$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/DAFE4B0C795E11F0B29D8165C4F9AE02.roa File: DAFE4B0C795E11F0B29D8165C4F9AE02.roa (raw, json) Hash identifier: sGjYPA02vzARTW+wA7XWlc/cbQ26Obsq/GZUeZJ2nk4= Subject key identifier: 89:7E:94:B7:58:FB:4B:79:F5:CA:2F:38:95:1C:AB:AD:81:33:37:A4 Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Certificate serial: 0761 Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/DAFE4B0C795E11F0B29D8165C4F9AE02.roa Signing time: Thu 14 Aug 2025 22:34:36 +0000 ROA not before: Thu 14 Aug 2025 22:34:36 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141457 IP address blocks: 103.159.236.0/23 maxlen: 24 2406:ddc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1889 (0x761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123193, serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Validity Not Before: Aug 14 22:34:36 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=689e647b-1ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:0b:1d:db:ea:55:f7:ee:53:3f:66:4c:2c: 4f:50:86:7a:09:45:62:94:a6:6a:f8:92:25:e9:62: ce:cc:99:95:26:6f:25:20:51:ba:be:99:c3:f6:af: c4:7a:80:b7:90:ae:ae:7c:9c:3b:a1:2f:2a:af:36: 6c:08:28:7b:c7:9e:ae:db:3f:1c:7a:3e:a0:71:37: 59:d5:81:f8:57:c3:c4:97:ce:da:25:c4:9a:d9:0a: fb:72:6a:82:ce:fb:3f:05:b0:f3:6f:1f:58:a0:b8: 5a:32:84:f9:92:33:ac:0a:03:fd:68:0a:d4:59:fd: 22:7c:b2:01:12:57:2a:97:c0:15:47:f8:c6:d9:12: 1f:06:f8:47:e7:11:bb:e8:8c:4d:84:1d:20:2f:c1: ef:86:9d:10:c7:23:4f:26:a3:51:48:11:8d:1a:b9: d1:4c:54:5c:58:d1:76:e0:44:37:8e:07:f3:44:ca: 52:ad:2a:88:e6:9d:e4:b2:dd:b1:10:3d:df:25:63: 4c:f1:6f:88:e7:d4:c8:26:83:cb:76:33:cb:09:79: d6:f4:11:62:f5:79:89:75:31:6b:0f:ee:dd:38:7c: f3:64:a9:d1:e8:fa:7a:85:90:db:c2:a4:92:0a:64: 4a:41:f6:d6:72:48:9b:b3:2b:80:82:c4:43:2e:4a: 1c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7E:94:B7:58:FB:4B:79:F5:CA:2F:38:95:1C:AB:AD:81:33:37:A4 X509v3 Authority Key Identifier: keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/DAFE4B0C795E11F0B29D8165C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.236.0/23 IPv6: 2406:ddc0::/32 Signature Algorithm: sha256WithRSAEncryption c1:25:1c:99:94:11:85:9f:e8:fe:92:2a:9b:5f:12:38:51:fa: ee:1c:f0:48:11:5f:6f:a1:c3:02:6a:8e:ab:2b:0e:24:27:19: 8b:ab:c6:03:d6:63:78:8a:b7:c9:63:af:8d:b5:8a:c0:14:cb: 34:8f:ca:f9:00:3b:12:9f:71:dd:af:fb:44:c7:85:af:31:16: ff:88:10:f6:d7:4d:e5:d5:be:c4:47:37:ed:06:c0:ef:27:cb: bf:3c:7a:f7:35:b3:e6:7e:a4:18:d2:83:f1:ff:70:a5:03:d0: 94:39:e9:0a:f8:71:da:9f:e9:77:af:15:65:af:7b:fa:a1:df: 1a:92:d6:1c:91:bf:27:93:29:ed:8d:56:30:ba:6b:1c:ea:75: c7:ec:b1:90:d6:f5:67:a5:ae:cf:4f:52:79:b9:a1:91:4e:82: 76:f9:6f:12:b1:cf:e4:06:81:15:11:41:15:77:6e:9d:8f:05: 2c:70:d7:32:e8:d5:e0:d1:63:e9:b9:89:e9:ab:86:72:fb:85: 38:f9:77:e4:33:f9:85:de:81:ce:a4:53:74:4b:22:e0:bc:33: 2e:75:41:ff:ca:c7:10:fe:ab:9e:ae:35:cf:23:37:bc:13:3c: 95:a4:b7:e3:9c:b4:c8:95:87:7b:ae:03:9f:c3:88:95:31:22: 4b:b0:fd:28 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxOTMxMTAvBgNVBAUTKDBCQkNGREU3Njg2NzVCOTk0RjJBMjMxMTRDMzUxNDEy MjAxNTU1QjgwHhcNMjUwODE0MjIzNDM2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODllNjQ3Yi0xYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GELHdvqVffuUz9mTCxPUIZ6CUVilKZq+JIl6WLOzJmVJm8lIFG6vpnD9q/E eoC3kK6ufJw7oS8qrzZsCCh7x56u2z8cej6gcTdZ1YH4V8PEl87aJcSa2Qr7cmqC zvs/BbDzbx9YoLhaMoT5kjOsCgP9aArUWf0ifLIBElcql8AVR/jG2RIfBvhH5xG7 6IxNhB0gL8Hvhp0QxyNPJqNRSBGNGrnRTFRcWNF24EQ3jgfzRMpSrSqI5p3kst2x ED3fJWNM8W+I59TIJoPLdjPLCXnW9BFi9XmJdTFrD+7dOHzzZKnR6Pp6hZDbwqSS CmRKQfbWckibsyuAgsRDLkoc4wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIl+lLdY +0t59covOJUcq62BMzekMB8GA1UdIwQYMBaAFAu8/edoZ1uZTyojEUw1FBIgFVW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE5My9DQThBNEIzQzM5 RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1bFBLaU1SVERVVUVpQVZW YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3ejk1MmhuVzVsUEtpTVJURFVVRWlBVlZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMxOTMvQ0E4QTRCM0MzOUQ5MTFFQkE3ODFGQTU3QzRGOUFFMDIvREFGRTRCMEM3 OTVFMTFGMEIyOUQ4MTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnn+wwDQQCAAIwBwMFACQG3cAwDQYJKoZIhvcNAQELBQAD ggEBAMElHJmUEYWf6P6SKptfEjhR+u4c8EgRX2+hwwJqjqsrDiQnGYurxgPWY3iK t8ljr421isAUyzSPyvkAOxKfcd2v+0THha8xFv+IEPbXTeXVvsRHN+0GwO8ny788 evc1s+Z+pBjSg/H/cKUD0JQ56Qr4cdqf6XevFWWve/qh3xqS1hyRvyeTKe2NVjC6 axzqdcfssZDW9Welrs9PUnm5oZFOgnb5bxKxz+QGgRURQRV3bp2PBSxw1zLo1eDR Y+m5iemrhnL7hTj5d+Qz+YXegc6kU3RLIuC8My51Qf/KxxD+q56uNc8jN7wTPJWk t+OctMiVh3uuA5/DiJUxIkuw/Sg= -----END CERTIFICATE-----Generated at Sun Aug 24 09:05:47 2025 by rpki-client