$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/7592203EB1B111E999187E66C4F9AE02.roa File: 7592203EB1B111E999187E66C4F9AE02.roa (raw, json) Hash identifier: cxpNUxvjjUcenOfHXLOefCP2oAgYFBDBd3CzBohvfz8= Subject key identifier: F2:22:F4:13:D7:2B:FA:2E:F9:27:0E:6C:54:DE:46:84:CA:89:06:76 Certificate issuer: /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB Certificate serial: 0E32 Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/7592203EB1B111E999187E66C4F9AE02.roa Signing time: Fri 12 Sep 2025 17:57:28 +0000 ROA not before: Fri 12 Sep 2025 17:57:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 135366 IP address blocks: 103.99.160.0/22 maxlen: 22 103.99.160.0/23 maxlen: 23 103.99.160.0/24 maxlen: 24 103.99.161.0/24 maxlen: 24 103.99.162.0/23 maxlen: 23 103.99.162.0/24 maxlen: 24 103.99.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3634 (0xe32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A4F, serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB Validity Not Before: Sep 12 17:57:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c45f08-aeb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:cb:5b:c7:b8:53:c5:53:34:ee:aa:51:81: 86:f4:93:b1:7f:f2:65:09:cd:c7:d4:aa:63:8b:bd: 75:dc:36:a3:ec:73:fc:34:2e:56:73:cf:20:f6:f8: 16:c5:e8:c8:c8:cb:10:6e:dc:4f:7d:c6:9d:55:0c: 23:6d:52:4a:f8:aa:5a:ca:0e:a8:a0:2d:9c:6b:f2: d8:4b:1c:cc:47:4c:7a:79:29:34:84:93:ba:66:e3: df:df:54:01:d2:d2:35:2a:f6:9a:4d:ac:27:e6:72: d5:ce:16:16:f4:9f:4c:70:31:90:4f:56:54:25:62: 81:12:7e:cc:8a:bf:d6:e5:43:87:18:57:7f:0d:7a: 15:f4:a4:42:29:be:5e:82:5f:77:3d:7c:49:6e:06: e1:b5:39:c8:a7:73:98:0c:59:5d:b6:ba:eb:13:67: 2e:44:98:f0:c0:c9:85:cd:65:90:b9:41:58:6e:60: 7a:05:19:69:6b:12:e9:80:33:e6:a8:67:74:b4:17: a5:32:74:3b:4d:77:c3:93:35:5c:22:ce:bd:e8:f8: eb:d3:ea:7c:17:5f:49:48:a3:ac:98:ed:82:0b:fc: 1a:d3:75:5c:c2:43:9e:20:97:94:c6:d5:56:74:0e: ec:e6:1a:b3:1d:6d:f0:b3:8a:3d:bc:cd:99:23:78: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:22:F4:13:D7:2B:FA:2E:F9:27:0E:6C:54:DE:46:84:CA:89:06:76 X509v3 Authority Key Identifier: keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/7592203EB1B111E999187E66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.160.0/22 Signature Algorithm: sha256WithRSAEncryption 57:e4:46:ab:1e:64:20:75:a4:15:af:5b:fd:22:f3:cc:bb:45: 2d:ad:0b:14:50:d0:8b:37:1a:e1:04:7d:3e:67:79:7f:1a:bf: 7f:d7:91:68:3d:19:ba:51:a4:00:79:47:ed:d1:ab:4f:a9:36: 3d:fa:56:1d:2a:8b:74:56:ee:fa:6a:f9:ef:66:8f:60:1b:8e: 81:d1:f5:d9:41:12:1f:b4:59:c7:ad:c2:c6:c9:54:70:24:8d: a1:90:95:c4:2c:5f:ef:b3:f5:9b:27:58:cb:23:78:f5:5c:bd: d3:ff:a2:a2:5d:32:25:57:00:db:6f:d5:f0:84:70:b3:6c:39: e3:9f:f8:79:00:e6:6b:85:65:64:8e:14:7c:ba:82:80:b8:bf: 95:56:3b:93:b4:d9:45:e1:c5:06:14:65:3c:1b:a3:7b:54:4c: 72:f6:64:01:61:6c:db:05:64:a4:18:5a:07:c1:65:a2:16:3f: 8c:21:5a:d1:0c:0c:2e:23:68:a1:e9:b3:ad:3a:79:a2:c3:c0: 7a:20:f0:e3:28:bc:89:f4:6f:32:f9:9e:ed:ec:08:a8:6e:3d: b0:81:f7:50:e1:20:19:b6:80:c0:fa:c8:59:c9:69:14:20:e4: b1:31:43:65:a9:db:55:62:db:07:88:0e:8c:57:70:b3:9f:5d: 57:cf:04:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNEYxMTAvBgNVBAUTKDFFMEE5MzhBNERDN0QzQkFENEY1Rjk2NURDRDU1RTBC Mjk4QzQyREIwHhcNMjUwOTEyMTc1NzI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM0NWYwOC1hZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDPLW8e4U8VTNO6qUYGG9JOxf/JlCc3H1Kpji7113Daj7HP8NC5Wc88g9vgW xejIyMsQbtxPfcadVQwjbVJK+Kpayg6ooC2ca/LYSxzMR0x6eSk0hJO6ZuPf31QB 0tI1KvaaTawn5nLVzhYW9J9McDGQT1ZUJWKBEn7Mir/W5UOHGFd/DXoV9KRCKb5e gl93PXxJbgbhtTnIp3OYDFldtrrrE2cuRJjwwMmFzWWQuUFYbmB6BRlpaxLpgDPm qGd0tBelMnQ7TXfDkzVcIs696Pjr0+p8F19JSKOsmO2CC/wa03VcwkOeIJeUxtVW dA7s5hqzHW3ws4o9vM2ZI3juxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPIi9BPX K/ou+ScObFTeRoTKiQZ2MB8GA1UdIwQYMBaAFB4Kk4pNx9O61PX5ZdzVXgspjELb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE0Ri9FNTI5NUM0OEIx QUYxMUU5ODU5NzVBNjNDNEY5QUUwMi9IZ3FUaWszSDA3clU5ZmxsM05WZUN5bU1R dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hncVRpazNIMDdyVTlmbGwzTlZlQ3ltTVF0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRBNEYvRTUyOTVDNDhCMUFGMTFFOTg1OTc1QTYzQzRGOUFFMDIvNzU5MjIwM0VC MUIxMTFFOTk5MTg3RTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnY6AwDQYJKoZIhvcNAQELBQADggEBAFfkRqseZCB1pBWv W/0i88y7RS2tCxRQ0Is3GuEEfT5neX8av3/XkWg9GbpRpAB5R+3Rq0+pNj36Vh0q i3RW7vpq+e9mj2AbjoHR9dlBEh+0WcetwsbJVHAkjaGQlcQsX++z9ZsnWMsjePVc vdP/oqJdMiVXANtv1fCEcLNsOeOf+HkA5muFZWSOFHy6goC4v5VWO5O02UXhxQYU ZTwbo3tUTHL2ZAFhbNsFZKQYWgfBZaIWP4whWtEMDC4jaKHps606eaLDwHog8OMo vIn0bzL5nu3sCKhuPbCB91DhIBm2gMD6yFnJaRQg5LExQ2Wp21Vi2weIDoxXcLOf XVfPBH4= -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:14 2025 by rpki-client