$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/DD53E3B8F0B511E98108C962C4F9AE02.roa File: DD53E3B8F0B511E98108C962C4F9AE02.roa (raw, json) Hash identifier: 7+D+4cviOAlgLCuJEqBcQy12C4EO3koTOsF6GPsHb00= Subject key identifier: 8B:04:FC:36:D3:F1:9A:4D:46:FD:00:9D:70:EC:96:DD:A1:5F:E6:EF Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0CF0 Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/DD53E3B8F0B511E98108C962C4F9AE02.roa Signing time: Tue 30 Sep 2025 18:18:00 +0000 ROA not before: Tue 30 Sep 2025 18:18:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139650 IP address blocks: 103.143.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: Sep 30 18:18:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dc1ed8-e42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:9c:08:6a:aa:e6:5b:93:dc:5b:78:4b:fc: 9d:60:b3:95:39:1e:9d:e2:f1:c0:8b:53:87:0b:a0: 6c:01:3d:a6:6b:45:fd:15:e2:98:21:cb:5a:4a:09: b2:7f:fb:f9:9c:82:b9:85:4e:af:40:c8:58:c8:50: 1d:39:ed:bb:33:77:2d:8b:2f:90:de:81:b3:b0:45: 8d:b6:d9:f2:65:2a:29:4b:80:60:7f:c4:5f:b3:c8: b7:38:59:f7:e1:1a:5d:4d:4a:ca:6f:d6:c0:10:da: 80:28:6b:f3:cc:c1:e0:4b:ee:89:3a:82:7a:7b:e7: c3:1d:bc:99:c0:42:61:85:d9:5e:9e:87:7c:60:65: 0a:60:93:9a:83:fb:be:17:4b:3e:67:76:68:a2:32: 0b:5f:3e:7b:b8:e5:d6:9e:b3:2b:a0:0f:d4:73:3f: c9:1e:7c:b7:e2:47:26:c3:2b:1f:34:0d:39:48:2d: 71:57:3c:59:6f:fb:45:d8:df:27:d2:0a:2d:d4:db: 1f:42:98:48:8b:57:fc:55:3c:fc:b4:c8:66:e8:de: 7b:ec:75:a2:c1:37:c2:58:5b:d3:fa:34:dd:50:f6: 76:3e:b5:c6:e8:75:7f:0a:25:da:60:88:89:8b:52: aa:c1:26:ce:75:c9:55:48:2c:9c:a5:5d:a4:13:35: 88:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:04:FC:36:D3:F1:9A:4D:46:FD:00:9D:70:EC:96:DD:A1:5F:E6:EF X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/DD53E3B8F0B511E98108C962C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.40.0/23 Signature Algorithm: sha256WithRSAEncryption 61:01:60:09:ea:f2:8e:ec:51:66:8c:24:41:2c:31:1e:63:19: 9f:21:18:8b:f9:85:4c:0b:e8:ec:af:21:fe:43:52:16:23:00: b3:0d:3e:cd:77:0f:d0:38:57:df:6a:8e:f5:13:75:a5:2d:5a: 8b:1a:5e:a0:9a:53:50:b4:c2:3a:a0:44:51:29:e2:e5:ed:38: 4a:89:e5:fc:e3:ed:ce:39:c4:77:fe:67:7a:7d:41:1e:74:9e: e7:33:0c:41:ee:dd:9e:13:12:88:2d:3f:1a:05:f5:3a:d3:e8: 9b:4d:11:14:a3:59:d8:a0:97:df:d2:fc:11:90:e0:b1:e6:44: c6:cf:14:8d:15:91:21:c8:2f:fc:09:c9:fd:e4:ac:e0:37:8d: 9f:89:6a:11:45:29:7d:44:c0:be:7f:c4:5d:85:5e:11:9e:6e: 14:01:d2:b0:1a:6c:11:7c:07:95:9c:d4:21:fa:ed:41:ad:b0: 29:b9:b2:5d:a3:39:e2:f4:a6:07:cd:82:44:81:9e:89:18:3c: ab:38:ee:a2:35:cc:c7:4e:96:8a:7f:5b:4c:dc:a9:9a:a2:54: 2a:d5:ad:bc:3d:18:29:ac:ce:12:9c:c2:72:67:f0:93:1f:b4: c8:b2:22:cc:fd:d1:85:01:06:a6:24:e4:e1:4c:0f:b7:5b:2c: e6:89:5a:1c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjUwOTMwMTgxODAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjMWVkOC1lNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsqcCGqq5luT3Ft4S/ydYLOVOR6d4vHAi1OHC6BsAT2ma0X9FeKYIctaSgmy f/v5nIK5hU6vQMhYyFAdOe27M3ctiy+Q3oGzsEWNttnyZSopS4Bgf8Rfs8i3OFn3 4RpdTUrKb9bAENqAKGvzzMHgS+6JOoJ6e+fDHbyZwEJhhdlenod8YGUKYJOag/u+ F0s+Z3ZoojILXz57uOXWnrMroA/Ucz/JHny34kcmwysfNA05SC1xVzxZb/tF2N8n 0got1NsfQphIi1f8VTz8tMhm6N577HWiwTfCWFvT+jTdUPZ2PrXG6HV/CiXaYIiJ i1KqwSbOdclVSCycpV2kEzWISwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIsE/DbT 8ZpNRv0AnXDslt2hX+bvMB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE5NzQvMkU2QjY5RUVGMEI0MTFFOUJDQzZGRTVEQzRGOUFFMDIvREQ1M0UzQjhG MEI1MTFFOTgxMDhDOTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjygwDQYJKoZIhvcNAQELBQADggEBAGEBYAnq8o7sUWaM JEEsMR5jGZ8hGIv5hUwL6OyvIf5DUhYjALMNPs13D9A4V99qjvUTdaUtWosaXqCa U1C0wjqgRFEp4uXtOEqJ5fzj7c45xHf+Z3p9QR50nuczDEHu3Z4TEogtPxoF9TrT 6JtNERSjWdigl9/S/BGQ4LHmRMbPFI0VkSHIL/wJyf3krOA3jZ+JahFFKX1EwL5/ xF2FXhGebhQB0rAabBF8B5Wc1CH67UGtsCm5sl2jOeL0pgfNgkSBnokYPKs47qI1 zMdOlop/W0zcqZqiVCrVrbw9GCmszhKcwnJn8JMftMiyIsz90YUBBqYk5OFMD7db LOaJWhw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:18 2025 by rpki-client