$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/98A0F2BE450611F093EC3A65C4F9AE02.roa File: 98A0F2BE450611F093EC3A65C4F9AE02.roa (raw, json) Hash identifier: mH5FkT85wXX1fDkYIcXzDeEU3PHEwchgtocWPplcMrs= Subject key identifier: B0:44:F9:8A:F7:8F:83:08:DE:B7:22:A0:9C:FE:E0:39:CE:BE:E0:2E Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1447 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/98A0F2BE450611F093EC3A65C4F9AE02.roa Signing time: Wed 16 Jul 2025 18:05:20 +0000 ROA not before: Wed 16 Jul 2025 18:05:20 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 40779 IP address blocks: 103.106.188.0/22 maxlen: 24 103.116.244.0/22 maxlen: 24 116.204.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5191 (0x1447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jul 16 18:05:20 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6877e9e0-9add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f3:8e:53:bc:35:74:e4:86:7b:f9:3f:03:69: a0:d0:b9:33:32:c6:63:7d:e9:2a:99:2f:e4:26:5d: b4:07:17:0b:f8:71:81:55:a1:ed:83:3a:84:09:78: 71:3a:ea:16:1a:4d:e0:c6:27:89:41:45:bc:46:ee: 4b:8f:06:2d:cc:1b:72:3a:72:6e:d0:c3:63:cd:54: 55:68:1f:d7:e8:57:50:38:f0:1d:ad:d5:24:6d:5b: 3e:c5:46:f1:e9:d3:58:30:eb:14:42:5a:ed:4f:04: a1:12:80:31:04:42:fb:8f:0a:ae:e9:fd:26:a2:e3: 6c:80:32:0e:35:44:60:46:0a:43:88:83:03:ba:7e: 7d:83:78:e4:27:ba:5f:cd:85:33:55:b3:93:05:35: d0:fa:c6:3b:cb:e0:86:5c:9e:b9:e4:85:ce:ab:66: 11:25:b3:bf:16:1f:b0:33:ae:5b:68:35:b5:d9:31: df:89:27:cc:0a:0e:8d:31:fd:21:92:d2:6d:ab:68: fd:e4:2b:3d:22:07:a7:06:dd:62:06:3a:4d:f7:6a: 5e:27:37:c9:ab:a5:90:3e:bc:d9:2e:cd:9f:c3:ff: 75:63:d4:3b:8c:a4:3e:aa:e6:c8:c6:e1:d6:02:31: cb:f2:74:cf:92:cd:3d:71:4b:1a:12:a1:f8:6c:d0: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:44:F9:8A:F7:8F:83:08:DE:B7:22:A0:9C:FE:E0:39:CE:BE:E0:2E X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/98A0F2BE450611F093EC3A65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.188.0/22 103.116.244.0/22 116.204.132.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:b7:80:44:24:ea:d7:4e:ec:3d:70:a4:fa:8d:ec:f4:03:22: ab:31:5a:9a:99:1b:7f:44:39:4a:31:2b:76:13:15:00:55:f1: 87:72:c3:79:d9:87:68:e0:77:66:35:19:0a:c4:94:40:f4:bc: 09:6f:19:50:cc:62:8e:c2:5b:f2:89:f4:26:77:d1:dd:f8:70: e2:06:20:37:6f:a5:42:0a:9a:75:29:c4:57:85:04:02:11:2d: 21:c1:73:90:0e:8a:e9:1d:87:82:34:5c:c9:34:ec:20:5e:2e: 9f:33:72:df:2f:6a:cd:07:83:5d:fb:2b:ce:1d:83:5b:4b:1f: d2:e9:c1:7e:a9:1a:83:f3:c7:13:c4:0e:9c:82:66:80:97:7a: 12:e5:88:b2:64:81:af:1b:01:8b:e7:09:d5:c8:3a:63:89:19: e8:db:10:62:1f:e4:30:84:0f:59:45:95:90:49:17:d8:42:8d: ed:11:f5:fa:2f:d9:08:b7:6d:5f:5c:73:0f:2c:77:07:0d:78: ff:c0:fd:b0:10:12:66:52:ee:c1:61:e2:0a:47:e1:20:f7:d0: 6f:56:7e:79:0c:53:16:a7:0a:47:44:d7:9a:0c:3d:a1:02:c5: 9c:9d:22:91:1d:5a:05:29:e2:81:54:85:12:9a:a5:16:48:1a: e7:22:d7:0f -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICFEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNzE2MTgwNTIwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3ZTllMC05YWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/OOU7w1dOSGe/k/A2mg0LkzMsZjfekqmS/kJl20BxcL+HGBVaHtgzqECXhx OuoWGk3gxieJQUW8Ru5LjwYtzBtyOnJu0MNjzVRVaB/X6FdQOPAdrdUkbVs+xUbx 6dNYMOsUQlrtTwShEoAxBEL7jwqu6f0mouNsgDIONURgRgpDiIMDun59g3jkJ7pf zYUzVbOTBTXQ+sY7y+CGXJ655IXOq2YRJbO/Fh+wM65baDW12THfiSfMCg6NMf0h ktJtq2j95Cs9IgenBt1iBjpN92peJzfJq6WQPrzZLs2fw/91Y9Q7jKQ+qubIxuHW AjHL8nTPks09cUsaEqH4bNAo5wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLBE+Yr3 j4MI3rcioJz+4DnOvuAuMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvOThBMEYyQkU0 NTA2MTFGMDkzRUMzQTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnarwDBAJndPQDBAJ0zIQwDQYJKoZIhvcNAQELBQADggEB AAu3gEQk6tdO7D1wpPqN7PQDIqsxWpqZG39EOUoxK3YTFQBV8Ydyw3nZh2jgd2Y1 GQrElED0vAlvGVDMYo7CW/KJ9CZ30d34cOIGIDdvpUIKmnUpxFeFBAIRLSHBc5AO iukdh4I0XMk07CBeLp8zct8vas0Hg137K84dg1tLH9LpwX6pGoPzxxPEDpyCZoCX ehLliLJkga8bAYvnCdXIOmOJGejbEGIf5DCED1lFlZBJF9hCje0R9fov2Qi3bV9c cw8sdwcNeP/A/bAQEmZS7sFh4gpH4SD30G9WfnkMUxanCkdE15oMPaECxZydIpEd WgUp4oFUhRKapRZIGuci1w8= -----END CERTIFICATE-----Generated at Sat Oct 25 11:54:41 2025 by rpki-client