$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/C300B2460C2811EAA5153045C4F9AE02.roa File: C300B2460C2811EAA5153045C4F9AE02.roa (raw, json) Hash identifier: NG87DnznnSO4SFH6RPE3pwKGFEdLouyBdOYhn2LMujw= Subject key identifier: 8E:B2:AA:FE:A5:8F:59:90:EB:BF:A3:6D:02:B0:5D:C2:C5:65:6C:34 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0C64 Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/C300B2460C2811EAA5153045C4F9AE02.roa Signing time: Sun 28 Sep 2025 18:49:30 +0000 ROA not before: Sun 28 Sep 2025 18:49:30 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132622 IP address blocks: 103.73.196.0/22 maxlen: 24 103.237.76.0/22 maxlen: 24 2405:85c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: Sep 28 18:49:30 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d9833a-322a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:24:4c:86:4d:4e:57:f3:de:57:09:4f:0b: 28:57:15:02:01:37:4f:8f:71:d9:a7:24:cb:fe:7b: ce:a2:c5:ce:d6:61:78:15:39:2e:2e:a2:3b:1e:54: 24:d7:56:7b:48:0d:e9:c0:79:4d:84:29:4a:c5:ff: b9:71:d4:74:6a:d7:80:e2:fe:5f:2c:30:95:fb:d2: c4:47:e5:16:b7:b4:2b:7f:bb:8f:8d:10:2a:0d:7a: d2:70:59:c5:1e:56:3f:8f:aa:26:8e:91:5e:08:b9: 81:af:a2:0d:4b:cb:67:12:f6:43:eb:3e:73:98:05: 6c:1e:40:9b:ef:ff:f1:81:85:21:d5:08:20:db:45: 25:a5:b2:b8:b5:3f:d4:ca:1d:8b:08:ae:96:66:cf: 13:e6:f5:1e:1b:a5:be:70:c2:a4:74:5d:86:91:c0: 91:87:c2:ac:a3:82:2a:6f:ef:1f:a1:f1:32:bb:05: 6d:59:94:e9:b4:b5:97:fc:07:6a:5b:22:e0:2c:0a: 04:23:b5:a8:20:ae:9f:df:ee:51:54:e7:c5:13:40: 7e:15:0a:94:a2:0c:85:95:0e:fb:a6:81:1f:19:90: ad:5f:7a:0a:dc:54:af:88:7f:61:ae:a7:3b:9a:44: 17:d6:46:d0:43:d2:ee:70:f7:d0:0c:6c:ab:b9:cb: 8f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B2:AA:FE:A5:8F:59:90:EB:BF:A3:6D:02:B0:5D:C2:C5:65:6C:34 X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/C300B2460C2811EAA5153045C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.196.0/22 103.237.76.0/22 IPv6: 2405:85c0::/32 Signature Algorithm: sha256WithRSAEncryption 10:80:c0:24:80:fa:cb:7d:d2:3c:2d:87:d1:09:4f:17:5b:ea: 28:68:34:65:9f:ff:cb:c0:c8:7b:d7:90:c8:34:96:d7:d1:84: aa:6d:19:38:c3:a9:41:fe:64:21:62:6f:a0:6c:84:75:62:8b: 81:94:8e:fd:44:c7:7c:87:31:ee:da:47:b1:50:9d:96:3e:ae: 25:32:77:fe:f9:42:e6:93:1b:23:0a:94:82:6e:68:4c:32:d0: 13:e7:dc:8e:c9:ac:84:7d:c0:b0:95:ec:7b:4a:e3:6a:e8:6a: da:0e:14:09:9e:5a:53:92:0d:6e:84:a4:9c:07:d3:d0:fa:6c: ce:7f:c8:df:be:9f:04:87:d8:e8:73:17:33:05:0a:55:36:34: b4:49:07:78:07:1b:04:81:4e:31:44:72:8b:26:1f:cf:dc:a6: b6:57:42:df:92:c5:e8:0b:27:69:7b:1e:65:95:ff:02:a1:e6: 3f:7d:fa:96:5b:04:34:a8:0f:ca:b1:78:17:c6:3a:15:f7:6a: d6:75:86:7b:d2:95:1b:2e:25:7e:39:3b:d0:04:dd:0f:08:7d: 08:02:4a:41:b2:fb:72:28:b9:c7:5f:bd:f7:a7:e1:80:78:ea: 00:4f:7d:4b:4f:72:91:63:8f:f9:ea:89:7f:0a:d5:08:e8:24: f4:ad:5a:d3 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjUwOTI4MTg0OTMwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ5ODMzYS0zMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoEkTIZNTlfz3lcJTwsoVxUCATdPj3HZpyTL/nvOosXO1mF4FTkuLqI7HlQk 11Z7SA3pwHlNhClKxf+5cdR0ateA4v5fLDCV+9LER+UWt7Qrf7uPjRAqDXrScFnF HlY/j6omjpFeCLmBr6INS8tnEvZD6z5zmAVsHkCb7//xgYUh1Qgg20UlpbK4tT/U yh2LCK6WZs8T5vUeG6W+cMKkdF2GkcCRh8Kso4Iqb+8fofEyuwVtWZTptLWX/Adq WyLgLAoEI7WoIK6f3+5RVOfFE0B+FQqUogyFlQ77poEfGZCtX3oK3FSviH9hrqc7 mkQX1kbQQ9LucPfQDGyrucuPfwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFI6yqv6l j1mQ67+jbQKwXcLFZWw0MB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRDOTMvQzhFOEIxRjYwQzI2MTFFQTgwRUY0MDQxQzRGOUFFMDIvQzMwMEIyNDYw QzI4MTFFQUE1MTUzMDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnScQDBAJn7UwwDQQCAAIwBwMFACQFhcAwDQYJKoZIhvcN AQELBQADggEBABCAwCSA+st90jwth9EJTxdb6ihoNGWf/8vAyHvXkMg0ltfRhKpt GTjDqUH+ZCFib6BshHVii4GUjv1Ex3yHMe7aR7FQnZY+riUyd/75QuaTGyMKlIJu aEwy0BPn3I7JrIR9wLCV7HtK42roatoOFAmeWlOSDW6EpJwH09D6bM5/yN++nwSH 2OhzFzMFClU2NLRJB3gHGwSBTjFEcosmH8/cprZXQt+SxegLJ2l7HmWV/wKh5j99 +pZbBDSoD8qxeBfGOhX3atZ1hnvSlRsuJX45O9AE3Q8IfQgCSkGy+3Ioucdfvfen 4YB46gBPfUtPcpFjj/nqiX8K1QjoJPStWtM= -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:38 2025 by rpki-client