$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/97A9C872450611F093EC3A65C4F9AE02.roa File: 97A9C872450611F093EC3A65C4F9AE02.roa (raw, json) Hash identifier: eAInqmiZL9VaZy5lBaHoW42ByS/9NK48EOjhcAbp/J4= Subject key identifier: 91:9D:5E:05:36:08:93:67:F7:14:E5:FF:F0:66:15:B6:21:31:A5:8A Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1439 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/97A9C872450611F093EC3A65C4F9AE02.roa Signing time: Wed 02 Jul 2025 17:25:30 +0000 ROA not before: Wed 02 Jul 2025 17:25:30 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 401696 IP address blocks: 103.106.188.0/22 maxlen: 24 103.116.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5177 (0x1439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jul 2 17:25:30 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68656b8a-c8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:e6:18:82:7c:06:4b:98:84:21:e0:d5:f6: b2:d3:9f:33:b0:d0:b3:e2:49:13:09:4b:98:a2:cf: f1:55:67:dd:9a:07:e7:89:85:29:e1:fb:c3:a3:4b: 6f:53:eb:4a:9f:e6:20:3f:21:7f:60:20:cf:e7:0a: 4a:5e:5c:20:70:c3:c3:1a:30:b0:81:35:86:94:e4: 3a:64:9a:ab:0a:ba:0c:27:d1:ff:ba:19:6e:be:b2: 0f:74:6d:e1:f1:c2:59:dc:0f:37:3f:e4:ff:b3:32: 1c:dd:f1:35:75:44:54:cc:5a:d7:d9:8e:62:65:09: 09:cb:3e:0d:cc:8b:89:58:50:1a:d6:d1:33:4e:ef: 75:07:9f:6d:ca:a2:30:41:b4:d4:e0:b1:0a:1a:3f: ba:94:f4:dd:64:27:dd:20:d4:46:2a:d7:42:75:ed: 0d:7e:a4:ee:77:8b:29:0e:4e:ad:36:1b:cc:99:d8: 5a:93:a5:f5:4f:3c:c8:c6:b8:b9:d8:ca:00:e2:98: b4:20:5b:29:67:dd:17:c6:18:ff:fb:bf:1a:75:97: eb:38:91:1a:cb:8a:83:e4:fa:6b:da:6c:b0:71:39: 9e:c6:bf:50:9f:d2:1e:db:f8:36:83:7f:5c:56:f4: ed:df:78:8f:8c:ef:ea:fc:94:ec:b9:f9:ef:4f:18: 25:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9D:5E:05:36:08:93:67:F7:14:E5:FF:F0:66:15:B6:21:31:A5:8A X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/97A9C872450611F093EC3A65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.188.0/22 103.116.244.0/22 Signature Algorithm: sha256WithRSAEncryption 25:23:79:c2:f4:78:fe:1f:cd:71:23:36:59:5d:49:cd:02:d1: c4:f7:9e:36:21:28:bc:9f:2c:d3:80:f3:8f:ff:cf:08:7e:af: da:42:51:0e:50:84:c0:61:5b:0a:5b:47:f2:49:fd:12:6f:8c: d6:4f:c5:9d:46:20:9b:67:2e:10:46:26:b5:39:b4:4a:33:41: aa:56:d2:7c:fa:8e:08:d1:c9:64:aa:16:e8:0b:7b:8e:1e:0f: 2b:4e:64:15:39:97:ba:00:a3:63:78:02:9e:0b:fe:8d:18:18: 3e:53:99:79:2f:70:bd:a4:c1:1b:33:97:b7:b8:1a:e5:ce:87: f5:82:1b:c6:f8:db:41:38:5a:cb:65:e6:78:a1:c0:03:97:d9: c0:07:9b:ce:d2:f9:39:90:2b:f1:e2:68:4a:9e:dd:e3:4e:31: b7:e8:2a:9c:b4:7a:47:0d:de:3c:a8:21:55:f8:23:0e:ae:fd: 38:97:c9:0e:ca:e3:75:49:db:4a:ac:7a:36:71:4e:d2:4c:98: ce:e1:f5:b1:20:12:34:cc:a8:a5:ca:2f:33:08:fa:45:6f:48: 64:d6:4a:80:10:2c:96:65:6e:a1:70:0c:d6:a3:2d:00:22:99: f1:54:0d:10:ef:e6:fd:30:0f:bb:68:ae:8b:44:e4:f4:ee:b0: 12:c0:e8:3d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICFDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNzAyMTcyNTMwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1NmI4YS1jOGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLPmGIJ8BkuYhCHg1fay058zsNCz4kkTCUuYos/xVWfdmgfniYUp4fvDo0tv U+tKn+YgPyF/YCDP5wpKXlwgcMPDGjCwgTWGlOQ6ZJqrCroMJ9H/uhluvrIPdG3h 8cJZ3A83P+T/szIc3fE1dURUzFrX2Y5iZQkJyz4NzIuJWFAa1tEzTu91B59tyqIw QbTU4LEKGj+6lPTdZCfdINRGKtdCde0NfqTud4spDk6tNhvMmdhak6X1TzzIxri5 2MoA4pi0IFspZ90Xxhj/+78adZfrOJEay4qD5Ppr2mywcTmexr9Qn9Ie2/g2g39c VvTt33iPjO/q/JTsufnvTxgl2QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJGdXgU2 CJNn9xTl//BmFbYhMaWKMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvOTdBOUM4NzI0 NTA2MTFGMDkzRUMzQTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnarwDBAJndPQwDQYJKoZIhvcNAQELBQADggEBACUjecL0 eP4fzXEjNlldSc0C0cT3njYhKLyfLNOA84//zwh+r9pCUQ5QhMBhWwpbR/JJ/RJv jNZPxZ1GIJtnLhBGJrU5tEozQapW0nz6jgjRyWSqFugLe44eDytOZBU5l7oAo2N4 Ap4L/o0YGD5TmXkvcL2kwRszl7e4GuXOh/WCG8b420E4Wstl5nihwAOX2cAHm87S +TmQK/HiaEqe3eNOMbfoKpy0ekcN3jyoIVX4Iw6u/TiXyQ7K43VJ20qsejZxTtJM mM7h9bEgEjTMqKXKLzMI+kVvSGTWSoAQLJZlbqFwDNajLQAimfFUDRDv5v0wD7to rotE5PTusBLA6D0= -----END CERTIFICATE-----Generated at Wed Jul 2 23:20:24 2025 by rpki-client