$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/6D8A3DC29DCD11F0A412CC62C4F9AE02.roa File: 6D8A3DC29DCD11F0A412CC62C4F9AE02.roa (raw, json) Hash identifier: 6dbULfL3W6yAaGvVmi4JRp24GJKnWO0Bw/N0jVvMnLg= Subject key identifier: F8:55:76:C0:F9:9B:36:80:82:22:47:DD:05:83:A4:5E:38:D4:76:44 Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Certificate serial: 72 Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/6D8A3DC29DCD11F0A412CC62C4F9AE02.roa Signing time: Tue 30 Sep 2025 07:16:48 +0000 ROA not before: Tue 30 Sep 2025 07:16:48 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149507 IP address blocks: 163.223.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Validity Not Before: Sep 30 07:16:48 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68db83e0-e171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:4e:03:d5:ff:c0:b3:fc:36:89:68:31:dc: 26:d3:27:8a:e1:bd:a9:48:08:aa:f5:bc:64:5a:d2: 10:ff:98:06:7a:2a:35:1f:85:10:a6:a7:47:d8:e5: b8:fe:d6:d6:e6:92:54:53:b2:54:25:a0:a9:67:da: ce:8b:14:c4:9c:30:63:07:15:0b:65:97:7d:9d:82: 60:4f:85:97:99:d3:ea:31:b6:41:2c:99:06:28:84: 44:83:74:0d:8a:1f:b0:ab:cc:26:76:55:10:32:c4: e7:bc:91:9c:aa:3b:d8:4f:42:f9:64:09:ba:1b:1e: 71:2a:f4:b5:06:8a:26:4a:cb:26:b0:7d:29:01:78: 0a:8e:57:cf:6a:9c:ae:02:30:69:16:a9:02:b9:f3: 86:b2:12:8d:c8:77:05:fa:d2:17:9d:30:a2:cc:60: 9c:4e:bc:90:c7:08:e1:f1:a9:c1:01:2c:ae:85:e7: 8f:02:ea:ab:1c:81:55:24:c4:64:c8:46:6f:aa:5f: 2e:5e:d9:aa:e4:86:71:21:21:59:cc:24:cb:ce:bf: 8f:11:0f:2b:3d:4e:53:f8:cd:49:ba:2c:fb:5f:1f: d2:60:f5:30:6c:2a:93:b9:82:ae:14:5d:93:3b:ed: 3c:53:df:52:89:40:6d:48:fd:69:32:c6:e9:3d:59: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:55:76:C0:F9:9B:36:80:82:22:47:DD:05:83:A4:5E:38:D4:76:44 X509v3 Authority Key Identifier: keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/6D8A3DC29DCD11F0A412CC62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.120.0/23 Signature Algorithm: sha256WithRSAEncryption ab:c8:01:83:75:d1:f4:6d:9b:f6:05:14:53:45:e9:ef:fd:df: 52:58:64:ac:0b:77:cd:b2:84:a8:61:ad:39:04:8f:b7:3d:c4: 2c:5d:30:ce:d0:d0:f0:3b:16:09:14:7e:ed:a4:26:3f:c4:96: a4:c9:b8:4c:61:7b:81:83:26:2e:23:b2:6c:4b:b7:27:29:79: 8c:d0:76:5c:c8:c1:81:62:39:b9:7f:09:d9:26:e4:53:62:83: e3:99:ed:13:25:7b:0b:61:46:04:d3:ed:cd:1d:a9:1f:ea:62: ef:44:2f:1a:26:35:8b:d0:dd:30:78:b7:95:f1:3f:33:b0:c9: a2:79:a6:a8:2b:d6:46:97:1d:ca:5d:9f:d0:64:d8:fb:3b:3b: 1e:91:1d:69:59:96:68:8d:36:03:53:a8:b0:cb:4d:2a:b9:b5: ce:97:ae:13:70:41:9a:39:90:9c:f8:86:0c:e7:7c:56:9c:6b: 66:aa:00:14:e2:9c:28:1d:70:ce:c5:a2:a8:1d:8c:1c:7e:a7: 39:e0:d6:f1:1c:bc:89:62:56:cc:58:f0:f9:2f:1d:7c:cc:6f: 82:c7:cb:96:b0:e2:c7:42:07:fa:bc:ed:ce:c8:78:9c:a9:0e: b3:0c:4b:c1:48:fe:aa:1f:de:a9:20:38:06:24:2a:87:94:d2: 1d:37:13:cf -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDkyNzExMC8GA1UEBRMoMjc5QzlENzk4MjRCQTIwNDZGMTM4QUY2Q0RCOEEzQjA4 RjAzQkVCMzAeFw0yNTA5MzAwNzE2NDhaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZGI4M2UwLWUxNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5zE4D1f/As/w2iWgx3CbTJ4rhvalICKr1vGRa0hD/mAZ6KjUfhRCmp0fY5bj+ 1tbmklRTslQloKln2s6LFMScMGMHFQtll32dgmBPhZeZ0+oxtkEsmQYohESDdA2K H7CrzCZ2VRAyxOe8kZyqO9hPQvlkCbobHnEq9LUGiiZKyyawfSkBeAqOV89qnK4C MGkWqQK584ayEo3IdwX60hedMKLMYJxOvJDHCOHxqcEBLK6F548C6qscgVUkxGTI Rm+qXy5e2arkhnEhIVnMJMvOv48RDys9TlP4zUm6LPtfH9Jg9TBsKpO5gq4UXZM7 7TxT31KJQG1I/Wkyxuk9WSMRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+FV2wPmb NoCCIkfdBYOkXjjUdkQwHwYDVR0jBBgwFoAUJ5ydeYJLogRvE4r2zbijsI8DvrMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTI3L0MxMDZEMzNDMDRE QzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dSdkU0cjJ6Ymlqc0k4RHZy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjV5ZGVZSkxvZ1J2RTRyMnpiaWpzSThEdnJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyNy9DMTA2RDMzQzA0REMxMUYwQjZCMjVBNDNDNEY5QUUwMi82RDhBM0RDMjlE Q0QxMUYwQTQxMkNDNjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPfeDANBgkqhkiG9w0BAQsFAAOCAQEAq8gBg3XR9G2b9gUU U0Xp7/3fUlhkrAt3zbKEqGGtOQSPtz3ELF0wztDQ8DsWCRR+7aQmP8SWpMm4TGF7 gYMmLiOybEu3Jyl5jNB2XMjBgWI5uX8J2SbkU2KD45ntEyV7C2FGBNPtzR2pH+pi 70QvGiY1i9DdMHi3lfE/M7DJonmmqCvWRpcdyl2f0GTY+zs7HpEdaVmWaI02A1Oo sMtNKrm1zpeuE3BBmjmQnPiGDOd8VpxrZqoAFOKcKB1wzsWiqB2MHH6nOeDW8Ry8 iWJWzFjw+S8dfMxvgsfLlrDix0IH+rztzsh4nKkOswxLwUj+qh/eqSA4BiQqh5TS HTcTzw== -----END CERTIFICATE-----Generated at Mon Oct 20 16:09:41 2025 by rpki-client