$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa File: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (raw, json) Hash identifier: TEdKwP64TuQMUa2RFZqVEQD/HQzdAAlp9eIMPDVHh5E= Subject key identifier: B3:73:BF:A1:46:B3:AB:58:66:BB:CA:20:3E:DC:B8:BF:10:B6:96:CF Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Certificate serial: 082F Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa Signing time: Tue 30 Sep 2025 21:22:52 +0000 ROA not before: Tue 30 Sep 2025 21:22:52 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141038 IP address blocks: 103.155.42.0/24 maxlen: 24 103.168.208.0/24 maxlen: 24 2001:df4:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2095 (0x82f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Validity Not Before: Sep 30 21:22:52 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dc4a2c-dc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:22:36:e2:e7:20:76:f0:ce:64:9e:6b:e4:57: 0e:4a:14:23:78:80:6f:73:5d:58:dd:4c:ad:33:67: 3a:c5:34:88:ab:2c:57:e8:16:f7:5e:38:c1:10:3b: 0f:5f:7d:15:64:e0:76:05:75:f1:65:a6:81:ba:b8: a0:1b:86:6f:db:a9:27:d5:fb:ca:24:8a:3b:84:66: cb:aa:02:6f:0c:3f:7c:3c:34:f1:fe:65:44:23:23: d1:29:92:4e:7a:b5:2c:5f:a3:9e:ef:e1:e8:f3:d8: 62:45:27:09:07:b4:5d:c8:94:e4:64:e7:b1:4e:04: df:0a:f0:d6:6b:55:76:b0:f1:79:06:80:fe:ed:0b: 6b:35:0d:86:98:57:9b:93:39:85:13:5a:84:ed:02: 76:77:9e:45:ad:84:8d:93:09:3b:90:5f:50:5c:00: 77:e6:15:f2:27:2b:da:64:17:58:7d:1d:8a:5e:16: a7:10:d8:72:24:e9:df:15:a5:9c:dc:ab:34:75:12: fc:99:b1:c9:39:41:de:be:65:01:33:88:ae:18:1e: 67:84:68:48:71:a2:8a:a0:d9:dc:5e:c8:50:58:17: 08:c8:ab:aa:29:12:58:70:09:8d:ac:b6:93:49:75: a1:80:15:a3:52:48:a4:4f:20:95:52:79:4b:ea:11: 4a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:73:BF:A1:46:B3:AB:58:66:BB:CA:20:3E:DC:B8:BF:10:B6:96:CF X509v3 Authority Key Identifier: keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/6CAC2064EA2211EA9C2F064AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.42.0/24 103.168.208.0/24 IPv6: 2001:df4:b080::/48 Signature Algorithm: sha256WithRSAEncryption 41:00:54:d2:29:ef:0e:1a:b4:46:c2:d1:46:80:2a:cf:d2:9f: ba:f6:9d:25:4b:f9:4b:22:bf:18:a8:58:2a:91:2e:e5:e4:a8: 67:b1:0d:6c:8d:a2:b4:bb:36:16:3a:dd:ef:29:aa:79:80:3e: 80:7c:a8:50:92:79:9f:29:99:8c:9e:93:3c:9b:5b:7c:07:71: 85:9b:ac:e8:22:42:17:09:25:bc:24:1a:be:6c:0a:89:70:e8: c1:86:a6:18:68:01:3e:82:d8:5a:67:0d:d3:53:d7:14:90:50: 57:34:82:16:bf:7c:67:1e:5c:4f:b3:ca:0b:bb:05:cb:cd:59: 40:8f:fd:44:97:e5:68:04:e4:88:32:b5:2c:c5:c4:bf:0b:61: 2b:b4:b2:1b:21:c8:02:65:e6:44:cb:a7:5c:28:57:6a:d2:84: 83:42:6a:b6:bd:9b:98:50:1d:2a:4c:b4:cf:2c:97:00:da:68: 3d:47:50:2f:e7:83:2e:08:64:b7:0c:15:76:6d:18:f2:d9:4a: af:af:89:33:f4:4a:fd:76:76:c9:be:02:1b:38:e5:9b:6e:d4: 4f:f7:af:8c:ae:7f:a8:e1:53:df:ac:de:b8:9d:67:4f:98:92: 49:f9:a9:c9:7d:b9:8a:1e:08:33:cd:43:57:ab:85:81:e9:c4: ca:a7:22:16 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFQUQxMTAvBgNVBAUTKDVFODQyNTE2NjU3MDRDRERERjJGM0Y5QkU4MkUzMUZG QjA3NEE1OEUwHhcNMjUwOTMwMjEyMjUyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjNGEyYy1kYzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CI24ucgdvDOZJ5r5FcOShQjeIBvc11Y3UytM2c6xTSIqyxX6Bb3XjjBEDsP X30VZOB2BXXxZaaBurigG4Zv26kn1fvKJIo7hGbLqgJvDD98PDTx/mVEIyPRKZJO erUsX6Oe7+Ho89hiRScJB7RdyJTkZOexTgTfCvDWa1V2sPF5BoD+7QtrNQ2GmFeb kzmFE1qE7QJ2d55FrYSNkwk7kF9QXAB35hXyJyvaZBdYfR2KXhanENhyJOnfFaWc 3Ks0dRL8mbHJOUHevmUBM4iuGB5nhGhIcaKKoNncXshQWBcIyKuqKRJYcAmNrLaT SXWhgBWjUkikTyCVUnlL6hFKVwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFLNzv6FG s6tYZrvKID7cuL8QtpbPMB8GA1UdIwQYMBaAFF6EJRZlcEzd3y8/m+guMf+wdKWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VBRC9FOUI3MDY2NkVB MjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1ROM2ZMei1iNkM0eF83QjBw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvUWxGbVZ3VE4zZkx6LWI2QzR4XzdCMHBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdFQUQvRTlCNzA2NjZFQTIwMTFFQTlDQkZBRDQ4QzRGOUFFMDIvNkNBQzIwNjRF QTIyMTFFQTlDMkYwNjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnmyoDBABnqNAwDwQCAAIwCQMHACABDfSwgDANBgkqhkiG 9w0BAQsFAAOCAQEAQQBU0invDhq0RsLRRoAqz9KfuvadJUv5SyK/GKhYKpEu5eSo Z7ENbI2itLs2Fjrd7ymqeYA+gHyoUJJ5nymZjJ6TPJtbfAdxhZus6CJCFwklvCQa vmwKiXDowYamGGgBPoLYWmcN01PXFJBQVzSCFr98Zx5cT7PKC7sFy81ZQI/9RJfl aATkiDK1LMXEvwthK7SyGyHIAmXmRMunXChXatKEg0Jqtr2bmFAdKky0zyyXANpo PUdQL+eDLghktwwVdm0Y8tlKr6+JM/RK/XZ2yb4CGzjlm27UT/evjK5/qOFT36ze uJ1nT5iSSfmpyX25ih4IM81DV6uFgenEyqciFg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:18 2025 by rpki-client