$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa File: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (raw, json) Hash identifier: G0TJ9gg7YE7FaWREh61rcwclF21PHLQCA7qkRQvl9xw= Subject key identifier: AB:34:FB:6B:82:19:91:9A:28:89:7D:36:48:98:D4:38:54:C6:70:A8 Certificate issuer: /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Certificate serial: 0543 Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa Signing time: Tue 30 Sep 2025 23:55:58 +0000 ROA not before: Tue 30 Sep 2025 23:55:58 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 147007 IP address blocks: 103.172.216.0/23 maxlen: 23 103.172.216.0/24 maxlen: 24 103.172.217.0/24 maxlen: 24 2001:df7:7980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1347 (0x543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111A96, serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Validity Not Before: Sep 30 23:55:58 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dc6e0d-429d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:39:af:c2:d4:e6:4d:c1:d4:3f:82:b8:b0:9c: b8:64:59:e3:4c:62:05:fa:f2:60:9d:68:ce:85:d9: 05:9c:c4:23:24:5d:17:00:f5:99:99:9b:a3:53:be: a1:df:81:d6:6c:5d:40:db:54:97:9e:22:a3:9f:05: 94:32:27:88:49:e2:30:49:83:64:ab:ad:5d:2a:3d: 65:1b:bf:ce:08:83:83:ad:ba:83:a5:d1:79:f1:d4: c8:81:e4:60:2e:62:3e:42:7f:ab:b6:dc:4a:bb:0c: 33:4e:b9:c5:d5:14:fa:fc:36:d5:ec:b2:e1:a6:d9: b2:fd:6c:9c:77:83:07:83:5a:3b:ba:b1:5a:3e:6b: e7:45:f5:67:f7:25:4c:4d:85:cf:34:be:e2:3b:b1: a8:6c:13:f2:01:fc:87:67:41:e4:67:39:64:b3:35: 03:42:4d:2d:49:e2:f5:94:23:23:ab:cf:61:69:d3: d3:1b:01:f9:1e:99:bc:32:e9:41:9f:0d:dc:31:8b: e5:21:d9:dc:ee:cd:bf:dc:30:c7:e9:c2:3d:56:3c: 7d:8e:a2:06:e9:bf:6e:86:49:37:75:db:23:6a:8c: 4c:43:9d:88:1d:ce:92:78:a9:f6:3f:f1:c7:a9:0b: 14:3d:0f:20:c9:ea:f8:aa:94:02:bf:16:45:fa:ba: 4d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:34:FB:6B:82:19:91:9A:28:89:7D:36:48:98:D4:38:54:C6:70:A8 X509v3 Authority Key Identifier: keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.216.0/23 IPv6: 2001:df7:7980::/48 Signature Algorithm: sha256WithRSAEncryption 5b:18:45:4e:36:d8:fc:cf:4b:bb:57:36:82:be:ea:99:d8:9d: 74:0d:28:71:e4:ab:d0:ab:d1:61:5c:e7:24:2e:32:d7:2e:a1: 44:e2:bd:09:f1:ae:b5:59:a4:5b:15:eb:22:a2:3c:a1:c0:6f: 4f:dc:78:32:20:1f:8b:3a:15:a7:9b:ac:29:13:9a:e6:fc:0a: 91:58:7a:94:85:15:bc:91:11:38:29:42:76:e3:cc:83:fe:24: d9:ca:ad:72:05:72:ec:fe:bd:f6:ff:d3:5b:e2:ac:bc:93:33: b3:19:ca:10:ec:ad:3a:5a:93:3e:ff:6b:3d:37:b7:6d:6a:18: ba:41:5b:40:69:a4:72:f0:5c:f7:89:5d:5e:b4:4e:ad:dc:20: 4d:69:93:bd:12:c0:11:e3:0a:a6:d3:9d:a1:10:a1:8b:04:8a: 39:eb:d1:d9:f3:29:43:7d:02:b8:22:00:4a:65:44:5d:2b:59: a6:b6:8d:25:a8:74:8b:83:0d:0d:b9:4e:b4:2e:89:f0:2b:e5: 11:ab:3e:68:e8:62:7b:e0:15:f4:a7:80:a1:dc:e7:7a:5d:40: 7a:9a:78:ea:53:2b:09:f1:5e:ce:50:39:96:0b:72:b3:f0:b9: 3c:9d:ea:76:31:61:3b:a5:2d:b0:48:fc:b2:c6:52:17:ef:24: 5c:78:e3:80 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFBOTYxMTAvBgNVBAUTKEM2OTAzQkY1RUYxQTQwNzBGQzk4M0MzNEQ5QzUwM0NG NDMxM0ZDOEIwHhcNMjUwOTMwMjM1NTU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjNmUwZC00MjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TmvwtTmTcHUP4K4sJy4ZFnjTGIF+vJgnWjOhdkFnMQjJF0XAPWZmZujU76h 34HWbF1A21SXniKjnwWUMieISeIwSYNkq61dKj1lG7/OCIODrbqDpdF58dTIgeRg LmI+Qn+rttxKuwwzTrnF1RT6/DbV7LLhptmy/Wycd4MHg1o7urFaPmvnRfVn9yVM TYXPNL7iO7GobBPyAfyHZ0HkZzlkszUDQk0tSeL1lCMjq89hadPTGwH5Hpm8MulB nw3cMYvlIdnc7s2/3DDH6cI9Vjx9jqIG6b9uhkk3ddsjaoxMQ52IHc6SeKn2P/HH qQsUPQ8gyer4qpQCvxZF+rpNqwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKs0+2uC GZGaKIl9NkiY1DhUxnCoMB8GA1UdIwQYMBaAFMaQO/XvGkBw/Jg8NNnFA89DE/yL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUE5Ni80NTg5QzYzODBF RUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFIRDhtRHcwMmNVRHowTVRf SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwQTc5ZThhUUhEOG1EdzAyY1VEejBNVF9Jcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFBOTYvNDU4OUM2MzgwRUVGMTFFQzg2QURFMDRCQzRGOUFFMDIvQUJCNUI1MkMw RUYyMTFFQ0JFMTRCRDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrNgwDwQCAAIwCQMHACABDfd5gDANBgkqhkiG9w0BAQsF AAOCAQEAWxhFTjbY/M9Lu1c2gr7qmdiddA0oceSr0KvRYVznJC4y1y6hROK9CfGu tVmkWxXrIqI8ocBvT9x4MiAfizoVp5usKROa5vwKkVh6lIUVvJEROClCduPMg/4k 2cqtcgVy7P699v/TW+KsvJMzsxnKEOytOlqTPv9rPTe3bWoYukFbQGmkcvBc94ld XrROrdwgTWmTvRLAEeMKptOdoRChiwSKOevR2fMpQ30CuCIASmVEXStZpraNJah0 i4MNDblOtC6J8CvlEas+aOhie+AV9KeAodznel1Aepp46lMrCfFezlA5lgtys/C5 PJ3qdjFhO6UtsEj8ssZSF+8kXHjjgA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:03 2025 by rpki-client