$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F9678DA78E811E79F549F43C4F9AE02.roa File: 3F9678DA78E811E79F549F43C4F9AE02.roa (raw, json) Hash identifier: FPPZbPrZ2SFc2wgHlz13yevHieaPI/8aARPyd1sjrgM= Subject key identifier: 14:57:8A:FE:54:D8:DF:C0:8A:35:6A:6A:50:5C:23:E0:63:AA:28:50 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3688 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F9678DA78E811E79F549F43C4F9AE02.roa Signing time: Sat 02 Aug 2025 15:52:43 +0000 ROA not before: Sat 02 Aug 2025 15:52:43 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133339 IP address blocks: 103.225.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13960 (0x3688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Aug 2 15:52:43 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=688e344b-eb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:03:55:ee:a8:2f:5d:f7:49:55:6e:5e:f9:bb: 45:8e:ae:c4:49:b3:50:78:bd:c3:2a:45:22:d6:c5: 02:ee:b5:25:2e:de:6d:03:69:7b:6b:23:cd:bd:74: a2:c2:92:8d:f2:aa:23:85:97:19:d1:56:26:64:6c: fa:16:2d:76:01:83:84:8e:d7:b6:76:5b:13:af:b9: 0f:dd:24:fd:6e:c5:a6:09:37:34:93:e4:4f:2c:36: 32:dd:69:ee:60:d5:73:87:63:d1:45:19:de:18:f0: a3:23:45:46:b9:89:e0:eb:ee:b2:cd:a2:35:8a:71: e5:61:53:97:ed:7c:8d:c2:e6:c0:b4:c4:76:96:25: bc:9f:76:ed:ab:80:a2:b8:97:be:ba:e3:80:ec:46: 85:93:fc:2c:24:59:44:39:f8:d9:02:79:ba:29:d0: 92:77:93:db:33:a5:6b:1d:70:d7:e3:99:2f:13:5d: 1a:28:e2:56:40:8c:20:46:a3:57:a1:b8:42:5a:be: f1:cf:5f:a2:89:31:29:7a:fc:92:b1:70:c8:aa:93: 68:01:b5:bb:84:e5:58:c7:18:b3:27:c4:23:fe:29: 4a:7a:83:35:3f:d0:4c:9f:1e:4d:b9:f5:96:0e:12: 3e:e7:c8:ca:b6:92:1c:0f:76:63:2d:39:99:0f:3b: a7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:57:8A:FE:54:D8:DF:C0:8A:35:6A:6A:50:5C:23:E0:63:AA:28:50 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F9678DA78E811E79F549F43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.225.171.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:6c:55:de:a0:50:67:4c:89:08:15:8e:a4:06:7e:be:a2:18: 23:27:9d:19:28:f5:be:48:f9:ba:1a:e8:73:8b:cf:67:a8:10: 4a:ce:1a:36:40:20:3e:82:30:e6:8e:57:09:10:ca:8f:ff:d5: 7e:32:4f:93:0a:fd:f9:b1:62:6a:d0:b7:0e:1d:4f:87:5c:01: 10:dc:f5:b5:66:a6:0b:29:36:f7:93:2b:8f:75:ff:3f:93:8d: 0d:93:b8:29:de:5c:33:9f:f3:c2:42:29:8f:ec:d5:4d:0d:67: 8e:65:17:61:35:bd:88:d5:bb:4f:b9:f9:12:12:ed:d1:98:be: 58:52:17:83:50:90:af:bf:a4:6f:62:1c:c8:0a:75:9d:2d:26: 6d:3d:35:a3:0c:b2:6a:9f:42:36:f2:49:2a:61:b1:ca:35:73: 41:8b:28:d5:d9:34:50:dd:6c:c4:aa:fa:f9:94:c0:36:26:d8: 48:06:1f:e2:2a:62:17:59:e1:dc:99:a3:21:66:8c:9c:c2:15: a8:e1:74:4c:d4:f5:7c:91:c5:01:36:8f:07:be:7a:79:5e:86: 28:8d:79:72:f5:36:af:b8:a2:22:f5:80:75:45:8f:59:5f:23: 68:1a:fe:da:51:18:89:5d:24:d7:cd:be:a2:cf:ed:2e:b2:4d: 50:45:4b:4a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwODAyMTU1MjQzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMzQ0Yi1lYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gNV7qgvXfdJVW5e+btFjq7ESbNQeL3DKkUi1sUC7rUlLt5tA2l7ayPNvXSi wpKN8qojhZcZ0VYmZGz6Fi12AYOEjte2dlsTr7kP3ST9bsWmCTc0k+RPLDYy3Wnu YNVzh2PRRRneGPCjI0VGuYng6+6yzaI1inHlYVOX7XyNwubAtMR2liW8n3btq4Ci uJe+uuOA7EaFk/wsJFlEOfjZAnm6KdCSd5PbM6VrHXDX45kvE10aKOJWQIwgRqNX obhCWr7xz1+iiTEpevySsXDIqpNoAbW7hOVYxxizJ8Qj/ilKeoM1P9BMnx5NufWW DhI+58jKtpIcD3ZjLTmZDzun1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBRXiv5U 2N/AijVqalBcI+BjqihQMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvM0Y5Njc4REE3 OEU4MTFFNzlGNTQ5RjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn4aswDQYJKoZIhvcNAQELBQADggEBAG9sVd6gUGdMiQgV jqQGfr6iGCMnnRko9b5I+boa6HOLz2eoEErOGjZAID6CMOaOVwkQyo//1X4yT5MK /fmxYmrQtw4dT4dcARDc9bVmpgspNveTK491/z+TjQ2TuCneXDOf88JCKY/s1U0N Z45lF2E1vYjVu0+5+RIS7dGYvlhSF4NQkK+/pG9iHMgKdZ0tJm09NaMMsmqfQjby SSphsco1c0GLKNXZNFDdbMSq+vmUwDYm2EgGH+IqYhdZ4dyZoyFmjJzCFajhdEzU 9XyRxQE2jwe+enlehiiNeXL1Nq+4oiL1gHVFj1lfI2ga/tpRGIldJNfNvqLP7S6y TVBFS0o= -----END CERTIFICATE-----Generated at Sat Aug 9 01:14:45 2025 by rpki-client