$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/E1CBE78EADFA11F08ED60C0DC4F9AE02.roa File: E1CBE78EADFA11F08ED60C0DC4F9AE02.roa (raw, json) Hash identifier: zLyUWkmHMafCHisxFcoehncbjxPyFvw/TF9T6LP55tg= Subject key identifier: 82:E9:C1:53:88:F3:6E:7B:A9:51:08:8F:3E:C7:0C:9C:83:60:71:A3 Certificate issuer: /CN=A9167671/serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913 Certificate serial: 02 Authority key identifier: AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/E1CBE78EADFA11F08ED60C0DC4F9AE02.roa Signing time: Mon 20 Oct 2025 21:22:29 +0000 ROA not before: Mon 20 Oct 2025 21:22:29 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154242 IP address blocks: 203.9.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167671, serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913 Validity Not Before: Oct 20 21:22:29 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f6a815-e2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:ac:b2:11:83:1a:34:27:41:18:f8:26:81: 8c:7e:a4:17:bf:7d:00:54:c3:5f:19:61:d7:1c:b7: 3d:13:ec:7a:16:ac:79:97:f8:02:fd:e0:0f:46:47: 25:33:89:d0:1f:f9:d2:56:a0:32:66:d7:c3:99:6b: 53:86:a7:15:00:c9:9e:6c:27:5d:3d:a0:51:d0:e9: 90:33:26:fa:65:c2:a6:26:b3:93:b5:24:b3:c3:30: 24:b2:58:27:36:db:f7:c0:70:9a:46:ab:6f:f1:98: e3:97:e8:06:4e:f9:8d:59:99:20:62:90:fd:b2:cc: 1d:65:59:cf:93:15:ed:36:44:fe:56:34:c0:e8:1e: 9f:9b:b6:71:ac:2f:de:db:f0:b7:80:9f:87:53:9d: 1f:32:d2:09:22:b5:81:2e:70:9b:72:33:a2:c3:64: 55:fd:b7:5d:ab:56:a0:8e:46:9e:dd:e3:8a:ef:14: ce:c8:2e:dc:6b:0f:65:87:76:71:1c:d9:cd:9e:d8: 57:3c:cd:64:52:b0:10:09:a1:6b:12:c0:10:ca:b7: 47:62:87:02:0b:fc:67:ab:93:b8:73:4b:0e:f4:15: df:ae:5b:8c:16:8b:c1:7a:7a:b6:98:b6:9a:eb:c1: 78:6f:74:0a:d4:e8:07:76:de:9e:07:01:b9:14:1a: 2a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E9:C1:53:88:F3:6E:7B:A9:51:08:8F:3E:C7:0C:9C:83:60:71:A3 X509v3 Authority Key Identifier: keyid:AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/E1CBE78EADFA11F08ED60C0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.9.208.0/24 Signature Algorithm: sha256WithRSAEncryption ed:03:6e:84:71:6a:38:96:66:9c:46:37:4a:30:c8:d7:1a:12: 69:77:f1:6c:ec:71:0f:57:c7:0d:89:13:cb:45:3d:27:6c:e7: 42:e3:7b:a9:70:d7:c0:47:b5:32:bb:6e:d0:f8:64:c0:5f:9e: a3:6c:09:3a:0c:1a:44:73:91:23:2b:1d:00:ef:ed:5c:c5:66: 88:91:1a:a0:36:d7:2e:26:9f:b3:2c:c5:10:91:f7:c3:6d:57: ed:e0:77:70:e9:72:6f:f4:ae:50:88:07:f8:04:87:42:7b:46: e6:86:db:97:99:b6:09:e1:32:b8:b2:21:65:53:12:f5:c8:85: 9e:a7:28:bb:b5:db:b5:a2:c0:8a:25:01:fd:5d:79:53:d8:bc: e6:d3:52:43:df:99:b7:b0:ee:b4:3e:80:3f:bb:f7:a2:5f:70: b4:e9:72:d7:24:e7:08:d6:65:25:55:78:df:09:38:26:17:4e: 3f:39:71:ce:9d:83:76:b9:ab:29:fd:1d:e2:df:98:87:99:a9: a3:5d:30:4c:31:ef:9c:e5:0a:df:bc:f8:96:8a:cf:45:9f:69: 83:7a:42:f2:b9:f5:82:3b:57:d0:1c:65:ba:2e:0e:66:d4:2f: 92:12:62:83:0b:8b:cd:a3:3f:59:89:ee:42:eb:22:17:2a:5e: 25:99:ee:bd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzY3MTExMC8GA1UEBRMoQUFEQURGMjM2RkZCOUNFRDJBQTY0Q0I3Q0U1RDk5RDUx RDNBRTkxMzAeFw0yNTEwMjAyMTIyMjlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZjZhODE1LWUyZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4z6yyEYMaNCdBGPgmgYx+pBe/fQBUw18ZYdcctz0T7HoWrHmX+AL94A9GRyUz idAf+dJWoDJm18OZa1OGpxUAyZ5sJ109oFHQ6ZAzJvplwqYms5O1JLPDMCSyWCc2 2/fAcJpGq2/xmOOX6AZO+Y1ZmSBikP2yzB1lWc+TFe02RP5WNMDoHp+btnGsL97b 8LeAn4dTnR8y0gkitYEucJtyM6LDZFX9t12rVqCORp7d44rvFM7ILtxrD2WHdnEc 2c2e2Fc8zWRSsBAJoWsSwBDKt0dihwIL/Gerk7hzSw70Fd+uW4wWi8F6eraYtprr wXhvdArU6Ad23p4HAbkUGippAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUgunBU4jz bnupUQiPPscMnINgcaMwHwYDVR0jBBgwFoAUqtrfI2/7nO0qpky3zl2Z1R066RMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjcxLzZGMjg2QjEyQURG QTExRjBBQjkwODc4N0M0RjlBRTAyL3F0cmZJMl83bk8wcXBreTN6bDJaMVIwNjZS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXRyZkkyXzduTzBxcGt5M3psMloxUjA2NlJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzY3MS82RjI4NkIxMkFERkExMUYwQUI5MDg3ODdDNEY5QUUwMi9FMUNCRTc4RUFE RkExMUYwOEVENjBDMERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsJ0DANBgkqhkiG9w0BAQsFAAOCAQEA7QNuhHFqOJZmnEY3 SjDI1xoSaXfxbOxxD1fHDYkTy0U9J2znQuN7qXDXwEe1Mrtu0PhkwF+eo2wJOgwa RHORIysdAO/tXMVmiJEaoDbXLiafsyzFEJH3w21X7eB3cOlyb/SuUIgH+ASHQntG 5obbl5m2CeEyuLIhZVMS9ciFnqcou7XbtaLAiiUB/V15U9i85tNSQ9+Zt7DutD6A P7v3ol9wtOly1yTnCNZlJVV43wk4JhdOPzlxzp2DdrmrKf0d4t+Yh5mpo10wTDHv nOUK37z4lorPRZ9pg3pC8rn1gjtX0Bxlui4OZtQvkhJigwuLzaM/WYnuQusiFype JZnuvQ== -----END CERTIFICATE-----Generated at Wed Nov 5 07:42:55 2025 by rpki-client