$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/6B4669CE7B7D11E99F99E776C4F9AE02.roa File: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (raw, json) Hash identifier: 74IUgWh0EIbll6zM2oD6KnRo4IUzeZO6atmhM6ptuY8= Subject key identifier: 41:1C:34:DE:07:77:A5:EC:E7:9A:B8:BE:AD:99:89:AD:B8:1A:98:A9 Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 2644 Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/6B4669CE7B7D11E99F99E776C4F9AE02.roa Signing time: Sun 14 Sep 2025 17:57:29 +0000 ROA not before: Sun 14 Sep 2025 17:57:29 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.138.210.0/24 maxlen: 24 2001:df0:5580::/48 maxlen: 48 2001:df0:5580:400::/54 maxlen: 54 2001:df0:5580:c00::/54 maxlen: 54 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9796 (0x2644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Validity Not Before: Sep 14 17:57:29 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68c70209-b5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:f5:cf:58:e0:a5:29:1f:51:4a:72:59:b7: 4a:eb:bf:cb:59:d8:bd:2d:0e:8c:6f:a1:5b:34:41: a8:12:18:95:14:f0:94:8e:4c:0a:61:3f:00:f7:97: d4:22:99:7f:74:b4:7c:ef:1f:9c:9f:c0:2b:df:64: e4:1b:42:a5:37:89:0c:6b:6c:0c:92:6e:8d:13:42: 14:b8:ef:ec:a3:1a:1c:1f:85:0b:b3:0c:0d:1c:07: 14:8b:b4:03:72:14:d9:f9:78:cd:ba:90:7d:5e:89: 4f:c2:82:59:47:71:ce:4e:46:6a:57:e4:47:67:10: fb:aa:af:df:2d:b1:57:c8:f3:12:22:2b:1d:3b:02: e9:8c:55:ed:7f:da:39:18:59:34:60:34:fa:90:5f: 57:e7:75:95:89:d2:ad:fa:01:a8:8f:f0:13:e4:dd: 0f:5a:4a:1d:d0:aa:a6:18:6b:3a:a6:7d:ac:49:53: bf:10:be:ee:60:30:ed:90:8b:89:91:1e:c9:eb:2b: 18:93:fa:02:1d:d4:53:a8:59:52:d9:90:18:5d:35: 10:0a:6e:83:82:95:05:b6:84:83:03:8d:0f:4a:a4: 55:dd:76:e0:07:1a:06:39:af:ba:d3:ab:58:57:50: 4d:bf:4e:ea:a2:05:ed:24:c5:fd:a9:32:1e:89:3f: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1C:34:DE:07:77:A5:EC:E7:9A:B8:BE:AD:99:89:AD:B8:1A:98:A9 X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/6B4669CE7B7D11E99F99E776C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.210.0/24 IPv6: 2001:df0:5580::/48 Signature Algorithm: sha256WithRSAEncryption 78:0a:80:6b:75:7c:8b:c3:ce:fb:97:de:a5:b2:43:96:f9:81: 6a:63:24:f0:fa:0c:68:28:10:26:f1:cb:83:61:3e:6e:88:01: c4:4b:18:7a:65:cc:e8:59:3c:fa:31:16:9a:e4:02:1b:5b:36: 49:24:34:04:7c:a4:a8:b8:76:17:5d:dc:26:06:34:26:5b:13: 1a:c3:ab:01:7f:f5:9d:74:05:d6:99:b1:a9:30:70:7a:e4:88: f3:15:7b:c5:a8:e2:8a:94:92:99:3d:70:24:46:b1:b7:9e:10: 16:13:ac:2f:e7:e4:94:ab:79:a2:b7:06:47:0f:1a:37:e0:42: f7:8e:c2:bc:c4:ff:52:e8:32:61:08:a3:4a:04:59:41:9b:aa: cc:12:6f:79:4d:48:4d:f0:d0:8e:cc:44:c9:2a:71:68:dd:0d: c6:71:2b:77:bf:03:65:dd:4a:bc:f1:e6:83:e5:f7:1b:17:38: fc:69:b0:02:6a:58:f0:33:ee:73:09:be:5b:d0:3c:2a:ac:13: 79:56:0e:0b:b0:df:9a:02:bc:5b:cd:1c:56:24:8a:91:da:c9: c0:09:c0:d8:c1:53:1e:fc:e7:06:a2:e8:b7:04:7e:92:49:73: 63:72:53:fe:9f:ca:5e:d8:15:f4:ea:b4:e2:04:bb:70:24:c1: 87:03:1f:5a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICJkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjUwOTE0MTc1NzI5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM3MDIwOS1iNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoT1z1jgpSkfUUpyWbdK67/LWdi9LQ6Mb6FbNEGoEhiVFPCUjkwKYT8A95fU Ipl/dLR87x+cn8Ar32TkG0KlN4kMa2wMkm6NE0IUuO/soxocH4ULswwNHAcUi7QD chTZ+XjNupB9XolPwoJZR3HOTkZqV+RHZxD7qq/fLbFXyPMSIisdOwLpjFXtf9o5 GFk0YDT6kF9X53WVidKt+gGoj/AT5N0PWkod0KqmGGs6pn2sSVO/EL7uYDDtkIuJ kR7J6ysYk/oCHdRTqFlS2ZAYXTUQCm6DgpUFtoSDA40PSqRV3XbgBxoGOa+606tY V1BNv07qogXtJMX9qTIeiT+2+wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEEcNN4H d6Xs55q4vq2Zia24GpipMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvNkI0NjY5Q0U3 QjdEMTFFOTlGOTlFNzc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnitIwDwQCAAIwCQMHACABDfBVgDANBgkqhkiG9w0BAQsF AAOCAQEAeAqAa3V8i8PO+5fepbJDlvmBamMk8PoMaCgQJvHLg2E+bogBxEsYemXM 6Fk8+jEWmuQCG1s2SSQ0BHykqLh2F13cJgY0JlsTGsOrAX/1nXQF1pmxqTBweuSI 8xV7xajiipSSmT1wJEaxt54QFhOsL+fklKt5orcGRw8aN+BC947CvMT/UugyYQij SgRZQZuqzBJveU1ITfDQjsxEySpxaN0NxnErd78DZd1KvPHmg+X3Gxc4/GmwAmpY 8DPucwm+W9A8KqwTeVYOC7DfmgK8W80cViSKkdrJwAnA2MFTHvznBqLotwR+kklz Y3JT/p/KXtgV9Oq04gS7cCTBhwMfWg== -----END CERTIFICATE-----Generated at Mon Oct 20 11:31:02 2025 by rpki-client