$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa File: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (raw, json) Hash identifier: AF8iSINyYs/yviryAgwAaGDxt3e7QveTWxIVOikxElk= Subject key identifier: 34:D5:65:B6:06:CB:19:A7:17:76:C0:6F:95:11:81:EF:E4:8A:0E:22 Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Certificate serial: 0940 Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa Signing time: Mon 06 Oct 2025 20:52:19 +0000 ROA not before: Mon 06 Oct 2025 20:52:19 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136565 IP address blocks: 103.20.122.0/24 maxlen: 24 103.20.123.0/24 maxlen: 24 2405:2500:25::/48 maxlen: 48 2405:2500:26::/48 maxlen: 48 2405:2500:65::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2368 (0x940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Validity Not Before: Oct 6 20:52:19 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e42c03-5aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d2:9e:22:68:bd:85:ab:a8:e6:65:fc:c6:a4: 74:6f:c0:43:ed:47:c6:e9:da:99:48:89:ea:86:1c: ae:91:01:4a:e2:00:d5:b7:b2:c6:2b:cf:6f:30:70: 5c:cc:bc:35:bb:f5:75:1d:07:7b:3d:44:bf:5c:bf: 9f:36:de:46:7e:55:21:14:cf:e1:ea:4b:46:a0:3b: 5f:e3:68:ce:21:1f:d5:a1:bc:4e:12:65:f8:25:49: 00:81:5d:8b:ee:cc:50:c6:f9:10:77:4c:8f:70:ec: 0d:23:5e:37:28:a5:d0:c1:b3:3f:49:9a:02:06:2c: e7:bd:b6:46:b8:13:82:2e:49:08:c8:75:67:97:98: c2:1a:13:63:32:7a:6f:12:9a:b0:7d:3c:bd:4f:0d: 45:06:a0:2b:dd:99:24:f9:2c:db:86:56:cb:b5:00: 31:b7:f8:ae:e0:56:89:1d:c6:56:b4:63:44:c5:5b: 55:82:15:bc:2b:fe:42:f6:06:ed:70:2d:c7:70:85: d5:74:f0:02:9e:85:38:59:54:06:9e:29:db:2c:d4: 76:b1:21:8b:73:c1:0b:ac:86:62:41:05:bd:2e:6c: d1:cc:a3:eb:c5:2e:1b:12:04:4a:00:44:d8:7b:3f: fd:75:32:f2:df:a1:be:73:59:9f:2e:49:40:48:03: 93:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D5:65:B6:06:CB:19:A7:17:76:C0:6F:95:11:81:EF:E4:8A:0E:22 X509v3 Authority Key Identifier: keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.122.0/23 IPv6: 2405:2500:25::-2405:2500:26:ffff:ffff:ffff:ffff:ffff 2405:2500:65::/48 Signature Algorithm: sha256WithRSAEncryption 13:d9:18:50:4d:f4:40:50:d6:2d:19:99:b2:99:d5:6a:de:8f: 94:61:13:11:22:22:44:29:04:84:f4:f0:2f:53:41:96:cf:e3: e3:47:d5:06:99:c2:d5:99:2d:c3:eb:19:c7:df:a2:ac:46:11: cb:da:86:63:90:cf:a6:ee:7e:10:c3:1c:8f:16:92:f1:78:02: 9c:5a:3e:19:bf:95:68:d4:4f:e6:d9:3e:1e:68:1b:85:c7:d7: 01:4f:8a:16:a3:66:01:f6:96:3f:eb:bf:f9:9e:02:4b:ce:ba: f0:81:eb:fe:62:98:4e:76:03:51:cf:84:f1:ca:c9:23:57:7f: 36:83:52:d1:fd:6a:d2:32:ef:ba:99:97:6f:6c:e7:74:d9:bb: 78:b6:be:c7:df:92:9b:32:bd:69:4a:55:5b:11:8c:2e:78:b1: a9:6e:53:32:4d:7e:0e:51:08:97:cf:bd:70:1b:8e:2d:29:1f: b2:4c:e2:f1:36:b4:42:8c:3a:42:ba:f4:da:12:b3:19:99:c4: 9a:53:89:a4:58:d3:8b:5e:d4:c1:6a:f3:d8:02:c3:b2:46:19: 89:69:0d:46:42:e7:fd:c3:b9:95:21:e2:1e:06:e9:1d:12:86: 69:4e:5b:da:db:ed:af:f9:56:03:68:bc:db:64:c8:9d:a4:49: 70:65:6d:1a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz RjE1NjI3MkQwHhcNMjUxMDA2MjA1MjE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU0MmMwMy01YWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39KeImi9hauo5mX8xqR0b8BD7UfG6dqZSInqhhyukQFK4gDVt7LGK89vMHBc zLw1u/V1HQd7PUS/XL+fNt5GflUhFM/h6ktGoDtf42jOIR/VobxOEmX4JUkAgV2L 7sxQxvkQd0yPcOwNI143KKXQwbM/SZoCBiznvbZGuBOCLkkIyHVnl5jCGhNjMnpv EpqwfTy9Tw1FBqAr3Zkk+SzbhlbLtQAxt/iu4FaJHcZWtGNExVtVghW8K/5C9gbt cC3HcIXVdPACnoU4WVQGninbLNR2sSGLc8ELrIZiQQW9LmzRzKPrxS4bEgRKAETY ez/9dTLy36G+c1mfLklASAOTgwIDAQABo4ICujCCArYwHQYDVR0OBBYEFDTVZbYG yxmnF3bAb5URge/kig4iMB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzBBNTMvNzFCN0Q0NzBBQjRBMTFFQTg5RDE2MzU5QzRGOUFFMDIvRjJDRDg5QUFB QjRCMTFFQUEyQ0E1ODVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMAwEAgABMAYDBAFnFHowIwQCAAIwHTASAwcAJAUlAAAlAwcAJAUlAAAmAwcA JAUlAABlMA0GCSqGSIb3DQEBCwUAA4IBAQAT2RhQTfRAUNYtGZmymdVq3o+UYRMR IiJEKQSE9PAvU0GWz+PjR9UGmcLVmS3D6xnH36KsRhHL2oZjkM+m7n4QwxyPFpLx eAKcWj4Zv5Vo1E/m2T4eaBuFx9cBT4oWo2YB9pY/67/5ngJLzrrwgev+YphOdgNR z4TxyskjV382g1LR/WrSMu+6mZdvbOd02bt4tr7H35KbMr1pSlVbEYwueLGpblMy TX4OUQiXz71wG44tKR+yTOLxNrRCjDpCuvTaErMZmcSaU4mkWNOLXtTBavPYAsOy RhmJaQ1GQuf9w7mVIeIeBukdEoZpTlva2+2v+VYDaLzbZMidpElwZW0a -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:04 2025 by rpki-client