$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa File: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (raw, json) Hash identifier: ssSab392rUEklfenSvYRYq8TUWajk4XJZygnBh6m+8Y= Subject key identifier: A6:64:53:5E:2E:B2:A0:64:BA:11:9E:78:FB:4B:17:E9:DA:5A:F3:2D Certificate issuer: /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Certificate serial: BD Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa Signing time: Tue 19 Aug 2025 06:44:17 +0000 ROA not before: Tue 19 Aug 2025 06:44:17 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 136812 IP address blocks: 103.121.232.0/24 maxlen: 24 103.121.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B0A, serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692 Validity Not Before: Aug 19 06:44:17 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a41d41-3e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:17:c2:ba:24:07:bb:28:c6:fc:20:e9:e3: 63:5c:4f:5e:fb:a9:90:15:c6:1a:44:86:69:96:f6: e1:da:a1:65:c6:94:ec:c0:75:24:73:8c:c2:70:80: c5:a4:6c:72:81:1a:5f:3c:07:d8:9b:64:19:7e:eb: e1:4c:53:95:f6:bd:37:22:18:71:a0:d9:4c:a3:8f: bf:1a:dc:f4:ce:1a:98:61:68:b0:c6:66:12:c9:4f: 9b:f3:3c:60:b6:85:42:cc:c7:e6:45:a4:7a:10:9c: 1e:3e:18:f1:b6:98:c3:5f:f3:78:3a:de:22:e4:05: 2e:46:61:33:06:af:09:32:fd:35:e9:c9:0e:57:d1: 24:4f:bf:6d:37:2c:20:26:95:e4:a3:c4:f2:10:13: ff:3c:8b:5a:c1:23:fe:34:42:01:15:c0:9d:4b:43: fd:be:2d:13:40:f1:f0:75:3b:3e:ac:b3:8f:8c:03: a6:e5:b0:4a:74:ac:53:0e:d5:fd:bd:c7:b6:57:32: 62:87:6c:c0:10:f8:7c:a8:09:1e:75:24:c2:89:82: f9:33:df:45:f8:49:74:98:8d:c0:f1:5d:c3:3d:28: 07:77:51:30:fd:23:6f:b3:5a:2f:63:99:d0:a6:7f: 34:aa:56:b4:f4:5f:b3:de:0d:ad:22:39:14:d5:28: 2e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:64:53:5E:2E:B2:A0:64:BA:11:9E:78:FB:4B:17:E9:DA:5A:F3:2D X509v3 Authority Key Identifier: keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.232.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:b0:df:e3:73:a6:85:d8:2d:bb:f3:95:04:55:59:7a:c4:f5: 2b:9c:84:09:d8:cf:81:cb:70:f4:67:66:b9:15:37:f4:27:a6: 65:1e:f2:bc:a2:9c:50:f1:ae:33:82:60:ce:ac:9f:12:2c:3a: 8a:c9:4a:bd:ff:fb:76:58:98:61:15:ad:9b:dc:c1:85:56:a7: c1:f3:9b:34:8e:93:5a:0e:6c:99:46:fc:0d:b5:c4:28:19:8b: 36:6c:73:31:47:92:5f:4f:92:11:bc:8b:58:50:91:18:7b:fe: 20:e1:f1:f7:e4:f0:ac:9b:c7:3e:98:9d:51:30:9c:9e:24:86: 48:c2:49:36:37:3b:55:df:af:a1:9b:9f:cd:81:f5:55:e8:78: 18:dc:25:60:dd:f0:ca:aa:4b:d2:76:be:52:12:a2:4b:39:66: 4c:46:15:33:e8:98:17:9c:e7:0f:31:c8:09:91:65:ab:ca:41: b8:ad:9b:eb:97:aa:60:7d:45:36:54:4a:56:05:fc:1b:71:a1: 3b:41:e5:83:2b:01:8c:83:60:52:29:20:ae:f7:ae:fd:5a:1f: c6:9d:74:70:3a:37:c0:be:47:ab:6a:31:31:8f:86:38:71:76: c5:bc:dc:e5:71:bf:2d:2a:47:c9:62:39:ab:ce:97:61:60:cc: c8:91:f6:3e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMEExMTAvBgNVBAUTKDA5OTUwNkVDOTg3QzhCMTk0MDU4NTNCMDhDNzE4QjVC QkU0QUM2OTIwHhcNMjUwODE5MDY0NDE3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE0MWQ0MS0zZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4IXwrokB7soxvwg6eNjXE9e+6mQFcYaRIZplvbh2qFlxpTswHUkc4zCcIDF pGxygRpfPAfYm2QZfuvhTFOV9r03IhhxoNlMo4+/Gtz0zhqYYWiwxmYSyU+b8zxg toVCzMfmRaR6EJwePhjxtpjDX/N4Ot4i5AUuRmEzBq8JMv016ckOV9EkT79tNywg JpXko8TyEBP/PItawSP+NEIBFcCdS0P9vi0TQPHwdTs+rLOPjAOm5bBKdKxTDtX9 vce2VzJih2zAEPh8qAkedSTCiYL5M99F+El0mI3A8V3DPSgHd1Ew/SNvs1ovY5nQ pn80qla09F+z3g2tIjkU1SguuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKZkU14u sqBkuhGeePtLF+naWvMtMB8GA1UdIwQYMBaAFAmVBuyYfIsZQFhTsIxxi1u+SsaS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwQS9ENURCNkRGNjYw N0ExMUVGODY5QUE2NUNDNEY5QUUwMi9DWlVHN0poOGl4bEFXRk93akhHTFc3NUt4 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaVUc3Smg4aXhsQVdGT3dqSEdMVzc1S3hwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNCMEEvRDVEQjZERjY2MDdBMTFFRjg2OUFBNjVDQzRGOUFFMDIvNDg1QjMyQTg2 MDdCMTFFRkIyN0M2QzVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFneegwDQYJKoZIhvcNAQELBQADggEBAHqw3+NzpoXYLbvz lQRVWXrE9SuchAnYz4HLcPRnZrkVN/QnpmUe8ryinFDxrjOCYM6snxIsOorJSr3/ +3ZYmGEVrZvcwYVWp8HzmzSOk1oObJlG/A21xCgZizZsczFHkl9PkhG8i1hQkRh7 /iDh8ffk8Kybxz6YnVEwnJ4khkjCSTY3O1Xfr6Gbn82B9VXoeBjcJWDd8MqqS9J2 vlISoks5ZkxGFTPomBec5w8xyAmRZavKQbitm+uXqmB9RTZUSlYF/BtxoTtB5YMr AYyDYFIpIK73rv1aH8addHA6N8C+R6tqMTGPhjhxdsW83OVxvy0qR8liOavOl2Fg zMiR9j4= -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:09 2025 by rpki-client