$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/873D9ADEA1C411EB9F4FE15EC4F9AE02.roa File: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (raw, json) Hash identifier: Fr5NAXSgAa9hVkhIVMm09Qkrw1we8d2exICvkLCxNcU= Subject key identifier: 01:1F:4B:90:06:FE:15:0C:C1:11:22:6A:E1:59:7E:37:FA:CC:6D:0F Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 0610 Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/873D9ADEA1C411EB9F4FE15EC4F9AE02.roa Signing time: Tue 20 May 2025 22:42:56 +0000 ROA not before: Tue 20 May 2025 22:42:56 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142065 IP address blocks: 103.166.100.0/23 maxlen: 24 2407:54c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1552 (0x610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815, serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Validity Not Before: May 20 22:42:56 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682d0570-3d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:81:83:cf:ba:a1:f2:fc:c5:c5:68:34:9c: 25:19:1e:10:cc:8a:ce:58:c3:59:a5:52:e3:8e:4f: 28:09:15:b6:05:71:5b:33:e7:b7:14:ec:ce:5f:62: 31:38:c9:8a:8e:a2:7c:b9:9b:b9:46:91:72:26:d5: 2d:12:b6:24:57:e7:1c:71:c1:92:8f:fd:1c:c3:1f: b3:23:51:3a:94:2a:98:67:54:90:dd:eb:6d:01:37: de:5f:f5:20:7c:06:36:d8:f6:c7:32:e2:9e:b1:93: 05:93:ac:13:69:a7:9d:82:94:f8:eb:4f:ba:6d:8e: 5d:be:31:ab:b4:ac:87:8e:c2:b8:5c:98:62:ab:0d: ec:15:66:69:06:00:94:ff:d2:ac:8d:af:c7:9b:41: e3:16:8e:e7:08:8c:2f:de:6f:ca:7f:62:d6:7b:a2: 3b:77:7a:fe:16:27:d1:e1:cc:ec:01:0b:3f:a2:60: f9:8a:0b:93:ec:3c:04:97:ee:46:a3:0f:2e:51:1b: f4:20:b0:22:0c:d3:69:9d:0b:af:42:bb:21:6a:d7: 0d:dd:b2:55:e4:1e:aa:24:a4:b0:69:e6:12:3e:55: 36:2f:0f:ae:5a:81:cb:d4:e3:43:0f:13:59:13:71: e9:be:b4:25:ea:0f:b0:ab:ec:9e:63:a1:4e:6b:85: e6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1F:4B:90:06:FE:15:0C:C1:11:22:6A:E1:59:7E:37:FA:CC:6D:0F X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/873D9ADEA1C411EB9F4FE15EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.100.0/23 IPv6: 2407:54c0::/32 Signature Algorithm: sha256WithRSAEncryption 96:00:d7:27:40:e8:85:ca:b4:e8:33:73:26:b6:22:18:ec:ba: aa:e2:2f:94:f2:bc:7b:e8:cf:cb:b6:43:4e:20:e0:bf:52:ec: 05:27:cb:d8:f8:00:b1:1f:1b:3c:54:09:d5:b5:d0:84:1f:e0: 84:87:a7:95:0d:38:43:41:f8:f9:5e:a6:79:2e:2c:a1:35:86: 7b:4a:b3:28:27:29:2d:26:df:97:b3:95:82:6d:be:e8:f4:2d: a3:b5:d3:79:c8:04:cb:90:8f:5c:79:36:b3:5d:90:74:40:35: 1a:59:d9:58:64:5c:29:30:b7:aa:60:93:6f:51:ce:df:ff:81: 69:25:82:a5:4e:84:b1:7d:f1:0f:39:16:0e:28:93:e6:d8:af: 8f:19:fe:60:31:27:ce:b4:18:09:6e:04:87:74:d0:a3:c2:db: 3a:c1:74:3b:14:cf:21:aa:59:72:5a:20:08:2f:be:a2:b8:f0: f3:8f:72:92:64:ba:cb:7b:20:c8:85:00:68:f1:6d:44:2d:f5: 98:df:74:55:e0:b1:2d:07:41:83:8e:d0:b7:fc:fb:d5:d6:e2: df:83:a6:36:33:34:2c:4e:fd:64:ac:1a:64:fb:b3:15:a9:7d: fd:60:25:94:e8:85:f1:c4:67:c5:4e:ef:d8:21:a1:23:20:9d: 11:62:1f:c6 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjUwNTIwMjI0MjU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJkMDU3MC0zZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DaBg8+6ofL8xcVoNJwlGR4QzIrOWMNZpVLjjk8oCRW2BXFbM+e3FOzOX2Ix OMmKjqJ8uZu5RpFyJtUtErYkV+ccccGSj/0cwx+zI1E6lCqYZ1SQ3ettATfeX/Ug fAY22PbHMuKesZMFk6wTaaedgpT460+6bY5dvjGrtKyHjsK4XJhiqw3sFWZpBgCU /9Ksja/Hm0HjFo7nCIwv3m/Kf2LWe6I7d3r+FifR4czsAQs/omD5iguT7DwEl+5G ow8uURv0ILAiDNNpnQuvQrshatcN3bJV5B6qJKSwaeYSPlU2Lw+uWoHL1ONDDxNZ E3HpvrQl6g+wq+yeY6FOa4XmnwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAEfS5AG /hUMwREiauFZfjf6zG0PMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQ4MTUvMUI2M0U3RDhBMUMzMTFFQjlCNkMwNTVFQzRGOUFFMDIvODczRDlBREVB MUM0MTFFQjlGNEZFMTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnpmQwDQQCAAIwBwMFACQHVMAwDQYJKoZIhvcNAQELBQAD ggEBAJYA1ydA6IXKtOgzcya2IhjsuqriL5TyvHvoz8u2Q04g4L9S7AUny9j4ALEf GzxUCdW10IQf4ISHp5UNOENB+PlepnkuLKE1hntKsygnKS0m35ezlYJtvuj0LaO1 03nIBMuQj1x5NrNdkHRANRpZ2VhkXCkwt6pgk29Rzt//gWklgqVOhLF98Q85Fg4o k+bYr48Z/mAxJ860GAluBId00KPC2zrBdDsUzyGqWXJaIAgvvqK48POPcpJkust7 IMiFAGjxbUQt9ZjfdFXgsS0HQYOO0Lf8+9XW4t+DpjYzNCxO/WSsGmT7sxWpff1g JZTohfHEZ8VO79ghoSMgnRFiH8Y= -----END CERTIFICATE-----Generated at Thu Nov 6 01:14:49 2025 by rpki-client