$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/5B4371EC907B11F085A8B481C4F9AE02.roa File: 5B4371EC907B11F085A8B481C4F9AE02.roa (raw, json) Hash identifier: KjJmL1gLMQuW3NghzJwADbK1HaHP/M/oXcXExJSaN+0= Subject key identifier: 34:46:DD:76:F5:48:EB:E1:EB:C3:A9:6C:04:55:FA:D7:6F:0A:1A:FB Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Certificate serial: 030F Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/5B4371EC907B11F085A8B481C4F9AE02.roa Signing time: Sat 13 Sep 2025 08:26:33 +0000 ROA not before: Sat 13 Sep 2025 08:26:33 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140849 IP address blocks: 103.189.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Validity Not Before: Sep 13 08:26:33 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68c52ab9-c843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:81:b3:8b:0a:13:20:71:99:2d:fb:11:0e: 68:1b:56:04:dc:45:6d:5c:d3:98:42:6b:0e:9f:0f: ec:84:d2:71:2a:4e:7b:44:1f:e3:b6:7e:51:39:91: 1a:ed:69:3e:98:d7:c1:d1:2d:40:d9:64:75:dd:fd: e4:8d:ae:d5:a3:8d:7f:fc:31:56:6c:df:80:df:9c: d7:90:48:28:3f:c8:04:07:2b:d8:b2:5b:8e:40:29: f9:83:7d:2a:2f:1f:c9:ee:c8:d3:97:94:d7:0a:86: 07:a0:16:72:3d:1d:aa:df:48:18:5d:4b:7b:fe:89: 75:17:9f:18:24:ca:0e:91:c4:71:7e:85:b9:68:b2: 2d:1f:62:49:dc:eb:9e:19:c4:9b:61:d6:99:49:cd: 09:bd:23:90:97:25:48:04:bf:fe:6e:19:42:7e:39: c8:a4:b2:8a:8d:8c:02:df:b2:3c:99:0b:ca:6b:63: 25:07:98:72:42:a4:23:da:91:ca:0d:08:f9:12:a1: 3d:b8:05:f2:b1:eb:7c:01:68:19:2b:84:b0:20:15: 2e:2b:a0:82:c2:ff:c6:65:7d:b5:71:bd:e5:c0:88: 8f:7e:f4:c0:3c:4e:3b:d4:14:ee:65:ae:01:b8:d6: ed:0b:e1:cb:84:7d:f2:ea:11:e1:9b:de:d4:a1:a5: be:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:46:DD:76:F5:48:EB:E1:EB:C3:A9:6C:04:55:FA:D7:6F:0A:1A:FB X509v3 Authority Key Identifier: keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/5B4371EC907B11F085A8B481C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.144.0/24 Signature Algorithm: sha256WithRSAEncryption b0:5c:c6:09:d8:82:52:c1:07:3b:8d:1f:27:3b:f3:90:10:34: 2b:97:42:40:9b:52:ce:a3:28:c4:d1:e9:0b:ec:f7:87:93:07: 1a:b6:11:79:fd:0f:87:b1:59:d7:0a:16:1b:c0:37:48:24:3f: 4d:b8:90:f0:34:66:d0:0b:03:7a:56:d9:e5:51:55:ce:85:6c: e9:18:d9:dd:2f:36:2f:2b:63:ff:ae:ef:77:42:ec:d1:c7:d3: 69:ee:4f:a2:71:b5:84:89:af:96:35:48:29:60:0e:18:2c:4e: a3:b4:8f:84:c3:b3:47:33:35:18:ca:87:34:0d:0f:a3:00:db: 95:c8:71:c6:3a:66:99:a6:cd:05:d6:aa:6e:55:99:b0:d6:74: 83:87:79:12:25:01:84:db:47:4f:1f:37:fb:49:8a:bd:51:12: 55:8e:18:4b:cd:a4:04:ad:93:3b:6f:53:80:8a:85:08:17:55: 08:f7:dc:75:5f:09:b3:ed:3b:c7:8e:b2:a5:a5:cb:86:ea:d3: 02:8a:0f:53:f1:22:98:e7:fe:be:29:62:43:18:d3:a8:ae:83: 9d:3f:c9:a3:f6:fc:8f:4e:6b:a5:90:84:fc:ba:4d:05:b1:67: 53:18:ea:4b:d0:3d:ee:94:a8:9d:65:6e:6c:61:e5:9d:dc:31: b8:54:ba:e7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG RENCQUNFODUwHhcNMjUwOTEzMDgyNjMzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM1MmFiOS1jODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJuBs4sKEyBxmS37EQ5oG1YE3EVtXNOYQmsOnw/shNJxKk57RB/jtn5ROZEa 7Wk+mNfB0S1A2WR13f3kja7Vo41//DFWbN+A35zXkEgoP8gEByvYsluOQCn5g30q Lx/J7sjTl5TXCoYHoBZyPR2q30gYXUt7/ol1F58YJMoOkcRxfoW5aLItH2JJ3Oue GcSbYdaZSc0JvSOQlyVIBL/+bhlCfjnIpLKKjYwC37I8mQvKa2MlB5hyQqQj2pHK DQj5EqE9uAXyset8AWgZK4SwIBUuK6CCwv/GZX21cb3lwIiPfvTAPE471BTuZa4B uNbtC+HLhH3y6hHhm97UoaW+uQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDRG3Xb1 SOvh68OpbARV+tdvChr7MB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg1NTMvMTY0QUJFQzRFQjBCMTFFQzg1RTNEQjJDQzRGOUFFMDIvNUI0MzcxRUM5 MDdCMTFGMDg1QThCNDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnvZAwDQYJKoZIhvcNAQELBQADggEBALBcxgnYglLBBzuN Hyc785AQNCuXQkCbUs6jKMTR6Qvs94eTBxq2EXn9D4exWdcKFhvAN0gkP024kPA0 ZtALA3pW2eVRVc6FbOkY2d0vNi8rY/+u73dC7NHH02nuT6JxtYSJr5Y1SClgDhgs TqO0j4TDs0czNRjKhzQND6MA25XIccY6ZpmmzQXWqm5VmbDWdIOHeRIlAYTbR08f N/tJir1RElWOGEvNpAStkztvU4CKhQgXVQj33HVfCbPtO8eOsqWly4bq0wKKD1Px Ipjn/r4pYkMY06iug50/yaP2/I9Oa6WQhPy6TQWxZ1MY6kvQPe6UqJ1lbmxh5Z3c MbhUuuc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:55:47 2025 by rpki-client