$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/A968BCA24C8511ED94579477C4F9AE02.roa File: A968BCA24C8511ED94579477C4F9AE02.roa (raw, json) Hash identifier: IDoZUSrFV6jx6DSWfjQN2kUHclLhHXH1mPFI6HDO2bY= Subject key identifier: A0:2C:5C:21:D2:9E:4F:73:6C:3D:02:FD:9F:72:06:08:94:B1:5A:5D Certificate issuer: /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Certificate serial: 0237 Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/A968BCA24C8511ED94579477C4F9AE02.roa Signing time: Fri 17 Oct 2025 04:38:10 +0000 ROA not before: Fri 17 Oct 2025 04:38:10 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150348 IP address blocks: 103.16.250.0/23 maxlen: 23 103.16.250.0/24 maxlen: 24 103.16.251.0/24 maxlen: 24 2400:b360::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198166, serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Validity Not Before: Oct 17 04:38:10 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f1c832-daf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:9c:02:f4:c4:7e:29:a9:b9:06:a1:b4:fd: 99:b1:d4:e8:8a:1d:c5:51:fa:54:12:56:eb:69:41: 8e:75:eb:c4:70:73:f3:3d:a1:31:7a:f3:5a:42:63: b2:e7:6d:d3:ca:ca:e4:90:26:04:37:66:4f:c1:7a: 1a:0f:ef:44:7b:1b:ec:e6:58:56:1a:73:34:1c:ec: c0:d4:17:c8:7f:6b:9c:bc:dc:88:bc:30:b7:f6:a6: 76:37:9c:80:b9:9d:36:05:04:84:7f:51:0e:dc:8f: 6e:bb:e5:47:f0:04:e9:a9:d4:f0:93:74:5b:a4:ab: 6a:b6:9d:4a:79:89:38:54:1b:0f:f4:ae:c6:1b:8d: 99:59:f1:4b:25:c2:b3:55:93:37:15:b3:08:f5:0e: 36:66:a2:5c:53:1d:c7:95:c8:f3:4c:53:29:86:8c: 3c:91:d8:92:69:7e:87:42:f1:97:51:a9:c2:f4:c6: b7:7c:57:ac:e3:96:cf:97:eb:cc:9e:6d:be:e2:6b: 6c:0a:8c:e0:d0:62:37:fd:bb:e7:f5:9b:c0:34:a7: d2:7e:9f:8a:59:ea:e9:e0:5a:87:57:88:91:39:ce: 3a:3e:2c:f6:82:e8:41:f5:f0:f5:fc:ab:7a:a0:43: 13:98:19:5d:cb:da:32:c5:1e:82:98:7c:1b:5e:c7: 06:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:5C:21:D2:9E:4F:73:6C:3D:02:FD:9F:72:06:08:94:B1:5A:5D X509v3 Authority Key Identifier: keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/A968BCA24C8511ED94579477C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.16.250.0/23 IPv6: 2400:b360::/32 Signature Algorithm: sha256WithRSAEncryption a6:0f:fd:7b:33:d1:ee:2d:db:1b:ab:57:e4:46:7f:d5:20:7e: d5:41:50:d3:00:73:3a:ac:a2:b1:1a:e0:cd:23:4c:7d:cc:06: 0d:08:2f:2f:23:99:cf:3d:a2:5a:22:3a:1e:e6:fa:d7:69:6d: 66:11:27:d9:c2:3c:03:43:c7:25:91:e6:58:38:ff:cd:ad:52: f6:79:30:db:34:2a:cc:67:41:b9:60:0f:79:bf:78:c8:92:85: 47:c5:27:e3:65:35:d2:89:e7:b1:9b:e5:b7:9d:66:1f:e6:e6: f1:e8:30:89:16:54:dc:d0:96:72:b6:81:bb:06:a8:31:ff:c8: e5:ae:b2:e2:fb:e7:c8:bf:be:75:5e:e8:d3:f5:e7:be:ca:ad: a1:33:77:48:a0:8b:f8:11:62:fe:4c:96:3f:a9:bd:f0:8c:24: 9c:e9:33:e2:fa:4c:8d:3a:e4:c9:4f:63:b1:28:92:21:a6:70: d8:6b:62:8e:ab:38:98:f6:65:fc:68:34:f0:8a:bd:36:5e:b1: 3a:1b:b4:87:ea:cb:b8:86:dc:55:47:3a:8b:a9:12:3d:2a:f8: 0a:33:4f:d0:07:98:24:36:2a:dd:fd:e9:15:25:31:88:0f:62: 8c:3b:0f:58:4a:fc:33:56:63:8b:a6:fb:f8:72:b5:20:53:f8: 1e:36:87:9c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxNjYxMTAvBgNVBAUTKDcyNTRERThDQjlCMzM5OTQ1NTQzRDg3RThFQjA1NkYx NTNENTFGNTAwHhcNMjUxMDE3MDQzODEwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYxYzgzMi1kYWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB6cAvTEfimpuQahtP2ZsdToih3FUfpUElbraUGOdevEcHPzPaExevNaQmOy 523TysrkkCYEN2ZPwXoaD+9Eexvs5lhWGnM0HOzA1BfIf2ucvNyIvDC39qZ2N5yA uZ02BQSEf1EO3I9uu+VH8ATpqdTwk3RbpKtqtp1KeYk4VBsP9K7GG42ZWfFLJcKz VZM3FbMI9Q42ZqJcUx3HlcjzTFMphow8kdiSaX6HQvGXUanC9Ma3fFes45bPl+vM nm2+4mtsCozg0GI3/bvn9ZvANKfSfp+KWerp4FqHV4iROc46Piz2guhB9fD1/Kt6 oEMTmBldy9oyxR6CmHwbXscGZwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKAsXCHS nk9zbD0C/Z9yBgiUsVpdMB8GA1UdIwQYMBaAFHJU3oy5szmUVUPYfo6wVvFT1R9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE2Ni8zRTYxMjI5NDRD ODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9aUlZROWgtanJCVzhWUFZI MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsVGVqTG16T1pSVlE5aC1qckJXOFZQVkgxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTgxNjYvM0U2MTIyOTQ0QzgyMTFFRDlCMDNENDQ5QzRGOUFFMDIvQTk2OEJDQTI0 Qzg1MTFFRDk0NTc5NDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnEPowDQQCAAIwBwMFACQAs2AwDQYJKoZIhvcNAQELBQAD ggEBAKYP/Xsz0e4t2xurV+RGf9UgftVBUNMAczqsorEa4M0jTH3MBg0ILy8jmc89 oloiOh7m+tdpbWYRJ9nCPANDxyWR5lg4/82tUvZ5MNs0KsxnQblgD3m/eMiShUfF J+NlNdKJ57Gb5bedZh/m5vHoMIkWVNzQlnK2gbsGqDH/yOWusuL758i/vnVe6NP1 577KraEzd0igi/gRYv5Mlj+pvfCMJJzpM+L6TI065MlPY7EokiGmcNhrYo6rOJj2 ZfxoNPCKvTZesTobtIfqy7iG3FVHOoupEj0q+AozT9AHmCQ2Kt396RUlMYgPYow7 D1hK/DNWY4um+/hytSBT+B42h5w= -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:31 2025 by rpki-client