$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/B3148DDA1BD711EAB801703AC4F9AE02.roa File: B3148DDA1BD711EAB801703AC4F9AE02.roa (raw, json) Hash identifier: qXQzrLjHLMEGSmHbPLY3DTrLOE6y6AG6P8s1JsWZiBo= Subject key identifier: 03:F3:67:03:68:42:92:D9:4D:3C:1F:AE:27:E6:16:32:BD:A3:97:32 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0C02 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/B3148DDA1BD711EAB801703AC4F9AE02.roa Signing time: Sat 26 Jul 2025 18:57:38 +0000 ROA not before: Sat 26 Jul 2025 18:57:38 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 9506 IP address blocks: 103.67.168.0/24 maxlen: 24 103.67.169.0/24 maxlen: 24 2405:d180:1::/48 maxlen: 48 2405:d180:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3074 (0xc02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Jul 26 18:57:38 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68852522-fdc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:fc:4b:f8:eb:6b:08:21:1f:e3:0e:7d:25: 9d:a3:07:22:b6:69:ce:c9:0d:c6:32:64:4d:b7:9c: 50:e9:f3:b6:c1:b5:23:08:6c:d9:99:d7:06:d3:f5: 0b:72:0f:0a:c9:a8:85:ad:aa:93:50:fe:b9:50:6b: 02:3b:ed:ed:4a:4a:81:b1:53:60:ea:c1:5c:2c:4d: 05:c0:b6:37:8a:a5:5e:fc:05:5d:69:6f:2e:b9:67: 28:ad:b9:61:93:5c:20:1e:b0:56:a6:89:90:33:b1: 83:d3:03:04:c2:3f:e2:04:a9:cd:f9:21:2e:1e:87: 74:e7:d4:64:d2:7d:e7:80:94:4f:8c:24:67:18:69: 8f:ef:2a:02:8f:36:05:33:7d:f0:f5:f4:32:41:2d: 24:7f:f9:46:f0:a1:0a:38:0d:85:bd:ef:04:d1:7d: 02:f4:dd:86:92:ba:b3:83:cf:3b:0e:bc:1f:cd:67: 40:30:54:fe:b4:02:bc:9b:14:4e:74:0d:6b:15:d8: c6:06:a6:e2:b9:36:f6:37:89:39:36:fa:b6:b8:58: 5d:85:96:c1:34:82:e8:8d:c8:e7:a2:e2:2e:6b:74: d8:cd:8b:c2:16:1c:24:fa:5d:b9:a8:c9:76:44:79: 0e:d1:4f:96:35:9e:c5:2b:d0:db:6d:b5:b5:e1:e6: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F3:67:03:68:42:92:D9:4D:3C:1F:AE:27:E6:16:32:BD:A3:97:32 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/B3148DDA1BD711EAB801703AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.168.0/23 IPv6: 2405:d180:1::-2405:d180:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7d:9f:c5:8e:1a:8d:6e:b2:f1:de:e7:9a:cf:15:aa:aa:5e:94: 4b:b1:f0:90:10:89:8c:12:b1:9a:01:25:11:f6:4a:9b:c1:74: 78:74:f5:5a:b4:49:25:9e:6d:ea:dc:bd:f5:f6:5d:9d:b6:f6: a8:bb:31:f8:8f:c0:3b:22:5f:0c:20:02:ca:c2:84:d4:af:39: 10:7f:2a:2f:02:07:50:18:0f:99:9b:b2:13:ea:87:f9:4d:32: e3:bb:ef:22:d6:89:b6:ec:87:9b:0a:95:4d:a7:89:e6:76:7d: 6b:4e:96:1d:8c:a0:81:fa:b8:81:74:44:77:bb:9b:a5:3b:c5: a8:1c:0c:35:42:e6:46:38:4d:c0:c0:8c:c4:74:25:91:5c:7b: 2e:79:61:c0:51:5e:ca:f2:56:8f:1a:09:0d:76:c5:46:a9:29: 53:84:f8:94:97:70:82:e6:f5:42:ab:4e:c1:9d:2f:ee:37:e8: 5e:03:ed:fe:1b:d8:ea:5e:e1:59:58:06:6d:b5:ec:7c:e0:6c: ee:07:55:bb:cf:ac:ae:88:af:6e:e3:ce:0b:4f:0d:7d:93:c2: 96:3c:50:63:47:ac:ee:59:90:ce:45:01:ba:67:82:fe:97:31: c6:3a:57:f5:ca:4b:0d:99:90:eb:f6:11:63:e6:c3:f9:87:3d: b2:0a:e3:cf -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICDAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjUwNzI2MTg1NzM4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg1MjUyMi1mZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0v8S/jrawghH+MOfSWdowcitmnOyQ3GMmRNt5xQ6fO2wbUjCGzZmdcG0/UL cg8KyaiFraqTUP65UGsCO+3tSkqBsVNg6sFcLE0FwLY3iqVe/AVdaW8uuWcorblh k1wgHrBWpomQM7GD0wMEwj/iBKnN+SEuHod059Rk0n3ngJRPjCRnGGmP7yoCjzYF M33w9fQyQS0kf/lG8KEKOA2Fve8E0X0C9N2Gkrqzg887DrwfzWdAMFT+tAK8mxRO dA1rFdjGBqbiuTb2N4k5Nvq2uFhdhZbBNILojcjnouIua3TYzYvCFhwk+l25qMl2 RHkO0U+WNZ7FK9DbbbW14eY35QIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFAPzZwNo QpLZTTwfrifmFjK9o5cyMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhERTkvRDY5QjQ1RTgxQkQ1MTFFQTgwQ0JDRjM2QzRGOUFFMDIvQjMxNDhEREEx QkQ3MTFFQUI4MDE3MDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMAwEAgABMAYDBAFnQ6gwGgQCAAIwFDASAwcAJAXRgAABAwcAJAXRgAACMA0G CSqGSIb3DQEBCwUAA4IBAQB9n8WOGo1usvHe55rPFaqqXpRLsfCQEImMErGaASUR 9kqbwXR4dPVatEklnm3q3L319l2dtvaouzH4j8A7Il8MIALKwoTUrzkQfyovAgdQ GA+Zm7IT6of5TTLju+8i1om27IebCpVNp4nmdn1rTpYdjKCB+riBdER3u5ulO8Wo HAw1QuZGOE3AwIzEdCWRXHsueWHAUV7K8laPGgkNdsVGqSlThPiUl3CC5vVCq07B nS/uN+heA+3+G9jqXuFZWAZttex84GzuB1W7z6yuiK9u484LTw19k8KWPFBjR6zu WZDORQG6Z4L+lzHGOlf1yksNmZDr9hFj5sP5hz2yCuPP -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:10 2025 by rpki-client