$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4025C8DC78E811E79F549F43C4F9AE02.roa File: 4025C8DC78E811E79F549F43C4F9AE02.roa (raw, json) Hash identifier: rRiqVvkxfWA3VWjIzShscVGEzO+IcxqndtlgLKGMfGU= Subject key identifier: 86:29:FC:0D:75:07:1C:30:91:81:41:81:2D:ED:A9:0D:ED:5A:15:83 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 36B7 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4025C8DC78E811E79F549F43C4F9AE02.roa Signing time: Sat 02 Aug 2025 15:53:27 +0000 ROA not before: Sat 02 Aug 2025 15:53:27 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 58401 IP address blocks: 103.23.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14007 (0x36b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Aug 2 15:53:27 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=688e3477-3778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:4c:8b:94:27:cc:4e:7a:8b:d5:23:c0:95: 91:e5:56:82:58:4c:57:1c:d5:f3:52:f3:a1:b7:df: 96:d6:5d:cc:f4:6c:04:8b:9e:86:a8:61:d5:64:c2: 3b:71:05:29:61:ba:7e:4a:cc:05:31:a7:b3:82:f0: cd:1c:be:ba:5a:64:23:06:95:11:2c:07:7a:05:c8: dc:e1:46:4b:27:f9:64:9e:60:e6:51:19:2b:e7:97: 12:ce:2d:44:3e:bc:c5:8a:d0:89:93:7b:bc:6b:46: 40:01:26:4e:f6:ea:96:7a:d3:0e:d8:63:ba:4a:2b: 6a:2e:f1:0f:86:f4:66:70:26:80:41:c8:21:c2:e4: 74:8b:c2:03:23:e5:f4:95:50:50:dc:7e:39:96:08: 58:95:7c:cb:5a:7f:16:92:b8:f5:49:3d:49:96:8a: 68:81:95:f0:97:0c:0b:85:fe:b6:93:13:3a:80:67: 08:92:46:96:ba:04:e5:8d:1c:76:a1:3a:6c:e5:ab: 1b:6b:0f:f0:1a:0c:50:07:9b:df:c2:83:e0:5c:3b: 60:9a:c5:13:5a:39:65:10:f8:c3:bf:5f:92:58:fb: ad:75:1c:8f:c6:be:80:ac:3c:b3:63:70:84:ad:d4: 95:17:fa:83:86:2b:15:9e:dc:99:0f:75:11:d4:7c: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:29:FC:0D:75:07:1C:30:91:81:41:81:2D:ED:A9:0D:ED:5A:15:83 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4025C8DC78E811E79F549F43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.141.0/24 Signature Algorithm: sha256WithRSAEncryption 00:0e:ac:6e:f5:c4:60:de:77:2c:13:54:51:3d:95:f1:d0:94: 01:97:c4:24:82:9b:93:a3:a5:5d:c1:4d:16:3b:c2:bf:16:2e: 60:93:52:99:5a:1c:0c:0e:0a:87:89:7f:41:1c:57:16:33:5e: 73:e9:d5:1a:7b:94:22:1c:ff:95:98:1a:3c:c1:86:f4:a9:09: 5c:b9:ab:62:cc:6b:62:5f:9d:ad:76:47:57:42:c0:64:25:5a: 2e:de:13:ea:e7:17:76:06:07:71:40:d4:b4:4a:8a:f6:56:55: e9:f8:34:d5:54:96:08:c6:d4:04:b4:69:dd:de:62:58:ea:2a: eb:ac:ae:64:56:3c:8b:f6:06:96:c8:33:86:4b:77:d7:04:e2: b8:98:84:6c:6a:06:21:81:60:6b:6e:3f:47:f7:c5:b6:8f:48: 50:de:d8:a9:82:56:71:5e:a2:bb:74:c7:b0:2f:4d:84:37:8b: 82:17:fe:7e:13:4a:8b:ad:f3:b2:d7:a1:50:8b:fe:8d:88:7b: b5:5f:bf:5b:64:42:a7:6b:00:54:e6:a6:df:d8:79:03:a0:a8: 2c:5b:7d:6c:3e:b1:bc:56:d3:46:d7:d2:ca:45:b2:ce:7e:d5: 93:b7:1b:a8:7a:0e:c6:19:b1:e5:ac:94:31:f5:4d:69:13:72: ce:90:6c:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwODAyMTU1MzI3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMzQ3Ny0zNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7JMi5QnzE56i9UjwJWR5VaCWExXHNXzUvOht9+W1l3M9GwEi56GqGHVZMI7 cQUpYbp+SswFMaezgvDNHL66WmQjBpURLAd6Bcjc4UZLJ/lknmDmURkr55cSzi1E PrzFitCJk3u8a0ZAASZO9uqWetMO2GO6SitqLvEPhvRmcCaAQcghwuR0i8IDI+X0 lVBQ3H45lghYlXzLWn8Wkrj1ST1JlopogZXwlwwLhf62kxM6gGcIkkaWugTljRx2 oTps5asbaw/wGgxQB5vfwoPgXDtgmsUTWjllEPjDv1+SWPutdRyPxr6ArDyzY3CE rdSVF/qDhisVntyZD3UR1HwUOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIYp/A11 BxwwkYFBgS3tqQ3tWhWDMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNDAyNUM4REM3 OEU4MTFFNzlGNTQ5RjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnF40wDQYJKoZIhvcNAQELBQADggEBAAAOrG71xGDedywT VFE9lfHQlAGXxCSCm5OjpV3BTRY7wr8WLmCTUplaHAwOCoeJf0EcVxYzXnPp1Rp7 lCIc/5WYGjzBhvSpCVy5q2LMa2Jfna12R1dCwGQlWi7eE+rnF3YGB3FA1LRKivZW Ven4NNVUlgjG1AS0ad3eYljqKuusrmRWPIv2BpbIM4ZLd9cE4riYhGxqBiGBYGtu P0f3xbaPSFDe2KmCVnFeort0x7AvTYQ3i4IX/n4TSout87LXoVCL/o2Ie7Vfv1tk QqdrAFTmpt/YeQOgqCxbfWw+sbxW00bX0spFss5+1ZO3G6h6DsYZseWslDH1TWkT cs6QbA0= -----END CERTIFICATE-----Generated at Thu Aug 7 01:59:04 2025 by rpki-client