$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A9545AE6D1011EFA13D6E2BC4F9AE02.roa File: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (raw, json) Hash identifier: RwcRY83ScxlbqM04nHpwXB0Y4y38xjFyFzwqEWYpGkc= Subject key identifier: 0C:33:F2:92:B3:49:A0:C6:BD:84:62:77:96:EC:DA:89:E0:C4:74:6D Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Certificate serial: 04F9 Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A9545AE6D1011EFA13D6E2BC4F9AE02.roa Signing time: Thu 21 Aug 2025 00:05:59 +0000 ROA not before: Thu 21 Aug 2025 00:05:59 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55933 IP address blocks: 103.67.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Validity Not Before: Aug 21 00:05:59 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a662e7-90e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:5c:77:41:bc:13:b6:50:0a:61:42:d4:b1: d7:aa:e7:38:0a:8d:7c:cf:4c:4a:46:47:b5:1c:a4: cd:dd:fd:ef:8c:6d:a2:cc:96:73:87:77:c3:fb:b3: c2:08:6a:9c:09:5f:b1:4f:36:a7:bb:81:40:85:be: 43:cb:c4:b8:2e:11:8a:48:da:18:17:35:50:46:9e: be:9b:6c:7d:fb:12:48:7d:08:01:75:14:d2:ce:22: 8b:5b:57:4c:fa:7d:94:5e:31:01:28:d8:5f:9e:93: 55:2f:01:2f:da:74:95:c1:18:c0:66:06:b2:e5:88: e8:c2:24:5a:88:47:99:8d:f2:34:d6:fb:b1:22:e5: 92:d2:f2:03:57:f7:b7:db:36:6a:f4:3c:bd:61:59: 98:2e:5b:f6:7f:8f:8a:6e:1a:28:51:a8:d3:2d:15: c9:24:86:bf:49:a9:7c:0f:3b:ba:4b:7d:61:86:62: 2b:b8:f2:f3:01:5a:88:30:65:de:3e:32:2e:e2:79: 1a:f6:ab:6b:97:96:cb:52:3c:00:be:a5:2c:c6:32: ae:01:c3:66:39:cf:a4:ae:db:a8:8a:d2:3b:64:29: c9:31:3b:5f:e3:f3:cb:b7:fa:32:00:e8:f5:dc:d0: 4f:07:ac:fa:9c:ba:c1:7a:38:1d:a8:21:ac:78:13: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:33:F2:92:B3:49:A0:C6:BD:84:62:77:96:EC:DA:89:E0:C4:74:6D X509v3 Authority Key Identifier: keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/8A9545AE6D1011EFA13D6E2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.252.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:ae:da:1b:5d:6c:3e:51:64:f9:4a:d6:74:a2:cd:7b:f6:9b: 1f:b1:90:61:3d:00:be:d4:d5:82:c1:ac:bd:be:b6:18:80:a2: 3d:b3:5b:23:72:94:ff:ee:ca:e4:7c:5f:77:65:3a:1f:04:b1: 52:61:dc:f2:35:07:13:39:a5:07:b5:ea:52:30:af:e2:b7:f8: 2d:e7:cf:46:a5:1c:40:b1:86:e0:f4:d1:47:21:7f:24:60:18: 15:ab:25:bf:ae:d4:d3:8c:b2:fa:40:56:c2:48:3f:d1:67:aa: 57:fe:c1:74:45:f9:3c:d7:b2:f8:2b:0c:bc:ca:ac:18:e9:d9: 99:5e:10:1b:7c:32:58:63:20:69:20:e5:e7:bc:d2:81:c2:70: 16:f6:70:f1:bf:af:47:64:16:63:d9:c0:30:27:bd:93:be:81: c6:0d:ae:d2:e9:83:ca:f8:6a:7d:a1:61:e0:a0:54:12:40:08: d9:cb:34:2d:40:f0:20:28:69:f0:67:5c:d8:23:f9:b8:14:27: c4:61:bf:44:bf:da:7d:50:64:09:0a:20:16:9b:a4:d9:ca:0b: 23:48:cf:78:87:30:0f:e6:f0:7d:5a:fc:78:f5:58:f5:51:e9: 9c:2a:33:3b:aa:03:53:56:fb:9b:40:56:00:af:ca:ad:76:95: b2:a1:30:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5 N0U2NUNBMTkwHhcNMjUwODIxMDAwNTU5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2NjJlNy05MGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuulcd0G8E7ZQCmFC1LHXquc4Co18z0xKRke1HKTN3f3vjG2izJZzh3fD+7PC CGqcCV+xTzanu4FAhb5Dy8S4LhGKSNoYFzVQRp6+m2x9+xJIfQgBdRTSziKLW1dM +n2UXjEBKNhfnpNVLwEv2nSVwRjAZgay5YjowiRaiEeZjfI01vuxIuWS0vIDV/e3 2zZq9Dy9YVmYLlv2f4+KbhooUajTLRXJJIa/Sal8Dzu6S31hhmIruPLzAVqIMGXe PjIu4nka9qtrl5bLUjwAvqUsxjKuAcNmOc+krtuoitI7ZCnJMTtf4/PLt/oyAOj1 3NBPB6z6nLrBejgdqCGseBN12wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAwz8pKz SaDGvYRid5bs2ongxHRtMB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1 Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjNCRUYvOEFBRkUyOEMyNUNGMTFFQzhCNEE5OTJFQzRGOUFFMDIvOEE5NTQ1QUU2 RDEwMTFFRkExM0Q2RTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnQ/wwDQYJKoZIhvcNAQELBQADggEBAAyu2htdbD5RZPlK 1nSizXv2mx+xkGE9AL7U1YLBrL2+thiAoj2zWyNylP/uyuR8X3dlOh8EsVJh3PI1 BxM5pQe16lIwr+K3+C3nz0alHECxhuD00UchfyRgGBWrJb+u1NOMsvpAVsJIP9Fn qlf+wXRF+TzXsvgrDLzKrBjp2ZleEBt8MlhjIGkg5ee80oHCcBb2cPG/r0dkFmPZ wDAnvZO+gcYNrtLpg8r4an2hYeCgVBJACNnLNC1A8CAoafBnXNgj+bgUJ8Rhv0S/ 2n1QZAkKIBabpNnKCyNIz3iHMA/m8H1a/Hj1WPVR6ZwqMzuqA1NW+5tAVgCvyq12 lbKhMO8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:29 2025 by rpki-client