$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa File: 743770A0C06011EE882BC34AC4F9AE02.roa (raw, json) Hash identifier: 3SKd7JKNbo4VQv7IRdQ4lKTCd0NxnhIdEQAdsmvLftg= Subject key identifier: 7E:3D:A3:97:A6:32:8D:CA:91:B0:09:BD:C5:B4:2E:45:21:B0:6D:C7 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1551 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa Signing time: Sun 14 Sep 2025 16:56:21 +0000 ROA not before: Sun 14 Sep 2025 16:56:21 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9541 IP address blocks: 103.209.125.0/24 maxlen: 24 103.209.126.0/24 maxlen: 24 103.209.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5457 (0x1551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Sep 14 16:56:21 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68c6f3b5-d82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:38:be:02:60:3b:a4:65:95:2d:6e:b6:2b: e5:4b:32:20:1c:2a:e5:ca:6c:0a:4c:ec:2e:92:4b: e2:e0:27:a7:6e:2d:e0:d2:49:cb:4f:59:50:ff:d6: 7a:a8:df:8e:12:52:0d:b0:b7:78:a0:32:a5:3d:43: 30:fa:01:81:da:77:32:8e:7a:90:8e:39:0b:c9:78: 46:10:43:a7:70:2d:da:17:d1:09:e3:19:f2:0b:6f: 9f:78:85:3f:97:68:6d:e8:44:b3:1c:0e:79:f4:5a: d5:07:38:1a:ef:8a:5c:16:99:8b:6d:8b:43:e9:22: 44:04:54:e3:41:2d:38:10:43:9c:d5:e2:10:49:ec: eb:2f:99:ab:9c:72:90:49:44:7b:97:b5:ba:1d:fa: 55:81:d7:03:8b:e0:8f:14:b0:ae:ec:10:33:32:3b: 7d:8c:c8:6d:6e:5f:f6:26:61:a7:67:ec:28:a8:8b: 83:89:c8:c1:f7:af:2d:0a:a7:5d:5a:81:a8:aa:09: 1b:e2:2a:b2:39:72:32:7b:47:2d:1c:2e:f9:89:64: 5b:46:9e:a1:5f:36:2f:c4:ff:7f:50:8f:8a:fd:1e: f6:b9:23:ac:f8:6a:11:24:bc:2b:36:67:45:a7:ec: 56:90:07:b3:7b:b7:55:e3:6c:c9:d6:13:98:6a:33: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3D:A3:97:A6:32:8D:CA:91:B0:09:BD:C5:B4:2E:45:21:B0:6D:C7 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/743770A0C06011EE882BC34AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.125.0-103.209.127.255 Signature Algorithm: sha256WithRSAEncryption 06:00:cd:e9:50:3e:26:55:e5:56:fe:63:9d:28:c8:5d:da:bf: a3:b8:52:25:b1:9b:4a:1f:ef:a0:a6:8f:83:c4:eb:db:a8:39: 3b:e4:39:19:d7:2c:04:69:44:3a:64:9a:04:75:b3:0c:50:1b: f4:dd:66:f8:3a:47:c5:68:d3:3a:2f:2f:9b:40:02:32:ff:68: 1d:29:47:de:69:e3:d9:8a:50:cf:55:e5:17:16:39:98:fc:f6: 27:36:d5:d1:d4:ba:d7:39:d9:3f:8d:d7:c6:9d:4e:21:de:0f: 2b:64:f6:b9:d6:86:58:7c:df:39:6b:65:69:98:34:16:70:c5: e4:11:01:e9:59:3f:4f:cc:ed:f5:79:16:1e:75:39:d6:77:ca: cb:3f:bc:f4:ec:8e:50:30:ff:ef:bb:3f:2b:d2:c4:4f:97:22: f9:16:44:0b:6b:8e:02:d4:22:55:f9:36:2a:f1:2f:59:ae:28: 2d:69:c7:7b:bf:5e:13:37:6c:cb:dd:01:1b:03:7e:25:54:b4: 86:00:ca:70:62:78:d6:fb:ba:bf:9d:26:16:47:a0:1a:58:e2: 14:b6:ae:49:19:51:03:89:65:8f:0f:e8:e8:03:b4:ec:84:4b: c6:1f:90:7f:52:f6:18:2c:b3:b4:21:20:77:d7:2b:29:ee:e8: 6a:40:76:87 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICFVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUwOTE0MTY1NjIxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM2ZjNiNS1kODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqds4vgJgO6RllS1utivlSzIgHCrlymwKTOwukkvi4Cenbi3g0knLT1lQ/9Z6 qN+OElINsLd4oDKlPUMw+gGB2ncyjnqQjjkLyXhGEEOncC3aF9EJ4xnyC2+feIU/ l2ht6ESzHA559FrVBzga74pcFpmLbYtD6SJEBFTjQS04EEOc1eIQSezrL5mrnHKQ SUR7l7W6HfpVgdcDi+CPFLCu7BAzMjt9jMhtbl/2JmGnZ+woqIuDicjB968tCqdd WoGoqgkb4iqyOXIye0ctHC75iWRbRp6hXzYvxP9/UI+K/R72uSOs+GoRJLwrNmdF p+xWkAeze7dV42zJ1hOYajMnAQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFH49o5em Mo3KkbAJvcW0LkUhsG3HMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAxRDUvRDRCRTAwRDQ2M0U1MTFFOEI1Q0ZFNDFBQzRGOUFFMDIvNzQzNzcwQTBD MDYwMTFFRTg4MkJDMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGfRfQMEB2fRADANBgkqhkiG9w0BAQsFAAOCAQEABgDN 6VA+JlXlVv5jnSjIXdq/o7hSJbGbSh/voKaPg8Tr26g5O+Q5GdcsBGlEOmSaBHWz DFAb9N1m+DpHxWjTOi8vm0ACMv9oHSlH3mnj2YpQz1XlFxY5mPz2JzbV0dS61znZ P43Xxp1OId4PK2T2udaGWHzfOWtlaZg0FnDF5BEB6Vk/T8zt9XkWHnU51nfKyz+8 9OyOUDD/77s/K9LET5ci+RZEC2uOAtQiVfk2KvEvWa4oLWnHe79eEzdsy90BGwN+ JVS0hgDKcGJ41vu6v50mFkegGljiFLauSRlRA4lljw/o6AO07IRLxh+Qf1L2GCyz tCEgd9crKe7oakB2hw== -----END CERTIFICATE-----Generated at Mon Oct 20 05:37:28 2025 by rpki-client