$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/9D9E8D0C11DC11EABC4FB55AC4F9AE02.roa File: 9D9E8D0C11DC11EABC4FB55AC4F9AE02.roa (raw, json) Hash identifier: mpNtvPGDNyq+PRsSPrmTIOnrME1PEVdh0woyoWhgRGo= Subject key identifier: D5:FA:6E:7B:54:13:76:6C:07:B1:52:D1:09:79:97:12:AA:20:10:EF Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Certificate serial: 0C57 Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/9D9E8D0C11DC11EABC4FB55AC4F9AE02.roa Signing time: Sat 18 Oct 2025 13:22:16 +0000 ROA not before: Sat 18 Oct 2025 13:22:16 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138192 IP address blocks: 103.129.212.0/22 maxlen: 24 103.156.189.0/24 maxlen: 24 2403:88c0::/32 maxlen: 36 2403:88c0::/48 maxlen: 48 2403:88c0:1::/48 maxlen: 48 2403:88c0:a::/48 maxlen: 48 2403:88c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949 Validity Not Before: Oct 18 13:22:16 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f39488-e560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:22:d9:01:e3:f9:3a:d7:a8:21:fc:e9:c6:8b: d7:2b:3d:6e:46:b5:c0:02:96:f0:9f:92:b4:32:fb: a9:0f:81:a1:15:68:ed:1e:f3:71:cd:dd:d2:a5:0a: e6:96:54:82:06:a3:2f:a8:43:9d:27:2a:9f:48:43: 38:46:4c:fc:d4:4f:cd:15:80:e8:2c:f1:81:96:35: 02:dc:fa:87:65:d9:35:5f:ad:18:51:dc:69:f4:be: 40:fe:52:6c:65:25:82:08:ef:f7:fe:bb:7b:80:5c: 34:79:09:5c:76:b9:71:ae:32:1e:cf:e2:7c:51:ef: e2:dd:50:80:01:68:2d:7d:61:3d:44:ed:07:20:1b: 43:6a:c3:da:02:bc:17:8e:30:3b:57:68:bc:72:12: 7b:6c:3b:e7:d1:6e:bb:d8:f8:b4:06:2d:c2:c5:cc: c9:a1:2a:27:20:2f:30:be:b6:cf:82:e8:20:e7:6b: f9:69:60:7c:d5:de:41:00:50:df:1b:41:3a:dd:5f: dd:d4:2b:e5:11:f6:6d:27:b6:5c:7b:46:01:cf:37: 46:2c:3a:1f:cd:19:3e:26:69:0e:72:b8:13:bd:f0: 31:97:08:31:a2:60:7f:69:74:87:01:01:c3:0b:3d: 01:9d:de:bb:36:34:8b:f2:7f:61:17:1f:28:d4:50: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FA:6E:7B:54:13:76:6C:07:B1:52:D1:09:79:97:12:AA:20:10:EF X509v3 Authority Key Identifier: keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/9D9E8D0C11DC11EABC4FB55AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.129.212.0/22 103.156.189.0/24 IPv6: 2403:88c0::/32 Signature Algorithm: sha256WithRSAEncryption 13:d1:da:95:dc:9d:51:38:57:db:0b:10:d2:5f:84:85:e8:da: fd:8d:29:9d:61:fe:4f:d7:b9:b4:92:1d:6b:ab:64:45:78:3b: 9c:db:ec:9b:a1:9f:d2:c2:43:0f:26:fa:17:bc:65:5e:0e:ad: cc:6b:86:5c:89:31:9d:03:15:91:c2:b0:c2:88:16:32:a6:f1: 08:f4:9b:54:da:1c:9c:1e:44:0a:04:f9:b0:72:2f:b0:0b:a5: e8:ee:63:22:d2:4f:93:24:6a:65:3c:dd:0f:da:57:21:0f:31: fb:54:eb:03:64:2c:d2:de:6e:9f:94:b9:7e:47:41:ab:f7:fc: e9:27:d7:54:88:c2:d6:75:63:b0:8a:31:9f:a9:b0:fe:86:06: 0c:ce:6f:58:64:ff:94:02:43:cb:2c:83:a4:f0:8d:68:70:9a: 4d:fd:49:71:6e:b7:00:46:fb:56:b8:21:96:b4:52:2c:b7:fc: 5b:b0:25:59:1c:ad:d9:9d:f0:e7:53:31:f5:34:39:4c:c4:a8: 47:72:29:fc:34:fc:6a:93:fa:51:14:17:74:72:e0:56:07:cd: bf:82:02:f2:37:6b:5f:da:87:9e:ca:ef:92:93:bb:72:cc:29: fc:f7:83:76:95:4d:51:1f:ee:df:5f:3d:aa:4d:11:53:d6:56: 94:4a:4a:fa -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0QUExMTAvBgNVBAUTKDYzODgzRTRDQTJDOEU3REREQUMzOTg3RTQ4NEZEMUQ2 NzJEOTM5NDkwHhcNMjUxMDE4MTMyMjE2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYzOTQ4OC1lNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SLZAeP5OteoIfzpxovXKz1uRrXAApbwn5K0MvupD4GhFWjtHvNxzd3SpQrm llSCBqMvqEOdJyqfSEM4Rkz81E/NFYDoLPGBljUC3PqHZdk1X60YUdxp9L5A/lJs ZSWCCO/3/rt7gFw0eQlcdrlxrjIez+J8Ue/i3VCAAWgtfWE9RO0HIBtDasPaArwX jjA7V2i8chJ7bDvn0W672Pi0Bi3CxczJoSonIC8wvrbPgugg52v5aWB81d5BAFDf G0E63V/d1CvlEfZtJ7Zce0YBzzdGLDofzRk+JmkOcrgTvfAxlwgxomB/aXSHAQHD Cz0Bnd67NjSL8n9hFx8o1FAz6wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNX6bntU E3ZsB7FS0Ql5lxKqIBDvMB8GA1UdIwQYMBaAFGOIPkyiyOfd2sOYfkhP0dZy2TlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTRBQS82NzRDQTI5RTEx REIxMUVBQkY0NURBNTVDNEY5QUUwMi9ZNGctVEtMSTU5M2F3NWgtU0VfUjFuTFpP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0Zy1US0xJNTkzYXc1aC1TRV9SMW5MWk9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0U0QUEvNjc0Q0EyOUUxMURCMTFFQUJGNDVEQTU1QzRGOUFFMDIvOUQ5RThEMEMx MURDMTFFQUJDNEZCNTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJngdQDBABnnL0wDQQCAAIwBwMFACQDiMAwDQYJKoZIhvcN AQELBQADggEBABPR2pXcnVE4V9sLENJfhIXo2v2NKZ1h/k/XubSSHWurZEV4O5zb 7Juhn9LCQw8m+he8ZV4OrcxrhlyJMZ0DFZHCsMKIFjKm8Qj0m1TaHJweRAoE+bBy L7ALpejuYyLST5MkamU83Q/aVyEPMftU6wNkLNLebp+UuX5HQav3/Okn11SIwtZ1 Y7CKMZ+psP6GBgzOb1hk/5QCQ8ssg6TwjWhwmk39SXFutwBG+1a4IZa0Uiy3/Fuw JVkcrdmd8OdTMfU0OUzEqEdyKfw0/GqT+lEUF3Ry4FYHzb+CAvI3a1/ah57K75KT u3LMKfz3g3aVTVEf7t9fPapNEVPWVpRKSvo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:43:00 2025 by rpki-client