$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/8A574D9AB8AB11EEA866EB27C4F9AE02.roa File: 8A574D9AB8AB11EEA866EB27C4F9AE02.roa (raw, json) Hash identifier: Pi2lHW1DBGVDDiFKA6gLvJJbMOhPiktvXLmZ+ShVpYM= Subject key identifier: 9D:2A:4D:B8:1B:AF:30:1F:49:24:A4:D6:60:48:46:79:B8:6C:F9:6E Certificate issuer: /CN=A9188F45/serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Certificate serial: 0146 Authority key identifier: 46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/8A574D9AB8AB11EEA866EB27C4F9AE02.roa Signing time: Wed 01 Oct 2025 05:32:52 +0000 ROA not before: Wed 01 Oct 2025 05:32:52 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 23735 IP address blocks: 103.233.60.0/22 maxlen: 22 103.233.60.0/24 maxlen: 24 103.233.61.0/24 maxlen: 24 103.233.62.0/24 maxlen: 24 103.233.63.0/24 maxlen: 24 116.206.172.0/22 maxlen: 22 116.206.172.0/24 maxlen: 24 116.206.173.0/24 maxlen: 24 116.206.174.0/24 maxlen: 24 116.206.175.0/24 maxlen: 24 202.49.164.0/24 maxlen: 24 202.49.165.0/24 maxlen: 24 202.49.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F45, serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Validity Not Before: Oct 1 05:32:52 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dcbd03-124d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:ac:05:4d:39:e7:48:a7:19:cd:62:b6:b1: f7:8b:52:69:b1:a0:db:49:d9:a9:29:6d:2f:46:96: fc:6d:a3:67:e1:64:f9:06:87:45:ef:b9:8a:30:a1: a2:b2:83:76:32:d7:33:ba:61:6d:9a:01:1c:82:5f: af:80:98:0e:34:e5:55:a8:73:45:53:14:00:4f:22: c7:8a:20:ac:39:b2:22:b9:1a:68:66:f8:bd:9b:f7: 1b:7a:85:1b:95:4e:d5:e4:e9:3e:0a:54:2c:d0:79: 2b:69:6e:36:66:64:23:b4:43:e5:36:21:af:5c:19: aa:49:da:24:f7:02:ce:57:ad:7a:ac:fd:54:e9:10: ba:6f:db:93:72:8c:32:94:b8:e3:b1:67:78:39:24: ea:00:5a:7a:d4:61:1d:c3:a9:a8:2e:1b:2b:bc:d8: ff:0f:c5:22:bc:cc:c0:1a:cd:13:11:28:1f:bc:cb: 21:b0:ac:a2:7c:3d:a1:0a:f0:e8:f5:c4:4d:3d:a4: d1:6d:28:7a:3c:17:32:c7:56:84:45:e2:d1:fe:b6: 30:50:ee:5c:6f:26:e2:99:7f:33:9c:91:16:d4:77: e8:98:ea:d3:45:40:12:a8:e7:60:a0:8f:ea:0e:6b: dd:ee:6a:2e:f6:22:b5:7b:51:ca:93:af:ae:b2:7e: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2A:4D:B8:1B:AF:30:1F:49:24:A4:D6:60:48:46:79:B8:6C:F9:6E X509v3 Authority Key Identifier: keyid:46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/8A574D9AB8AB11EEA866EB27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.233.60.0/22 116.206.172.0/22 202.49.164.0/23 202.49.168.0/24 Signature Algorithm: sha256WithRSAEncryption b3:7e:14:92:db:87:65:ca:0e:a0:5b:37:7a:c8:7f:4d:fa:ba: 00:fb:19:ae:8a:ee:51:b1:ec:78:20:8c:b7:3e:43:33:dd:78: 8a:b3:1e:e2:20:9b:fe:97:f4:40:b9:2b:cc:0b:25:4a:9f:17: 00:94:f3:bf:5b:50:c8:80:8a:55:60:56:5b:6f:3c:78:7f:a6: 33:f7:c0:13:21:5d:08:6c:91:a0:e8:9d:35:4f:e9:d1:52:a0: e5:ae:c5:e3:ed:5c:c6:d5:eb:b1:1a:f8:e4:fe:48:97:29:36: 5b:fb:ba:53:ce:37:22:b9:52:3c:31:f8:3a:87:e3:6b:39:3d: cf:9c:c0:18:c9:71:67:e0:67:61:41:3c:7d:9f:40:64:c9:39: 4b:0d:ca:55:34:15:8b:a6:d8:4c:dc:b6:43:0a:20:df:eb:17: 65:2d:08:ea:9c:5a:28:27:99:37:e3:cc:0a:ca:57:de:d4:66: 87:1e:71:66:a5:14:5d:b6:26:ed:4d:03:ce:6f:56:46:af:9a: 47:4e:ca:25:90:4a:6b:b3:07:cc:af:6f:5c:a3:7f:19:69:4a: ab:b6:d0:71:66:ff:c1:b6:b9:33:cc:36:38:49:af:0c:3d:f1: 1d:31:b8:63:11:0a:1e:6b:a9:2f:66:f3:09:43:fc:d8:76:e5: d7:41:56:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNDUxMTAvBgNVBAUTKDQ2RUYwNEJGMTE5OEJFMEUyQTMxM0FBN0FEMEFCMEZD N0UwODFDNDUwHhcNMjUxMDAxMDUzMjUyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjYmQwMy0xMjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMmsBU0550inGc1itrH3i1JpsaDbSdmpKW0vRpb8baNn4WT5BodF77mKMKGi soN2MtczumFtmgEcgl+vgJgONOVVqHNFUxQATyLHiiCsObIiuRpoZvi9m/cbeoUb lU7V5Ok+ClQs0HkraW42ZmQjtEPlNiGvXBmqSdok9wLOV616rP1U6RC6b9uTcowy lLjjsWd4OSTqAFp61GEdw6moLhsrvNj/D8UivMzAGs0TESgfvMshsKyifD2hCvDo 9cRNPaTRbSh6PBcyx1aEReLR/rYwUO5cbybimX8znJEW1HfomOrTRUASqOdgoI/q Dmvd7mou9iK1e1HKk6+usn7CFwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFJ0qTbgb rzAfSSSk1mBIRnm4bPluMB8GA1UdIwQYMBaAFEbvBL8RmL4OKjE6p60KsPx+CBxF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY0NS9GRDk5NjUxNEI4 QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZnNHFNVHFuclFxd19INElI RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1OEV2eEdZdmc0cU1UcW5yUXF3X0g0SUhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhGNDUvRkQ5OTY1MTRCOEFBMTFFRTk5RDZDODFCQzRGOUFFMDIvOEE1NzREOUFC OEFCMTFFRUE4NjZFQjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJn6TwDBAJ0zqwDBAHKMaQDBADKMagwDQYJKoZIhvcNAQEL BQADggEBALN+FJLbh2XKDqBbN3rIf036ugD7Ga6K7lGx7HggjLc+QzPdeIqzHuIg m/6X9EC5K8wLJUqfFwCU879bUMiAilVgVltvPHh/pjP3wBMhXQhskaDonTVP6dFS oOWuxePtXMbV67Ea+OT+SJcpNlv7ulPONyK5Ujwx+DqH42s5Pc+cwBjJcWfgZ2FB PH2fQGTJOUsNylU0FYum2EzctkMKIN/rF2UtCOqcWignmTfjzArKV97UZocecWal FF22Ju1NA85vVkavmkdOyiWQSmuzB8yvb1yjfxlpSqu20HFm/8G2uTPMNjhJrww9 8R0xuGMRCh5rqS9m8wlD/Nh25ddBVvg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:16 2025 by rpki-client