$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/789C2BD0ECCA11EAAE025C70C4F9AE02.roa File: 789C2BD0ECCA11EAAE025C70C4F9AE02.roa (raw, json) Hash identifier: EmQdF5GLB5bUu9T1LF70zLmHofep4YvVxF8l/ylf5kA= Subject key identifier: 10:28:34:EA:62:0C:91:72:AD:61:9E:79:3D:08:A8:2A:20:85:6E:13 Certificate issuer: /CN=A9168E98/serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Certificate serial: 0817 Authority key identifier: C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/789C2BD0ECCA11EAAE025C70C4F9AE02.roa Signing time: Mon 08 Sep 2025 21:01:39 +0000 ROA not before: Mon 08 Sep 2025 21:01:38 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139288 IP address blocks: 103.140.215.0/24 maxlen: 24 2001:df0:d780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168E98, serialNumber=C98592E1CD0B2E7610C84B02E661CBF336FFAF5D Validity Not Before: Sep 8 21:01:38 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68bf4432-44e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:63:19:7a:e7:fa:8f:69:72:93:78:bf:21: bb:62:93:3d:f8:e3:ea:07:85:e4:61:b4:62:71:5b: b8:f2:03:4f:3a:94:3b:26:81:93:c0:9a:30:f2:2f: 1c:f2:09:9e:25:0c:cf:e6:86:4b:2c:7c:f7:49:66: 2c:32:52:51:e7:9d:e3:e1:91:2f:9b:35:fe:47:5b: 04:67:1f:b6:92:f2:22:b1:b4:e7:09:32:fe:ad:14: 63:0a:6a:42:6b:e6:b1:1e:56:cf:cf:7e:25:dd:e9: ca:46:8a:d9:9d:5f:dc:45:c3:89:e2:a1:3d:66:31: aa:98:73:2d:1d:02:35:6d:94:73:90:96:83:48:68: b2:d7:ae:0e:d8:34:0e:aa:d9:8f:52:df:a3:e6:59: 8c:16:8f:3a:4a:6c:dc:bd:d0:3b:e1:81:19:7b:da: db:c4:ed:87:fe:45:d3:a9:1a:bd:ea:49:78:3c:89: 37:22:33:23:70:2a:34:fb:2b:8b:ee:1d:78:f9:ae: 0c:92:f5:1a:aa:00:e6:53:a1:a5:33:b9:e5:dd:da: c3:58:09:c1:29:5e:aa:05:72:82:e5:c1:a3:7d:81: 04:92:c3:10:0e:18:a3:aa:c2:d4:71:85:0b:df:1a: f8:92:bb:1b:61:72:59:8d:52:9a:06:5c:fa:1c:f1: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:28:34:EA:62:0C:91:72:AD:61:9E:79:3D:08:A8:2A:20:85:6E:13 X509v3 Authority Key Identifier: keyid:C9:85:92:E1:CD:0B:2E:76:10:C8:4B:02:E6:61:CB:F3:36:FF:AF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/yYWS4c0LLnYQyEsC5mHL8zb_r10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYWS4c0LLnYQyEsC5mHL8zb_r10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/0EB12B40ECC911EAB825626EC4F9AE02/789C2BD0ECCA11EAAE025C70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.215.0/24 IPv6: 2001:df0:d780::/48 Signature Algorithm: sha256WithRSAEncryption a9:58:39:14:fe:6c:15:69:ae:45:a0:b6:8a:95:36:97:5a:07: bb:21:a7:61:8b:67:09:8b:c7:76:e7:1f:b6:2f:77:ed:7f:0b: 6c:0a:42:01:5f:66:85:4c:11:22:70:e0:2d:ee:64:3f:57:e5: a3:33:fc:00:5a:07:6a:0d:2b:20:00:45:29:7f:b9:e5:5c:51: ee:b2:ae:df:79:e5:58:98:7d:d8:41:ae:21:20:dc:e4:f8:20: 9e:cf:67:4c:9c:0b:24:4f:7a:0a:4f:b4:33:ce:00:4f:18:97: d0:66:3b:85:1c:c4:d5:43:d2:a3:c1:45:7f:a4:08:c8:02:9b: f4:cd:ec:fc:fe:6e:fc:f0:fd:f3:e6:78:2f:5b:46:65:2f:cc: f8:f9:a7:95:e1:9f:d6:af:aa:3c:7b:ba:04:0b:b5:0a:f1:50: 3d:29:93:d8:15:9d:83:1a:62:39:73:4b:5b:e8:e2:26:f2:a2: f5:96:3b:76:a7:fd:d0:34:1d:c7:19:69:90:a5:26:56:33:3b: cc:98:55:73:a7:ff:a0:40:e8:d8:30:27:d9:7c:cf:ae:6e:42: 66:48:da:f3:2d:02:17:ae:c2:6d:80:97:f2:e5:11:7c:a9:f4: 5e:8a:7b:c0:42:a6:2f:3e:7a:e9:50:0c:61:bd:04:ea:37:b7: bc:b6:d1:b8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhFOTgxMTAvBgNVBAUTKEM5ODU5MkUxQ0QwQjJFNzYxMEM4NEIwMkU2NjFDQkYz MzZGRkFGNUQwHhcNMjUwOTA4MjEwMTM4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJmNDQzMi00NGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts5jGXrn+o9pcpN4vyG7YpM9+OPqB4XkYbRicVu48gNPOpQ7JoGTwJow8i8c 8gmeJQzP5oZLLHz3SWYsMlJR553j4ZEvmzX+R1sEZx+2kvIisbTnCTL+rRRjCmpC a+axHlbPz34l3enKRorZnV/cRcOJ4qE9ZjGqmHMtHQI1bZRzkJaDSGiy164O2DQO qtmPUt+j5lmMFo86SmzcvdA74YEZe9rbxO2H/kXTqRq96kl4PIk3IjMjcCo0+yuL 7h14+a4MkvUaqgDmU6GlM7nl3drDWAnBKV6qBXKC5cGjfYEEksMQDhijqsLUcYUL 3xr4krsbYXJZjVKaBlz6HPGk6wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBAoNOpi DJFyrWGeeT0IqCoghW4TMB8GA1UdIwQYMBaAFMmFkuHNCy52EMhLAuZhy/M2/69d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEU5OC8wRUIxMkI0MEVD QzkxMUVBQjgyNTYyNkVDNEY5QUUwMi95WVdTNGMwTExuWVF5RXNDNW1ITDh6Yl9y MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZV1M0YzBMTG5ZUXlFc0M1bUhMOHpiX3IxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhFOTgvMEVCMTJCNDBFQ0M5MTFFQUI4MjU2MjZFQzRGOUFFMDIvNzg5QzJCRDBF Q0NBMTFFQUFFMDI1QzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnjNcwDwQCAAIwCQMHACABDfDXgDANBgkqhkiG9w0BAQsF AAOCAQEAqVg5FP5sFWmuRaC2ipU2l1oHuyGnYYtnCYvHducfti937X8LbApCAV9m hUwRInDgLe5kP1flozP8AFoHag0rIABFKX+55VxR7rKu33nlWJh92EGuISDc5Pgg ns9nTJwLJE96Ck+0M84ATxiX0GY7hRzE1UPSo8FFf6QIyAKb9M3s/P5u/PD98+Z4 L1tGZS/M+PmnleGf1q+qPHu6BAu1CvFQPSmT2BWdgxpiOXNLW+jiJvKi9ZY7dqf9 0DQdxxlpkKUmVjM7zJhVc6f/oEDo2DAn2XzPrm5CZkja8y0CF67CbYCX8uURfKn0 Xop7wEKmLz566VAMYb0E6je3vLbRuA== -----END CERTIFICATE-----Generated at Mon Oct 20 05:37:58 2025 by rpki-client