$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/16079DB83C1D11EBA532C076C4F9AE02.roa File: 16079DB83C1D11EBA532C076C4F9AE02.roa (raw, json) Hash identifier: mrT/TQVc5LCUrmX9VtkN0plkNrICogqBYArk6etw7Y8= Subject key identifier: DD:1F:71:DD:98:BB:74:4A:8F:41:D8:91:3F:54:1B:9C:94:FA:72:C9 Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Certificate serial: 0902 Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/16079DB83C1D11EBA532C076C4F9AE02.roa Signing time: Wed 10 Sep 2025 21:01:51 +0000 ROA not before: Wed 10 Sep 2025 21:01:51 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 46997 IP address blocks: 103.152.112.0/23 maxlen: 23 103.152.112.0/24 maxlen: 24 103.152.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2306 (0x902) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C Validity Not Before: Sep 10 21:01:51 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68c1e73f-8755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:06:35:e7:bf:73:c9:68:20:d9:80:d6:5b: 7d:84:a4:4f:79:e9:51:bf:81:d3:3d:76:ac:9f:7b: 3c:c7:00:5d:6e:57:c4:4e:d0:20:00:9d:dc:3b:d9: 58:9c:d3:c6:39:d7:3a:50:39:b5:18:19:dc:d8:36: b9:79:5d:97:cf:31:d6:0e:35:0e:e7:4f:a1:66:65: 4e:a3:0c:63:f7:16:2e:a0:a2:e2:01:2f:a0:36:1f: e5:ee:30:3d:b8:bc:ab:ca:d3:d5:5f:75:f2:d7:cf: 25:46:8e:41:40:e9:73:02:50:81:e3:1d:7a:4f:b2: 89:1e:36:26:3e:16:b8:a4:89:d2:e2:8e:a1:6a:88: e0:77:ee:a3:04:a4:c0:80:01:0d:8f:a4:49:a1:65: a2:a7:be:69:d4:96:b2:98:b4:b6:f7:be:7b:3e:63: ea:39:db:1f:37:1d:9b:05:df:58:39:36:90:91:8a: b3:ce:79:17:d5:a1:f9:84:59:eb:f0:3f:36:4a:40: c6:56:64:c0:62:57:41:10:73:8d:af:1f:ee:09:ea: 6c:1a:98:c3:52:5f:f7:2f:28:00:d4:8d:67:bf:6a: 61:f0:c6:0f:5c:57:a1:cf:0f:66:14:0a:43:be:91: 38:97:a9:fa:dc:7c:98:fa:1d:48:e0:9e:d8:8d:4a: 5c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1F:71:DD:98:BB:74:4A:8F:41:D8:91:3F:54:1B:9C:94:FA:72:C9 X509v3 Authority Key Identifier: keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/16079DB83C1D11EBA532C076C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.112.0/23 Signature Algorithm: sha256WithRSAEncryption 69:c1:e1:c3:3f:6b:5c:4d:b7:86:9a:ef:67:cb:68:16:24:f4: 62:08:a1:8a:97:13:44:8d:9a:4c:61:61:46:a7:b0:f6:d5:04: d3:e4:53:72:c6:da:c8:ee:59:bb:a8:0a:bf:3d:1a:d4:2a:a5: 87:26:6c:f5:b6:7b:9f:e4:04:b4:9b:18:29:3d:f0:99:27:2f: bb:6b:b2:14:10:42:12:f0:e2:90:b7:d9:95:9b:be:92:ee:0d: b9:4e:93:68:e3:6e:c4:d9:93:20:8f:27:44:08:f2:08:4e:19: d5:b4:8b:21:4d:c1:53:19:da:db:a1:76:c5:c3:4e:c2:1c:9c: 9b:ba:f4:b4:ae:e5:00:49:9a:01:d4:b8:93:b1:35:46:41:05: 53:1b:6b:c1:e2:52:2b:4b:8a:16:88:47:aa:ab:fc:65:47:9c: 2e:be:76:c2:0a:fa:2e:13:9f:eb:1d:d5:14:68:1d:d2:c1:65: f0:97:d6:00:73:39:8b:f6:a3:67:6e:fe:dd:eb:8a:2f:51:b8: 16:07:d6:14:61:67:b0:71:55:1a:31:98:2f:67:f9:bd:a6:3d: bf:f1:32:f9:c1:35:d1:f5:97:52:fd:04:90:69:e2:3d:a3:7f: 92:88:9c:34:3f:d1:a8:ac:76:30:58:6a:9f:b5:c3:e0:b7:03: 7b:04:c5:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB MjBDRkI1NEMwHhcNMjUwOTEwMjEwMTUxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMxZTczZi04NzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskIGNee/c8loINmA1lt9hKRPeelRv4HTPXasn3s8xwBdblfETtAgAJ3cO9lY nNPGOdc6UDm1GBnc2Da5eV2XzzHWDjUO50+hZmVOowxj9xYuoKLiAS+gNh/l7jA9 uLyrytPVX3Xy188lRo5BQOlzAlCB4x16T7KJHjYmPha4pInS4o6haojgd+6jBKTA gAENj6RJoWWip75p1JaymLS29757PmPqOdsfNx2bBd9YOTaQkYqzznkX1aH5hFnr 8D82SkDGVmTAYldBEHONrx/uCepsGpjDUl/3LygA1I1nv2ph8MYPXFehzw9mFApD vpE4l6n63HyY+h1I4J7YjUpc0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFN0fcd2Y u3RKj0HYkT9UG5yU+nLJMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjZDMzkvMjdFRUNGRDBCQjk3MTFFQUExQTY2QzUzQzRGOUFFMDIvMTYwNzlEQjgz QzFEMTFFQkE1MzJDMDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmHAwDQYJKoZIhvcNAQELBQADggEBAGnB4cM/a1xNt4aa 72fLaBYk9GIIoYqXE0SNmkxhYUansPbVBNPkU3LG2sjuWbuoCr89GtQqpYcmbPW2 e5/kBLSbGCk98JknL7trshQQQhLw4pC32ZWbvpLuDblOk2jjbsTZkyCPJ0QI8ghO GdW0iyFNwVMZ2tuhdsXDTsIcnJu69LSu5QBJmgHUuJOxNUZBBVMba8HiUitLihaI R6qr/GVHnC6+dsIK+i4Tn+sd1RRoHdLBZfCX1gBzOYv2o2du/t3rii9RuBYH1hRh Z7BxVRoxmC9n+b2mPb/xMvnBNdH1l1L9BJBp4j2jf5KInDQ/0aisdjBYap+1w+C3 A3sExTc= -----END CERTIFICATE-----Generated at Tue Oct 21 04:53:19 2025 by rpki-client