$ rpki-client -vvf rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa File: 8642C6D6582111EC8035E069C4F9AE02.roa (raw, json) Hash identifier: ead1NCV24Nht+btwNu0gHtiqQ2agCNpjkODtaiNMjt4= Subject key identifier: CB:D3:C7:DA:B0:C1:47:8A:9F:5F:D5:61:2D:46:A7:94:67:88:E7:23 Certificate issuer: /CN=A9181437/serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8 Certificate serial: 04AF Authority key identifier: AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa Signing time: Wed 03 Sep 2025 00:44:56 +0000 ROA not before: Wed 03 Sep 2025 00:44:56 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138997 IP address blocks: 103.171.176.0/23 maxlen: 24 2407:c640::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181437, serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8 Validity Not Before: Sep 3 00:44:56 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b78f88-15af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:03:9d:76:ea:29:10:92:ff:e2:dc:7c:bc: c5:02:37:66:0e:28:8e:ff:36:6d:62:f2:11:68:fc: fa:59:ff:89:d2:70:c8:f3:78:dc:da:54:fb:f0:21: 5c:45:e0:56:08:4e:9f:c8:2f:bf:5d:33:53:a7:51: cd:21:17:60:f5:a5:e1:a4:01:fd:1f:9b:1b:eb:8b: 4b:c9:fe:53:91:ac:cb:04:dc:94:0a:a9:71:0d:ff: 56:50:1e:aa:95:73:a3:36:18:cf:94:ff:97:55:4e: a2:0f:ed:8c:9e:69:4f:29:57:a0:1a:6a:a8:72:50: 67:3c:66:dc:3f:8a:75:48:40:20:eb:6b:07:49:5b: 00:7f:e7:97:cd:fc:0b:6d:ea:50:cc:fb:19:90:e7: 0f:11:14:5f:1d:e7:36:ee:4d:41:89:62:02:bc:3f: a7:94:15:ca:5b:e7:56:b3:64:84:cd:9a:cf:4e:70: 80:be:97:98:e4:68:a8:90:e2:69:8d:e9:19:ba:de: 00:91:cf:19:e5:4d:aa:34:32:72:84:71:9a:9e:ec: f5:66:b8:40:37:2e:7d:2c:85:d3:36:1d:2c:c5:f0: 6b:79:7f:1b:31:2f:bd:67:cb:81:ed:4f:7b:20:c1: 3d:54:78:01:b4:0c:39:82:1d:cd:45:8f:40:e1:f1: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D3:C7:DA:B0:C1:47:8A:9F:5F:D5:61:2D:46:A7:94:67:88:E7:23 X509v3 Authority Key Identifier: keyid:AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/8642C6D6582111EC8035E069C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.176.0/23 IPv6: 2407:c640::/32 Signature Algorithm: sha256WithRSAEncryption d6:c4:16:f5:db:77:5e:67:7b:57:f5:25:2b:fd:9d:f0:9c:27: 7d:f2:25:da:17:0a:5c:75:ed:86:e3:ed:a0:5b:5d:44:6b:7b: 7a:c7:dc:84:6a:c1:85:b5:5a:50:3a:35:f9:64:03:9b:d1:f8: a4:f0:06:b4:17:e5:9f:e3:fd:1c:4d:cf:f5:f9:12:92:6c:59: 04:06:dd:e9:fd:a4:55:14:d0:ef:2c:a7:e0:61:71:c8:ff:69: 94:5d:4e:b0:2a:48:6c:d9:8e:42:2e:b2:c5:13:11:d3:70:9c: cb:1d:8b:eb:83:ef:d8:49:db:16:e3:b0:68:21:1b:45:f5:6a: f2:e5:ba:02:11:0d:83:6e:7b:66:3b:e3:88:99:6c:c1:da:96: 43:58:f6:30:09:53:55:8b:05:6e:de:6c:c5:4e:2c:37:37:c4: a9:af:ea:22:14:3e:a5:8b:ef:d8:21:e7:93:f7:a6:b0:5e:7f: cd:e0:9e:b6:26:9d:1e:7e:6e:2d:93:f5:c8:c0:47:fb:f3:7a: 9e:0e:d4:e9:ec:87:ad:2a:74:d7:e0:3c:48:81:c1:4f:d3:12: 03:73:61:cd:cb:6e:6f:1b:02:dd:95:9b:7b:7e:db:11:d6:ed: 91:5f:6d:fa:2e:3b:04:0f:cc:5c:b4:e5:76:7c:80:48:5f:0b: 02:68:e5:86 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0MzcxMTAvBgNVBAUTKEFGMEJFMEIyNEExMTlEM0IzRTkzRkQwQ0QzQjM0MTVB MkMwRDAxQjgwHhcNMjUwOTAzMDA0NDU2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3OGY4OC0xNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXADnXbqKRCS/+LcfLzFAjdmDiiO/zZtYvIRaPz6Wf+J0nDI83jc2lT78CFc ReBWCE6fyC+/XTNTp1HNIRdg9aXhpAH9H5sb64tLyf5TkazLBNyUCqlxDf9WUB6q lXOjNhjPlP+XVU6iD+2MnmlPKVegGmqoclBnPGbcP4p1SEAg62sHSVsAf+eXzfwL bepQzPsZkOcPERRfHec27k1BiWICvD+nlBXKW+dWs2SEzZrPTnCAvpeY5GiokOJp jekZut4Akc8Z5U2qNDJyhHGanuz1ZrhANy59LIXTNh0sxfBreX8bMS+9Z8uB7U97 IME9VHgBtAw5gh3NRY9A4fEItQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMvTx9qw wUeKn1/VYS1Gp5RniOcjMB8GA1UdIwQYMBaAFK8L4LJKEZ07PpP9DNOzQVosDQG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTQzNy9ERUIwRkJDNjQ4 OUExMUVDODFBMkQ1MTRDNEY5QUUwMi9yd3Znc2tvUm5Ucy1rXzBNMDdOQldpd05B YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3dmdza29SblRzLWtfME0wN05CV2l3TkFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODE0MzcvREVCMEZCQzY0ODlBMTFFQzgxQTJENTE0QzRGOUFFMDIvODY0MkM2RDY1 ODIxMTFFQzgwMzVFMDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnq7AwDQQCAAIwBwMFACQHxkAwDQYJKoZIhvcNAQELBQAD ggEBANbEFvXbd15ne1f1JSv9nfCcJ33yJdoXClx17Ybj7aBbXURre3rH3IRqwYW1 WlA6NflkA5vR+KTwBrQX5Z/j/RxNz/X5EpJsWQQG3en9pFUU0O8sp+Bhccj/aZRd TrAqSGzZjkIussUTEdNwnMsdi+uD79hJ2xbjsGghG0X1avLlugIRDYNue2Y744iZ bMHalkNY9jAJU1WLBW7ebMVOLDc3xKmv6iIUPqWL79gh55P3prBef83gnrYmnR5+ bi2T9cjAR/vzep4O1Onsh60qdNfgPEiBwU/TEgNzYc3Lbm8bAt2Vm3t+2xHW7ZFf bfouOwQPzFy05XZ8gEhfCwJo5YY= -----END CERTIFICATE-----Generated at Tue Sep 9 12:00:26 2025 by rpki-client