$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/9F68F54067EF11F09584C157C4F9AE02.roa File: 9F68F54067EF11F09584C157C4F9AE02.roa (raw, json) Hash identifier: KQvzfFoZ8+mG1PwqX29gc/leNzp6B+eUlYg2ecJeyn4= Subject key identifier: BB:53:24:34:2F:9D:13:03:36:C5:0E:9B:A5:74:FF:25:39:3D:D2:DD Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 064E Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/9F68F54067EF11F09584C157C4F9AE02.roa Signing time: Wed 23 Jul 2025 18:05:32 +0000 ROA not before: Wed 23 Jul 2025 18:05:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32135 IP address blocks: 103.136.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: Jul 23 18:05:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6881246c-5adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:95:bc:16:8d:55:cd:9f:d4:b2:9c:84:1a: a6:cc:15:95:73:7e:43:8c:f4:29:0b:fe:60:5c:0d: 29:fe:3e:cf:c6:cd:9a:8d:40:a8:10:1f:d1:81:c4: 82:1a:c2:57:50:2b:29:ca:be:56:40:8c:92:b8:32: 69:3a:0b:ac:b8:f3:36:04:ca:75:87:38:14:78:c9: f6:1c:39:a1:f4:3d:84:78:6a:37:fe:91:b5:94:35: 8f:79:fe:3d:66:21:17:4e:5e:d7:bf:b1:a5:af:6f: b7:0b:5a:dc:ea:e1:9e:55:71:62:a2:41:f9:29:74: 24:e9:d2:00:df:41:35:de:1f:0d:30:62:51:0f:29: a9:3e:86:e1:42:25:3d:0a:e6:e7:3f:28:fe:c7:7a: 9a:1e:68:7e:a8:03:dc:6b:9b:45:22:24:ec:b6:54: de:a5:4b:ee:7a:d7:52:e8:ee:59:50:fd:11:e8:e3: 38:d6:03:13:59:84:ed:9c:3a:83:66:14:b4:74:28: e0:60:c8:c4:f7:8c:93:aa:31:2d:66:2e:24:a6:e3: 0a:4b:66:e3:11:d3:50:8d:4b:40:e1:f0:c7:41:e7: e7:f2:83:5f:39:e4:fe:94:83:ed:15:02:34:6f:52: be:1a:1c:c1:f4:c4:6e:2c:af:a0:1c:e4:76:cb:e7: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:53:24:34:2F:9D:13:03:36:C5:0E:9B:A5:74:FF:25:39:3D:D2:DD X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/9F68F54067EF11F09584C157C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.124.0/24 Signature Algorithm: sha256WithRSAEncryption 93:c5:bf:a5:fc:c3:a2:4a:03:73:c4:61:13:7e:b3:03:86:d7: 6c:2d:0a:47:7b:76:b0:0e:dc:53:b4:49:b0:b7:ff:cd:b5:df: df:62:d5:1e:2a:a8:65:7c:7a:3d:08:f0:14:da:50:ac:4c:e9: 20:68:fd:b6:5b:91:c9:39:af:9c:80:95:7e:36:11:17:9e:30: b5:ad:8c:15:a6:4c:de:4d:a5:eb:74:57:bc:e4:88:30:ad:f9: 18:8a:96:c0:fa:90:df:43:77:3f:e4:60:c7:7e:d9:84:77:63: b3:49:a3:22:ad:1b:be:bc:8a:25:63:50:4e:85:31:bc:d8:2a: eb:43:19:3f:63:70:34:ae:8c:3e:02:0f:ad:79:71:81:0c:53: 1f:6b:63:bb:ad:6f:3f:3e:97:03:13:cd:fc:05:42:91:d3:bc: bd:c3:cd:91:b3:94:ef:39:24:3c:fc:64:48:39:5b:5b:39:6e: ce:88:c1:1a:7c:c5:59:2f:30:b6:bc:f3:10:32:d0:26:05:e1: 9f:0a:4d:67:b3:14:ea:c8:e2:eb:5b:4e:5b:21:d2:53:ea:9e: 49:4e:84:5e:a6:db:a6:b4:0a:0c:d0:81:7e:a9:cd:4c:df:37: 63:9c:6c:fa:98:6b:b2:dc:3e:35:08:3d:d8:08:a1:92:f5:fa: 06:52:31:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjUwNzIzMTgwNTMyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgxMjQ2Yy01YWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy6VvBaNVc2f1LKchBqmzBWVc35DjPQpC/5gXA0p/j7Pxs2ajUCoEB/RgcSC GsJXUCspyr5WQIySuDJpOgusuPM2BMp1hzgUeMn2HDmh9D2EeGo3/pG1lDWPef49 ZiEXTl7Xv7Glr2+3C1rc6uGeVXFiokH5KXQk6dIA30E13h8NMGJRDympPobhQiU9 CubnPyj+x3qaHmh+qAPca5tFIiTstlTepUvuetdS6O5ZUP0R6OM41gMTWYTtnDqD ZhS0dCjgYMjE94yTqjEtZi4kpuMKS2bjEdNQjUtA4fDHQefn8oNfOeT+lIPtFQI0 b1K+GhzB9MRuLK+gHOR2y+dc2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLtTJDQv nRMDNsUOm6V0/yU5PdLdMB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdFODAvRDI3OENBNjQ5RTc3MTFFQjhDMjVEQjZDQzRGOUFFMDIvOUY2OEY1NDA2 N0VGMTFGMDk1ODRDMTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniHwwDQYJKoZIhvcNAQELBQADggEBAJPFv6X8w6JKA3PE YRN+swOG12wtCkd7drAO3FO0SbC3/821399i1R4qqGV8ej0I8BTaUKxM6SBo/bZb kck5r5yAlX42EReeMLWtjBWmTN5Npet0V7zkiDCt+RiKlsD6kN9Ddz/kYMd+2YR3 Y7NJoyKtG768iiVjUE6FMbzYKutDGT9jcDSujD4CD615cYEMUx9rY7utbz8+lwMT zfwFQpHTvL3DzZGzlO85JDz8ZEg5W1s5bs6IwRp8xVkvMLa88xAy0CYF4Z8KTWez FOrI4utbTlsh0lPqnklOhF6m26a0CgzQgX6pzUzfN2OcbPqYa7LcPjUIPdgIoZL1 +gZSMTc= -----END CERTIFICATE-----Generated at Sun Aug 10 18:16:12 2025 by rpki-client