$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/5AFB85086EC411ECB8E7492BC4F9AE02.roa File: 5AFB85086EC411ECB8E7492BC4F9AE02.roa (raw, json) Hash identifier: Tec1GQXrCvVOwblaXBeRPQBIHEsrifUiDT/fZJx0nLQ= Subject key identifier: DB:7B:39:7C:13:C7:ED:14:7D:66:2D:44:52:60:84:CD:CC:BB:A0:B2 Certificate issuer: /CN=A9195A3D/serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8 Certificate serial: 044B Authority key identifier: B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/5AFB85086EC411ECB8E7492BC4F9AE02.roa Signing time: Tue 23 Sep 2025 00:47:13 +0000 ROA not before: Tue 23 Sep 2025 00:47:13 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141004 IP address blocks: 103.154.184.0/23 maxlen: 23 2001:df5:4580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3D, serialNumber=B8225F1EB8676647C359DBC110BFEEDEB44FD5E8 Validity Not Before: Sep 23 00:47:13 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d1ee11-e7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:fc:63:87:79:5a:78:9f:f2:e7:13:07:09: ad:08:16:33:60:61:83:61:d7:f3:15:3a:33:10:93: 1c:5b:0c:7f:6b:97:1b:ba:4d:79:8f:01:8f:0f:94: 9b:90:cb:03:00:f1:0c:bc:36:df:0e:f0:ce:2d:ae: 36:71:95:be:db:a8:f5:97:08:58:0f:de:2d:07:e7: 25:03:b6:7e:24:1e:dd:6c:ef:19:1d:b7:f6:44:ef: 83:bc:36:03:cd:8f:30:51:f0:0b:94:62:e2:3b:4f: 45:31:45:60:18:8e:99:64:8e:56:ff:21:42:28:04: 25:90:4d:5d:76:0b:f6:0d:4f:24:71:54:b7:4b:86: 21:30:e5:ae:06:75:81:53:62:4d:b0:47:4c:b4:ff: e2:57:d1:49:76:f9:76:9b:a3:06:0d:89:e3:26:a9: 67:c7:56:b6:e6:2f:b3:99:99:fb:85:80:16:27:d8: 0c:9d:4e:77:cf:f4:c7:8a:98:3b:c4:b1:72:b8:97: 1a:33:29:fe:c1:3a:7f:4e:81:ce:ed:d3:27:cc:15: ea:08:ce:d9:7a:ef:55:71:af:45:7d:ad:ec:8c:0d: 8a:78:55:29:43:c0:64:8d:b4:2f:88:8e:23:9e:37: 55:cb:98:eb:c9:c5:d4:32:6e:24:87:1d:6a:3a:fd: a5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7B:39:7C:13:C7:ED:14:7D:66:2D:44:52:60:84:CD:CC:BB:A0:B2 X509v3 Authority Key Identifier: keyid:B8:22:5F:1E:B8:67:66:47:C3:59:DB:C1:10:BF:EE:DE:B4:4F:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/uCJfHrhnZkfDWdvBEL_u3rRP1eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uCJfHrhnZkfDWdvBEL_u3rRP1eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3D/69EFCDD26EC211EC878A102BC4F9AE02/5AFB85086EC411ECB8E7492BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.184.0/23 IPv6: 2001:df5:4580::/48 Signature Algorithm: sha256WithRSAEncryption 94:40:fb:84:ef:23:8c:99:46:b5:52:00:b3:4e:e1:79:dd:17: 7f:56:4d:df:14:b8:5e:53:f1:04:fb:e6:f0:d1:78:e2:a8:f5: a3:2a:57:4a:49:f8:48:1a:17:9c:21:fb:d7:05:22:bf:26:99: 50:f5:a1:4e:e0:1c:11:c8:af:c8:15:ce:c1:d1:ce:ab:0b:95: 4b:f4:35:dc:f8:40:a7:e3:03:e5:84:f5:52:3b:33:d2:fb:45: ae:e6:12:a7:3d:35:b9:55:76:fb:8f:b6:66:44:0c:b1:ba:95: 67:d0:aa:e8:c2:1d:f1:2b:b5:75:23:22:0d:18:5c:e8:12:64: 7f:f8:e0:83:4e:dd:ce:7a:ef:75:59:9d:2b:3b:a3:78:59:d7: f9:e1:3d:4a:56:fa:91:2f:6b:b2:20:68:f0:fb:b2:56:4e:e1: 24:a6:48:f2:bc:4c:d6:f2:9c:63:7f:64:af:9b:f4:e7:56:50: a5:bc:2e:21:08:e5:27:45:4e:a9:9a:c3:20:a8:4b:01:90:b8: a5:40:7f:c6:26:48:99:87:7e:44:44:b6:48:ba:94:17:89:a8: 1d:af:ed:a1:7e:76:bb:63:40:bb:c4:14:55:aa:4d:77:20:4e: 4d:c0:4b:ce:da:41:84:67:aa:2e:58:04:7a:f1:79:3f:2f:5f: dc:64:53:e1 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0QxMTAvBgNVBAUTKEI4MjI1RjFFQjg2NzY2NDdDMzU5REJDMTEwQkZFRURF QjQ0RkQ1RTgwHhcNMjUwOTIzMDA0NzEzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxZWUxMS1lN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXr8Y4d5Wnif8ucTBwmtCBYzYGGDYdfzFTozEJMcWwx/a5cbuk15jwGPD5Sb kMsDAPEMvDbfDvDOLa42cZW+26j1lwhYD94tB+clA7Z+JB7dbO8ZHbf2RO+DvDYD zY8wUfALlGLiO09FMUVgGI6ZZI5W/yFCKAQlkE1ddgv2DU8kcVS3S4YhMOWuBnWB U2JNsEdMtP/iV9FJdvl2m6MGDYnjJqlnx1a25i+zmZn7hYAWJ9gMnU53z/THipg7 xLFyuJcaMyn+wTp/ToHO7dMnzBXqCM7Zeu9Vca9Ffa3sjA2KeFUpQ8BkjbQviI4j njdVy5jrycXUMm4khx1qOv2l5wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNt7OXwT x+0UfWYtRFJghM3Mu6CyMB8GA1UdIwQYMBaAFLgiXx64Z2ZHw1nbwRC/7t60T9Xo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzRC82OUVGQ0REMjZF QzIxMUVDODc4QTEwMkJDNEY5QUUwMi91Q0pmSHJoblprZkRXZHZCRUxfdTNyUlAx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VDSmZIcmhuWmtmRFdkdkJFTF91M3JSUDFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVBM0QvNjlFRkNERDI2RUMyMTFFQzg3OEExMDJCQzRGOUFFMDIvNUFGQjg1MDg2 RUM0MTFFQ0I4RTc0OTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmrgwDwQCAAIwCQMHACABDfVFgDANBgkqhkiG9w0BAQsF AAOCAQEAlED7hO8jjJlGtVIAs07hed0Xf1ZN3xS4XlPxBPvm8NF44qj1oypXSkn4 SBoXnCH71wUivyaZUPWhTuAcEcivyBXOwdHOqwuVS/Q13PhAp+MD5YT1Ujsz0vtF ruYSpz01uVV2+4+2ZkQMsbqVZ9Cq6MId8Su1dSMiDRhc6BJkf/jgg07dznrvdVmd KzujeFnX+eE9Slb6kS9rsiBo8PuyVk7hJKZI8rxM1vKcY39kr5v051ZQpbwuIQjl J0VOqZrDIKhLAZC4pUB/xiZImYd+RES2SLqUF4moHa/toX52u2NAu8QUVapNdyBO TcBLztpBhGeqLlgEevF5Py9f3GRT4Q== -----END CERTIFICATE-----Generated at Mon Oct 20 17:04:22 2025 by rpki-client