$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/ED63E306F5EC11EFBB174335C4F9AE02.roa File: ED63E306F5EC11EFBB174335C4F9AE02.roa (raw, json) Hash identifier: SWCcm9UJuFnyydTujMQaVhSJ1qOMjifkiPJ4UhwGm9c= Subject key identifier: 7C:58:13:54:16:4F:59:25:B5:4F:3C:79:72:D3:59:07:E3:3C:D0:A7 Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Certificate serial: 91 Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/ED63E306F5EC11EFBB174335C4F9AE02.roa Signing time: Fri 19 Sep 2025 11:48:19 +0000 ROA not before: Fri 19 Sep 2025 11:48:19 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 136988 IP address blocks: 103.101.128.0/22 maxlen: 22 173.234.104.0/21 maxlen: 21 173.234.106.0/23 maxlen: 23 173.234.108.0/23 maxlen: 23 173.234.111.0/24 maxlen: 24 2401:d040::/36 maxlen: 36 2401:d040:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Validity Not Before: Sep 19 11:48:19 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68cd4303-f495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e1:8d:27:43:b8:59:b6:74:b6:35:a3:8e:c2: 84:1c:e3:53:87:92:dd:ea:9d:dd:b8:ef:a2:17:79: c9:4e:5e:9b:3e:91:b6:75:66:1d:bf:36:12:8a:ec: 0c:c4:d4:a2:7d:b7:d3:51:59:fd:88:22:d9:31:20: f1:cd:6d:8d:a3:c2:de:6e:e1:df:41:d7:86:40:be: 6e:15:4e:f0:e7:3a:75:c0:a8:9f:5d:82:5a:6e:eb: 93:fa:27:dd:5e:4c:d3:7a:10:5c:bd:07:e4:6f:11: 76:d7:f6:03:7b:09:99:92:f9:88:9a:2d:aa:51:9c: 64:18:e3:52:f5:8b:07:1e:88:3f:f8:f4:28:0f:ed: f2:6c:90:85:54:ae:75:ee:0c:6e:fb:ec:d0:bb:af: 87:c7:57:84:c1:b3:bd:63:24:30:7b:1e:16:7c:e8: 1b:ad:2d:79:5c:df:63:dc:e6:96:24:b3:d5:e1:43: d2:97:83:4b:65:68:a8:66:f3:f3:05:34:98:d8:b5: 26:c7:c1:9d:56:b1:4b:73:69:c4:e9:9b:24:9f:08: 48:0c:c0:98:84:60:0c:c5:1c:f5:54:25:17:4f:de: b5:98:c5:de:32:ed:1e:f3:bd:08:6d:9a:78:32:4b: fe:b9:d4:5e:e2:db:8f:5c:7d:7c:3e:0e:bf:bc:f8: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:58:13:54:16:4F:59:25:B5:4F:3C:79:72:D3:59:07:E3:3C:D0:A7 X509v3 Authority Key Identifier: keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/ED63E306F5EC11EFBB174335C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.128.0/22 173.234.104.0/21 IPv6: 2401:d040::/35 Signature Algorithm: sha256WithRSAEncryption b8:c8:d3:a5:2c:3a:83:3a:aa:3d:42:3c:ef:7a:31:1c:97:26: 06:51:86:8c:26:61:6d:1a:bf:07:63:34:99:8f:0a:04:e6:4a: 67:a5:07:93:ea:75:a1:44:ac:bf:48:de:a5:14:bd:4b:a5:3c: ba:17:6b:7b:74:f8:80:c8:10:c6:fe:a7:95:81:be:ce:2e:d6: 49:5f:80:78:42:54:37:d4:f7:05:57:64:02:5a:90:6a:d2:13: 72:8c:c9:6f:b5:c9:9d:d3:62:10:cb:2d:96:09:d3:97:26:ef: 9b:e3:df:94:3b:06:ec:a7:c6:e6:79:98:84:dc:03:1f:a9:7c: 04:1e:35:b6:4b:ca:57:2a:0a:75:e8:d3:89:4e:f1:fe:42:e5: 98:06:93:cb:2e:fe:48:f4:36:02:1a:8f:4e:ae:6c:2e:6f:3d: bb:58:5a:41:96:96:16:7f:c3:d2:e3:f7:04:72:65:30:c0:6b: 99:c6:65:04:33:a1:29:ec:c7:dd:29:eb:82:f6:59:cf:b5:79: 6c:3c:33:ad:0d:d8:55:8c:cf:4c:ab:af:c7:a7:07:4d:a2:2d: a2:bb:da:22:e8:91:6e:b1:85:1e:b0:2a:78:eb:17:af:b4:65: e5:f7:74:41:4c:f9:59:f8:1c:d6:04:41:64:7e:aa:c2:5b:43: e3:5d:39:f7 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBQjgxMTAvBgNVBAUTKDMxODhGOUI5RjVFOTBBRkIwREIwREU2NTY1RjAyQzkw QkVFQTQ4RDAwHhcNMjUwOTE5MTE0ODE5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNkNDMwMy1mNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uGNJ0O4WbZ0tjWjjsKEHONTh5Ld6p3duO+iF3nJTl6bPpG2dWYdvzYSiuwM xNSifbfTUVn9iCLZMSDxzW2No8LebuHfQdeGQL5uFU7w5zp1wKifXYJabuuT+ifd XkzTehBcvQfkbxF21/YDewmZkvmImi2qUZxkGONS9YsHHog/+PQoD+3ybJCFVK51 7gxu++zQu6+Hx1eEwbO9YyQwex4WfOgbrS15XN9j3OaWJLPV4UPSl4NLZWioZvPz BTSY2LUmx8GdVrFLc2nE6ZsknwhIDMCYhGAMxRz1VCUXT961mMXeMu0e870IbZp4 Mkv+udRe4tuPXH18Pg6/vPjcmwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHxYE1QW T1kltU88eXLTWQfjPNCnMB8GA1UdIwQYMBaAFDGI+bn16Qr7DbDeZWXwLJC+6kjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zQjBBOUM2NEQx QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2c05zTjVsWmZBc2tMN3FT TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODRBQjgvM0IwQTlDNjREMUIwMTFFRjhDMjBERDMyQzRGOUFFMDIvRUQ2M0UzMDZG NUVDMTFFRkJCMTc0MzM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBAJnZYADBAOt6mgwDgQCAAIwCAMGBSQB0EAAMA0GCSqGSIb3 DQEBCwUAA4IBAQC4yNOlLDqDOqo9QjzvejEclyYGUYaMJmFtGr8HYzSZjwoE5kpn pQeT6nWhRKy/SN6lFL1LpTy6F2t7dPiAyBDG/qeVgb7OLtZJX4B4QlQ31PcFV2QC WpBq0hNyjMlvtcmd02IQyy2WCdOXJu+b49+UOwbsp8bmeZiE3AMfqXwEHjW2S8pX Kgp16NOJTvH+QuWYBpPLLv5I9DYCGo9Ormwubz27WFpBlpYWf8PS4/cEcmUwwGuZ xmUEM6Ep7MfdKeuC9lnPtXlsPDOtDdhVjM9Mq6/HpwdNoi2iu9oi6JFusYUesCp4 6xevtGXl93RBTPlZ+BzWBEFkfqrCW0PjXTn3 -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:05 2025 by rpki-client