$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/B0790AC83AB511E9A79AA42DC4F9AE02.roa File: B0790AC83AB511E9A79AA42DC4F9AE02.roa (raw, json) Hash identifier: iuD1AmPPjauf4FdFiWRN/+tIFnT8RVbtSKHxTeRsXmo= Subject key identifier: 01:47:EF:1B:26:B1:BE:F5:3E:21:74:66:8B:AF:63:1B:CF:28:24:7D Certificate issuer: /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Certificate serial: 1067 Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/B0790AC83AB511E9A79AA42DC4F9AE02.roa Signing time: Mon 10 Mar 2025 17:37:13 +0000 ROA not before: Mon 10 Mar 2025 17:37:13 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 5 IP address blocks: 103.134.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4199 (0x1067) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Validity Not Before: Mar 10 17:37:13 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67cf2348-ed78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:e2:99:cc:df:5d:6f:76:9d:09:64:aa:ac: ec:70:07:e8:d2:2d:66:8d:f2:31:9b:a0:78:a3:64: bc:57:e6:9e:37:5b:ee:9d:53:59:86:de:a5:57:ea: 3a:7d:b9:2a:13:a7:cb:6f:36:e1:72:df:2a:79:cf: 1e:44:12:69:ec:f9:a2:cf:65:8c:dc:00:12:e7:1d: cf:ee:3a:6e:a9:e0:05:4e:61:62:42:55:54:d5:14: 37:28:d4:dd:1b:24:7f:09:d5:44:e9:e5:39:56:2a: cc:1d:f5:34:7d:28:de:1d:98:22:14:07:ff:73:6a: 3a:f0:1a:8d:ab:7c:31:09:6f:08:85:14:fe:13:ee: b6:4e:f2:51:4b:60:1c:75:38:c2:54:f2:fd:ed:ca: 0f:77:0c:75:15:7e:59:59:66:17:31:61:40:22:1e: a1:ff:af:65:9f:70:cb:ae:b3:31:ef:8b:0d:1f:80: 44:88:3e:b6:12:ad:98:fe:49:61:0f:e3:e6:65:99: 06:ed:32:69:be:62:08:30:0a:d4:b2:90:dc:44:f0: 55:e4:03:ae:9b:5f:3d:1c:7c:cc:b7:e1:ae:3b:be: e8:09:e3:e1:37:72:73:4a:2c:0a:d8:f8:e0:a8:52: df:33:76:46:64:a7:e4:c6:7a:03:5e:bb:ec:ec:2c: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:47:EF:1B:26:B1:BE:F5:3E:21:74:66:8B:AF:63:1B:CF:28:24:7D X509v3 Authority Key Identifier: keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/B0790AC83AB511E9A79AA42DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.63.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:1f:7d:a6:8b:53:6b:b8:ff:11:8c:21:e3:00:13:5e:85:f2: 2f:fa:82:a2:6a:63:54:64:9c:84:5c:23:18:48:72:a5:c4:12: 9e:31:6f:79:35:08:4b:50:c8:88:f1:e2:b6:13:9f:79:88:af: 60:09:51:bf:44:fe:ea:90:b1:b2:92:0f:86:22:48:5b:10:6e: 44:e4:8c:33:0e:59:c5:ac:58:c2:aa:2d:df:4e:da:45:79:b8: 17:4c:83:d9:06:b4:66:30:d1:2c:c3:46:e0:22:e3:f5:7a:81: 17:4b:02:b3:14:7f:16:9c:60:96:68:74:47:6b:5b:1a:4d:81: a4:bd:1a:3f:ba:f4:80:34:d1:f0:41:30:06:36:8e:59:3f:9f: 7c:88:f8:6a:0b:11:6b:27:19:5a:eb:a0:18:98:2d:18:23:e5: 31:39:1f:35:45:85:db:36:0b:dc:6d:1b:de:e3:e4:50:f6:a9: da:67:33:d2:e1:13:0c:3e:94:64:3f:ff:3a:56:9a:31:3a:c5: d9:05:f7:04:7d:7f:d3:70:15:48:24:d9:15:d6:5d:8f:f1:b7: c4:92:dd:3c:34:52:8f:ef:bc:4b:f5:55:03:07:03:95:84:79: 49:94:41:12:a5:38:49:45:22:c4:45:05:2f:70:82:7e:d2:26: 0a:72:87:18 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRTkxMTAvBgNVBAUTKEQ1MEVFNjkzQ0I0ODQ0REQyRTc2MDM0QkVDQkQzNkE4 ODFDMzc4OTcwHhcNMjUwMzEwMTczNzEzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmMjM0OC1lZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2h/imczfXW92nQlkqqzscAfo0i1mjfIxm6B4o2S8V+aeN1vunVNZht6lV+o6 fbkqE6fLbzbhct8qec8eRBJp7Pmiz2WM3AAS5x3P7jpuqeAFTmFiQlVU1RQ3KNTd GyR/CdVE6eU5VirMHfU0fSjeHZgiFAf/c2o68BqNq3wxCW8IhRT+E+62TvJRS2Ac dTjCVPL97coPdwx1FX5ZWWYXMWFAIh6h/69ln3DLrrMx74sNH4BEiD62Eq2Y/klh D+PmZZkG7TJpvmIIMArUspDcRPBV5AOum189HHzMt+GuO77oCePhN3JzSiwK2Pjg qFLfM3ZGZKfkxnoDXrvs7CwyMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAFH7xsm sb71PiF0ZouvYxvPKCR9MB8GA1UdIwQYMBaAFNUO5pPLSETdLnYDS+y9NqiBw3iX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNFOS82Q0JCODRGNDMx RjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJOMHVkZ05MN0wwMnFJSERl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRN21rOHRJUk4wdWRnTkw3TDAycUlIRGVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlDRTkvNkNCQjg0RjQzMUYxMTFFOThBN0I5MzE3QzRGOUFFMDIvQjA3OTBBQzgz QUI1MTFFOUE3OUFBNDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnhj8wDQYJKoZIhvcNAQELBQADggEBAIoffaaLU2u4/xGM IeMAE16F8i/6gqJqY1RknIRcIxhIcqXEEp4xb3k1CEtQyIjx4rYTn3mIr2AJUb9E /uqQsbKSD4YiSFsQbkTkjDMOWcWsWMKqLd9O2kV5uBdMg9kGtGYw0SzDRuAi4/V6 gRdLArMUfxacYJZodEdrWxpNgaS9Gj+69IA00fBBMAY2jlk/n3yI+GoLEWsnGVrr oBiYLRgj5TE5HzVFhds2C9xtG97j5FD2qdpnM9LhEww+lGQ//zpWmjE6xdkF9wR9 f9NwFUgk2RXWXY/xt8SS3Tw0Uo/vvEv1VQMHA5WEeUmUQRKlOElFIsRFBS9wgn7S Jgpyhxg= -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:25 2025 by rpki-client