$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/3863960C7E0311EE8BCA7D33C4F9AE02.roa File: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (raw, json) Hash identifier: KTIq+toHRso6B9rhQjl5XAk1r2BSi4AiEZAdt6kkQZA= Subject key identifier: BE:8F:68:8B:84:7B:42:C3:B2:41:34:33:E8:40:C1:D5:7D:C5:44:AD Certificate issuer: /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Certificate serial: 0169 Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/3863960C7E0311EE8BCA7D33C4F9AE02.roa Signing time: Sun 05 Oct 2025 04:30:32 +0000 ROA not before: Sun 05 Oct 2025 04:30:32 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132254 IP address blocks: 103.72.90.0/24 maxlen: 24 103.72.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9 Validity Not Before: Oct 5 04:30:32 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e1f468-d831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5e:4e:93:c6:19:07:f6:27:c0:e0:9d:d9:e9: a6:23:46:1c:32:72:b8:e3:6a:4e:5f:98:80:1e:f0: f5:c5:31:2a:d0:8e:f9:a7:08:5b:5a:07:b5:fe:d6: a4:56:6d:e6:8f:c4:67:e2:0f:9e:2d:9b:bd:9f:97: 05:76:3d:79:65:6e:88:76:2a:63:e4:41:2e:ce:2d: 8e:45:30:ab:79:0b:b9:f1:a3:d5:87:7a:c9:8b:39: 72:17:ae:ad:fb:22:ec:3f:29:da:e8:9f:87:28:6c: dd:d4:68:b2:34:df:8a:6f:47:46:4c:72:aa:de:8f: e2:fc:06:bd:c6:78:b0:a1:ae:f9:98:33:1a:cc:2e: 46:98:c9:d8:51:9e:ff:08:99:16:40:cd:84:87:a4: 32:fc:01:dc:5e:ff:61:e8:32:c1:fe:6b:b8:e4:a8: 2c:29:bd:e9:de:2f:e5:e6:ae:ad:96:b4:94:7a:15: e5:2f:0b:f3:7c:d9:57:db:76:ea:63:26:d7:dc:33: cf:ba:84:aa:69:02:77:8d:4b:2c:ff:88:48:80:66: f9:47:27:7f:59:5e:b1:76:30:26:e1:10:58:96:7b: 98:d1:36:9f:03:64:be:ed:45:19:14:98:23:de:cc: f7:32:a7:e9:ff:0f:ba:1b:c7:0a:b6:1f:a6:d7:16: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8F:68:8B:84:7B:42:C3:B2:41:34:33:E8:40:C1:D5:7D:C5:44:AD X509v3 Authority Key Identifier: keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/3863960C7E0311EE8BCA7D33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.90.0/23 Signature Algorithm: sha256WithRSAEncryption 20:f8:98:b3:3d:de:07:1f:3b:96:21:07:1c:b5:db:d3:33:b6: a9:df:91:f9:50:2e:d8:5f:a8:20:e8:bd:48:7b:6c:25:da:9d: 54:90:5d:4b:fa:2b:55:ac:74:4f:01:1a:84:63:8c:c4:b7:cc: f1:f5:7b:57:2e:9a:a3:b5:e6:7b:95:2e:91:05:f6:0b:43:7f: 2c:29:40:50:ed:d6:9a:a9:6f:04:98:12:9d:4f:57:8c:ec:b3: 9f:cc:41:15:09:16:e2:6b:a0:c1:49:09:de:a8:18:a8:dc:d1: ab:ad:9b:d1:50:cf:f4:f6:2d:20:fc:e0:c9:a6:6a:1a:da:47: 16:40:8a:87:12:a8:4d:70:b4:76:c6:37:1c:ea:73:27:6a:70: f1:a2:cf:08:ac:39:3d:fd:5c:f7:34:65:02:c9:fd:e9:48:5e: 6c:37:8f:7b:ea:09:21:3d:4c:68:23:c9:39:aa:25:d3:69:4a: 17:09:68:1d:ce:f2:e0:59:9b:19:48:15:b8:42:fb:78:22:fd: 23:16:d7:01:86:2c:b7:5b:11:11:ab:92:bd:12:1c:96:4a:47: b3:a7:8e:64:ba:8d:bd:18:86:c4:a7:4e:c0:fd:47:92:3d:46: bd:dd:02:de:7a:05:22:15:a8:43:2c:78:f3:f4:47:7e:be:82: 54:46:b8:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFMjMxMTAvBgNVBAUTKEM5NEE0QUJBMzMxNTg5MzM5QjQ2NTFDMDVCOTJGRkUw MUJDQjM0QzkwHhcNMjUxMDA1MDQzMDMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxZjQ2OC1kODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0F5Ok8YZB/YnwOCd2emmI0YcMnK442pOX5iAHvD1xTEq0I75pwhbWge1/tak Vm3mj8Rn4g+eLZu9n5cFdj15ZW6Idipj5EEuzi2ORTCreQu58aPVh3rJizlyF66t +yLsPyna6J+HKGzd1GiyNN+Kb0dGTHKq3o/i/Aa9xniwoa75mDMazC5GmMnYUZ7/ CJkWQM2Eh6Qy/AHcXv9h6DLB/mu45KgsKb3p3i/l5q6tlrSUehXlLwvzfNlX23bq YybX3DPPuoSqaQJ3jUss/4hIgGb5Ryd/WV6xdjAm4RBYlnuY0TafA2S+7UUZFJgj 3sz3Mqfp/w+6G8cKth+m1xbUIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFL6PaIuE e0LDskE0M+hAwdV9xUStMB8GA1UdIwQYMBaAFMlKSrozFYkzm0ZRwFuS/+AbyzTJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0UyMy9CRTk3QjBBNjdE NjcxMUVFQjA2QTQzMTJDNEY5QUUwMi95VXBLdWpNVmlUT2JSbEhBVzVMXzRCdkxO TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVcEt1ak1WaVRPYlJsSEFXNUxfNEJ2TE5Nay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdFMjMvQkU5N0IwQTY3RDY3MTFFRUIwNkE0MzEyQzRGOUFFMDIvMzg2Mzk2MEM3 RTAzMTFFRThCQ0E3RDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnSFowDQYJKoZIhvcNAQELBQADggEBACD4mLM93gcfO5Yh Bxy129MztqnfkflQLthfqCDovUh7bCXanVSQXUv6K1WsdE8BGoRjjMS3zPH1e1cu mqO15nuVLpEF9gtDfywpQFDt1pqpbwSYEp1PV4zss5/MQRUJFuJroMFJCd6oGKjc 0autm9FQz/T2LSD84MmmahraRxZAiocSqE1wtHbGNxzqcydqcPGizwisOT39XPc0 ZQLJ/elIXmw3j3vqCSE9TGgjyTmqJdNpShcJaB3O8uBZmxlIFbhC+3gi/SMW1wGG LLdbERGrkr0SHJZKR7OnjmS6jb0YhsSnTsD9R5I9Rr3dAt56BSIVqEMsePP0R36+ glRGuEY= -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:37 2025 by rpki-client