$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa File: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (raw, json) Hash identifier: OeiUjQjQDPnp0Hc4HqvRxkfSPHq3x3ODdBcjSRZ+2RM= Subject key identifier: E7:1B:45:0E:D9:36:CF:82:C4:5E:6C:3A:18:B7:73:2B:27:02:DB:93 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1F55 Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa Signing time: Thu 02 Oct 2025 16:14:12 +0000 ROA not before: Thu 02 Oct 2025 16:14:12 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132123 IP address blocks: 103.70.228.0/22 maxlen: 22 103.70.228.0/24 maxlen: 24 103.70.229.0/24 maxlen: 24 103.70.230.0/24 maxlen: 24 103.70.231.0/24 maxlen: 24 2001:df3:be00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8021 (0x1f55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Oct 2 16:14:12 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dea4d4-1cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:69:78:a1:58:c5:52:c0:18:29:23:fa:d8: b3:84:f5:01:91:39:4d:9e:59:e7:ad:50:ab:3c:0f: 37:a5:55:94:e0:24:e5:c4:52:26:8f:fe:74:65:df: 3a:6f:76:b2:64:cd:8c:97:90:4c:87:7e:d0:19:c2: db:63:cc:d1:3b:40:9b:77:0c:3d:f3:70:7c:32:60: eb:f1:61:f6:3d:45:a6:d9:f5:19:16:c2:4a:e5:46: a7:41:d4:95:b5:89:d8:29:93:9a:a0:53:bf:d4:51: f8:1a:9f:f8:43:6f:58:5c:d0:44:08:89:fc:70:e5: 34:d3:b7:ef:94:80:06:ec:2b:aa:93:61:f2:b1:f4: 09:3e:53:b3:f1:39:d5:8a:b5:22:89:c5:1c:52:73: 87:d1:a6:b7:60:c9:79:79:f1:21:fc:26:90:c1:80: 98:52:a6:1e:09:4f:21:c5:c4:55:e0:b7:4c:9b:c6: c7:5c:61:a4:2f:b4:0d:41:93:4b:c9:74:89:2b:2b: 30:a5:07:6b:12:92:0d:1d:a0:82:c5:c7:d6:0d:e4: 78:91:c7:f2:0f:9f:6e:49:0d:a9:bf:da:b7:ae:29: d5:24:24:1c:99:d0:50:cf:3d:56:37:ba:da:76:75: ba:df:ea:69:41:90:88:09:dd:1f:ae:74:fb:2c:7d: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1B:45:0E:D9:36:CF:82:C4:5E:6C:3A:18:B7:73:2B:27:02:DB:93 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.228.0/22 IPv6: 2001:df3:be00::/48 Signature Algorithm: sha256WithRSAEncryption ba:7b:1b:2c:39:ef:6e:b3:ef:2d:f4:d7:ed:47:c6:01:c0:a1: 98:5f:80:19:c9:64:8c:97:61:61:1d:02:b8:2c:4f:31:2e:cb: 92:51:98:3d:19:9f:48:b1:dd:5a:a5:b5:76:c7:08:78:4b:80: b9:fb:c0:0f:66:cd:b6:f4:47:11:36:91:48:30:07:12:8f:df: 1d:bd:46:26:95:b6:db:df:b9:74:2a:57:fa:02:31:a2:e8:f3: ff:54:6c:21:8f:1d:8f:f0:09:d6:79:37:cd:33:79:13:cc:b0: 96:a6:e9:36:0e:5f:62:2b:ba:cb:41:d9:01:62:91:44:07:c7: ca:70:f4:61:f6:e4:1e:7a:3a:ab:e3:d4:1c:be:ed:eb:d6:69: 31:57:e8:33:45:a1:0a:56:ae:67:bb:39:f3:21:30:8d:c4:1c: 21:b4:b8:8a:dc:c6:14:74:c2:cd:10:92:89:35:20:cb:34:76: 0e:18:4d:4c:ca:6c:5a:0b:5a:f5:e8:8f:e8:42:84:7c:be:fa: e1:2a:ae:a8:ed:c7:31:29:c0:82:af:ab:1c:88:20:1d:a5:4d: 1c:7b:23:b2:09:8d:33:82:b6:0d:1d:56:03:6a:4f:c4:84:ab: 13:e0:1f:f8:09:9c:e2:b5:12:8f:bb:48:85:d7:48:96:56:4b: 6a:bc:49:ee -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICH1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjUxMDAyMTYxNDEyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlYTRkNC0xY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8VpeKFYxVLAGCkj+tizhPUBkTlNnlnnrVCrPA83pVWU4CTlxFImj/50Zd86 b3ayZM2Ml5BMh37QGcLbY8zRO0Cbdww983B8MmDr8WH2PUWm2fUZFsJK5UanQdSV tYnYKZOaoFO/1FH4Gp/4Q29YXNBECIn8cOU007fvlIAG7Cuqk2HysfQJPlOz8TnV irUiicUcUnOH0aa3YMl5efEh/CaQwYCYUqYeCU8hxcRV4LdMm8bHXGGkL7QNQZNL yXSJKyswpQdrEpINHaCCxcfWDeR4kcfyD59uSQ2pv9q3rinVJCQcmdBQzz1WN7ra dnW63+ppQZCICd0frnT7LH3eSQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOcbRQ7Z Ns+CxF5sOhi3cysnAtuTMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIyMDkvQTZCNTY3ODQ1ODlGMTFFNkJEREZGMTIxQzRGOUFFMDIvNzRGM0YxMTA5 OEJCMTFFQTlCMUJENzVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnRuQwDwQCAAIwCQMHACABDfO+ADANBgkqhkiG9w0BAQsF AAOCAQEAunsbLDnvbrPvLfTX7UfGAcChmF+AGclkjJdhYR0CuCxPMS7LklGYPRmf SLHdWqW1dscIeEuAufvAD2bNtvRHETaRSDAHEo/fHb1GJpW229+5dCpX+gIxoujz /1RsIY8dj/AJ1nk3zTN5E8ywlqbpNg5fYiu6y0HZAWKRRAfHynD0YfbkHno6q+PU HL7t69ZpMVfoM0WhClauZ7s58yEwjcQcIbS4itzGFHTCzRCSiTUgyzR2DhhNTMps Wgta9eiP6EKEfL764SquqO3HMSnAgq+rHIggHaVNHHsjsgmNM4K2DR1WA2pPxISr E+Af+Amc4rUSj7tIhddIllZLarxJ7g== -----END CERTIFICATE-----Generated at Mon Oct 20 19:29:55 2025 by rpki-client