$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7F444842C3A411ED8EFA6F13C4F9AE02.roa File: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (raw, json) Hash identifier: 8uWfW9Bx2UJleM0TwlNLkikjSTgRwN2eIHzYdV+mzGQ= Subject key identifier: 92:95:DB:55:C8:9A:20:2C:74:64:FE:C6:1D:15:C8:D9:94:D2:10:F8 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 143C Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7F444842C3A411ED8EFA6F13C4F9AE02.roa Signing time: Wed 02 Jul 2025 17:25:33 +0000 ROA not before: Wed 02 Jul 2025 17:25:33 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55933 IP address blocks: 103.106.188.0/22 maxlen: 24 103.116.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5180 (0x143c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jul 2 17:25:33 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68656b8d-9219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:04:41:7d:ab:dc:26:8f:88:09:0d:81:62: e8:9f:77:94:6a:cf:9b:37:a5:53:69:15:9b:14:e1: d6:61:6e:15:6c:fe:9d:b7:8f:4b:f4:c1:6d:76:7d: 05:e7:f4:07:b5:6f:09:52:7b:b1:6c:83:fc:e4:47: 8f:a9:5f:16:74:ec:c7:76:57:b0:1b:3b:ff:48:66: 80:73:80:51:a8:04:50:34:c7:6e:77:a2:00:0d:f6: f5:c0:40:6a:d7:67:2b:86:5a:19:27:96:ce:17:69: 2f:c9:54:f6:2c:f2:b0:19:d7:15:05:00:5f:93:5f: 48:cf:83:62:17:12:5a:33:a1:e3:5c:c2:03:2e:e1: eb:ae:07:ab:ed:40:ba:b0:6d:05:3a:69:49:e5:4b: 55:6e:9a:cc:65:11:1a:81:95:c3:7e:2e:50:27:f9: e0:52:06:39:35:a8:a4:16:9c:cf:dc:18:d5:43:05: 0a:9a:20:00:0b:75:cf:7c:39:62:16:96:29:39:76: 20:de:f4:8b:92:f1:24:e6:71:42:9f:23:3f:45:e3: 25:c5:6c:2f:f2:ed:37:d7:61:8e:c9:1b:39:28:e7: e5:24:46:15:ff:4a:9f:db:54:ad:21:a8:d6:f6:f9: 24:28:4f:df:3e:49:75:fb:bb:8f:8f:de:e6:7e:69: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:95:DB:55:C8:9A:20:2C:74:64:FE:C6:1D:15:C8:D9:94:D2:10:F8 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/7F444842C3A411ED8EFA6F13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.188.0/22 103.116.244.0/22 Signature Algorithm: sha256WithRSAEncryption c2:0e:b2:ab:bc:69:cb:38:14:d4:9f:3f:9a:dd:0c:45:97:dc: a4:73:8d:ea:75:c4:bd:49:2a:f2:b1:c0:31:da:ac:65:a9:86: bd:30:8e:10:1f:8f:b0:9c:71:1c:75:35:ea:5c:7e:77:44:b6: 88:0c:4d:16:fd:5b:48:df:8f:35:f5:4c:9a:3f:b3:12:54:24: 2c:0c:34:6a:56:bd:5e:14:75:ae:1a:ce:d3:fa:fe:dd:d2:02: 35:9c:e6:b8:27:45:ec:13:11:bc:4b:59:92:65:10:6c:0c:26: e1:66:71:42:49:2e:3f:42:fc:37:26:20:4b:53:ea:74:4b:c0: 9f:a2:f2:be:0f:6d:dd:63:7a:10:ec:e9:46:87:1b:76:68:04: 9f:6f:7f:bb:65:ca:38:39:c4:aa:90:b8:40:62:51:0b:f6:a4: db:f1:7e:38:cb:f0:d9:1d:85:a5:da:9b:20:2e:24:24:e1:e7: 8e:59:bf:08:a7:58:44:be:1b:86:ba:c3:f1:59:ec:3a:24:3f: ac:b4:29:6c:68:46:fa:55:fb:59:a8:e6:7e:06:a2:16:c5:58: fa:f0:64:0f:86:4a:35:a9:95:6f:e5:e1:03:55:e6:9a:28:82: 6a:61:1a:76:d9:cf:6c:83:bc:66:f8:bf:9c:53:e6:a2:fe:76: 34:d9:a0:a7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICFDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNzAyMTcyNTMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1NmI4ZC05MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsowEQX2r3CaPiAkNgWLon3eUas+bN6VTaRWbFOHWYW4VbP6dt49L9MFtdn0F 5/QHtW8JUnuxbIP85EePqV8WdOzHdlewGzv/SGaAc4BRqARQNMdud6IADfb1wEBq 12crhloZJ5bOF2kvyVT2LPKwGdcVBQBfk19Iz4NiFxJaM6HjXMIDLuHrrger7UC6 sG0FOmlJ5UtVbprMZREagZXDfi5QJ/ngUgY5NaikFpzP3BjVQwUKmiAAC3XPfDli FpYpOXYg3vSLkvEk5nFCnyM/ReMlxWwv8u0312GOyRs5KOflJEYV/0qf21StIajW 9vkkKE/fPkl1+7uPj97mfml4sQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJKV21XI miAsdGT+xh0VyNmU0hD4MB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvN0Y0NDQ4NDJD M0E0MTFFRDhFRkE2RjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnarwDBAJndPQwDQYJKoZIhvcNAQELBQADggEBAMIOsqu8 acs4FNSfP5rdDEWX3KRzjep1xL1JKvKxwDHarGWphr0wjhAfj7CccRx1NepcfndE togMTRb9W0jfjzX1TJo/sxJUJCwMNGpWvV4Uda4aztP6/t3SAjWc5rgnRewTEbxL WZJlEGwMJuFmcUJJLj9C/DcmIEtT6nRLwJ+i8r4Pbd1jehDs6UaHG3ZoBJ9vf7tl yjg5xKqQuEBiUQv2pNvxfjjL8NkdhaXamyAuJCTh545ZvwinWES+G4a6w/FZ7Dok P6y0KWxoRvpV+1mo5n4GohbFWPrwZA+GSjWplW/l4QNV5poogmphGnbZz2yDvGb4 v5xT5qL+djTZoKc= -----END CERTIFICATE-----Generated at Sat Oct 25 11:54:41 2025 by rpki-client