$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/920E981CCAAA11ED8371524CC4F9AE02.roa File: 920E981CCAAA11ED8371524CC4F9AE02.roa (raw, json) Hash identifier: +6obkqNFt0tnKMRz6dRit6ArMoN+fxhvRElw6ROUx6U= Subject key identifier: EC:27:8D:1F:02:83:74:4F:E2:7C:24:48:57:A9:26:D3:0E:CE:0D:04 Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B Certificate serial: 02EE Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/920E981CCAAA11ED8371524CC4F9AE02.roa Signing time: Fri 27 Jun 2025 01:37:57 +0000 ROA not before: Fri 27 Jun 2025 01:37:57 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 150683 IP address blocks: 103.189.68.0/24 maxlen: 24 103.189.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197202, serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B Validity Not Before: Jun 27 01:37:57 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685df5f4-e154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:28:7f:de:d0:74:b7:00:fe:76:b4:3c:de: 69:e2:2d:6c:b7:20:f6:18:ce:58:d9:75:45:9a:04: df:80:6f:b7:fe:9a:3b:92:6f:1a:2c:a6:5e:3d:71: 25:5c:1b:25:4f:66:f5:23:b6:48:cb:c5:d0:d9:09: 88:18:7d:7e:69:89:b8:11:83:f8:fc:4f:7e:f1:74: 53:a3:0b:09:ed:50:e4:d9:1f:67:3a:6c:da:aa:ec: 34:ad:c0:36:a4:1e:db:99:e3:e4:1b:db:13:31:ef: 4e:13:81:fc:fc:d9:25:fa:98:71:5a:a8:e6:10:59: 6f:92:23:7b:15:44:a6:c1:ce:7c:db:48:a1:68:0d: 83:6e:10:2c:5c:ff:f2:ab:c4:33:7a:65:7b:d6:66: cd:88:da:c4:42:29:57:de:63:e5:13:1b:6e:b2:62: 18:67:b6:1b:d0:17:cd:ff:b6:61:ea:dd:5a:dd:39: 9a:c2:b2:42:58:ac:d2:c3:88:5a:f7:c3:f9:ed:65: 78:49:7f:4c:c3:9b:48:28:ab:4f:db:5e:5c:20:6c: 40:ce:7c:31:2e:c9:eb:b8:e2:2b:49:94:a6:5d:a5: 35:36:09:da:31:3f:cb:41:bd:a1:48:6d:cc:05:b6: f9:13:8c:74:bf:c7:48:23:c6:3f:4a:fa:d0:db:94: a5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:27:8D:1F:02:83:74:4F:E2:7C:24:48:57:A9:26:D3:0E:CE:0D:04 X509v3 Authority Key Identifier: keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/920E981CCAAA11ED8371524CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.68.0/23 Signature Algorithm: sha256WithRSAEncryption 52:7b:6a:eb:e8:86:a7:46:cf:7e:e2:fa:05:3c:9d:6f:90:24: 16:52:17:44:1d:f4:3a:80:54:e8:51:aa:d1:6a:24:51:e7:29: c0:55:0e:df:17:35:aa:68:05:92:78:5c:1e:6d:27:fb:dd:5a: 6b:ca:6b:ae:32:85:55:e1:87:f8:c2:26:4b:97:c9:82:46:4c: 11:31:20:b5:73:e4:f9:21:cc:ce:9c:ac:87:06:d4:fd:05:24: 29:a3:bf:9b:35:3f:6f:a2:17:4f:dd:b5:c1:0f:63:6c:78:13: 91:4b:b0:82:2a:7b:6b:1a:97:dc:23:32:8f:bc:91:8b:54:e6: f0:03:97:21:5e:a5:b2:03:7c:22:10:77:d9:12:fb:57:0c:07: b3:33:6a:6f:59:d9:36:c2:7f:6c:bb:9e:79:dc:b6:38:f8:4d: b5:63:26:6b:44:d8:4c:e4:08:5a:7b:c4:db:73:0f:98:05:7f: 2a:1d:d2:16:8a:18:9d:b4:8b:10:41:8c:8f:fd:44:f9:77:19: c0:0f:39:7a:d6:1e:87:83:69:da:59:d6:62:f6:5a:3d:95:8f: a9:2e:bf:e9:0b:54:00:0d:24:69:25:26:09:f7:36:07:29:b1: 15:ef:e6:01:36:5e:49:98:29:fa:9f:1d:b0:98:fc:4e:9f:7c: 57:e6:c4:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMDIxMTAvBgNVBAUTKEUzQ0Y0NUY4MDUxMDYzQkJEQjMxN0ZERDE1MTEzMkE5 NDAwNEZENUIwHhcNMjUwNjI3MDEzNzU3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVkZjVmNC1lMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJ8of97QdLcA/na0PN5p4i1styD2GM5Y2XVFmgTfgG+3/po7km8aLKZePXEl XBslT2b1I7ZIy8XQ2QmIGH1+aYm4EYP4/E9+8XRTowsJ7VDk2R9nOmzaquw0rcA2 pB7bmePkG9sTMe9OE4H8/Nkl+phxWqjmEFlvkiN7FUSmwc5820ihaA2DbhAsXP/y q8QzemV71mbNiNrEQilX3mPlExtusmIYZ7Yb0BfN/7Zh6t1a3TmawrJCWKzSw4ha 98P57WV4SX9Mw5tIKKtP215cIGxAznwxLsnruOIrSZSmXaU1NgnaMT/LQb2hSG3M Bbb5E4x0v8dII8Y/SvrQ25SlYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOwnjR8C g3RP4nwkSFepJtMOzg0EMB8GA1UdIwQYMBaAFOPPRfgFEGO72zF/3RURMqlABP1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIwMi8wQUZFQ0E3MEY3 MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3dmJNWF9kRlJFeXFVQUVf VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ4OUYtQVVRWTd2Yk1YX2RGUkV5cVVBRV9Wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcyMDIvMEFGRUNBNzBGNzA4MTFFQzk4NDlGMzVFQzRGOUFFMDIvOTIwRTk4MUND QUFBMTFFRDgzNzE1MjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvUQwDQYJKoZIhvcNAQELBQADggEBAFJ7auvohqdGz37i +gU8nW+QJBZSF0Qd9DqAVOhRqtFqJFHnKcBVDt8XNapoBZJ4XB5tJ/vdWmvKa64y hVXhh/jCJkuXyYJGTBExILVz5PkhzM6crIcG1P0FJCmjv5s1P2+iF0/dtcEPY2x4 E5FLsIIqe2sal9wjMo+8kYtU5vADlyFepbIDfCIQd9kS+1cMB7Mzam9Z2TbCf2y7 nnnctjj4TbVjJmtE2EzkCFp7xNtzD5gFfyod0haKGJ20ixBBjI/9RPl3GcAPOXrW HoeDadpZ1mL2Wj2Vj6kuv+kLVAANJGklJgn3NgcpsRXv5gE2XkmYKfqfHbCY/E6f fFfmxLE= -----END CERTIFICATE-----Generated at Thu Jul 3 23:23:31 2025 by rpki-client