$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/688C6AC29D9D11EC958A216AC4F9AE02.roa File: 688C6AC29D9D11EC958A216AC4F9AE02.roa (raw, json) Hash identifier: rQCKwpVXSCN9Y75hhPwPDo9+AXfNNoLzfRi82A6bdSI= Subject key identifier: E8:1F:43:74:C0:57:57:E4:6E:4E:86:70:09:C7:47:A2:F8:82:25:E8 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 037B Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/688C6AC29D9D11EC958A216AC4F9AE02.roa Signing time: Wed 19 Mar 2025 00:45:55 +0000 ROA not before: Wed 19 Mar 2025 00:45:55 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 148968 IP address blocks: 103.182.168.0/23 maxlen: 23 2001:df0:7ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Validity Not Before: Mar 19 00:45:55 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67da13c3-0eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:16:af:eb:ca:00:93:f0:1b:95:67:f0:36:7c: 87:f4:0e:4f:a3:15:27:c9:62:e1:a5:14:69:32:d5: 35:a4:69:98:90:b6:8d:c9:3c:38:b7:c6:df:36:a4: 13:c2:c7:92:35:17:d4:bc:b0:13:68:23:3e:54:aa: ae:4c:09:23:9f:f4:70:4f:18:cf:97:57:dd:6e:49: 58:1f:29:41:7a:7e:7e:6b:16:42:39:e0:44:55:45: b0:95:91:ff:2d:24:a4:2d:0a:d7:e7:dd:5d:32:e9: d9:e0:9a:1c:4a:51:f1:ad:10:7c:1c:a2:e8:83:76: 70:be:32:f8:e8:d8:cb:3d:c7:14:fc:8c:c9:49:8d: 51:c1:08:c1:c3:b6:fd:18:a1:01:bb:2e:1c:5a:d0: 9d:35:2f:50:1b:e9:9b:97:5d:51:41:d8:ed:e2:89: 1e:e6:90:3b:0b:8b:cf:b1:8a:85:1a:85:6d:6d:6f: 27:00:e1:4c:5b:aa:29:b3:5f:b0:ed:56:11:59:4b: 02:a6:b9:5d:af:1d:6a:05:d6:58:ec:67:8f:87:bb: 4c:09:82:9e:20:89:9d:46:69:39:07:cd:a6:35:27: 7b:2f:1c:c7:86:75:53:d9:96:e5:f8:ad:05:88:98: 22:82:f6:26:4b:c2:e4:74:44:ed:76:91:ad:bd:88: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1F:43:74:C0:57:57:E4:6E:4E:86:70:09:C7:47:A2:F8:82:25:E8 X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/688C6AC29D9D11EC958A216AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.168.0/23 IPv6: 2001:df0:7ec0::/48 Signature Algorithm: sha256WithRSAEncryption 22:a3:3b:52:05:d7:2c:ce:04:d6:1c:ca:76:8b:17:d1:ee:2a: 29:b0:8a:2f:5d:56:c0:3d:35:94:ee:5a:b9:74:06:1d:29:b6: b0:3d:f2:96:7f:ff:ef:e0:d4:75:c2:d3:7f:ec:87:66:75:17: a1:82:c2:01:f4:2a:9a:62:b7:43:e2:42:23:44:86:5e:fd:c6: a0:f9:3d:6b:c1:ee:29:57:26:14:94:41:d8:7d:f5:72:47:86: 43:b4:6e:e6:06:17:93:a7:2d:b4:18:d3:0c:da:3d:0d:3e:9f: 0f:5b:57:3f:e6:d5:70:8d:d9:9f:a7:5d:82:e8:1d:32:db:90: 71:ae:c6:ca:af:ec:a4:89:98:83:2a:f1:47:ab:67:07:20:bc: 27:fa:00:44:da:7d:53:2d:90:84:4f:4b:18:fc:ef:0d:90:67: a4:26:97:f3:64:96:e1:12:6d:d7:14:57:c3:6e:5f:8b:0a:9e: c8:d2:aa:50:8b:d4:14:8f:b1:a5:a2:93:16:38:41:71:b2:02: 3f:16:20:0c:35:3d:c2:76:34:25:ca:67:c6:64:fb:14:e3:14: a3:68:8b:af:f5:4c:0a:98:76:bd:6d:54:1e:ff:7e:8d:0e:16: 6c:7b:a0:4d:9a:68:f5:79:c5:35:fc:82:f8:1a:db:e9:f3:ba: 29:73:f3:1c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjUwMzE5MDA0NTU1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RhMTNjMy0wZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xav68oAk/AblWfwNnyH9A5PoxUnyWLhpRRpMtU1pGmYkLaNyTw4t8bfNqQT wseSNRfUvLATaCM+VKquTAkjn/RwTxjPl1fdbklYHylBen5+axZCOeBEVUWwlZH/ LSSkLQrX591dMunZ4JocSlHxrRB8HKLog3ZwvjL46NjLPccU/IzJSY1RwQjBw7b9 GKEBuy4cWtCdNS9QG+mbl11RQdjt4oke5pA7C4vPsYqFGoVtbW8nAOFMW6ops1+w 7VYRWUsCprldrx1qBdZY7GePh7tMCYKeIImdRmk5B82mNSd7LxzHhnVT2Zbl+K0F iJgigvYmS8LkdETtdpGtvYjAkQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOgfQ3TA V1fkbk6GcAnHR6L4giXoMB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTZEQjQvRTg0REI5OEE5RDlBMTFFQ0JBOTI4RjQ1QzRGOUFFMDIvNjg4QzZBQzI5 RDlEMTFFQzk1OEEyMTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntqgwDwQCAAIwCQMHACABDfB+wDANBgkqhkiG9w0BAQsF AAOCAQEAIqM7UgXXLM4E1hzKdosX0e4qKbCKL11WwD01lO5auXQGHSm2sD3yln// 7+DUdcLTf+yHZnUXoYLCAfQqmmK3Q+JCI0SGXv3GoPk9a8HuKVcmFJRB2H31ckeG Q7Ru5gYXk6cttBjTDNo9DT6fD1tXP+bVcI3Zn6ddgugdMtuQca7Gyq/spImYgyrx R6tnByC8J/oARNp9Uy2QhE9LGPzvDZBnpCaX82SW4RJt1xRXw25fiwqeyNKqUIvU FI+xpaKTFjhBcbICPxYgDDU9wnY0JcpnxmT7FOMUo2iLr/VMCph2vW1UHv9+jQ4W bHugTZpo9XnFNfyC+Brb6fO6KXPzHA== -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:00 2025 by rpki-client