$ rpki-client -vvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/341206FE1EFB11EEB72FB14EC4F9AE02.roa File: 341206FE1EFB11EEB72FB14EC4F9AE02.roa (raw, json) Hash identifier: 4o3wCFVGGhNXownasTh1SWA7+aLPJnMGrj0RWBQMCcc= Subject key identifier: BC:0A:68:1B:57:FD:26:AA:C2:CB:E8:4D:9B:55:3A:F7:9C:F9:11:C9 Certificate issuer: /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE Certificate serial: 01A4 Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/341206FE1EFB11EEB72FB14EC4F9AE02.roa Signing time: Wed 01 Oct 2025 04:01:47 +0000 ROA not before: Wed 01 Oct 2025 04:01:46 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 151500 IP address blocks: 103.236.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186004, serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE Validity Not Before: Oct 1 04:01:46 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68dca7aa-3fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:ca:28:97:d6:37:a7:a7:ba:12:ca:ac:7a: b9:44:48:7b:89:6d:3c:78:67:85:92:63:7d:7f:8e: 9f:2e:89:9c:2b:1c:f4:b0:95:10:62:12:81:17:65: d7:be:39:3a:3d:a1:0b:f0:a6:86:03:12:36:c4:cd: b9:73:17:b5:39:39:dd:21:f2:b1:03:03:ea:2c:95: 9f:bc:92:4c:45:e3:3d:d4:f3:91:84:13:f6:79:69: 16:7c:3c:a4:bf:fa:fa:69:50:d3:c2:43:69:a1:d8: 58:ca:8d:9a:4e:d7:ce:1b:55:96:f6:7d:3e:fe:e5: b5:9b:a7:d0:c4:df:d6:58:6f:11:36:0f:62:1d:90: 50:f6:cc:d7:47:4b:e2:96:e6:dd:53:38:51:aa:95: 27:a9:a6:91:54:bc:79:b7:2e:e6:86:90:6a:8e:a9: 1e:f9:56:50:13:c8:12:19:6e:9f:82:8e:28:50:a8: f0:cb:57:cf:d7:0b:f1:38:a2:3e:09:90:15:b1:3f: 35:90:64:e3:48:c0:f6:f8:e1:4f:16:e5:e6:69:5c: ca:f9:0a:d5:15:f6:f4:75:d0:70:20:f7:ec:00:65: 2f:90:f3:48:53:d3:a1:b9:13:76:a4:e4:73:ae:af: 89:8e:6c:8e:70:a2:c2:38:01:1d:59:1c:e7:7b:a3: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0A:68:1B:57:FD:26:AA:C2:CB:E8:4D:9B:55:3A:F7:9C:F9:11:C9 X509v3 Authority Key Identifier: keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/341206FE1EFB11EEB72FB14EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.236.106.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:67:75:5a:71:b9:2e:12:38:ae:7f:d1:1e:c3:5f:6f:15:3f: 83:59:3a:8b:ae:cf:27:6d:7a:d3:e6:02:d8:ac:40:d0:2a:fa: 41:93:1f:07:e8:ed:d4:19:b0:70:b4:5e:a6:50:4d:11:83:7b: 62:3d:4d:79:2b:ba:f2:92:c2:7b:9a:38:2e:cf:9f:31:8c:41: 88:0d:a2:89:03:3d:8a:bb:b4:44:34:07:8d:ed:7a:65:68:6e: a2:5b:18:4c:b4:93:86:bd:78:96:66:cb:60:92:5f:2f:06:88: da:04:73:9c:62:51:8c:58:d6:17:01:65:fb:fa:0f:e6:9d:cb: a2:4e:5c:cc:87:b9:47:6b:36:0c:30:a2:5e:c3:56:42:13:24: 58:46:b7:95:9a:0b:93:2b:2f:ed:ee:86:53:70:b9:cc:26:1e: 5a:e0:a2:d5:8a:3e:ef:cd:ea:42:ee:8a:ee:7b:e9:48:eb:3a: 14:75:7b:eb:04:8e:ba:ba:00:ba:d3:e3:c5:a0:0c:c4:7f:08: 4b:52:3e:e8:76:ea:dd:28:b1:6b:f8:0b:89:44:c5:2c:4c:d9: eb:d0:84:9e:19:74:e8:1b:ad:8a:6f:46:3e:7c:e6:92:dd:6b: e0:6f:4a:9b:fa:d3:58:96:6b:c5:31:b0:b3:c6:67:59:25:92: 71:c3:6b:d5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYwMDQxMTAvBgNVBAUTKDQ0NEVCNzUzNTRDMzcwNkUzOURFQTA4RkU5NTA0NENE MjY2M0Q2QUUwHhcNMjUxMDAxMDQwMTQ2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjYTdhYS0zZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzvKKJfWN6enuhLKrHq5REh7iW08eGeFkmN9f46fLomcKxz0sJUQYhKBF2XX vjk6PaEL8KaGAxI2xM25cxe1OTndIfKxAwPqLJWfvJJMReM91PORhBP2eWkWfDyk v/r6aVDTwkNpodhYyo2aTtfOG1WW9n0+/uW1m6fQxN/WWG8RNg9iHZBQ9szXR0vi lubdUzhRqpUnqaaRVLx5ty7mhpBqjqke+VZQE8gSGW6fgo4oUKjwy1fP1wvxOKI+ CZAVsT81kGTjSMD2+OFPFuXmaVzK+QrVFfb0ddBwIPfsAGUvkPNIU9OhuRN2pORz rq+JjmyOcKLCOAEdWRzne6PR9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLwKaBtX /SaqwsvoTZtVOvec+RHJMB8GA1UdIwQYMBaAFEROt1NUw3BuOd6gj+lQRM0mY9au MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjAwNC8yMDFGNjg2MDFF RjgxMUVFQTkyNjVEMjRDNEY5QUUwMi9SRTYzVTFURGNHNDUzcUNQNlZCRXpTWmox cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFNjNVMVREY0c0NTNxQ1A2VkJFelNaajFxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYwMDQvMjAxRjY4NjAxRUY4MTFFRUE5MjY1RDI0QzRGOUFFMDIvMzQxMjA2RkUx RUZCMTFFRUI3MkZCMTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn7GowDQYJKoZIhvcNAQELBQADggEBAF1ndVpxuS4SOK5/ 0R7DX28VP4NZOouuzydtetPmAtisQNAq+kGTHwfo7dQZsHC0XqZQTRGDe2I9TXkr uvKSwnuaOC7PnzGMQYgNookDPYq7tEQ0B43temVobqJbGEy0k4a9eJZmy2CSXy8G iNoEc5xiUYxY1hcBZfv6D+ady6JOXMyHuUdrNgwwol7DVkITJFhGt5WaC5MrL+3u hlNwucwmHlrgotWKPu/N6kLuiu576UjrOhR1e+sEjrq6ALrT48WgDMR/CEtSPuh2 6t0osWv4C4lExSxM2evQhJ4ZdOgbrYpvRj585pLda+BvSpv601iWa8UxsLPGZ1kl knHDa9U= -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:41 2025 by rpki-client