$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/49CE816E430A11EAA674EA74C4F9AE02.roa File: 49CE816E430A11EAA674EA74C4F9AE02.roa (raw, json) Hash identifier: IB+34xalro/jHkO5e293QU71HFEZbQKkc7BC3RGNr7k= Subject key identifier: A0:0C:16:DC:0F:EF:14:F9:1B:BC:20:2A:EF:A9:42:E9:5D:44:49:C7 Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Certificate serial: 0B2B Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/49CE816E430A11EAA674EA74C4F9AE02.roa Signing time: Mon 04 Aug 2025 19:59:36 +0000 ROA not before: Mon 04 Aug 2025 19:59:36 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 132398 IP address blocks: 103.72.192.0/24 maxlen: 24 2001:df4:2600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2859 (0xb2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F5F, serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Validity Not Before: Aug 4 19:59:36 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68911128-1e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d3:a4:3f:67:e5:cf:39:2c:f0:18:f1:17:30: 1b:5f:4e:49:91:87:22:c0:2d:29:9b:aa:c1:53:24: dc:4f:8a:bb:00:f0:e4:0b:98:ae:7f:4d:29:39:64: c0:e6:d6:ba:57:f6:76:da:3c:35:b5:a4:a9:29:c5: d6:98:4b:f9:65:74:12:7a:67:6d:b6:6f:23:5e:c4: d0:d9:a2:cf:26:12:5e:46:40:ba:7e:1b:7c:17:c7: 3d:90:c1:dd:97:f8:a8:33:cf:a9:b2:cb:46:59:af: 12:63:26:a5:cb:e3:09:4a:8b:14:6b:0b:6d:3d:9c: bf:33:6e:35:8f:81:3d:64:2c:13:aa:d4:be:37:08: 64:d5:a0:a0:68:8a:42:42:8d:11:3a:74:01:3a:f4: 77:23:70:65:08:58:2b:a1:0c:09:04:98:55:05:74: 47:91:43:a4:8d:44:36:15:ff:ef:04:34:31:34:d4: 63:bc:69:a2:61:fe:a2:cf:ed:10:ab:8d:f7:b4:dd: e1:53:52:7f:d1:ea:99:c1:68:2b:50:84:9a:1a:cf: b6:19:ea:cb:f1:ba:4d:38:a4:af:dd:91:9c:b0:d9: 53:fb:6e:c2:3a:39:81:38:de:65:92:15:dd:86:b2: a4:f3:6d:6c:3a:6f:f9:55:75:d4:f0:0a:fa:b7:5e: 25:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0C:16:DC:0F:EF:14:F9:1B:BC:20:2A:EF:A9:42:E9:5D:44:49:C7 X509v3 Authority Key Identifier: keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/49CE816E430A11EAA674EA74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.192.0/24 IPv6: 2001:df4:2600::/48 Signature Algorithm: sha256WithRSAEncryption da:ab:18:cb:8e:fb:23:2d:3e:04:a0:04:30:93:f6:ab:bd:bd: 5b:9b:0a:66:ae:5f:d6:3b:61:df:7e:29:d3:38:c3:db:6f:8b: 85:58:ec:66:1a:b6:1b:bc:ca:9e:0a:ea:69:3d:fb:e0:38:ca: f7:f0:17:10:e9:d4:cc:ce:89:5e:f9:43:a3:c4:3e:4e:5b:ee: 9d:ac:63:53:c6:dd:05:f9:4b:ae:2a:6d:f0:91:49:b9:a0:d5: 55:51:63:c9:41:fc:d2:e2:64:38:8a:30:4a:ea:ad:0c:f6:87: f5:83:da:3c:d8:ee:d3:77:21:6f:30:f2:04:ea:de:86:92:07: f2:3d:91:c5:fe:e1:7f:81:55:a2:c6:be:10:88:d9:a0:70:2a: 86:9d:8f:2d:bd:f6:a9:2f:7d:a1:24:05:74:16:3b:cd:af:b1: 90:5b:75:c4:8d:e4:f5:a7:7b:16:e0:28:13:d2:a1:9d:98:cd: 37:cd:a3:d3:ed:1e:57:16:33:96:22:24:7d:85:87:90:34:57: e6:cd:56:4c:c3:c3:a4:43:89:e7:fc:d7:60:e6:24:0f:a2:f8: 75:85:81:26:6e:ac:a9:ff:ff:f2:dc:45:ad:d4:bb:fb:18:07: ce:25:3b:e7:24:16:12:d7:e0:ce:9f:cf:4c:94:4a:aa:c2:1b: 21:75:09:74 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNUYxMTAvBgNVBAUTKDI1QTQzMEYxNkJBODdEQkJENTE1NTMyMUI4MEY4MjAx RTU2REVBRkQwHhcNMjUwODA0MTk1OTM2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxMTEyOC0xZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tOkP2flzzks8BjxFzAbX05JkYciwC0pm6rBUyTcT4q7APDkC5iuf00pOWTA 5ta6V/Z22jw1taSpKcXWmEv5ZXQSemdttm8jXsTQ2aLPJhJeRkC6fht8F8c9kMHd l/ioM8+psstGWa8SYyaly+MJSosUawttPZy/M241j4E9ZCwTqtS+Nwhk1aCgaIpC Qo0ROnQBOvR3I3BlCFgroQwJBJhVBXRHkUOkjUQ2Ff/vBDQxNNRjvGmiYf6iz+0Q q433tN3hU1J/0eqZwWgrUISaGs+2GerL8bpNOKSv3ZGcsNlT+27COjmBON5lkhXd hrKk821sOm/5VXXU8Ar6t14lBQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKAMFtwP 7xT5G7wgKu+pQuldREnHMB8GA1UdIwQYMBaAFCWkMPFrqH271RVTIbgPggHlber9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1Ri83MDExRkRCMjQz MDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2ZidlZGVk1odUEtQ0FlVnQ2 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phUXc4V3VvZmJ2VkZWTWh1QS1DQWVWdDZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVGNUYvNzAxMUZEQjI0MzA4MTFFQTgxOTRBNjZFQzRGOUFFMDIvNDlDRTgxNkU0 MzBBMTFFQUE2NzRFQTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnSMAwDwQCAAIwCQMHACABDfQmADANBgkqhkiG9w0BAQsF AAOCAQEA2qsYy477Iy0+BKAEMJP2q729W5sKZq5f1jth334p0zjD22+LhVjsZhq2 G7zKngrqaT374DjK9/AXEOnUzM6JXvlDo8Q+TlvunaxjU8bdBflLript8JFJuaDV VVFjyUH80uJkOIowSuqtDPaH9YPaPNju03chbzDyBOrehpIH8j2Rxf7hf4FVosa+ EIjZoHAqhp2PLb32qS99oSQFdBY7za+xkFt1xI3k9ad7FuAoE9KhnZjNN82j0+0e VxYzliIkfYWHkDRX5s1WTMPDpEOJ5/zXYOYkD6L4dYWBJm6sqf//8txFrdS7+xgH ziU75yQWEtfgzp/PTJRKqsIbIXUJdA== -----END CERTIFICATE-----Generated at Wed Aug 13 00:35:46 2025 by rpki-client