$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/1B120B6E563B11EE9C93E334C4F9AE02.roa File: 1B120B6E563B11EE9C93E334C4F9AE02.roa (raw, json) Hash identifier: cAf8Pq1ZJkKmC+TeXFz0VwR4TUY4CLV62jWZ7ILw/68= Subject key identifier: 6C:FE:07:CE:A7:E8:47:98:4A:16:BA:A3:59:3E:96:7C:2D:A5:55:90 Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 0611 Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/1B120B6E563B11EE9C93E334C4F9AE02.roa Signing time: Wed 02 Apr 2025 22:54:55 +0000 ROA not before: Wed 02 Apr 2025 22:54:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18464 IP address blocks: 103.136.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: Apr 2 22:54:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67edc03f-69eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:74:23:b5:f4:36:84:42:61:98:bb:72:86: 31:90:37:7f:a9:36:ab:ae:48:c5:f7:f2:8e:ad:66: ae:4c:e8:f4:60:f4:82:27:f1:06:97:10:42:02:65: 41:aa:db:6f:a4:46:e9:07:e0:ee:0c:d4:64:fa:c6: 6b:7e:ce:78:9c:78:2d:5f:83:4e:48:9e:22:47:51: 0a:e5:ed:e3:ea:ba:0f:ac:6d:89:c2:a2:f4:b8:04: 72:b6:70:23:85:bf:ed:d2:d6:2f:e3:b7:4b:b6:13: b4:73:ee:3e:f6:55:2b:b2:bd:9c:d1:e5:67:0d:d6: eb:a0:78:1e:30:d7:38:b1:f8:cc:87:91:0f:ab:32: 72:23:04:7c:cf:36:ad:2d:70:3a:38:61:ae:9c:8b: 5b:08:a7:72:a3:c4:2b:f4:93:fd:ac:ca:6e:b3:9d: b0:16:56:e8:96:b2:4b:dc:42:d0:a2:f6:7b:50:89: e7:ce:08:0a:e1:a5:87:0b:61:0a:e4:60:8e:da:62: e3:90:8d:50:6c:d1:07:2d:8d:30:e2:c6:86:7b:a9: 03:18:f7:cf:07:ed:c8:4c:bd:99:e8:b6:45:8b:e5: 3b:4d:e3:0b:5b:50:98:37:83:42:c5:b5:d2:0c:f4: 9b:66:54:28:37:d9:21:73:b4:50:63:68:4c:71:91: 6a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FE:07:CE:A7:E8:47:98:4A:16:BA:A3:59:3E:96:7C:2D:A5:55:90 X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/1B120B6E563B11EE9C93E334C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.124.0/22 Signature Algorithm: sha256WithRSAEncryption 91:6c:c9:6b:45:41:75:48:df:8b:a0:3a:6d:ad:15:36:2b:c8: d5:db:da:00:21:85:5c:b4:02:a8:ee:cf:e7:b3:de:57:1d:76: 3d:1b:01:de:dc:67:08:af:95:3c:a3:fc:a1:c9:47:ff:6e:eb: 97:84:b3:47:e4:41:f3:51:41:1d:14:75:09:ce:54:a0:d2:02: bc:ba:eb:fe:20:f8:3a:3d:cf:97:5f:80:ca:4a:b5:63:7a:1f: 74:eb:33:85:9c:19:b3:40:d6:17:ac:90:4c:4b:9e:e6:d9:8b: d9:63:8b:e2:f8:6c:a8:42:d3:62:37:a2:f9:e2:52:33:78:9a: a9:80:e2:b7:74:9b:d6:dd:b7:bc:bb:b2:e7:de:b1:ce:94:4a: 56:0c:d2:5b:05:6b:f8:5f:9e:3f:df:f1:0a:04:ba:2f:80:da: 5f:23:c3:a1:6f:68:1c:35:49:34:e2:48:d7:16:d3:1b:11:18: 8f:29:d0:d8:ce:3a:17:46:47:a7:c8:01:d8:4d:a4:29:41:f7: f4:49:ad:71:72:3b:7e:2f:0d:e6:c6:80:1c:f7:e5:cd:78:6c: 1c:94:d9:e9:8b:40:07:7c:1b:63:91:93:94:a6:9b:75:c3:c0: e1:f8:36:8d:95:3e:72:1c:17:eb:26:e5:e7:f6:18:c8:85:b5: 4e:b3:5a:e3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjUwNDAyMjI1NDU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkYzAzZi02OWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHB0I7X0NoRCYZi7coYxkDd/qTarrkjF9/KOrWauTOj0YPSCJ/EGlxBCAmVB qttvpEbpB+DuDNRk+sZrfs54nHgtX4NOSJ4iR1EK5e3j6roPrG2JwqL0uARytnAj hb/t0tYv47dLthO0c+4+9lUrsr2c0eVnDdbroHgeMNc4sfjMh5EPqzJyIwR8zzat LXA6OGGunItbCKdyo8Qr9JP9rMpus52wFlbolrJL3ELQovZ7UInnzggK4aWHC2EK 5GCO2mLjkI1QbNEHLY0w4saGe6kDGPfPB+3ITL2Z6LZFi+U7TeMLW1CYN4NCxbXS DPSbZlQoN9khc7RQY2hMcZFqiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGz+B86n 6EeYSha6o1k+lnwtpVWQMB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdFODAvRDI3OENBNjQ5RTc3MTFFQjhDMjVEQjZDQzRGOUFFMDIvMUIxMjBCNkU1 NjNCMTFFRTlDOTNFMzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJniHwwDQYJKoZIhvcNAQELBQADggEBAJFsyWtFQXVI34ug Om2tFTYryNXb2gAhhVy0Aqjuz+ez3lcddj0bAd7cZwivlTyj/KHJR/9u65eEs0fk QfNRQR0UdQnOVKDSAry66/4g+Do9z5dfgMpKtWN6H3TrM4WcGbNA1heskExLnubZ i9lji+L4bKhC02I3ovniUjN4mqmA4rd0m9bdt7y7sufesc6USlYM0lsFa/hfnj/f 8QoEui+A2l8jw6FvaBw1STTiSNcW0xsRGI8p0NjOOhdGR6fIAdhNpClB9/RJrXFy O34vDebGgBz35c14bByU2emLQAd8G2ORk5Smm3XDwOH4No2VPnIcF+sm5ef2GMiF tU6zWuM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:09 2025 by rpki-client