$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/9BB410F021B011EFA6C95F83C4F9AE02.roa File: 9BB410F021B011EFA6C95F83C4F9AE02.roa (raw, json) Hash identifier: ham/XAS0gNUsA7VUjnWwNOW385MWOqUwYnVoCHtaJMM= Subject key identifier: EB:E2:DB:0C:03:3D:11:D8:D6:13:1C:2A:E4:F0:CF:CF:0F:0E:FD:79 Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Certificate serial: 095D Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/9BB410F021B011EFA6C95F83C4F9AE02.roa Signing time: Thu 14 Aug 2025 21:00:52 +0000 ROA not before: Thu 14 Aug 2025 21:00:52 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137990 IP address blocks: 103.119.128.0/22 maxlen: 22 103.119.128.0/24 maxlen: 24 103.119.129.0/24 maxlen: 24 103.119.130.0/24 maxlen: 24 103.119.131.0/24 maxlen: 24 202.43.225.0/24 maxlen: 24 202.43.226.0/24 maxlen: 24 2403:43c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2397 (0x95d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176190, serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Validity Not Before: Aug 14 21:00:52 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689e4e83-5b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e3:97:d0:e0:57:8b:36:13:88:ad:e2:ae:fe: 0e:84:19:81:e8:72:24:f0:ed:66:43:1b:c0:3e:07: 67:54:97:04:78:6e:52:e7:f5:d8:92:9d:2a:e9:53: 47:62:82:c2:10:db:dd:3c:8c:29:37:ad:73:b8:51: 97:80:1f:6d:5d:a3:93:e5:51:5c:2c:fb:10:68:6a: 00:02:c8:ab:a3:4e:c2:a3:28:16:6a:13:9e:8f:b1: f6:18:27:5e:50:df:89:63:99:7d:53:05:84:5f:28: 6f:18:63:92:c1:72:58:24:e4:4f:42:66:53:45:6e: 1c:c0:b1:83:c4:a5:49:e2:45:fb:b5:bf:fc:a1:8b: 5d:f2:cb:7a:f2:8b:09:2b:c2:75:85:fb:3c:0e:62: 91:56:7c:4d:eb:4a:a1:98:01:bb:66:2a:49:ee:8a: a0:ae:a1:5c:d9:7b:51:ae:2b:5f:3f:7f:ab:9e:39: 2a:a0:29:e6:5d:45:72:07:07:96:45:7b:22:5c:b5: 57:d3:6c:ca:c0:45:25:0f:af:40:ab:ea:4e:29:26: 19:96:7a:41:ab:e2:dc:b6:13:f5:5f:df:9c:70:11: b4:c1:c2:90:08:a0:37:d9:76:d6:19:a2:b5:39:4a: 48:06:23:1c:e9:36:d4:ee:c9:ea:8f:d1:d2:57:c8: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E2:DB:0C:03:3D:11:D8:D6:13:1C:2A:E4:F0:CF:CF:0F:0E:FD:79 X509v3 Authority Key Identifier: keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/9BB410F021B011EFA6C95F83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.128.0/22 202.43.225.0-202.43.226.255 IPv6: 2403:43c0::/32 Signature Algorithm: sha256WithRSAEncryption 5a:49:95:c7:5e:cb:3f:47:c6:d2:cf:13:de:7b:6c:f9:9c:a6: fd:a4:51:01:cd:b5:5a:fd:ea:4d:43:87:a3:ed:a4:10:c8:b9: 8e:99:ee:42:ea:ca:ff:a0:58:1e:ef:01:40:5f:bd:51:f6:a9: 24:ef:a6:3b:d4:07:c6:32:66:19:83:7b:7d:9d:cc:58:8c:9e: 8f:b4:35:b2:64:e6:68:56:74:2e:d7:9b:48:21:38:3c:54:85: 6d:28:08:cf:4c:bf:96:f2:0a:7d:ca:df:e0:c8:24:74:ff:4f: cf:a4:63:f9:ec:93:91:d9:4a:94:a3:68:92:68:73:06:e7:c9: d3:82:d6:7e:77:ee:39:41:5f:94:5c:d5:41:ee:9c:64:17:18: 52:4e:23:d2:8f:6b:6f:9a:13:66:dd:f0:a5:71:89:3f:5c:75: ef:b5:b4:16:66:51:cc:12:1f:66:a6:4a:38:68:89:1d:1c:dd: 4c:28:9f:02:34:f1:24:73:8a:af:80:09:65:a9:96:d4:bc:8c: 0b:51:b3:c6:c3:4e:76:e0:af:1a:80:80:08:22:02:d2:d0:c1: 23:e0:8f:a8:f9:d6:29:01:2c:c5:45:2f:26:a9:3e:31:da:84: a4:c4:b5:56:af:b3:31:d0:0f:db:1e:96:b1:e7:02:94:3e:b3: ad:a8:e0:29 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOTAxMTAvBgNVBAUTKDNERTdFRkMwNDZBNjdCOTkyNUJCQkJEQzYxMzJCMTI5 NzVEQjRBNkQwHhcNMjUwODE0MjEwMDUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODllNGU4My01YjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkuOX0OBXizYTiK3irv4OhBmB6HIk8O1mQxvAPgdnVJcEeG5S5/XYkp0q6VNH YoLCENvdPIwpN61zuFGXgB9tXaOT5VFcLPsQaGoAAsiro07CoygWahOej7H2GCde UN+JY5l9UwWEXyhvGGOSwXJYJORPQmZTRW4cwLGDxKVJ4kX7tb/8oYtd8st68osJ K8J1hfs8DmKRVnxN60qhmAG7ZipJ7oqgrqFc2XtRritfP3+rnjkqoCnmXUVyBweW RXsiXLVX02zKwEUlD69Aq+pOKSYZlnpBq+LcthP1X9+ccBG0wcKQCKA32XbWGaK1 OUpIBiMc6TbU7snqj9HSV8iKWwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFOvi2wwD PRHY1hMcKuTwz88PDv15MB8GA1UdIwQYMBaAFD3n78BGpnuZJbu73GEysSl120pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE5MC9DMzczMDBFOEFF MTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1a2x1N3ZjWVRLeEtYWGJT bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlZnZ3RWFtZTVrbHU3dmNZVEt4S1hYYlNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzYxOTAvQzM3MzAwRThBRTE4MTFFQUE1MDkwMDcyQzRGOUFFMDIvOUJCNDEwRjAy MUIwMTFFRkE2Qzk1RjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBoEAgABMBQDBAJnd4AwDAMEAMor4QMEAMor4jANBAIAAjAHAwUAJANDwDAN BgkqhkiG9w0BAQsFAAOCAQEAWkmVx17LP0fG0s8T3nts+Zym/aRRAc21Wv3qTUOH o+2kEMi5jpnuQurK/6BYHu8BQF+9UfapJO+mO9QHxjJmGYN7fZ3MWIyej7Q1smTm aFZ0LtebSCE4PFSFbSgIz0y/lvIKfcrf4MgkdP9Pz6Rj+eyTkdlKlKNokmhzBufJ 04LWfnfuOUFflFzVQe6cZBcYUk4j0o9rb5oTZt3wpXGJP1x177W0FmZRzBIfZqZK OGiJHRzdTCifAjTxJHOKr4AJZamW1LyMC1GzxsNOduCvGoCACCIC0tDBI+CPqPnW KQEsxUUvJqk+MdqEpMS1Vq+zMdAP2x6WsecClD6zrajgKQ== -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:24 2025 by rpki-client