$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa File: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (raw, json) Hash identifier: gvY7yNXsc8f6BaNnDgo1s6r58BRk/opgVjfKstxIGuo= Subject key identifier: 71:C2:6A:6A:51:A9:3E:26:07:83:7E:FE:FF:1B:85:98:C4:A0:1B:D9 Certificate issuer: /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Certificate serial: 0528 Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa Signing time: Fri 17 Oct 2025 01:35:17 +0000 ROA not before: Fri 17 Oct 2025 01:35:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 147029 IP address blocks: 103.173.60.0/23 maxlen: 23 103.173.60.0/24 maxlen: 24 103.173.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138271, serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4 Validity Not Before: Oct 17 01:35:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f19d54-c535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:62:90:d1:2a:f6:d9:6e:3e:7a:e8:e2:31:fc: 92:f4:c8:88:ed:2a:c7:28:fb:e1:e7:7f:bc:6b:11: 80:01:4c:b9:70:f4:7a:ab:89:e5:c9:55:20:cb:2a: 54:79:93:bf:c0:a2:69:62:18:4b:14:63:0e:33:c9: dc:e3:33:a9:78:c6:a4:2b:23:1d:33:4e:d0:f1:00: 48:92:ff:94:28:ee:51:21:27:c7:a6:1f:16:9c:be: 09:8f:b3:48:6e:10:ee:8e:2e:0b:75:88:b5:8d:c5: 56:9c:79:74:9d:78:72:3d:e8:e3:70:da:c5:a6:84: 5b:48:eb:28:36:33:df:c3:1e:57:db:01:19:76:7a: d9:12:1f:fa:68:a4:7f:ae:0a:9c:e6:19:0f:57:23: 97:d3:ec:23:a9:6f:04:bd:74:e1:75:d8:34:6c:29: e2:b7:23:fc:db:89:74:5b:9c:78:c3:0a:df:37:18: 0e:1c:25:37:02:14:28:44:35:31:21:4b:73:57:72: 7a:0e:12:ba:fb:45:eb:4d:69:6e:75:19:f4:92:64: 33:c1:26:4d:69:cb:bb:8c:1b:88:51:4b:82:a3:4a: de:d3:da:73:f3:cf:3b:5c:f5:e0:ac:b8:22:c7:ba: cd:4a:07:4b:41:0f:ea:70:ac:82:cc:d8:a4:be:b0: f6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C2:6A:6A:51:A9:3E:26:07:83:7E:FE:FF:1B:85:98:C4:A0:1B:D9 X509v3 Authority Key Identifier: keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.60.0/23 Signature Algorithm: sha256WithRSAEncryption 95:57:27:30:74:80:25:41:47:f2:ab:69:33:0a:89:11:2e:57: ef:e1:98:04:74:4f:d6:3c:2e:a8:94:e8:04:5a:c2:dd:47:6e: 23:99:a1:85:bc:ff:b2:6c:5c:50:57:f6:7c:36:d3:11:a3:22: 06:94:aa:9d:09:3d:36:50:ca:c9:52:1a:a8:0f:1f:a0:5f:3a: e4:be:bc:cd:0d:99:fa:c1:1e:7e:f7:ca:ad:3c:f5:f2:a2:2a: 29:61:ac:4f:2e:15:a5:b5:f7:0e:b9:8e:cf:e5:18:a9:cd:5b: 18:b6:a9:2b:96:de:0e:e6:f3:32:75:2d:09:10:58:04:37:30: cd:63:52:ec:c2:54:46:6b:85:40:de:4f:df:70:8e:f5:91:d9: 01:e8:2e:89:20:b3:a4:cf:00:7e:83:3d:dc:3d:7e:46:47:a6: 86:35:bc:e9:f2:6f:3b:c7:59:9d:4d:ea:08:e8:61:87:d5:dd: 58:7d:d4:90:65:c9:9b:12:b6:c5:f3:b8:de:d3:2b:fc:6f:63: 1f:c2:e7:73:3f:4b:8f:02:51:fd:3f:48:49:b3:2c:8d:6d:ff: 73:12:a9:f6:e6:c3:99:8d:b1:af:68:54:67:c3:d4:35:36:e3: 41:1c:71:10:6a:72:4d:2c:20:ec:22:08:27:4e:40:2b:82:1e: ae:55:3c:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyNzExMTAvBgNVBAUTKDAxNzI0QkEyRjQwNTMyQjdFMDhENzIwRjRDMDk2NjQx QjRBMUM4QzQwHhcNMjUxMDE3MDEzNTE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYxOWQ1NC1jNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mKQ0Sr22W4+eujiMfyS9MiI7SrHKPvh53+8axGAAUy5cPR6q4nlyVUgyypU eZO/wKJpYhhLFGMOM8nc4zOpeMakKyMdM07Q8QBIkv+UKO5RISfHph8WnL4Jj7NI bhDuji4LdYi1jcVWnHl0nXhyPejjcNrFpoRbSOsoNjPfwx5X2wEZdnrZEh/6aKR/ rgqc5hkPVyOX0+wjqW8EvXThddg0bCnityP824l0W5x4wwrfNxgOHCU3AhQoRDUx IUtzV3J6DhK6+0XrTWludRn0kmQzwSZNacu7jBuIUUuCo0re09pz8887XPXgrLgi x7rNSgdLQQ/qcKyCzNikvrD2CQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHHCampR qT4mB4N+/v8bhZjEoBvZMB8GA1UdIwQYMBaAFAFyS6L0BTK34I1yD0wJZkG0ocjE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODI3MS84MUY5RTJEMDFD NDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1yZmdqWElQVEFsbVFiU2h5 TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYSkxvdlFGTXJmZ2pYSVBUQWxtUWJTaHlNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzgyNzEvODFGOUUyRDAxQzQ0MTFFQzlCMkU2QTVGQzRGOUFFMDIvQkQ0RDhBMkMx QzQ4MTFFQ0JBQTIxQTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrTwwDQYJKoZIhvcNAQELBQADggEBAJVXJzB0gCVBR/Kr aTMKiREuV+/hmAR0T9Y8LqiU6ARawt1HbiOZoYW8/7JsXFBX9nw20xGjIgaUqp0J PTZQyslSGqgPH6BfOuS+vM0NmfrBHn73yq089fKiKilhrE8uFaW19w65js/lGKnN Wxi2qSuW3g7m8zJ1LQkQWAQ3MM1jUuzCVEZrhUDeT99wjvWR2QHoLokgs6TPAH6D Pdw9fkZHpoY1vOnybzvHWZ1N6gjoYYfV3Vh91JBlyZsStsXzuN7TK/xvYx/C53M/ S48CUf0/SEmzLI1t/3MSqfbmw5mNsa9oVGfD1DU240EccRBqck0sIOwiCCdOQCuC Hq5VPNE= -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:19 2025 by rpki-client