$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa File: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (raw, json) Hash identifier: CaEKHRoKKS0xih9+MI5NnGo2p0uXvy+Gde+CICjV6ME= Subject key identifier: 32:5E:65:33:E2:20:8F:F4:F6:C4:BC:59:F3:BF:B0:22:1E:4F:CD:9E Certificate issuer: /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Certificate serial: 019F Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa Signing time: Tue 09 Sep 2025 03:39:38 +0000 ROA not before: Tue 09 Sep 2025 03:39:38 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151343 IP address blocks: 103.204.30.0/23 maxlen: 24 2001:df2:75c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91 Validity Not Before: Sep 9 03:39:38 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68bfa179-9882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:dd:6c:cb:2d:5d:ce:83:c2:ea:39:3c:29: c9:dd:1e:e6:4a:3d:a3:86:10:72:2b:cc:b8:4e:8f: 9c:74:d2:f8:b0:51:e7:e3:06:b6:b8:7f:69:08:69: 5f:ff:72:92:75:0b:82:cd:b8:a6:91:bc:90:99:c6: c3:34:0a:3e:e1:6a:9d:01:ff:68:be:fd:23:2e:8b: 22:d7:03:f5:3f:dc:88:11:e7:50:48:59:24:09:1d: b7:32:89:cb:f6:38:2e:99:6a:dd:6c:07:e7:f1:9e: 45:b9:48:ec:33:56:28:0a:3e:c5:71:a5:b9:c0:46: 97:78:e1:7a:ce:8a:50:15:81:2b:ca:03:3e:2e:25: da:85:f8:bb:a9:20:1c:2d:61:67:de:f0:8e:24:0c: 98:8d:5f:fa:37:47:24:32:cc:19:81:2e:ee:3f:d1: 1e:e9:15:76:8c:4d:4b:8f:62:39:d5:5a:c4:56:af: 94:3b:9f:85:74:b2:13:4f:03:61:f5:eb:3e:5a:4c: 55:d9:5b:17:4b:37:f7:7f:d2:67:1e:d2:8e:31:f8: 08:f1:54:5e:01:6b:72:8c:9d:a8:3e:95:5a:89:1a: 33:31:b7:ee:07:fe:a7:0c:33:db:15:82:65:3d:8d: c0:07:f5:19:7a:8b:33:07:8d:fa:f9:4a:f0:45:cd: eb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5E:65:33:E2:20:8F:F4:F6:C4:BC:59:F3:BF:B0:22:1E:4F:CD:9E X509v3 Authority Key Identifier: keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.30.0/23 IPv6: 2001:df2:75c0::/48 Signature Algorithm: sha256WithRSAEncryption 98:ed:b7:3c:92:95:0c:ed:5f:37:6d:82:db:25:7f:2f:7f:c9: 43:16:e2:b0:6c:91:bd:f1:35:de:c7:0d:8c:27:5a:b3:44:65: 19:60:04:54:f6:e7:59:a2:34:6b:19:0f:29:5e:1b:01:7e:58: 66:63:25:e4:5a:7f:4d:b5:bb:c9:55:a4:45:c8:fa:f5:e7:ec: c2:5e:80:bc:e2:97:07:99:2d:bf:53:68:74:5f:03:88:de:9b: 75:ff:b6:27:63:7d:1f:48:9d:ff:9d:8f:7f:cf:05:20:04:34: fe:12:87:5a:4c:f0:05:c2:c0:c4:95:47:b3:f4:fc:8a:a8:e0: cf:c2:c2:85:c7:1d:37:b8:7c:cf:73:a6:78:ae:f3:a1:c1:89: 07:93:dd:25:29:dc:f1:0b:73:29:00:ce:83:c3:c6:53:d7:51: 63:1f:b7:4a:6b:4c:4c:2d:6f:1c:5b:d7:36:49:fa:58:d6:42: 0e:97:03:0b:a2:49:d8:01:65:10:90:f8:f3:8a:ef:b9:93:13: 8b:1e:7d:0d:a7:f8:2e:61:05:a1:3f:4c:07:28:e2:b1:7b:c2: 96:55:51:37:72:0d:32:26:f1:ee:f0:83:d4:af:eb:82:45:43: ba:fe:08:f8:b1:59:d6:9e:77:89:05:57:71:c5:d6:27:23:a1: 1a:03:92:23 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw NkRGNDdFOTEwHhcNMjUwOTA5MDMzOTM4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJmYTE3OS05ODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYPdbMstXc6Dwuo5PCnJ3R7mSj2jhhByK8y4To+cdNL4sFHn4wa2uH9pCGlf /3KSdQuCzbimkbyQmcbDNAo+4WqdAf9ovv0jLosi1wP1P9yIEedQSFkkCR23MonL 9jgumWrdbAfn8Z5FuUjsM1YoCj7FcaW5wEaXeOF6zopQFYErygM+LiXahfi7qSAc LWFn3vCOJAyYjV/6N0ckMswZgS7uP9Ee6RV2jE1Lj2I51VrEVq+UO5+FdLITTwNh 9es+WkxV2VsXSzf3f9JnHtKOMfgI8VReAWtyjJ2oPpVaiRozMbfuB/6nDDPbFYJl PY3AB/UZeoszB436+UrwRc3rRwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDJeZTPi II/09sS8WfO/sCIeT82eMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2 MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjI5NjkvMERCMzQ0MzIyNjIxMTFFRUE0REVFNTRGQzRGOUFFMDIvQTdCMDE1Q0VG MURDMTFFRUE1NzhDMjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnzB4wDwQCAAIwCQMHACABDfJ1wDANBgkqhkiG9w0BAQsF AAOCAQEAmO23PJKVDO1fN22C2yV/L3/JQxbisGyRvfE13scNjCdas0RlGWAEVPbn WaI0axkPKV4bAX5YZmMl5Fp/TbW7yVWkRcj69efswl6AvOKXB5ktv1NodF8DiN6b df+2J2N9H0id/52Pf88FIAQ0/hKHWkzwBcLAxJVHs/T8iqjgz8LChccdN7h8z3Om eK7zocGJB5PdJSnc8QtzKQDOg8PGU9dRYx+3SmtMTC1vHFvXNkn6WNZCDpcDC6JJ 2AFlEJD484rvuZMTix59Daf4LmEFoT9MByjisXvCllVRN3INMibx7vCD1K/rgkVD uv4I+LFZ1p53iQVXccXWJyOhGgOSIw== -----END CERTIFICATE-----Generated at Fri Sep 19 15:15:23 2025 by rpki-client