$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/999F4BE8259611EE944D733CC4F9AE02.roa File: 999F4BE8259611EE944D733CC4F9AE02.roa (raw, json) Hash identifier: FqEN/utj0qRJF2RShIO0hvD2R+VumfpS5SKeV7adKGg= Subject key identifier: 84:5A:62:E7:13:CF:1A:96:69:D8:22:98:85:DA:27:0F:35:1D:19:DC Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0C33 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/999F4BE8259611EE944D733CC4F9AE02.roa Signing time: Mon 14 Apr 2025 18:28:10 +0000 ROA not before: Mon 14 Apr 2025 18:28:09 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136434 IP address blocks: 103.87.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3123 (0xc33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Apr 14 18:28:09 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67fd53b9-d431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:71:35:6c:45:c2:fb:3d:d0:9a:33:46:d5: 62:e8:89:8d:7a:d0:cc:c0:2b:f3:a4:a2:e9:72:57: 52:f2:8d:85:fc:ee:f3:4e:2a:31:d9:9f:6a:1c:35: 77:ee:6c:ab:c9:3e:0c:7e:a5:dc:61:7f:e2:bf:59: 8f:a2:20:ac:b3:db:8f:96:44:2c:e4:2e:0c:a5:60: 83:8e:9e:4f:b3:58:ae:87:bf:e7:a6:39:27:13:cc: 4c:36:3e:de:dd:9d:9c:63:81:e6:37:68:45:76:86: 6e:a7:8f:c8:77:1b:b6:4c:ec:ca:0c:f8:29:3c:6c: d0:b6:e6:b8:c9:69:fd:66:4c:15:5d:15:3f:c2:74: 4f:c1:69:97:17:67:b3:b4:08:5a:8b:fb:d1:83:b6: 64:1c:ff:67:91:04:da:09:cc:ad:cd:66:fc:9a:02: ad:68:e3:06:8e:02:8f:7a:dd:85:41:7f:ac:b2:cf: 31:c9:43:25:96:22:79:66:80:69:e0:aa:1a:af:08: 70:c7:3c:78:b9:bb:60:24:b3:0a:7d:d0:26:c8:ab: 82:2d:24:3e:5c:1c:13:87:2f:32:a6:c1:21:a9:46: b6:11:96:4c:b0:bd:5e:90:b9:92:ff:1f:90:ac:28: db:2e:d0:ae:42:d8:d5:bc:f4:03:cb:cc:0f:43:0e: df:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5A:62:E7:13:CF:1A:96:69:D8:22:98:85:DA:27:0F:35:1D:19:DC X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/999F4BE8259611EE944D733CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.87.244.0/22 Signature Algorithm: sha256WithRSAEncryption b7:7a:b4:a1:5b:c6:9f:4f:ab:91:5c:da:2b:09:8d:77:e0:cc: 85:47:8a:55:32:6d:43:57:a0:09:37:0e:23:0d:20:eb:95:87: d2:22:db:ed:48:b1:c4:9e:51:e8:fc:b2:17:5b:b9:e7:14:c9: 90:91:70:df:0b:2b:d0:37:02:20:47:a1:92:46:72:28:c7:92: 38:39:d2:cd:90:01:80:98:1b:65:c3:72:53:03:bc:57:3a:a5: d3:3a:f6:10:a2:bb:41:be:77:f1:6a:73:88:12:5d:52:98:bf: 2a:14:e2:96:85:a8:b7:23:eb:68:a5:63:bf:9a:a4:b6:25:24: 3d:2a:92:57:bd:1b:71:9e:2a:b1:c5:a3:77:c5:1a:61:a6:55: bf:84:1a:92:b2:d9:d2:a3:ec:1f:0b:1a:8a:b6:7b:dd:90:f3: 35:a0:0b:b6:93:dd:61:ba:76:06:4a:f6:86:66:74:06:84:da: 0d:0f:41:ec:35:c1:f1:2e:cf:6e:07:41:d7:1b:92:ad:72:3c: f3:69:17:d8:d8:6e:8a:0a:32:9a:7c:2e:14:d5:71:1e:36:0b: 64:3a:a1:b8:04:e7:2c:eb:7b:de:25:cb:9c:ce:e5:20:82:24: 1d:99:8c:ab:01:0c:41:3d:73:9e:26:aa:53:27:d7:b8:ad:94: ca:d6:0f:80 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjUwNDE0MTgyODA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZkNTNiOS1kNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJVxNWxFwvs90JozRtVi6ImNetDMwCvzpKLpcldS8o2F/O7zTiox2Z9qHDV3 7myryT4MfqXcYX/iv1mPoiCss9uPlkQs5C4MpWCDjp5Ps1iuh7/npjknE8xMNj7e 3Z2cY4HmN2hFdoZup4/Idxu2TOzKDPgpPGzQtua4yWn9ZkwVXRU/wnRPwWmXF2ez tAhai/vRg7ZkHP9nkQTaCcytzWb8mgKtaOMGjgKPet2FQX+sss8xyUMlliJ5ZoBp 4Koarwhwxzx4ubtgJLMKfdAmyKuCLSQ+XBwThy8ypsEhqUa2EZZMsL1ekLmS/x+Q rCjbLtCuQtjVvPQDy8wPQw7ftQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIRaYucT zxqWadgimIXaJw81HRncMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBFRjcvQjA3MTM5N0MwNUU2MTFFQTgwQkNENjdDQzRGOUFFMDIvOTk5RjRCRTgy NTk2MTFFRTk0NEQ3MzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnV/QwDQYJKoZIhvcNAQELBQADggEBALd6tKFbxp9Pq5Fc 2isJjXfgzIVHilUybUNXoAk3DiMNIOuVh9Ii2+1IscSeUej8shdbuecUyZCRcN8L K9A3AiBHoZJGcijHkjg50s2QAYCYG2XDclMDvFc6pdM69hCiu0G+d/Fqc4gSXVKY vyoU4paFqLcj62ilY7+apLYlJD0qkle9G3GeKrHFo3fFGmGmVb+EGpKy2dKj7B8L Goq2e92Q8zWgC7aT3WG6dgZK9oZmdAaE2g0PQew1wfEuz24HQdcbkq1yPPNpF9jY booKMpp8LhTVcR42C2Q6obgE5yzre94ly5zO5SCCJB2ZjKsBDEE9c54mqlMn17it lMrWD4A= -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:35 2025 by rpki-client