$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/B752E03A97CE11F0ADE43030C4F9AE02.roa File: B752E03A97CE11F0ADE43030C4F9AE02.roa (raw, json) Hash identifier: UlT/oF85OcS2SKCUgl+PsPTlbGKhNl+SEibXUqkYmEY= Subject key identifier: B8:A5:5E:6C:B8:3F:1A:38:A2:AE:EC:6D:52:F5:90:FA:1B:61:5E:D2 Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Certificate serial: 0178 Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/B752E03A97CE11F0ADE43030C4F9AE02.roa Signing time: Mon 22 Sep 2025 16:10:54 +0000 ROA not before: Mon 22 Sep 2025 16:10:54 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 138998 IP address blocks: 103.67.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479 Validity Not Before: Sep 22 16:10:54 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68d1750e-4b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:1e:ed:16:96:17:1a:19:7a:7f:23:01:6c: 3a:16:52:2c:b3:44:92:50:f3:eb:ee:19:4e:9d:9e: 58:e3:f1:8f:bb:59:7f:ae:e5:cd:52:92:75:5c:10: 79:e7:58:0a:89:a8:7f:6b:cb:1c:02:b0:62:6f:c7: c3:d5:2f:65:d7:03:1c:0c:3f:bc:07:18:17:e7:bf: bb:cb:87:e0:b3:a8:44:5c:13:d8:d3:19:36:28:57: 5c:da:a3:52:44:6a:e9:e8:1b:50:57:53:72:6b:35: 99:3b:19:f2:de:0a:e9:cc:ee:8e:71:b6:da:fc:da: 05:cd:ff:55:56:8d:07:b5:d8:e4:cf:db:ea:aa:03: 49:b5:eb:c3:a7:02:2d:66:df:52:9d:53:e0:17:36: f5:6e:ee:26:ec:04:c0:7d:eb:58:8e:ad:19:53:74: 98:ba:b7:81:fa:3f:a3:4d:96:e1:d4:fb:32:74:e1: 0f:cc:7a:28:e4:cd:2e:ce:5b:82:74:74:27:05:66: 29:e6:66:d4:71:eb:c7:62:db:75:85:7f:bb:fa:24: 8c:82:af:83:a2:2e:36:82:0a:44:27:85:ce:23:81: 9f:5f:3b:91:c7:3f:00:cf:0f:9d:71:98:b2:e3:90: e3:f4:57:7c:b3:4a:88:de:b3:f7:5c:d0:a2:b6:af: b5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A5:5E:6C:B8:3F:1A:38:A2:AE:EC:6D:52:F5:90:FA:1B:61:5E:D2 X509v3 Authority Key Identifier: keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/B752E03A97CE11F0ADE43030C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.63.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:cf:b5:95:b2:53:c2:d6:63:33:6c:7f:e5:6e:cf:c9:55:4c: 00:ad:17:fe:8e:70:70:8d:ae:6f:47:6c:2a:03:79:4b:62:f7: 4d:56:4e:19:f3:4e:95:0d:0e:36:55:28:ad:f8:e4:42:47:b7: 06:cf:38:2b:86:2a:72:7d:3f:ee:39:c0:66:13:6e:10:7e:32: 3c:76:eb:b2:09:c6:cb:40:68:a7:e8:a0:93:6a:5b:05:ee:60: 21:f9:b1:09:fd:7f:33:b3:33:a8:d0:36:b9:e8:d0:23:8d:6d: 70:a6:56:74:bf:47:34:4d:99:29:1c:0a:b3:fd:6b:46:d2:da: f5:02:92:c2:b7:69:56:53:56:f1:51:86:57:ec:27:e7:2d:3b: b3:25:09:f1:dc:7f:51:0a:17:26:a0:b4:1f:bc:4f:86:e5:68: 99:d3:41:76:07:38:98:77:57:de:7d:fb:01:41:55:89:ff:19: cf:2d:fd:a8:a2:7d:f4:9a:b4:87:f0:63:77:9b:97:cc:df:2e: 33:54:c8:37:0e:d8:38:9f:c7:f7:34:ef:0b:5e:b1:c2:1b:ad: 13:ae:51:55:55:1b:22:a5:b1:0f:1b:3a:15:d6:15:b1:77:fb: 54:df:2d:0c:f2:88:8d:f9:f2:84:05:dd:22:d2:2b:18:70:ff: df:8a:9a:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlGQUYxMTAvBgNVBAUTKENCRUM2RjE4MzkwNTQ4NzUyMUM3OTQ3QjRGN0JGRDZD Qjc4REE0NzkwHhcNMjUwOTIyMTYxMDU0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxNzUwZS00Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJAe7RaWFxoZen8jAWw6FlIss0SSUPPr7hlOnZ5Y4/GPu1l/ruXNUpJ1XBB5 51gKiah/a8scArBib8fD1S9l1wMcDD+8BxgX57+7y4fgs6hEXBPY0xk2KFdc2qNS RGrp6BtQV1NyazWZOxny3grpzO6Ocbba/NoFzf9VVo0Htdjkz9vqqgNJtevDpwIt Zt9SnVPgFzb1bu4m7ATAfetYjq0ZU3SYureB+j+jTZbh1PsydOEPzHoo5M0uzluC dHQnBWYp5mbUcevHYtt1hX+7+iSMgq+Doi42ggpEJ4XOI4GfXzuRxz8Azw+dcZiy 45Dj9Fd8s0qI3rP3XNCitq+1HQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLilXmy4 Pxo4oq7sbVL1kPobYV7SMB8GA1UdIwQYMBaAFMvsbxg5BUh1IceUe097/Wy3jaR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUZBRi8xMjk1NzVDNDZF NDIxMUVFQUI0QzlDNkNDNEY5QUUwMi95LXh2R0RrRlNIVWh4NVI3VDN2OWJMZU5w SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kteHZHRGtGU0hVaHg1UjdUM3Y5YkxlTnBIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTlGQUYvMTI5NTc1QzQ2RTQyMTFFRUFCNEM5QzZDQzRGOUFFMDIvQjc1MkUwM0E5 N0NFMTFGMEFERTQzMDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnQz8wDQYJKoZIhvcNAQELBQADggEBADzPtZWyU8LWYzNs f+Vuz8lVTACtF/6OcHCNrm9HbCoDeUti901WThnzTpUNDjZVKK345EJHtwbPOCuG KnJ9P+45wGYTbhB+Mjx267IJxstAaKfooJNqWwXuYCH5sQn9fzOzM6jQNrno0CON bXCmVnS/RzRNmSkcCrP9a0bS2vUCksK3aVZTVvFRhlfsJ+ctO7MlCfHcf1EKFyag tB+8T4blaJnTQXYHOJh3V959+wFBVYn/Gc8t/aiiffSatIfwY3ebl8zfLjNUyDcO 2Difx/c07wtescIbrROuUVVVGyKlsQ8bOhXWFbF3+1TfLQzyiI358oQF3SLSKxhw /9+KmmA= -----END CERTIFICATE-----Generated at Mon Oct 20 21:04:04 2025 by rpki-client