$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa File: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (raw, json) Hash identifier: JWAO5OM1htkOqA8zsEncfXnArds8hOb3Z7zkeDNiSm4= Subject key identifier: 9D:BA:89:9A:99:1D:A6:E2:8E:82:FF:F3:4A:05:79:D2:D2:6F:3E:5F Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Certificate serial: 02B7 Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa Signing time: Sun 19 Oct 2025 04:07:11 +0000 ROA not before: Sun 19 Oct 2025 04:07:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140976 IP address blocks: 103.83.82.0/23 maxlen: 23 103.83.82.0/24 maxlen: 24 103.83.83.0/24 maxlen: 24 2001:df1:1540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00 Validity Not Before: Oct 19 04:07:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68f463ef-d63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:b2:33:e8:0a:7f:2f:cc:1f:1d:a0:6b:7a: 8f:a7:0f:24:7e:87:f8:08:1c:37:19:7a:43:ba:a4: 03:70:13:58:8c:69:8d:45:77:8f:84:87:c4:0e:1a: ec:0e:d3:86:36:b2:11:bb:2c:8e:49:94:c7:e1:fb: fd:cc:78:da:7b:9d:bf:c0:6e:60:75:54:fc:39:af: 88:3d:d3:8e:0a:81:0e:98:70:ff:e7:05:3f:2b:2b: bf:ac:81:18:b9:21:76:40:2f:7a:d9:4b:99:33:93: b2:4e:26:69:b1:6c:55:e4:ee:0b:38:5f:79:59:3f: a5:7d:6e:00:2e:47:65:81:34:ac:d1:18:50:03:ec: 6f:0c:89:45:95:d3:82:43:d6:7b:22:c3:21:f5:9a: 96:8f:70:28:d2:52:ca:5a:50:b1:b2:c0:e8:6f:34: fb:de:f9:dc:2b:4c:2e:f8:b9:39:25:69:0f:40:f9: 34:88:57:0f:e6:37:60:74:59:39:fa:43:94:f3:5a: 21:e6:66:fd:72:08:91:65:2a:98:6d:08:2a:d8:d4: a2:7a:2f:f5:35:df:3d:6a:93:ff:ac:8f:95:b5:50: 71:5e:8f:08:bb:e8:7a:c0:a6:b8:22:fa:fd:e1:fd: 54:29:c9:37:f3:95:17:2b:9b:ec:5e:da:5e:b6:76: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BA:89:9A:99:1D:A6:E2:8E:82:FF:F3:4A:05:79:D2:D2:6F:3E:5F X509v3 Authority Key Identifier: keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.82.0/23 IPv6: 2001:df1:1540::/48 Signature Algorithm: sha256WithRSAEncryption 44:cb:c9:90:a0:3d:eb:76:13:ec:18:1d:69:3b:29:d0:5d:0b: 8f:01:c5:d2:ca:19:15:ba:87:75:af:5b:14:a4:53:15:63:66: f4:34:bb:22:22:76:bd:82:7a:5c:ec:cc:48:d6:28:5a:89:d2: 8e:bb:bd:48:7f:6e:81:fc:68:63:6c:d3:e4:0d:a7:01:3a:42: 11:ec:a1:ad:4b:3d:6a:5c:f0:66:53:1c:1a:bd:aa:f7:aa:a2: 59:30:82:bc:11:e1:82:07:d0:c2:f6:72:6d:55:50:32:d5:8d: 7d:cf:08:d6:e2:a9:60:ba:7a:3a:6c:94:df:9d:b0:8f:e0:90: b8:e2:dc:94:d1:40:df:c0:7c:90:3b:92:2b:9f:3b:f0:83:15: 89:1f:bd:87:5b:b9:24:a2:8e:3b:c1:1d:a6:eb:22:79:46:53: 6e:93:08:b0:68:40:00:63:2a:7d:be:91:70:da:15:8a:20:91: 35:fa:c2:e6:52:2a:90:f3:f6:6c:78:bb:a8:ad:78:4a:f1:5e: 9c:fa:71:4d:de:c7:d4:77:c4:aa:75:31:53:4b:85:2e:3e:9c: 76:4d:5e:78:33:fe:54:9d:ec:78:c9:de:ea:37:7b:45:c0:d1: b4:2b:b8:25:54:ae:93:0a:82:3f:bf:1c:c1:9b:c9:9d:08:0e: 2f:fb:2d:d0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNDYxMTAvBgNVBAUTKDYzNTE1QjM2NDExMzg0OEZBNTU0RDI4NDJGNTg0MTg3 N0NGNkFGMDAwHhcNMjUxMDE5MDQwNzExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY0NjNlZi1kNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX2yM+gKfy/MHx2ga3qPpw8kfof4CBw3GXpDuqQDcBNYjGmNRXePhIfEDhrs DtOGNrIRuyyOSZTH4fv9zHjae52/wG5gdVT8Oa+IPdOOCoEOmHD/5wU/Kyu/rIEY uSF2QC962UuZM5OyTiZpsWxV5O4LOF95WT+lfW4ALkdlgTSs0RhQA+xvDIlFldOC Q9Z7IsMh9ZqWj3Ao0lLKWlCxssDobzT73vncK0wu+Lk5JWkPQPk0iFcP5jdgdFk5 +kOU81oh5mb9cgiRZSqYbQgq2NSiei/1Nd89apP/rI+VtVBxXo8Iu+h6wKa4Ivr9 4f1UKck385UXK5vsXtpetnZnjwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJ26iZqZ HabijoL/80oFedLSbz5fMB8GA1UdIwQYMBaAFGNRWzZBE4SPpVTShC9YQYd89q8A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU0Ni9BRTgyRTEyNjEy RUQxMUVEOUU0RDc2MEVDNEY5QUUwMi9ZMUZiTmtFVGhJLWxWTktFTDFoQmgzejJy d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxRmJOa0VUaEktbFZOS0VMMWhCaDN6MnJ3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VFNDYvQUU4MkUxMjYxMkVEMTFFRDlFNEQ3NjBFQzRGOUFFMDIvOURGRkJDN0Mx MkYwMTFFREEwREIwQjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnU1IwDwQCAAIwCQMHACABDfEVQDANBgkqhkiG9w0BAQsF AAOCAQEARMvJkKA963YT7BgdaTsp0F0LjwHF0soZFbqHda9bFKRTFWNm9DS7IiJ2 vYJ6XOzMSNYoWonSjru9SH9ugfxoY2zT5A2nATpCEeyhrUs9alzwZlMcGr2q96qi WTCCvBHhggfQwvZybVVQMtWNfc8I1uKpYLp6OmyU352wj+CQuOLclNFA38B8kDuS K5878IMViR+9h1u5JKKOO8EdpusieUZTbpMIsGhAAGMqfb6RcNoViiCRNfrC5lIq kPP2bHi7qK14SvFenPpxTd7H1HfEqnUxU0uFLj6cdk1eeDP+VJ3seMne6jd7RcDR tCu4JVSukwqCP78cwZvJnQgOL/st0A== -----END CERTIFICATE-----Generated at Mon Oct 20 22:24:26 2025 by rpki-client