:68:a1:51:99:95:30:c1:c7:74:fb:85:fa:18: 06:c4:fd:af:25:df:f5:eb:d2:21:a0:b5:5c:60:0d:01:32:96: 46:68:f9:5a:1d:47:4b:84:a4:62:b6:7c:f9:81:3c:7a:0f:9a: 64:0b:61:be:20:64:2c:3b:73:ea:f7:79:5b:94:f8:dd:9a:d7: a2:f0:44:53:2a:8c:e3:0d:76:8c:c0:50:87:2e:16:95:23:ec: ad:36:a9:4a:64:41:7f:c5:09:07:a5:ab:74:e7:c6:bd:b4:a1: 78:f1:8a:5e:2c:b8:00:fb:c3:66:8d:e4:0e:e0:d4:56:7f:be: 60:b6:40:f7:cc:20:28:fb:b8:de:c5:69:fe:b3:0a:aa:f6:10: ba:d6:98:ec -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICFEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNzE2MTgwNTE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3ZTlkZS0yN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAkat3je32FMydDJSZRs+X/SqHZtjP4GQIgawaFiSADBLYOYOgVwdBmDDATa PiCHGVl491MHBGpBKhW8TA2W7+DxuNbHS8bACwIjursot89wJhc8Zoq236QEi46g /yQEm4XL8BChSaPrqMtvudD04+Yiw4sHX3gKitnpu9olGQODJmQfe9iOqfcYl/oV 07QpnmnvFUEXrY2wVjTNIgwTkvFFulTKaNgk+2iYzY3W4RxM/Q7ILJyQ8U/sKfZY /OObNShNdz8oSLi+JVHs1jXszvh+Hb4n8Hfbzze7ZRuJhQw1ix5XtDKmVXn11/2W PzxxhSFMnGm5Y2XuIYFoAEMuuQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHO4MLOM AGgYWWJ1sQNIdGRZeNS5MB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvOTgzQTU1MzY0 NTA2MTFGMDkzRUMzQTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnarwDBAJndPQDBAJ0zIQwDQYJKoZIhvcNAQELBQADggEB AIOHJ9agkTlzLsPkEbb35Uq5+u090FnLdu9MZtJVmK12KHXWMiUxCqh8+4JyMbG1 1eXD4BX2L3eMhy1WEJ8tXLaYPex5iPRb0J/Tx+ZZOIQhvAMOmp30dmSkPq383bQ+ tzBnOI+HbPTJh8RMdiSmdOcSaKFRmZUwwcd0+4X6GAbE/a8l3/Xr0iGgtVxgDQEy lkZo+VodR0uEpGK2fPmBPHoPmmQLYb4gZCw7c+r3eVuU+N2a16LwRFMqjOMNdozA UIcuFpUj7K02qUpkQX/FCQelq3Tnxr20oXjxil4suAD7w2aN5A7g1FZ/vmC2QPfM ICj7uN7Faf6zCqr2ELrWmOw= -----END CERTIFICATE-----Generated at Sun Jul 20 13:41:34 2025 by rpki-client