$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa File: CD665F4E0AA611EE84B0053DC4F9AE02.roa (raw, json) Hash identifier: Xe5R5MOlm4gwXbVja2Q4tYsbuWQrcSRJ+5R+3dF8PsM= Subject key identifier: EC:0F:32:0C:DA:CC:FE:69:BE:63:FF:92:EE:C0:BB:68:5B:FF:25:09 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 0558 Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa Signing time: Fri 19 Sep 2025 00:06:00 +0000 ROA not before: Fri 19 Sep 2025 00:06:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.172.141.0/24 maxlen: 24 2407:d4c0:1000::/40 maxlen: 40 2407:d4c0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Sep 19 00:06:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68cc9e68-6801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c5:2f:62:1e:c7:34:a3:17:07:a2:f7:6f:1a: b0:6e:4b:27:45:22:e1:f6:06:4b:77:eb:a5:7b:eb: 47:2c:bd:ac:cb:bb:a2:9a:9d:a8:0a:11:41:86:ee: 03:a2:b9:03:e0:ec:5e:ec:ee:67:8e:db:9d:07:c7: aa:96:c2:5e:7f:80:5a:73:43:01:c3:a8:89:81:ec: 27:e3:39:4a:04:dc:57:dc:df:55:77:12:83:86:41: 4c:82:a0:2c:46:1a:9e:05:ea:33:f2:3f:9a:9a:05: e3:d2:4e:2f:4a:5f:01:e2:52:08:64:6d:63:b4:fe: 53:46:8d:b3:ab:68:f3:8a:b4:bf:51:71:19:67:dc: 1b:f4:e0:13:d2:ae:f5:48:51:fe:88:a3:1c:5a:62: 80:b8:74:7b:b0:46:53:43:01:73:e2:91:db:08:75: 8e:d4:f8:3c:45:f8:9d:b8:1c:09:13:13:d9:49:77: 8d:83:b1:2b:d8:97:ee:ca:1c:62:8b:1e:ce:7b:05: a2:b4:b0:49:b9:75:98:4e:fd:9a:87:31:ba:bc:8c: 2c:1b:06:ef:8b:ff:10:1f:17:09:a8:6b:8b:39:ee: 01:59:70:14:66:85:31:cf:8b:e7:ca:e3:88:ca:53: 4e:ea:58:e1:5f:5c:a9:3d:af:ed:69:18:ea:3e:8a: 75:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0F:32:0C:DA:CC:FE:69:BE:63:FF:92:EE:C0:BB:68:5B:FF:25:09 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/CD665F4E0AA611EE84B0053DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.141.0/24 IPv6: 2407:d4c0:1000::/40 Signature Algorithm: sha256WithRSAEncryption 47:e9:4f:4d:7e:8d:fb:15:08:46:16:a3:87:27:cc:06:4a:a0: 3e:eb:af:09:9a:93:14:8a:88:32:4b:18:3a:ca:9d:33:a2:82: 33:4b:de:5a:d9:3f:d4:d8:8b:ff:86:6f:62:00:84:0a:d5:fc: 04:38:ea:e5:e6:42:41:3c:95:3a:6d:02:de:a7:6c:96:e2:ae: 16:73:dc:d6:b8:e0:68:e6:3c:cb:f4:b6:12:e6:ad:c4:3a:e9: 9e:77:67:9c:a4:c5:e1:d9:84:c8:78:0a:d0:04:b2:f4:3b:00: ef:a0:1a:b2:14:36:e2:44:0c:3d:4f:4d:65:9a:90:bf:ad:f7: 2e:ca:8d:44:e4:41:17:25:a1:3c:19:bd:04:ad:fb:ae:e9:dd: a2:31:23:43:74:f8:d2:73:c3:77:f8:78:fe:1b:19:89:1a:8c: cf:93:93:e7:1e:59:d3:b5:91:36:31:77:17:46:c1:a4:89:2a: 13:65:97:54:f2:91:76:9d:09:21:a2:3e:62:74:e3:d6:18:70: 28:ad:b2:67:a4:99:0b:47:ad:ac:4b:41:d0:a8:8c:bb:dd:9d: e2:92:2a:25:41:b6:5b:7d:3c:10:c2:1f:a5:fa:0f:71:04:44: 4a:dd:86:6c:55:38:53:a0:8c:04:c9:4c:fa:51:cd:69:38:5a: 80:60:59:13 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUwOTE5MDAwNjAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNjOWU2OC02ODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusUvYh7HNKMXB6L3bxqwbksnRSLh9gZLd+ule+tHLL2sy7uimp2oChFBhu4D orkD4Oxe7O5njtudB8eqlsJef4Bac0MBw6iJgewn4zlKBNxX3N9VdxKDhkFMgqAs RhqeBeoz8j+amgXj0k4vSl8B4lIIZG1jtP5TRo2zq2jzirS/UXEZZ9wb9OAT0q71 SFH+iKMcWmKAuHR7sEZTQwFz4pHbCHWO1Pg8RfiduBwJExPZSXeNg7Er2Jfuyhxi ix7OewWitLBJuXWYTv2ahzG6vIwsGwbvi/8QHxcJqGuLOe4BWXAUZoUxz4vnyuOI ylNO6ljhX1ypPa/taRjqPop1ZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOwPMgza zP5pvmP/ku7Au2hb/yUJMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDMTUvQUM5QzZCNTAwQTQ0MTFFQzk0Nzk3RTUzQzRGOUFFMDIvQ0Q2NjVGNEUw QUE2MTFFRTg0QjAwNTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBABnrI0wDgQCAAIwCAMGACQH1MAQMA0GCSqGSIb3DQEBCwUA A4IBAQBH6U9Nfo37FQhGFqOHJ8wGSqA+668JmpMUiogySxg6yp0zooIzS95a2T/U 2Iv/hm9iAIQK1fwEOOrl5kJBPJU6bQLep2yW4q4Wc9zWuOBo5jzL9LYS5q3EOume d2ecpMXh2YTIeArQBLL0OwDvoBqyFDbiRAw9T01lmpC/rfcuyo1E5EEXJaE8Gb0E rfuu6d2iMSNDdPjSc8N3+Hj+GxmJGozPk5PnHlnTtZE2MXcXRsGkiSoTZZdU8pF2 nQkhoj5idOPWGHAorbJnpJkLR62sS0HQqIy73Z3ikiolQbZbfTwQwh+l+g9xBERK 3YZsVThToIwEyUz6Uc1pOFqAYFkT -----END CERTIFICATE-----Generated at Mon Oct 20 19:28:06 2025 by rpki-client