$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/4E2825FA45FF11F0A3585B3BC4F9AE02.roa File: 4E2825FA45FF11F0A3585B3BC4F9AE02.roa (raw, json) Hash identifier: ePE7UqygVR9VrBMPvO9lUd7H8J2FFLep0RIJNMrWUnk= Subject key identifier: D2:3F:63:68:8F:87:CF:88:60:63:50:A0:FA:84:EF:1B:82:98:94:34 Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Certificate serial: 02BF Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/4E2825FA45FF11F0A3585B3BC4F9AE02.roa Signing time: Fri 29 Aug 2025 02:19:22 +0000 ROA not before: Fri 29 Aug 2025 02:19:22 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 212238 IP address blocks: 103.69.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Validity Not Before: Aug 29 02:19:22 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b10e29-2641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:cd:7a:da:e8:8b:1c:13:e2:16:91:08:3a: e5:10:3c:5e:c5:16:08:0d:1e:52:80:d9:95:c5:c6: 28:4a:96:c8:65:5c:d9:dd:a9:5c:98:d4:d6:6f:72: 1b:6c:02:0b:9d:be:6c:c1:34:ad:d7:24:9f:56:32: 0b:ea:8c:8c:ec:21:5a:ee:67:68:d9:25:7b:1f:7f: c4:70:d8:f1:ff:13:8d:f8:b7:29:89:06:de:54:f3: ed:ba:c3:a4:1b:78:be:f6:4a:0e:83:c5:c4:d3:eb: b9:25:88:ee:44:8f:51:dd:3d:44:1f:5d:bc:49:7a: b3:45:2a:5e:de:27:ba:fb:7b:4a:e0:69:2d:c3:4a: c2:40:fa:bb:ba:7c:8c:cb:f7:de:2a:c7:15:64:a2: b9:26:6c:e3:52:f7:82:f9:3a:de:4d:42:bc:79:cc: 29:9f:df:55:f3:93:65:92:32:52:6a:39:f0:a3:c7: ba:89:f2:e1:51:75:cb:9e:94:6b:aa:58:ab:ec:60: 08:d5:12:42:52:ea:81:e1:01:0e:96:25:e5:7f:57: 18:f5:b9:78:66:c1:38:9b:74:b5:7e:5a:57:29:f1: 10:99:50:c0:c9:b7:2f:97:dc:ca:11:90:85:9b:bf: 24:5d:4e:e2:86:1e:32:88:a6:7e:f1:a7:f9:01:ac: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3F:63:68:8F:87:CF:88:60:63:50:A0:FA:84:EF:1B:82:98:94:34 X509v3 Authority Key Identifier: keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/4E2825FA45FF11F0A3585B3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.69.3.0/24 Signature Algorithm: sha256WithRSAEncryption 03:ce:aa:c3:7e:4f:2a:1f:8e:e4:f0:cc:06:db:3f:44:3a:db: d2:72:55:f4:b9:ae:20:8c:40:6a:15:cd:ad:43:89:41:7f:2b: 78:49:38:ac:5d:a2:68:ce:72:3d:3a:54:bd:6b:f1:fa:4c:2a: 80:71:e1:8f:03:4d:b8:bf:e7:26:53:0c:f2:a4:14:2e:d2:d0: 6f:a1:07:f6:ed:a3:9a:2d:8e:3e:c3:0a:f4:d8:46:e0:64:9b: a8:e2:ea:99:1f:c1:98:60:3a:eb:50:7a:f1:76:6d:da:bb:b6: 99:a8:4b:99:ac:48:3c:6d:58:94:fc:57:c8:98:7b:a4:86:31: 93:40:ea:f3:9e:95:2a:30:bc:3c:93:c9:12:2d:5a:ae:ca:1b: 59:97:d6:a7:eb:ef:4c:ed:39:86:c0:95:5c:2c:e1:b8:11:e8: e4:80:60:13:18:6d:7c:b5:42:61:dc:08:18:2d:be:7b:06:f3: 80:ed:a7:1c:a2:c0:eb:d7:0e:82:e7:62:87:ad:8b:fd:e3:6c: 14:e1:0f:d0:e5:12:e1:d1:2b:b6:50:76:6b:aa:e5:d8:f7:12: 2b:b1:2f:ea:e0:02:82:65:cf:aa:d8:0e:60:46:03:cb:72:2c: 2c:01:c9:11:e3:38:fa:57:cd:2f:6b:8c:76:91:98:fb:f1:a2: 26:de:7c:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdGN0UxMTAvBgNVBAUTKDFBNjgyOTQxRjg3ODlDNENFQTNDQzMzQjYzNzNFNDk0 NzYzMEJDODQwHhcNMjUwODI5MDIxOTIyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIxMGUyOS0yNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtt/NetroixwT4haRCDrlEDxexRYIDR5SgNmVxcYoSpbIZVzZ3alcmNTWb3Ib bAILnb5swTSt1ySfVjIL6oyM7CFa7mdo2SV7H3/EcNjx/xON+LcpiQbeVPPtusOk G3i+9koOg8XE0+u5JYjuRI9R3T1EH128SXqzRSpe3ie6+3tK4Gktw0rCQPq7unyM y/feKscVZKK5JmzjUveC+TreTUK8ecwpn99V85NlkjJSajnwo8e6ifLhUXXLnpRr qlir7GAI1RJCUuqB4QEOliXlf1cY9bl4ZsE4m3S1flpXKfEQmVDAybcvl9zKEZCF m78kXU7ihh4yiKZ+8af5AayKIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNI/Y2iP h8+IYGNQoPqE7xuCmJQ0MB8GA1UdIwQYMBaAFBpoKUH4eJxM6jzDO2Nz5JR2MLyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Y3RS9DNzYzQjVFMDEw RTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5FenFQTU03WTNQa2xIWXd2 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtZ3BRZmg0bkV6cVBNTTdZM1BrbEhZd3ZJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdGN0UvQzc2M0I1RTAxMEU5MTFFRDg1Q0NFQTM3QzRGOUFFMDIvNEUyODI1RkE0 NUZGMTFGMEEzNTg1QjNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnRQMwDQYJKoZIhvcNAQELBQADggEBAAPOqsN+TyofjuTw zAbbP0Q629JyVfS5riCMQGoVza1DiUF/K3hJOKxdomjOcj06VL1r8fpMKoBx4Y8D Tbi/5yZTDPKkFC7S0G+hB/bto5otjj7DCvTYRuBkm6ji6pkfwZhgOutQevF2bdq7 tpmoS5msSDxtWJT8V8iYe6SGMZNA6vOelSowvDyTyRItWq7KG1mX1qfr70ztOYbA lVws4bgR6OSAYBMYbXy1QmHcCBgtvnsG84DtpxyiwOvXDoLnYoeti/3jbBThD9Dl EuHRK7ZQdmuq5dj3EiuxL+rgAoJlz6rYDmBGA8tyLCwByRHjOPpXzS9rjHaRmPvx oibefIM= -----END CERTIFICATE-----Generated at Fri Sep 5 07:56:36 2025 by rpki-client