$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa File: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (raw, json) Hash identifier: 9+lw98rdFugqdiBRyKbVp2oC9fkpMpQz4UV/k8IjCXg= Subject key identifier: 91:DD:72:B1:CB:DF:1C:EF:66:16:25:FA:63:F6:CB:75:BF:74:DE:9B Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Certificate serial: 0941 Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa Signing time: Mon 06 Oct 2025 20:52:20 +0000 ROA not before: Mon 06 Oct 2025 20:52:20 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136566 IP address blocks: 103.20.120.0/24 maxlen: 24 2405:2500:5::/48 maxlen: 48 2405:2500:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2369 (0x941) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Validity Not Before: Oct 6 20:52:20 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e42c04-8c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:42:aa:43:85:b3:09:36:27:18:74:d5:75: 43:48:ee:f0:79:1c:7a:3d:50:b0:2c:03:66:14:c1: 0d:b9:fb:05:bc:67:83:2c:a0:ef:3d:57:2d:e2:c7: af:cc:0c:79:db:4f:01:3e:14:cb:14:7d:60:c7:bf: cd:6a:b7:c0:ef:71:48:d9:57:c7:e0:2a:b3:b1:b8: 95:32:38:93:70:30:d5:23:68:03:8d:75:24:b1:ff: 98:11:c9:62:b9:b3:d9:8c:04:e7:83:57:52:2a:e7: 6e:fc:a1:d6:5d:1a:9d:36:1b:c5:c2:73:d9:e3:e7: 9f:09:ed:1d:3f:db:16:b2:f5:e3:ae:37:f2:53:b0: f6:0b:26:4f:79:36:ca:1e:36:fa:c1:b6:f5:fe:a7: ba:13:66:9f:a3:ee:c4:cb:b7:75:62:f1:58:e7:cc: fb:05:95:25:22:71:af:7e:8c:a9:a1:14:21:cb:09: 37:f0:7c:14:b4:af:7d:61:88:28:a0:32:50:55:e5: f0:4b:84:08:50:2a:a4:4f:71:39:95:50:05:9d:e9: 7f:e6:df:fe:cd:88:62:d2:0a:38:8a:69:5c:d4:3c: 31:76:a2:7a:34:e8:b3:e5:18:c1:6e:3e:79:c0:3e: 0c:63:4e:00:87:41:60:9e:cd:a9:a2:4f:c2:6a:f9: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DD:72:B1:CB:DF:1C:EF:66:16:25:FA:63:F6:CB:75:BF:74:DE:9B X509v3 Authority Key Identifier: keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.120.0/24 IPv6: 2405:2500:5::/48 2405:2500:11::/48 Signature Algorithm: sha256WithRSAEncryption 5d:82:2e:1a:9e:08:14:23:3b:85:b6:62:10:1a:0a:1b:e2:28: d1:19:b2:f1:12:0e:7a:c0:b9:fa:22:a5:f1:88:51:db:c6:90: ec:df:21:1b:57:60:97:23:c0:b5:4c:03:53:bb:81:3e:ff:21: ea:38:25:b9:97:f8:60:99:92:58:f1:59:3e:46:30:26:5c:db: e4:71:8f:63:bd:55:9f:db:84:a7:9c:d3:c9:fd:ad:96:c6:cf: 65:9a:24:23:b7:0b:cb:d6:33:a3:06:e8:36:05:2b:0c:b3:dd: 07:2e:78:67:ec:0d:2c:9f:89:b1:e3:e5:d9:a3:a3:1a:1c:29: 35:a3:af:d1:dc:76:27:d7:99:2d:9e:84:b0:da:b5:9d:3d:bc: b9:4d:b7:78:38:f4:cb:85:12:42:db:25:cb:89:9f:cb:1e:3d: 4f:95:53:c0:61:17:55:5c:de:ae:70:87:1d:f1:0b:a7:72:88: a4:2c:a8:c2:44:e8:19:33:83:ea:1a:f0:3e:08:44:6b:cb:e7: 2d:56:55:79:22:e3:47:82:a1:98:95:e1:2e:4c:42:3f:e6:49: ea:53:20:83:2a:cb:37:17:fb:9c:bb:ce:4a:70:ae:89:dc:a3: ee:ef:ed:dc:11:86:75:c3:c1:a6:80:6f:71:0b:82:b8:31:c5: f5:e3:0f:ee -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICCUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz RjE1NjI3MkQwHhcNMjUxMDA2MjA1MjIwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU0MmMwNC04Yzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJpCqkOFswk2Jxh01XVDSO7weRx6PVCwLANmFMENufsFvGeDLKDvPVct4sev zAx5208BPhTLFH1gx7/NarfA73FI2VfH4CqzsbiVMjiTcDDVI2gDjXUksf+YEcli ubPZjATng1dSKudu/KHWXRqdNhvFwnPZ4+efCe0dP9sWsvXjrjfyU7D2CyZPeTbK Hjb6wbb1/qe6E2afo+7Ey7d1YvFY58z7BZUlInGvfoypoRQhywk38HwUtK99YYgo oDJQVeXwS4QIUCqkT3E5lVAFnel/5t/+zYhi0go4imlc1DwxdqJ6NOiz5RjBbj55 wD4MY04Ah0Fgns2pok/CavmY8QIDAQABo4ICrzCCAqswHQYDVR0OBBYEFJHdcrHL 3xzvZhYl+mP2y3W/dN6bMB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzBBNTMvNzFCN0Q0NzBBQjRBMTFFQTg5RDE2MzU5QzRGOUFFMDIvRjM2QTBFMkVB QjRCMTFFQUEyQ0E1ODVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBABnFHgwGAQCAAIwEgMHACQFJQAABQMHACQFJQAAETANBgkq hkiG9w0BAQsFAAOCAQEAXYIuGp4IFCM7hbZiEBoKG+Io0Rmy8RIOesC5+iKl8YhR 28aQ7N8hG1dglyPAtUwDU7uBPv8h6jgluZf4YJmSWPFZPkYwJlzb5HGPY71Vn9uE p5zTyf2tlsbPZZokI7cLy9YzowboNgUrDLPdBy54Z+wNLJ+JsePl2aOjGhwpNaOv 0dx2J9eZLZ6EsNq1nT28uU23eDj0y4USQtsly4mfyx49T5VTwGEXVVzernCHHfEL p3KIpCyowkToGTOD6hrwPghEa8vnLVZVeSLjR4KhmJXhLkxCP+ZJ6lMggyrLNxf7 nLvOSnCuidyj7u/t3BGGdcPBpoBvcQuCuDHF9eMP7g== -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:39 2025 by rpki-client