$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa File: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (raw, json) Hash identifier: iaZ3s82xkjY2XfRTWiPnjnqnF2ySFKKm+AeAW0yRT+E= Subject key identifier: A8:B6:18:F2:CA:A2:52:50:D6:72:BA:48:8A:17:1A:E1:CF:77:F9:BD Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1436 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa Signing time: Wed 02 Jul 2025 17:25:27 +0000 ROA not before: Wed 02 Jul 2025 17:25:27 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 137899 IP address blocks: 103.106.188.0/22 maxlen: 24 103.116.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5174 (0x1436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jul 2 17:25:27 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68656b87-b966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:1d:96:90:2b:53:5f:60:10:d0:92:e0:e7: ed:d6:8d:a0:24:48:5d:80:f2:dd:4b:c7:93:c0:a0: 3b:c1:f3:fe:a2:68:49:c2:5a:91:d9:62:39:d6:8a: d5:b8:7a:c9:dc:1c:bf:2b:95:46:73:61:59:80:db: 14:1a:5f:c2:cd:38:d1:3a:52:fb:ad:82:04:20:c9: f0:87:27:6e:3d:b4:86:95:14:56:05:df:8f:96:d6: cd:15:9d:2e:d6:bd:30:38:0d:c1:c9:90:cf:f3:6c: ae:bd:83:ff:b0:a8:af:d3:f8:f8:20:90:0e:f4:f3: da:8a:41:0a:8c:0a:ee:17:f9:2b:81:0d:d7:c6:68: 86:92:aa:8b:96:a7:1b:01:fd:ad:ff:80:1b:1f:94: 3b:54:ba:a9:f4:ba:06:aa:85:94:1a:21:c8:7d:ca: 3c:8a:78:00:66:a3:fb:28:45:33:d2:bb:8f:85:f2: 08:42:96:55:89:6e:41:7e:ff:a3:76:b8:13:41:3b: 45:29:d0:5d:f2:f0:3e:b8:b5:ee:b2:41:81:5d:f2: fa:57:b2:c3:a0:62:10:d9:84:cc:81:75:7b:f9:c4: c4:99:52:2d:aa:9a:67:41:2b:bd:f3:65:02:92:5e: c9:2e:19:dc:8d:4f:4d:b9:7b:39:9a:4c:c8:c5:5a: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:18:F2:CA:A2:52:50:D6:72:BA:48:8A:17:1A:E1:CF:77:F9:BD X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.188.0/22 103.116.244.0/22 Signature Algorithm: sha256WithRSAEncryption 59:0e:d4:c0:7d:c3:53:79:35:c8:0e:af:d2:11:f7:45:1f:76: 2a:51:32:b2:9c:1d:c8:96:7a:01:6b:19:56:7a:67:29:b4:8b: c4:5f:a7:bd:cf:dd:4a:75:0e:61:ef:62:cb:f8:a8:d5:52:27: 5a:e1:47:30:7f:a1:ae:c7:48:36:13:1c:ac:1e:6f:93:dc:89: c0:8d:2a:49:05:e6:81:31:20:cf:f0:27:a1:f6:85:b8:e6:ac: bf:eb:12:37:9c:cf:ba:1c:ea:4d:90:77:56:4d:0f:92:25:20: b5:75:70:f5:f9:99:1b:9c:aa:28:d1:62:3e:cb:e9:e3:eb:29: 5a:66:26:ef:18:d4:24:21:34:b6:7e:3a:90:b1:d8:51:cb:f2: c9:04:ec:c8:98:47:f4:24:45:8d:99:43:c9:9b:7f:39:44:03: da:d0:25:73:b6:96:b3:c2:3e:f0:69:5f:29:3b:ee:0e:75:45: 51:18:8e:06:9e:54:3b:52:a8:6f:42:50:36:67:65:5e:c4:38: 04:cf:6a:d0:20:ef:6f:4e:f1:0b:51:ae:37:7c:90:17:a4:04: b6:99:a6:da:4e:b8:dc:49:45:73:2a:d8:aa:79:fb:1b:ef:74: 57:dc:6c:9b:58:bb:44:22:af:7d:ce:5e:51:5b:66:a6:ae:a1: e3:a8:e3:d7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICFDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNzAyMTcyNTI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1NmI4Ny1iOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XMdlpArU19gENCS4Oft1o2gJEhdgPLdS8eTwKA7wfP+omhJwlqR2WI51orV uHrJ3By/K5VGc2FZgNsUGl/CzTjROlL7rYIEIMnwhyduPbSGlRRWBd+PltbNFZ0u 1r0wOA3ByZDP82yuvYP/sKiv0/j4IJAO9PPaikEKjAruF/krgQ3XxmiGkqqLlqcb Af2t/4AbH5Q7VLqp9LoGqoWUGiHIfco8ingAZqP7KEUz0ruPhfIIQpZViW5Bfv+j drgTQTtFKdBd8vA+uLXuskGBXfL6V7LDoGIQ2YTMgXV7+cTEmVItqppnQSu982UC kl7JLhncjU9NuXs5mkzIxVoV5QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKi2GPLK olJQ1nK6SIoXGuHPd/m9MB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvNEM2MjI3RDJC NjlCMTFFRkExODFFMDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnarwDBAJndPQwDQYJKoZIhvcNAQELBQADggEBAFkO1MB9 w1N5NcgOr9IR90UfdipRMrKcHciWegFrGVZ6Zym0i8Rfp73P3Up1DmHvYsv4qNVS J1rhRzB/oa7HSDYTHKweb5PcicCNKkkF5oExIM/wJ6H2hbjmrL/rEjecz7oc6k2Q d1ZND5IlILV1cPX5mRucqijRYj7L6ePrKVpmJu8Y1CQhNLZ+OpCx2FHL8skE7MiY R/QkRY2ZQ8mbfzlEA9rQJXO2lrPCPvBpXyk77g51RVEYjgaeVDtSqG9CUDZnZV7E OATPatAg729O8QtRrjd8kBekBLaZptpOuNxJRXMq2Kp5+xvvdFfcbJtYu0Qir33O XlFbZqauoeOo49c= -----END CERTIFICATE-----Generated at Wed Jul 2 23:19:35 2025 by rpki-client