$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/89E0172A2F2B11EE8CD3F880C4F9AE02.roa File: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (raw, json) Hash identifier: MWF9yk30FJElBkURG2FIcNXpLWF91bW+ys8O1aYlGaY= Subject key identifier: 00:3E:22:E6:60:11:38:A7:85:EF:AC:C4:A0:00:06:63:65:05:45:EF Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E Certificate serial: 018F Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/89E0172A2F2B11EE8CD3F880C4F9AE02.roa Signing time: Wed 03 Sep 2025 04:22:18 +0000 ROA not before: Wed 03 Sep 2025 04:22:18 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140870 IP address blocks: 103.125.156.0/24 maxlen: 24 103.125.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E Validity Not Before: Sep 3 04:22:18 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b7c27a-fa82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:4c:10:84:e8:68:43:f5:18:90:14:82:0d: a3:cb:09:58:12:d6:ab:29:7f:b6:6f:8d:0b:c2:ff: c9:bc:da:40:8d:48:cd:29:c5:0a:25:21:1c:cf:e5: 1b:f0:37:e5:c0:13:ab:34:91:64:b1:46:9e:0c:e1: 55:3d:4e:b9:63:da:24:cb:cf:b2:b4:58:2e:e4:0b: 14:e0:c5:18:d0:a8:8b:d0:b5:7e:2e:7c:80:b4:c8: ca:6a:37:31:c0:ac:ef:d9:97:20:d7:58:6b:e2:b3: b4:66:12:e3:38:f4:95:3e:6f:db:8e:56:71:11:43: 2c:02:26:89:15:15:15:09:06:13:9c:82:99:86:4c: 11:2b:9b:6a:7c:6b:91:b3:dd:9e:fb:4f:b3:08:24: 05:2e:6b:15:4a:e0:bc:8c:0f:7d:bc:b4:77:03:99: 38:e7:66:c8:1e:34:24:ac:ce:e5:79:ad:31:13:6c: 41:5e:2c:a3:5c:4f:51:0b:c5:46:ca:70:79:43:a6: 83:31:c8:62:9c:49:e2:25:c7:83:f8:10:b2:d4:2b: 55:d4:29:88:67:55:89:ab:2a:80:12:dc:0b:bd:6e: b3:03:97:59:ca:a9:90:0d:13:e1:e1:34:7f:87:8a: 03:f3:ad:e3:57:79:59:0b:66:4c:e4:2c:88:21:48: 67:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3E:22:E6:60:11:38:A7:85:EF:AC:C4:A0:00:06:63:65:05:45:EF X509v3 Authority Key Identifier: keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/89E0172A2F2B11EE8CD3F880C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.125.156.0/23 Signature Algorithm: sha256WithRSAEncryption 53:01:52:ed:1d:45:d3:42:45:eb:05:62:b4:19:34:c8:d7:cb: d1:f1:e6:44:60:c0:58:e9:a0:68:b0:e8:54:1f:c7:ee:78:63: 13:45:73:ef:d0:b3:e6:6a:df:7a:f8:06:8b:47:73:47:47:fa: a0:0a:6d:c4:07:10:df:e6:6e:52:a2:e6:52:c3:3e:af:0d:ab: 29:4f:f7:59:54:fd:1d:1e:e6:17:e7:76:c7:bc:32:85:36:75: 4d:83:d7:36:f8:cd:5f:33:d0:6b:41:86:59:cc:be:86:6c:9a: 92:37:c6:d6:60:06:78:13:c1:62:f8:bc:2a:a9:07:46:d5:bd: f9:ed:9e:ef:c6:85:3e:1c:49:55:00:71:ad:46:82:ee:e3:79: 9c:f0:3d:7a:c2:33:11:7b:0c:eb:05:bf:e6:47:a7:de:3f:63: 14:50:0c:1e:4c:27:c2:9d:66:b0:39:ab:b6:a0:88:c1:34:3c: 82:44:75:da:3c:b5:c8:a2:42:b5:5b:f9:84:62:3c:83:ee:dc: 27:57:ee:60:71:f2:f2:51:41:1d:72:f3:b8:a3:f8:1d:77:e3: 40:3b:8e:9d:a8:6f:6d:76:a1:8c:18:93:4c:ac:14:1a:57:60: b0:1e:ec:e9:48:f8:50:aa:fa:28:6a:aa:4b:0b:4b:d6:c5:16: e7:b3:ea:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI2NDQxMTAvBgNVBAUTKEY4ODFEOTREN0EyNjlBRjY4ODQ4M0E2NTFEMzczOTE4 RTc4NjUwMUUwHhcNMjUwOTAzMDQyMjE4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3YzI3YS1mYTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhdMEIToaEP1GJAUgg2jywlYEtarKX+2b40Lwv/JvNpAjUjNKcUKJSEcz+Ub 8DflwBOrNJFksUaeDOFVPU65Y9oky8+ytFgu5AsU4MUY0KiL0LV+LnyAtMjKajcx wKzv2Zcg11hr4rO0ZhLjOPSVPm/bjlZxEUMsAiaJFRUVCQYTnIKZhkwRK5tqfGuR s92e+0+zCCQFLmsVSuC8jA99vLR3A5k452bIHjQkrM7lea0xE2xBXiyjXE9RC8VG ynB5Q6aDMchinEniJceD+BCy1CtV1CmIZ1WJqyqAEtwLvW6zA5dZyqmQDRPh4TR/ h4oD863jV3lZC2ZM5CyIIUhnRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAA+IuZg ETinhe+sxKAABmNlBUXvMB8GA1UdIwQYMBaAFPiB2U16Jpr2iEg6ZR03ORjnhlAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjY0NC9CRjEzMUQzNDJE MDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12YUlTRHBsSFRjNUdPZUdV QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JSFpUWG9tbXZhSVNEcGxIVGM1R09lR1VCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODI2NDQvQkYxMzFEMzQyRDAwMTFFRTlEMTBGRjE4QzRGOUFFMDIvODlFMDE3MkEy RjJCMTFFRThDRDNGODgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnfZwwDQYJKoZIhvcNAQELBQADggEBAFMBUu0dRdNCResF YrQZNMjXy9Hx5kRgwFjpoGiw6FQfx+54YxNFc+/Qs+Zq33r4BotHc0dH+qAKbcQH EN/mblKi5lLDPq8NqylP91lU/R0e5hfndse8MoU2dU2D1zb4zV8z0GtBhlnMvoZs mpI3xtZgBngTwWL4vCqpB0bVvfntnu/GhT4cSVUAca1Ggu7jeZzwPXrCMxF7DOsF v+ZHp94/YxRQDB5MJ8KdZrA5q7agiME0PIJEddo8tciiQrVb+YRiPIPu3CdX7mBx 8vJRQR1y87ij+B1340A7jp2ob212oYwYk0ysFBpXYLAe7OlI+FCq+ihqqksLS9bF Fuez6jc= -----END CERTIFICATE-----Generated at Wed Sep 10 04:17:40 2025 by rpki-client