$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/473BC6AAAE5C11F089298455C4F9AE02.roa File: 473BC6AAAE5C11F089298455C4F9AE02.roa (raw, json) Hash identifier: 1DDzPpe+WSx+Jj7KjmakEhVYtPTGv6AwRf317rIDpEw= Subject key identifier: EA:AD:44:A6:8D:C8:6F:F9:7D:A3:BF:33:2F:21:2D:A9:56:8D:A6:85 Certificate issuer: /CN=A9196DC9/serialNumber=006FFA31E9D00216919D89F8B3E7DBEDF7EF96B3 Certificate serial: 04 Authority key identifier: 00:6F:FA:31:E9:D0:02:16:91:9D:89:F8:B3:E7:DB:ED:F7:EF:96:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/473BC6AAAE5C11F089298455C4F9AE02.roa Signing time: Tue 21 Oct 2025 09:06:56 +0000 ROA not before: Tue 21 Oct 2025 09:06:56 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 18187 IP address blocks: 103.73.68.0/22 maxlen: 22 103.73.68.0/23 maxlen: 24 103.73.70.0/23 maxlen: 24 122.49.208.0/20 maxlen: 20 122.49.223.0/24 maxlen: 24 203.82.32.0/20 maxlen: 20 216.250.100.0/22 maxlen: 22 2402:1b20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.crl rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DC9, serialNumber=006FFA31E9D00216919D89F8B3E7DBEDF7EF96B3 Validity Not Before: Oct 21 09:06:56 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68f74d30-1727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:ee:77:58:af:31:02:79:46:cc:dd:2d:b1: a7:57:83:08:1d:1d:35:85:fb:4e:4f:36:49:20:1f: 14:10:bb:de:36:61:42:ef:f0:75:84:53:21:23:74: 15:8d:ac:cb:bc:b7:01:29:15:a7:34:e1:d4:13:ab: 71:51:a6:27:bf:df:e4:db:5c:2b:76:4e:f3:6f:2d: 9d:f1:a2:75:0d:f1:8d:5e:65:be:e1:29:05:ca:af: b9:31:b3:79:4a:f7:72:e1:44:39:75:5d:56:b6:56: 50:c6:d0:20:c2:ef:e3:2c:00:df:3d:7c:ec:cc:38: 2f:23:3d:14:40:19:4a:77:af:7f:4c:fb:22:ea:a3: 7b:0b:78:0e:cd:6a:26:dc:02:d1:75:30:1f:72:56: 44:be:52:e3:f8:cb:f8:c2:9b:e1:74:e8:ee:f1:43: b4:13:22:6d:8f:f8:db:06:b4:1e:d9:61:6f:94:bf: bb:ee:62:10:0e:6f:b0:1e:86:eb:1e:8a:4e:59:a3: 9e:a7:05:00:7e:d5:bd:3d:7b:a4:5c:67:91:ff:62: b9:82:45:b9:6e:db:bf:e6:f1:25:e0:5a:05:3e:c2: 24:6f:b0:46:6d:d8:01:bc:cc:db:5d:ff:64:22:35: 06:9c:be:5d:28:70:05:fa:01:e9:f5:ad:c8:8b:27: 39:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AD:44:A6:8D:C8:6F:F9:7D:A3:BF:33:2F:21:2D:A9:56:8D:A6:85 X509v3 Authority Key Identifier: keyid:00:6F:FA:31:E9:D0:02:16:91:9D:89:F8:B3:E7:DB:ED:F7:EF:96:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/473BC6AAAE5C11F089298455C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.68.0/22 122.49.208.0/20 203.82.32.0/20 216.250.100.0/22 IPv6: 2402:1b20::/32 Signature Algorithm: sha256WithRSAEncryption 24:56:10:37:88:39:7c:bc:3d:69:16:a3:5e:f1:56:cb:1b:a8: 9f:c4:9a:04:46:2e:06:ef:7d:13:84:9a:12:5b:61:a1:b7:2b: 00:4c:d1:4b:99:ba:05:92:99:60:e2:2a:02:2b:3a:b6:8e:64: e5:8e:ae:fb:af:af:13:14:2a:98:1e:9f:13:e9:c9:8a:c1:91: 8a:c4:54:64:72:a4:48:8a:85:1a:1c:ba:f5:69:1f:18:8e:ab: ca:67:3e:3c:0f:05:77:ce:2b:fc:24:06:55:69:f7:4f:07:0f: aa:d2:f6:6f:50:9f:ef:24:74:33:60:81:b9:7a:fa:82:ba:fc: c4:5c:44:9a:e0:95:41:2f:7e:64:ae:c5:9f:63:75:4b:78:3e: 6d:a4:8f:a9:86:67:21:66:62:82:76:89:53:01:51:ed:3e:4b: d3:3f:87:73:5f:08:b4:9b:8d:a4:11:54:8e:6e:9b:c9:be:53: 99:0c:0e:5b:3f:5d:3b:5b:3e:46:8a:d4:86:76:9a:9a:b8:c5: 26:3e:85:22:ff:ee:74:8e:c3:40:e8:b9:34:1c:c8:8e:01:e6: 47:0e:67:2e:5f:a5:9a:d6:ad:c7:70:ed:c5:d9:54:d1:c0:0d: 04:5a:e4:85:6d:e7:12:89:f6:81:11:cc:f6:82:e1:a1:2f:de: 50:47:33:b1 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDOTExMC8GA1UEBRMoMDA2RkZBMzFFOUQwMDIxNjkxOUQ4OUY4QjNFN0RCRURG N0VGOTZCMzAeFw0yNTEwMjEwOTA2NTZaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4Zjc0ZDMwLTE3MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKpu53WK8xAnlGzN0tsadXgwgdHTWF+05PNkkgHxQQu942YULv8HWEUyEjdBWN rMu8twEpFac04dQTq3FRpie/3+TbXCt2TvNvLZ3xonUN8Y1eZb7hKQXKr7kxs3lK 93LhRDl1XVa2VlDG0CDC7+MsAN89fOzMOC8jPRRAGUp3r39M+yLqo3sLeA7Naibc AtF1MB9yVkS+UuP4y/jCm+F06O7xQ7QTIm2P+NsGtB7ZYW+Uv7vuYhAOb7Aehuse ik5Zo56nBQB+1b09e6RcZ5H/YrmCRblu27/m8SXgWgU+wiRvsEZt2AG8zNtd/2Qi NQacvl0ocAX6Aen1rciLJznrAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQU6q1Epo3I b/l9o78zLyEtqVaNpoUwHwYDVR0jBBgwFoAUAG/6MenQAhaRnYn4s+fb7ffvlrMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2REM5LzE4MDYyMzlBQUU1 QjExRjA4QzdDQUM1M0M0RjlBRTAyL0FHXzZNZW5RQWhhUm5ZbjRzLWZiN2Zmdmxy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUdfNk1lblFBaGFSblluNHMtZmI3ZmZ2bHJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRDOS8xODA2MjM5QUFFNUIxMUYwOEM3Q0FDNTNDNEY5QUUwMi80NzNCQzZBQUFF NUMxMUYwODkyOTg0NTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBABggrBgEFBQcBBwEB/wQx MC8wHgQCAAEwGAMEAmdJRAMEBHox0AMEBMtSIAMEAtj6ZDANBAIAAjAHAwUAJAIb IDANBgkqhkiG9w0BAQsFAAOCAQEAJFYQN4g5fLw9aRajXvFWyxuon8SaBEYuBu99 E4SaElthobcrAEzRS5m6BZKZYOIqAis6to5k5Y6u+6+vExQqmB6fE+nJisGRisRU ZHKkSIqFGhy69WkfGI6rymc+PA8Fd84r/CQGVWn3TwcPqtL2b1Cf7yR0M2CBuXr6 grr8xFxEmuCVQS9+ZK7Fn2N1S3g+baSPqYZnIWZignaJUwFR7T5L0z+Hc18ItJuN pBFUjm6byb5TmQwOWz9dO1s+RorUhnaamrjFJj6FIv/udI7DQOi5NBzIjgHmRw5n Ll+lmtatx3DtxdlU0cANBFrkhW3nEon2gRHM9oLhoS/eUEczsQ== -----END CERTIFICATE-----Generated at Wed Nov 5 07:42:45 2025 by rpki-client