$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa File: 9C749C7C140811EABB746522C4F9AE02.roa (raw, json) Hash identifier: PSYdfl98cedaU/3qMpT/EpqxaVey0RuTtf7go0CLQak= Subject key identifier: E4:F9:7D:41:3E:A7:C4:D7:F3:08:9A:92:5D:A7:76:3F:61:90:13:6E Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Certificate serial: 0C37 Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa Signing time: Wed 10 Sep 2025 18:59:03 +0000 ROA not before: Wed 10 Sep 2025 18:59:03 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139590 IP address blocks: 103.142.34.0/23 maxlen: 23 103.142.34.0/24 maxlen: 24 103.142.35.0/24 maxlen: 24 2400:63a0::/32 maxlen: 32 2400:63a0::/48 maxlen: 48 2400:63a0:1::/48 maxlen: 48 2400:63a0:2::/48 maxlen: 48 2400:63a0:3::/48 maxlen: 48 2400:63a0:4::/48 maxlen: 48 2400:63a0:5::/48 maxlen: 48 2400:63a0:6::/48 maxlen: 48 2400:63a0:7::/48 maxlen: 48 2400:63a0:8::/48 maxlen: 48 2400:63a0:9::/48 maxlen: 48 2400:63a0:a::/48 maxlen: 48 2400:63a0:b::/48 maxlen: 48 2400:63a0:c::/48 maxlen: 48 2400:63a0:d::/48 maxlen: 48 2400:63a0:11::/48 maxlen: 48 2400:63a0:12::/48 maxlen: 48 2400:63a0:40::/42 maxlen: 42 2400:63a0:80::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3127 (0xc37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Validity Not Before: Sep 10 18:59:03 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c1ca76-2f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:5b:4f:38:ca:2c:09:ab:fd:40:da:ee:e5: ac:db:f7:21:5b:0d:a5:d2:a8:e1:bb:00:df:75:28: 8b:64:33:8f:00:e7:0e:8b:49:c1:33:c8:10:ee:52: 5a:61:ca:21:9c:a3:22:cc:92:fe:da:65:09:14:f9: d5:03:ec:62:5d:af:60:c1:c4:ca:a8:05:f4:c4:7d: c4:e8:e5:48:90:8c:cb:37:3c:a0:0a:13:68:b5:1b: a2:4a:2f:13:94:e6:db:84:03:a1:54:73:2f:49:f3: 6c:42:ec:64:ba:6d:52:de:2d:ce:96:73:5a:79:ab: 57:6a:18:59:ea:7d:19:d5:e5:6e:23:75:65:fa:7b: 75:09:92:da:9e:4e:21:2a:26:b8:27:ea:67:f3:8e: bc:30:98:a6:0f:57:9f:5c:70:80:95:b7:71:95:4c: 54:c9:ee:a8:7a:9b:c7:50:9c:63:db:41:5c:6e:ce: 0f:2c:f7:83:ee:44:7f:ea:c4:da:a8:34:78:ea:32: 02:f9:8d:7a:f3:5b:5e:3a:32:bb:aa:8f:12:ad:60: 51:bb:d5:ee:e9:89:6a:5c:4b:85:53:c4:1e:42:31: 19:cd:9e:b6:32:c0:4e:ba:e8:2e:9f:e2:8d:ca:95: c8:8b:07:d8:ec:1a:93:86:6e:07:ae:a5:20:a7:ad: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F9:7D:41:3E:A7:C4:D7:F3:08:9A:92:5D:A7:76:3F:61:90:13:6E X509v3 Authority Key Identifier: keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/9C749C7C140811EABB746522C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.34.0/23 IPv6: 2400:63a0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:e1:cf:ce:b1:cf:12:5b:84:a2:64:62:b3:e1:c1:c3:d9:ca: bc:c2:ca:6e:b4:a1:12:d6:cb:a4:8a:b8:e2:c7:91:d2:b9:d8: 75:31:d9:81:d5:f7:ac:ae:32:fa:c1:48:79:e4:69:95:fc:d4: 3b:07:41:29:5c:97:23:fa:72:4e:71:b6:3a:f8:02:8a:a2:4b: 5a:94:0d:88:d8:8b:83:30:2d:8c:13:04:b7:82:8b:32:af:8a: d5:6d:87:9c:2a:ff:7f:86:61:37:25:ff:dd:37:d5:42:9a:7e: 7d:23:b4:fc:94:f7:f7:f4:7c:bb:b7:48:7a:fc:e9:9f:6f:80: c9:ba:9c:33:ab:dd:66:9d:b8:4c:78:93:f5:5d:ba:4f:21:54: 3b:1b:05:84:62:37:64:90:7c:b4:dd:ff:a5:4f:6f:45:63:05: 35:98:18:59:51:7a:fd:e9:80:ed:79:d6:be:1d:64:8a:cf:73: 18:f2:77:4b:64:e9:25:db:e2:e7:92:ef:da:d0:54:69:67:40: b6:a6:c3:b2:6d:ce:38:10:41:ef:c0:99:a4:8b:a8:74:a6:97: cf:81:80:29:d6:c2:83:cc:31:c4:43:1b:32:22:6c:c1:c6:42: bd:27:58:2f:7f:35:fb:37:26:d1:9d:a9:85:27:ef:fc:be:85: 07:3c:ee:38 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyODUxMTAvBgNVBAUTKDBFRUUwRkJGNzg2QTc3N0Y0QzI3NDE1M0Y3NTM2RjNE Rjg5Rjk0OTIwHhcNMjUwOTEwMTg1OTAzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMxY2E3Ni0yZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzh5bTzjKLAmr/UDa7uWs2/chWw2l0qjhuwDfdSiLZDOPAOcOi0nBM8gQ7lJa YcohnKMizJL+2mUJFPnVA+xiXa9gwcTKqAX0xH3E6OVIkIzLNzygChNotRuiSi8T lObbhAOhVHMvSfNsQuxkum1S3i3OlnNaeatXahhZ6n0Z1eVuI3Vl+nt1CZLank4h Kia4J+pn8468MJimD1efXHCAlbdxlUxUye6oepvHUJxj20Fcbs4PLPeD7kR/6sTa qDR46jIC+Y1681teOjK7qo8SrWBRu9Xu6YlqXEuFU8QeQjEZzZ62MsBOuugun+KN ypXIiwfY7BqThm4HrqUgp61ykQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOT5fUE+ p8TX8wiakl2ndj9hkBNuMB8GA1UdIwQYMBaAFA7uD794and/TCdBU/dTbz34n5SS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzI4NS9GRTdGNjM3QzE0 MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQzOU1KMEZUOTFOdlBmaWZs SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1NFB2M2hxZDM5TUowRlQ5MU52UGZpZmxKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcyODUvRkU3RjYzN0MxNDA2MTFFQUE3MjgxMzFGQzRGOUFFMDIvOUM3NDlDN0Mx NDA4MTFFQUJCNzQ2NTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnjiIwDQQCAAIwBwMFACQAY6AwDQYJKoZIhvcNAQELBQAD ggEBACzhz86xzxJbhKJkYrPhwcPZyrzCym60oRLWy6SKuOLHkdK52HUx2YHV96yu MvrBSHnkaZX81DsHQSlclyP6ck5xtjr4AoqiS1qUDYjYi4MwLYwTBLeCizKvitVt h5wq/3+GYTcl/9031UKafn0jtPyU9/f0fLu3SHr86Z9vgMm6nDOr3WaduEx4k/Vd uk8hVDsbBYRiN2SQfLTd/6VPb0VjBTWYGFlRev3pgO151r4dZIrPcxjyd0tk6SXb 4ueS79rQVGlnQLamw7JtzjgQQe/AmaSLqHSml8+BgCnWwoPMMcRDGzIibMHGQr0n WC9/Nfs3JtGdqYUn7/y+hQc87jg= -----END CERTIFICATE-----Generated at Tue Oct 21 00:38:24 2025 by rpki-client