$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa File: DCDCF87AE17511E8886B1878C4F9AE02.roa (raw, json) Hash identifier: IqZZVcS21ii5zkxWPYMuKQR1NOi0O+Hj+XB33t8u/K8= Subject key identifier: 67:67:7A:59:C4:30:3C:37:57:72:AF:00:F0:E9:90:AF:E4:FB:66:82 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1B34 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa Signing time: Wed 18 Jun 2025 16:55:58 +0000 ROA not before: Wed 18 Jun 2025 16:55:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135328 IP address blocks: 103.214.104.0/24 maxlen: 24 103.214.105.0/24 maxlen: 24 103.214.106.0/24 maxlen: 24 103.214.107.0/24 maxlen: 24 2404:c480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6964 (0x1b34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Jun 18 16:55:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6852ef9e-0c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:5c:8a:f2:30:7d:65:1e:64:b0:a3:7e:63: de:7b:d4:b0:70:88:0e:0b:a7:96:fa:b0:ff:02:71: 01:fc:1c:14:d0:d5:ae:6a:23:26:e0:b2:44:74:d6: 28:63:0a:2d:9a:e4:4b:43:16:71:1e:aa:7e:87:d2: b3:40:19:29:44:f7:ae:8c:b7:f6:bb:cb:eb:8f:86: 41:67:a5:59:a0:9e:4a:da:93:b2:22:d9:de:55:7a: 78:64:02:77:ce:e4:57:8a:9d:6d:91:1e:05:fa:62: 03:80:f2:35:20:80:92:29:bc:b2:73:6a:3c:8a:d4: d9:02:55:5c:da:e8:86:7a:ce:19:b7:00:d8:36:ac: 02:9c:54:85:d2:81:7e:c3:03:89:ea:c7:d9:41:1b: 0c:ec:ce:0a:e3:88:7e:b4:1e:a8:85:c8:a9:2c:48: ef:ca:81:0f:45:49:21:6e:11:49:2f:41:b6:13:b9: c6:b1:51:a4:8e:31:26:da:71:c7:96:60:90:b4:7d: 0d:d4:45:3f:fa:09:24:41:91:89:e3:f3:a4:2b:8f: 67:16:05:43:6a:de:1f:ed:a5:ad:de:fc:26:d3:e8: 9d:75:87:c6:b8:dc:ce:9f:b0:7d:dc:e4:61:09:12: 06:ae:18:65:9c:05:c9:34:c8:88:46:e8:25:fa:23: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:67:7A:59:C4:30:3C:37:57:72:AF:00:F0:E9:90:AF:E4:FB:66:82 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/DCDCF87AE17511E8886B1878C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.104.0/22 IPv6: 2404:c480::/32 Signature Algorithm: sha256WithRSAEncryption 65:e2:a0:86:b4:c6:66:33:c9:13:ed:79:08:15:50:5c:65:1b: bb:45:74:d3:1d:97:5b:84:16:ab:39:74:23:07:7d:1b:08:aa: 80:99:ae:fb:74:e6:de:22:08:78:4f:05:55:0e:02:ff:ff:ea: 9b:f8:1a:c3:10:43:55:b1:80:27:ff:91:0a:4d:23:01:62:3c: 1e:5f:12:14:b5:43:57:09:c6:21:9d:ac:c3:1b:4b:d3:a4:94: 08:0b:a4:17:c8:de:39:73:dd:7c:92:fa:ee:a6:50:e3:0e:c3: ff:96:5b:65:3b:45:22:63:07:76:8f:e9:75:b1:62:d2:8c:f7: 1a:73:e8:a2:0b:da:bb:8b:4b:a5:03:a0:34:c4:82:89:05:2f: ef:6c:d1:ed:6d:96:e7:9b:8b:f0:7a:5a:d6:db:3d:2e:3c:6a: 0e:15:4f:f7:62:77:26:76:29:76:5b:eb:66:cf:42:11:fe:c6: 52:74:88:30:ae:74:3c:d0:01:8a:31:d9:b7:b7:30:fe:7c:41: 89:bb:56:c5:02:03:b1:f2:75:16:80:be:3e:6d:a4:97:e0:23: 8f:ca:a9:b0:11:a5:90:6c:1e:10:7a:c5:06:6c:d7:84:be:a7: d1:8f:9d:98:b7:55:76:3a:09:82:48:be:6d:67:98:1b:e2:12: f5:0f:5a:c8 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUwNjE4MTY1NTU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUyZWY5ZS0wYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVFcivIwfWUeZLCjfmPee9SwcIgOC6eW+rD/AnEB/BwU0NWuaiMm4LJEdNYo YwotmuRLQxZxHqp+h9KzQBkpRPeujLf2u8vrj4ZBZ6VZoJ5K2pOyItneVXp4ZAJ3 zuRXip1tkR4F+mIDgPI1IICSKbyyc2o8itTZAlVc2uiGes4ZtwDYNqwCnFSF0oF+ wwOJ6sfZQRsM7M4K44h+tB6ohcipLEjvyoEPRUkhbhFJL0G2E7nGsVGkjjEm2nHH lmCQtH0N1EU/+gkkQZGJ4/OkK49nFgVDat4f7aWt3vwm0+iddYfGuNzOn7B93ORh CRIGrhhlnAXJNMiIRugl+iPi6QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGdnelnE MDw3V3KvAPDpkK/k+2aCMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFCMTQvQjQxQTU4MzgxOEQxMTFFNzk3MENFQzE3QzRGOUFFMDIvRENEQ0Y4N0FF MTc1MTFFODg4NkIxODc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn1mgwDQQCAAIwBwMFACQExIAwDQYJKoZIhvcNAQELBQAD ggEBAGXioIa0xmYzyRPteQgVUFxlG7tFdNMdl1uEFqs5dCMHfRsIqoCZrvt05t4i CHhPBVUOAv//6pv4GsMQQ1WxgCf/kQpNIwFiPB5fEhS1Q1cJxiGdrMMbS9OklAgL pBfI3jlz3XyS+u6mUOMOw/+WW2U7RSJjB3aP6XWxYtKM9xpz6KIL2ruLS6UDoDTE gokFL+9s0e1tluebi/B6WtbbPS48ag4VT/didyZ2KXZb62bPQhH+xlJ0iDCudDzQ AYox2be3MP58QYm7VsUCA7HydRaAvj5tpJfgI4/KqbARpZBsHhB6xQZs14S+p9GP nZi3VXY6CYJIvm1nmBviEvUPWsg= -----END CERTIFICATE-----Generated at Wed Nov 5 16:27:02 2025 by rpki-client