$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/98A0F2BE450611F093EC3A65C4F9AE02.roa File: 98A0F2BE450611F093EC3A65C4F9AE02.roa (raw, json) Hash identifier: Ufe911ZYJ83uxaf/Sv2kXJTQ07JYf4WZldXiZBe6G2M= Subject key identifier: 72:BD:F3:4B:EF:20:2D:23:A5:F6:2B:DD:AF:F5:C8:03:A2:1B:9C:1F Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1425 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/98A0F2BE450611F093EC3A65C4F9AE02.roa Signing time: Mon 09 Jun 2025 07:51:48 +0000 ROA not before: Mon 09 Jun 2025 07:51:48 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 40779 IP address blocks: 103.106.188.0/22 maxlen: 24 103.116.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5157 (0x1425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jun 9 07:51:48 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68469294-4d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:23:c3:ce:da:bd:5d:cc:83:5b:c8:f8:21:a6: 7f:00:8e:c3:db:8f:7c:7e:90:4b:5a:17:91:c4:88: 8a:e3:58:b0:3c:93:04:6a:7c:4f:61:34:0c:5c:95: e1:bb:1d:de:df:a0:c7:99:04:7f:db:98:24:17:ca: 4f:52:c1:4d:c5:2b:bd:12:25:e9:dd:f4:8d:f0:13: b0:8a:78:57:40:a1:26:e2:4b:3c:e2:2d:a5:9e:06: 42:63:d1:44:0a:02:93:eb:9e:c1:e6:f6:0d:bc:d5: 78:55:82:1c:5c:ff:b9:63:a0:ed:1d:f9:22:7f:34: ab:ac:87:8a:2c:db:95:78:bf:84:dc:f4:50:e4:26: 0a:66:e1:5c:c5:08:c7:8c:ab:cf:e5:6c:86:51:b9: 56:ad:3c:4c:59:91:14:a2:88:a4:39:1d:c7:65:39: 8c:00:22:d1:a0:1e:cc:99:6c:89:2e:14:11:38:d5: 40:e7:29:0b:df:58:48:11:48:7f:23:81:d2:2a:3d: 55:99:ac:a0:b4:f1:a6:c7:ad:5e:ca:b4:96:68:aa: 44:65:72:bd:ea:b6:c5:bc:b8:a6:a5:e6:77:8c:38: 8c:84:1b:73:4f:bc:80:fb:15:09:52:58:08:c0:dd: 66:d9:de:3d:18:fe:81:8f:48:cb:2f:d6:78:13:94: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BD:F3:4B:EF:20:2D:23:A5:F6:2B:DD:AF:F5:C8:03:A2:1B:9C:1F X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/98A0F2BE450611F093EC3A65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.188.0/22 103.116.244.0/22 Signature Algorithm: sha256WithRSAEncryption 41:82:5a:31:6f:c3:97:9e:e2:ac:ff:7f:a8:59:32:67:d6:e9: be:d3:36:a2:5b:81:6d:2d:49:3e:f8:77:ef:b5:7f:21:b3:fc: a2:b6:b9:34:b6:22:ca:e6:63:d8:e8:8e:4f:91:91:16:af:d0: 6e:26:81:9a:d9:52:19:6d:ee:7f:1a:79:20:96:20:ef:c3:f0: d9:ca:97:15:24:90:ec:01:7d:da:56:b0:bf:76:91:c6:0d:18: ff:89:86:1a:56:1a:40:b0:6f:69:03:40:b1:a7:f1:92:3a:73: a5:3d:61:e5:1a:b8:6c:34:7b:53:d7:43:df:df:63:c2:c1:36: eb:50:ca:18:dc:40:ed:5a:16:b3:58:a0:1c:29:aa:f4:df:22: 5c:6e:29:2b:b7:2a:ac:65:6e:22:d3:36:50:d0:e9:2a:62:cb: d2:ad:95:b0:d5:34:5c:4a:56:fc:c1:b6:d2:77:de:d5:ca:23: 52:bb:ca:cc:81:e4:91:3a:ca:c4:e2:5e:76:f2:6d:58:43:8e: 3b:50:a7:33:8d:1d:c7:47:cf:ea:3b:9b:aa:9d:01:79:b8:56: 84:8c:20:73:67:8b:9c:73:1d:97:c6:f5:cd:38:ea:43:9b:4f: d4:1a:48:d2:fc:a8:53:11:5f:12:d8:46:68:77:f6:74:71:3c: 6a:3d:79:92 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICFCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNjA5MDc1MTQ4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ2OTI5NC00ZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iPDztq9XcyDW8j4IaZ/AI7D2498fpBLWheRxIiK41iwPJMEanxPYTQMXJXh ux3e36DHmQR/25gkF8pPUsFNxSu9EiXp3fSN8BOwinhXQKEm4ks84i2lngZCY9FE CgKT657B5vYNvNV4VYIcXP+5Y6DtHfkifzSrrIeKLNuVeL+E3PRQ5CYKZuFcxQjH jKvP5WyGUblWrTxMWZEUooikOR3HZTmMACLRoB7MmWyJLhQRONVA5ykL31hIEUh/ I4HSKj1VmaygtPGmx61eyrSWaKpEZXK96rbFvLimpeZ3jDiMhBtzT7yA+xUJUlgI wN1m2d49GP6Bj0jLL9Z4E5SGJwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHK980vv IC0jpfYr3a/1yAOiG5wfMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvOThBMEYyQkU0 NTA2MTFGMDkzRUMzQTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnarwDBAJndPQwDQYJKoZIhvcNAQELBQADggEBAEGCWjFv w5ee4qz/f6hZMmfW6b7TNqJbgW0tST74d++1fyGz/KK2uTS2IsrmY9jojk+RkRav 0G4mgZrZUhlt7n8aeSCWIO/D8NnKlxUkkOwBfdpWsL92kcYNGP+JhhpWGkCwb2kD QLGn8ZI6c6U9YeUauGw0e1PXQ9/fY8LBNutQyhjcQO1aFrNYoBwpqvTfIlxuKSu3 KqxlbiLTNlDQ6Spiy9KtlbDVNFxKVvzBttJ33tXKI1K7ysyB5JE6ysTiXnbybVhD jjtQpzONHcdHz+o7m6qdAXm4VoSMIHNni5xzHZfG9c046kObT9QaSNL8qFMRXxLY Rmh39nRxPGo9eZI= -----END CERTIFICATE-----Generated at Fri Jun 20 14:11:53 2025 by rpki-client