$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/A663285A59DE11EE85CFCB12C4F9AE02.roa File: A663285A59DE11EE85CFCB12C4F9AE02.roa (raw, json) Hash identifier: X/pG7qc3+7qr+qWCl38L4oCPzOU3+0jR+niOHWQizTQ= Subject key identifier: F8:BD:4E:A6:D1:45:AE:99:8E:58:7F:AC:AF:38:DE:EA:A0:F2:6B:8F Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Certificate serial: FB Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/A663285A59DE11EE85CFCB12C4F9AE02.roa Signing time: Sat 11 Jan 2025 03:46:41 +0000 ROA not before: Sat 11 Jan 2025 03:46:41 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 132170 IP address blocks: 103.59.218.0/23 maxlen: 23 2001:df1:bb40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Validity Not Before: Jan 11 03:46:41 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6781e9a1-e36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:7a:f8:97:6b:1d:49:fe:73:24:2c:f9:f5: 9d:41:dd:34:49:f4:3f:e0:a1:43:c5:fd:d6:2b:ba: 0f:2c:8f:c5:d1:58:6d:7e:3e:70:fb:3b:57:ae:12: e1:f4:bb:15:68:2e:2a:37:c3:9b:3f:f9:5d:ec:fb: c7:7f:d5:11:2e:14:53:60:7e:69:67:4f:b4:62:b5: 3d:7c:c2:c3:80:b1:14:fe:d5:ed:ef:0f:b3:f3:12: c1:0e:2b:47:4b:b6:56:f6:8e:e1:89:23:7a:18:bb: 51:19:d7:3f:7f:a7:e5:60:5e:07:77:2c:25:d7:07: e6:6e:ca:9c:2a:eb:b2:84:7c:88:99:62:fb:ff:0a: 07:e3:2c:ae:91:2f:a5:78:ba:39:4d:0c:12:17:6c: a5:50:4e:c3:92:d8:12:27:8d:e4:62:e9:1b:04:3b: 1e:ae:ef:00:c0:13:a2:43:64:9b:93:6f:53:39:f5: df:7e:9c:62:96:3f:64:11:86:08:de:f1:8d:1a:b0: 6a:8c:c8:64:f1:52:53:ea:6c:ea:dc:d0:91:54:23: 10:9a:e6:3b:7a:99:86:43:bb:5c:99:3b:7a:91:6e: c1:bb:1a:10:7b:6c:52:db:58:cc:62:f4:fc:7e:b8: 44:eb:98:76:fc:db:19:90:37:c4:55:a9:f9:5d:68: 3c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BD:4E:A6:D1:45:AE:99:8E:58:7F:AC:AF:38:DE:EA:A0:F2:6B:8F X509v3 Authority Key Identifier: keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/A663285A59DE11EE85CFCB12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.59.218.0/23 IPv6: 2001:df1:bb40::/48 Signature Algorithm: sha256WithRSAEncryption 80:5b:54:df:59:a8:ff:27:81:64:f6:61:1d:5e:30:d0:25:39: ea:38:a6:42:3a:0f:fa:98:80:28:c9:f5:aa:64:c8:3a:29:21: 89:41:df:68:c4:ce:3e:f5:4e:e4:39:88:e8:50:32:b9:89:a7: 68:03:6e:5e:49:ae:04:1c:ad:dd:d5:bb:e7:fa:92:ce:c1:aa: 44:72:68:f1:ba:20:dc:2a:dd:18:fc:92:a2:f9:b8:54:5a:9b: 09:20:45:f9:d4:a6:18:5e:0a:d4:45:da:35:f6:d5:75:c5:84: 11:9c:2f:17:b7:29:49:a8:91:a1:e3:8a:cd:b2:46:62:9c:c5: 09:a4:8c:00:32:55:a0:83:d6:11:46:dd:93:87:df:d8:74:bd: ae:17:81:d0:d5:1d:87:76:64:ab:09:17:af:6c:0a:a6:7c:70: b9:18:9d:8b:8e:63:fa:92:2f:d9:65:34:dd:f8:71:52:31:a2: a2:29:90:67:46:83:1d:ce:87:cb:fd:7a:77:5c:d3:4b:50:ea: 78:34:c6:af:8e:a9:24:4d:63:b3:2b:af:89:23:77:40:ff:d7: a9:43:5f:0b:56:e9:27:d2:dd:c5:03:1c:89:b0:ee:c7:c0:a4: 96:1c:7d:75:87:7e:07:9c:2c:bc:60:1f:9b:a2:01:2f:1b:a2: ac:82:8d:23 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBOEYxMTAvBgNVBAUTKDZEOTYwNjg4QjZERTcxNDFBNzIxODk4RTlFMDczRTE2 Nzc4RkVGMzUwHhcNMjUwMTExMDM0NjQxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzgxZTlhMS1lMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNV6+JdrHUn+cyQs+fWdQd00SfQ/4KFDxf3WK7oPLI/F0Vhtfj5w+ztXrhLh 9LsVaC4qN8ObP/ld7PvHf9URLhRTYH5pZ0+0YrU9fMLDgLEU/tXt7w+z8xLBDitH S7ZW9o7hiSN6GLtRGdc/f6flYF4Hdywl1wfmbsqcKuuyhHyImWL7/woH4yyukS+l eLo5TQwSF2ylUE7DktgSJ43kYukbBDseru8AwBOiQ2Sbk29TOfXffpxilj9kEYYI 3vGNGrBqjMhk8VJT6mzq3NCRVCMQmuY7epmGQ7tcmTt6kW7BuxoQe2xS21jMYvT8 frhE65h2/NsZkDfEVan5XWg8/wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPi9TqbR Ra6Zjlh/rK843uqg8muPMB8GA1UdIwQYMBaAFG2WBoi23nFBpyGJjp4HPhZ3j+81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0E4Ri82M0FDRDVGNDU5 REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNVR25JWW1PbmdjLUZuZVA3 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JaWUdpTGJlY1VHbklZbU9uZ2MtRm5lUDd6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTdBOEYvNjNBQ0Q1RjQ1OURCMTFFRUE3MzdGRTBBQzRGOUFFMDIvQTY2MzI4NUE1 OURFMTFFRTg1Q0ZDQjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnO9owDwQCAAIwCQMHACABDfG7QDANBgkqhkiG9w0BAQsF AAOCAQEAgFtU31mo/yeBZPZhHV4w0CU56jimQjoP+piAKMn1qmTIOikhiUHfaMTO PvVO5DmI6FAyuYmnaANuXkmuBByt3dW75/qSzsGqRHJo8bog3CrdGPySovm4VFqb CSBF+dSmGF4K1EXaNfbVdcWEEZwvF7cpSaiRoeOKzbJGYpzFCaSMADJVoIPWEUbd k4ff2HS9rheB0NUdh3ZkqwkXr2wKpnxwuRidi45j+pIv2WU03fhxUjGioimQZ0aD Hc6Hy/16d1zTS1DqeDTGr46pJE1jsyuviSN3QP/XqUNfC1bpJ9LdxQMcibDux8Ck lhx9dYd+B5wsvGAfm6IBLxuirIKNIw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:29:06 2025 by rpki-client