$ rpki-client -vvf rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/8109B4CA9DF211F0B1ED220FC4F9AE02.roa File: 8109B4CA9DF211F0B1ED220FC4F9AE02.roa (raw, json) Hash identifier: /KMShVz7xPQb/IFHjv8WLpc7f7w5sCo+1tbPQq7vaKs= Subject key identifier: 95:60:DA:C1:53:39:7B:3A:AB:A9:21:D8:72:D6:58:CC:4E:44:7E:38 Certificate issuer: /CN=A9166AFF/serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0 Certificate serial: 0134 Authority key identifier: 35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/8109B4CA9DF211F0B1ED220FC4F9AE02.roa Signing time: Tue 30 Sep 2025 11:43:08 +0000 ROA not before: Tue 30 Sep 2025 11:43:08 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152648 IP address blocks: 202.71.180.0/24 maxlen: 24 202.71.181.0/24 maxlen: 24 2001:df3:8e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166AFF, serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0 Validity Not Before: Sep 30 11:43:08 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68dbc24c-dfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:bb:3c:da:4f:5f:fb:fb:c6:51:bb:7e:ae: f1:1b:fd:e3:39:d5:f2:4c:68:53:8b:d6:d9:20:dc: e9:cb:ae:09:33:d0:71:c4:d0:93:a2:e6:3c:02:f2: c5:fc:e7:14:b7:9a:dd:fc:08:c4:a2:95:11:a9:f0: ea:07:f9:07:cf:80:6c:a4:1f:75:7d:03:30:bb:fd: 51:9e:23:43:dd:37:17:94:11:19:90:b3:24:e4:c5: 5b:c0:70:88:99:e1:3d:b6:c1:5f:c6:be:fc:f9:40: df:1b:c2:a7:83:41:4f:b0:30:ea:28:4e:92:25:1b: 9e:b3:de:a4:43:9e:73:39:2a:1c:82:9f:3d:28:25: be:73:a0:4a:5e:f4:3b:35:d9:de:ee:03:1d:ce:16: 0b:76:37:8e:6f:d3:99:1b:2f:c1:f5:c2:8e:c6:84: ba:14:cb:74:fa:c6:33:11:e4:8f:c1:e1:25:84:23: f9:e5:57:08:d4:96:4d:5a:8a:83:ce:cc:48:b4:c1: a9:88:1b:53:08:3b:01:aa:84:4a:3b:51:0e:5b:ed: 63:c6:5d:0f:af:92:7a:87:ef:6b:01:41:60:27:4c: 11:bb:44:b5:4c:34:f4:f6:a8:67:10:65:7a:8e:5e: 89:f6:b9:9e:68:7f:3b:da:a0:95:d8:ad:12:44:7d: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:60:DA:C1:53:39:7B:3A:AB:A9:21:D8:72:D6:58:CC:4E:44:7E:38 X509v3 Authority Key Identifier: keyid:35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/8109B4CA9DF211F0B1ED220FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.71.180.0/23 IPv6: 2001:df3:8e40::/48 Signature Algorithm: sha256WithRSAEncryption 5a:d9:79:be:b1:b4:e7:ff:21:13:19:ab:ed:e2:42:a8:df:ce: ac:e0:66:bc:ba:1b:7f:cf:96:48:78:17:df:3d:8c:e9:fb:61: fb:12:aa:13:f2:3f:e3:f4:fa:72:7d:05:3d:9b:c9:79:0e:6c: ae:1e:62:31:82:b1:c6:8c:ca:57:57:97:06:10:58:ce:54:5c: 0c:a0:38:45:a4:9e:e1:42:35:4d:2d:b7:56:76:36:ca:48:e7: 2d:34:a6:f1:84:6f:4f:7e:49:62:c8:e7:c0:64:08:41:d6:4f: 8f:dc:23:e3:19:a2:74:81:1e:c0:45:a2:4f:2e:4d:1e:39:0d: 09:96:cf:0b:8b:68:d7:84:8c:23:80:9a:6e:db:30:e0:db:cf: 96:0d:aa:f1:f7:75:30:99:fa:a4:61:0a:ad:8b:b2:b3:a4:2d: 2c:33:a1:4c:31:e1:1d:f1:23:e1:97:25:da:cf:68:63:fb:19: 04:c4:5d:22:86:fd:d0:8e:64:f1:85:9e:89:51:9d:f7:3f:eb: e4:29:cf:6a:97:e9:c5:78:eb:06:64:98:70:c9:9b:a0:26:43: d1:21:76:50:fd:64:37:99:37:37:cd:01:ff:28:01:52:42:3a: e5:91:17:7a:7b:0a:a0:47:d5:45:9f:25:6b:a8:75:27:22:00: 37:90:c3:8d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZBRkYxMTAvBgNVBAUTKDM1N0ExNzlDREQwQUY5QTNGQjAzRTE3N0Q2QTQzRkI4 QTU3NzU0RTAwHhcNMjUwOTMwMTE0MzA4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGRiYzI0Yy1kZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyW7PNpPX/v7xlG7fq7xG/3jOdXyTGhTi9bZINzpy64JM9BxxNCTouY8AvLF /OcUt5rd/AjEopURqfDqB/kHz4BspB91fQMwu/1RniND3TcXlBEZkLMk5MVbwHCI meE9tsFfxr78+UDfG8Kng0FPsDDqKE6SJRues96kQ55zOSocgp89KCW+c6BKXvQ7 Ndne7gMdzhYLdjeOb9OZGy/B9cKOxoS6FMt0+sYzEeSPweElhCP55VcI1JZNWoqD zsxItMGpiBtTCDsBqoRKO1EOW+1jxl0Pr5J6h+9rAUFgJ0wRu0S1TDT09qhnEGV6 jl6J9rmeaH872qCV2K0SRH0qxwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJVg2sFT OXs6q6kh2HLWWMxORH44MB8GA1UdIwQYMBaAFDV6F5zdCvmj+wPhd9akP7ild1Tg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkFGRi80MENEMUI1NEU1 MDIxMUVFOUFCRjc2NTVDNEY5QUUwMi9OWG9Ybk4wSy1hUDdBLUYzMXFRX3VLVjNW T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Yb1huTjBLLWFQN0EtRjMxcVFfdUtWM1ZPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjZBRkYvNDBDRDFCNTRFNTAyMTFFRTlBQkY3NjU1QzRGOUFFMDIvODEwOUI0Q0E5 REYyMTFGMEIxRUQyMjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHKR7QwDwQCAAIwCQMHACABDfOOQDANBgkqhkiG9w0BAQsF AAOCAQEAWtl5vrG05/8hExmr7eJCqN/OrOBmvLobf8+WSHgX3z2M6fth+xKqE/I/ 4/T6cn0FPZvJeQ5srh5iMYKxxozKV1eXBhBYzlRcDKA4RaSe4UI1TS23VnY2ykjn LTSm8YRvT35JYsjnwGQIQdZPj9wj4xmidIEewEWiTy5NHjkNCZbPC4to14SMI4Ca btsw4NvPlg2q8fd1MJn6pGEKrYuys6QtLDOhTDHhHfEj4Zcl2s9oY/sZBMRdIob9 0I5k8YWeiVGd9z/r5CnPapfpxXjrBmSYcMmboCZD0SF2UP1kN5k3N80B/ygBUkI6 5ZEXensKoEfVRZ8la6h1JyIAN5DDjQ== -----END CERTIFICATE-----Generated at Mon Oct 20 17:58:59 2025 by rpki-client