$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa File: 732F4132D85E11EDB34ED618C4F9AE02.roa (raw, json) Hash identifier: Xws1Pbqqq0/QFZ02P8d+7Evj6MZMCt/rYpdMr05WU7U= Subject key identifier: D6:88:D9:E9:8B:7C:07:B4:5E:C9:2A:50:EC:AD:DF:FD:34:30:0F:23 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 01A1 Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa Signing time: Mon 23 Jun 2025 02:40:55 +0000 ROA not before: Mon 23 Jun 2025 02:40:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139245 IP address blocks: 103.140.86.0/23 maxlen: 23 103.140.86.0/24 maxlen: 24 103.140.87.0/24 maxlen: 24 2001:df0:b480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Jun 23 02:40:55 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6858beb7-b369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:dc:f7:27:a4:08:13:80:de:9a:4c:5a:3f: 73:67:d6:e7:6d:1d:91:75:12:48:64:74:b5:be:c1: e0:ea:63:07:d7:65:90:22:65:a1:9c:69:3e:de:77: 1f:1e:e6:3d:23:87:22:e4:78:ba:78:e5:ff:d5:4e: 55:ac:74:87:3d:9f:c7:00:53:43:5c:16:e2:9a:36: de:b1:f3:9f:d3:d4:e7:8e:a2:7e:d6:7d:65:7a:b7: 1e:e6:dd:50:05:0a:67:b2:cd:08:8c:48:53:ce:5d: 23:d9:23:6a:f4:ab:81:d7:a4:4b:db:5b:56:ab:a6: cd:62:1f:a2:dc:f7:9a:bf:aa:a8:6d:e4:50:e9:76: 0d:84:f3:7e:c1:f0:97:0d:c0:b0:71:3f:87:b1:86: 16:22:e1:26:a3:b5:81:ef:20:dd:1f:3c:61:63:7f: 1a:43:69:ec:13:75:00:43:d9:b3:37:b1:a5:2e:76: 95:e1:da:2f:3d:9c:f5:e4:e8:e0:ed:33:1c:97:57: f0:96:40:5c:10:ad:ec:4f:ca:dd:e1:5f:ef:af:45: 42:57:08:56:80:96:89:c5:09:d4:a2:02:2f:90:66: 15:b0:04:d5:77:1b:3f:f7:2f:8d:38:bc:cf:dd:aa: 4c:63:1c:8d:77:ef:05:70:0c:1c:8e:bf:9e:11:9d: 1c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:88:D9:E9:8B:7C:07:B4:5E:C9:2A:50:EC:AD:DF:FD:34:30:0F:23 X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/732F4132D85E11EDB34ED618C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.86.0/23 IPv6: 2001:df0:b480::/48 Signature Algorithm: sha256WithRSAEncryption 83:4a:5f:1a:12:06:d8:16:70:fd:40:1f:90:b3:55:47:29:91: 1f:f6:54:38:5d:9d:36:f1:c7:81:54:aa:3f:d0:a2:d2:6b:a8: 09:0d:6c:34:6f:d8:ab:e9:80:d4:93:31:be:0f:fd:71:8b:f4: e4:37:bb:9d:14:9e:fe:23:1b:63:de:fe:fa:e1:09:67:74:05: 47:69:58:e3:76:01:39:12:32:36:05:f2:ff:ce:4f:9a:35:b0: a2:50:06:5f:a7:40:74:09:b2:24:d0:91:e8:57:c1:00:62:05: 80:1f:a8:cc:02:e5:92:90:a4:80:de:86:4b:e8:5d:9d:76:39: 6f:bc:d8:11:a5:dd:58:6f:82:d3:5c:d7:b5:14:c4:14:ed:1b: c4:f5:7b:76:36:9d:dd:7b:b3:54:d5:4e:90:d4:38:47:09:63: c4:2f:29:34:f0:e4:96:bf:54:8e:44:fa:14:15:0b:1f:0a:fe: 71:e1:6b:cd:76:f9:aa:f5:51:b6:16:0d:46:5b:1d:b4:61:54: e4:59:d6:51:df:b0:91:d6:f3:80:4d:a7:e4:9f:b4:d4:0f:78: e3:0f:02:6f:5b:94:0e:5d:56:53:21:7a:fa:d2:36:62:6b:0e: 89:4e:54:f8:3b:d3:de:53:62:22:4e:05:84:54:16:a5:df:28: fc:09:d8:8e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjUwNjIzMDI0MDU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU4YmViNy1iMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0njc9yekCBOA3ppMWj9zZ9bnbR2RdRJIZHS1vsHg6mMH12WQImWhnGk+3ncf HuY9I4ci5Hi6eOX/1U5VrHSHPZ/HAFNDXBbimjbesfOf09TnjqJ+1n1lerce5t1Q BQpnss0IjEhTzl0j2SNq9KuB16RL21tWq6bNYh+i3Peav6qobeRQ6XYNhPN+wfCX DcCwcT+HsYYWIuEmo7WB7yDdHzxhY38aQ2nsE3UAQ9mzN7GlLnaV4dovPZz15Ojg 7TMcl1fwlkBcEK3sT8rd4V/vr0VCVwhWgJaJxQnUogIvkGYVsATVdxs/9y+NOLzP 3apMYxyNd+8FcAwcjr+eEZ0cNQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNaI2emL fAe0XskqUOyt3/00MA8jMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlGQTkvN0MwRjREODJEODVBMTFFRDg4MUFDODEyQzRGOUFFMDIvNzMyRjQxMzJE ODVFMTFFREIzNEVENjE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjFYwDwQCAAIwCQMHACABDfC0gDANBgkqhkiG9w0BAQsF AAOCAQEAg0pfGhIG2BZw/UAfkLNVRymRH/ZUOF2dNvHHgVSqP9Ci0muoCQ1sNG/Y q+mA1JMxvg/9cYv05De7nRSe/iMbY97++uEJZ3QFR2lY43YBORIyNgXy/85PmjWw olAGX6dAdAmyJNCR6FfBAGIFgB+ozALlkpCkgN6GS+hdnXY5b7zYEaXdWG+C01zX tRTEFO0bxPV7djad3XuzVNVOkNQ4RwljxC8pNPDklr9UjkT6FBULHwr+ceFrzXb5 qvVRthYNRlsdtGFU5FnWUd+wkdbzgE2n5J+01A944w8Cb1uUDl1WUyF6+tI2YmsO iU5U+DvT3lNiIk4FhFQWpd8o/AnYjg== -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:43 2025 by rpki-client