$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa File: EC1244C40C0A11EF86081F2FC4F9AE02.roa (raw, json) Hash identifier: NJlTUu7/QW4EWdki02Krp+vIjKwpqnHJl+6zdGP8Tfo= Subject key identifier: D1:8B:D4:A3:FA:70:39:B1:E9:20:07:E7:95:F5:64:8B:7A:48:CF:F0 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: F1 Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa Signing time: Thu 31 Jul 2025 06:11:32 +0000 ROA not before: Thu 31 Jul 2025 06:11:32 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151847 IP address blocks: 103.168.172.0/24 maxlen: 24 202.12.124.0/24 maxlen: 24 2001:df7:1680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 04:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Jul 31 06:11:32 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688b0914-3682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:d3:e5:94:c6:dd:d6:aa:c1:db:67:25:e7: 3a:10:db:d1:0c:6e:1b:d2:03:f1:3f:20:52:8e:ac: d0:60:3d:d5:5f:41:90:81:d9:8a:eb:46:be:08:20: 3a:21:c4:cc:21:6a:51:cb:15:3e:c3:9d:3f:fa:ee: bf:42:45:01:61:78:9f:c1:f9:50:9f:2e:d2:5c:d1: 64:dd:41:6e:87:98:7f:60:05:4d:7f:9f:33:9a:f2: 0c:00:55:9c:c2:12:3b:ae:82:37:58:6e:40:f7:4d: 82:8a:22:8b:68:47:38:fe:7b:93:23:42:fd:11:30: 9c:e8:c0:9d:6c:81:1f:77:fa:4d:30:7f:79:2e:26: ff:98:e5:07:be:37:96:11:11:bf:c0:4a:d9:49:05: f3:9e:c4:05:44:15:67:8e:2f:12:9a:c5:4f:33:d8: 0c:f0:f3:3c:c2:77:9a:35:8e:13:d3:4c:a0:3a:35: b3:35:91:6f:69:5b:78:58:9f:d5:95:4f:05:72:86: 07:78:de:19:11:eb:78:d1:41:13:56:a8:c2:b5:35: 35:d0:d4:14:fb:48:b5:bc:d2:6c:c6:a2:8b:c8:f2: af:5f:32:e9:27:ec:c0:11:90:3b:e9:d0:60:34:64: 9a:60:51:fe:a6:65:70:0a:c2:8d:fb:4c:be:ff:43: 71:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8B:D4:A3:FA:70:39:B1:E9:20:07:E7:95:F5:64:8B:7A:48:CF:F0 X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/EC1244C40C0A11EF86081F2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.172.0/24 202.12.124.0/24 IPv6: 2001:df7:1680::/48 Signature Algorithm: sha256WithRSAEncryption 19:6a:96:f2:6d:c5:10:2c:19:e4:a0:9d:44:f2:a2:fb:d1:4f: 69:b9:af:a1:9e:71:53:94:98:ec:c8:80:19:64:5f:c5:ab:57: 90:e5:fe:1d:99:45:6e:ba:79:6c:71:09:4d:48:cb:7f:fd:b0: af:ee:75:18:cb:4e:f2:8e:fc:d2:e8:b5:d8:10:fe:e6:bd:16: ee:0f:83:fb:98:4e:bc:d0:dd:9b:20:61:66:42:83:60:c5:18: 64:b2:a5:a6:09:8a:57:7e:ac:fe:73:0c:42:00:d1:6c:61:22: c4:64:84:65:ea:52:20:38:48:b3:e2:29:06:31:bf:8c:bc:71: f6:f0:a5:65:01:a5:9c:66:de:76:12:68:98:1f:d4:85:ff:7b: 9c:e5:63:4a:ff:8b:87:25:4f:30:dc:06:3a:fa:60:33:7c:aa: 33:fb:53:d1:19:9d:19:7a:be:f6:56:68:db:6d:22:12:2c:87: cb:2b:fd:db:3c:1c:6b:8f:ce:91:fc:a4:d5:c2:94:7e:bc:52: fb:5d:39:8d:05:4d:ae:25:3d:ce:61:c6:e7:6b:93:aa:23:ad: 3c:dd:4b:44:51:70:a3:f5:90:e7:13:e6:dc:48:69:83:68:df: 92:1f:16:c4:06:a9:34:57:b7:30:77:df:37:65:7f:19:f1:9d: 51:87:09:4f -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNkMxMTAvBgNVBAUTKEQ5Q0RDMDg5NDgyQTY3NDlCNTIwMDUxQzBGMzg1RjYy REU4Q0I0OTMwHhcNMjUwNzMxMDYxMTMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiMDkxNC0zNjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLfT5ZTG3daqwdtnJec6ENvRDG4b0gPxPyBSjqzQYD3VX0GQgdmK60a+CCA6 IcTMIWpRyxU+w50/+u6/QkUBYXifwflQny7SXNFk3UFuh5h/YAVNf58zmvIMAFWc whI7roI3WG5A902CiiKLaEc4/nuTI0L9ETCc6MCdbIEfd/pNMH95Lib/mOUHvjeW ERG/wErZSQXznsQFRBVnji8SmsVPM9gM8PM8wneaNY4T00ygOjWzNZFvaVt4WJ/V lU8FcoYHeN4ZEet40UETVqjCtTU10NQU+0i1vNJsxqKLyPKvXzLpJ+zAEZA76dBg NGSaYFH+pmVwCsKN+0y+/0NxrQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFNGL1KP6 cDmx6SAH55X1ZIt6SM/wMB8GA1UdIwQYMBaAFNnNwIlIKmdJtSAFHA84X2LejLST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY2Qy9CODgyMzcyODBD MDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVowbTFJQVVjRHpoZll0Nk10 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjRGNkMvQjg4MjM3MjgwQzA5MTFFRjlCRDkxMzJDQzRGOUFFMDIvRUMxMjQ0QzQw QzBBMTFFRjg2MDgxRjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnqKwDBADKDHwwDwQCAAIwCQMHACABDfcWgDANBgkqhkiG 9w0BAQsFAAOCAQEAGWqW8m3FECwZ5KCdRPKi+9FPabmvoZ5xU5SY7MiAGWRfxatX kOX+HZlFbrp5bHEJTUjLf/2wr+51GMtO8o780ui12BD+5r0W7g+D+5hOvNDdmyBh ZkKDYMUYZLKlpgmKV36s/nMMQgDRbGEixGSEZepSIDhIs+IpBjG/jLxx9vClZQGl nGbedhJomB/Uhf97nOVjSv+LhyVPMNwGOvpgM3yqM/tT0RmdGXq+9lZo220iEiyH yyv92zwca4/Okfyk1cKUfrxS+105jQVNriU9zmHG52uTqiOtPN1LRFFwo/WQ5xPm 3Ehpg2jfkh8WxAapNFe3MHffN2V/GfGdUYcJTw== -----END CERTIFICATE-----Generated at Wed Aug 13 08:50:27 2025 by rpki-client