$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/D90961489C1311EFA0BF1480C4F9AE02.roa File: D90961489C1311EFA0BF1480C4F9AE02.roa (raw, json) Hash identifier: oDUDCtB16Or1sjmfh66q9QNKG7wVjA7QhKP9OaRJ6BM= Subject key identifier: 32:39:66:EB:D2:FA:E7:F2:E8:5A:18:CC:B8:3D:CE:BC:97:B1:83:95 Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70 Certificate serial: 1B6B Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/D90961489C1311EFA0BF1480C4F9AE02.roa Signing time: Sat 20 Sep 2025 16:34:57 +0000 ROA not before: Sat 20 Sep 2025 16:34:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 4837 IP address blocks: 43.248.4.0/24 maxlen: 24 43.248.7.0/24 maxlen: 24 60.16.0.0/13 maxlen: 24 103.3.132.0/24 maxlen: 24 113.9.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7019 (0x1b6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB3, serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70 Validity Not Before: Sep 20 16:34:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=68ced7b0-9466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:39:14:8e:ba:05:f1:77:bf:8a:91:e3:e4: b7:9b:6b:b4:13:1c:55:3c:9d:18:01:05:21:3f:91: 49:c6:86:96:a1:18:83:5c:93:00:cc:52:05:5c:fa: de:1f:90:c8:b0:4b:80:d0:b1:13:09:7a:ed:bd:8c: 03:3b:95:ba:c6:a2:49:27:dd:53:7e:ec:7e:c7:30: 89:4b:18:0b:72:01:f2:9c:a6:a2:5e:02:a1:3a:f3: ae:6e:84:5a:dd:ce:ca:39:9d:d1:b3:da:27:e1:e3: b9:f0:36:40:e5:73:f5:fb:df:e7:98:cc:c3:02:62: 05:d6:06:40:42:36:34:98:8f:7f:bb:93:1a:00:04: c4:f6:3a:5e:5c:6d:37:d9:f1:98:3a:87:90:7c:a4: 69:37:f5:7f:58:79:1b:c6:dd:9c:dc:5f:71:b6:b8: 36:60:b7:ab:ad:9a:76:c2:0c:f2:63:8e:5e:b2:e5: bd:e7:49:6c:d3:8f:a8:df:47:ff:24:aa:75:79:b8: 2b:ab:6d:88:4d:21:e6:34:e9:c6:44:9c:2b:a0:86: 2f:38:77:ed:8c:e0:47:b1:5f:f3:84:04:71:67:b9: 32:77:32:97:73:9f:97:a8:dd:57:c2:b4:5c:0c:1c: c3:b9:87:40:da:ae:eb:b6:bd:8b:b9:db:ee:eb:3c: ec:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:39:66:EB:D2:FA:E7:F2:E8:5A:18:CC:B8:3D:CE:BC:97:B1:83:95 X509v3 Authority Key Identifier: keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/D90961489C1311EFA0BF1480C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.4.0/24 43.248.7.0/24 60.16.0.0/13 103.3.132.0/24 113.9.196.0/24 Signature Algorithm: sha256WithRSAEncryption 63:a7:ca:c2:82:69:90:03:2f:b2:a0:89:e6:7e:73:57:3f:a2: 8d:c2:14:e0:2a:92:50:da:1f:ee:20:79:60:d8:39:ae:0d:49: 18:c7:7f:da:6b:fd:de:84:0d:c0:43:c3:ed:91:2a:a3:af:f8: ce:de:02:73:b8:8d:6a:dd:f3:5b:1a:53:b8:51:25:61:6d:57: 6f:a7:77:68:43:53:b3:bd:cb:3f:b6:22:dc:4e:1d:71:ef:9f: 9c:1e:ea:b7:6f:8f:e0:e7:e7:bf:08:06:88:d1:d6:b0:04:d4: 2e:35:fc:1a:f9:85:27:f8:c6:78:9b:f9:db:8c:21:d8:2f:4f: df:12:57:c7:6b:84:17:c2:0f:c8:12:fa:84:36:25:71:6b:b2: 34:3e:7d:6e:25:be:d5:f3:2d:8d:ca:7a:58:ba:f2:86:d6:bd: b2:6e:6f:29:a1:c1:16:8e:23:ab:c3:38:b3:52:7f:a2:3e:69: fd:58:9d:81:e1:e1:94:99:bc:53:7d:b7:e8:06:d6:90:c2:d2: e1:a7:ea:30:33:f3:8a:7a:37:a5:62:5a:e8:bc:6d:25:e4:6d: 6e:1b:b3:c6:45:2b:e5:86:84:a2:01:8e:43:50:64:67:84:cb: cc:e8:1e:46:75:ea:2d:d1:57:c8:7a:01:b5:66:a0:58:1d:17: 91:ce:f7:bb -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICG2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDQjMxMTAvBgNVBAUTKENCQTE5N0MwNENBQTlCRDI5NUY1Nzg4NDcyQTZBMTBB QTNGQkVGNzAwHhcNMjUwOTIwMTYzNDU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNlZDdiMC05NDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPc5FI66BfF3v4qR4+S3m2u0ExxVPJ0YAQUhP5FJxoaWoRiDXJMAzFIFXPre H5DIsEuA0LETCXrtvYwDO5W6xqJJJ91Tfux+xzCJSxgLcgHynKaiXgKhOvOuboRa 3c7KOZ3Rs9on4eO58DZA5XP1+9/nmMzDAmIF1gZAQjY0mI9/u5MaAATE9jpeXG03 2fGYOoeQfKRpN/V/WHkbxt2c3F9xtrg2YLerrZp2wgzyY45esuW950ls04+o30f/ JKp1ebgrq22ITSHmNOnGRJwroIYvOHftjOBHsV/zhARxZ7kydzKXc5+XqN1XwrRc DBzDuYdA2q7rtr2Ludvu6zzsJwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFDI5ZuvS +ufy6FoYzLg9zryXsYOVMB8GA1UdIwQYMBaAFMuhl8BMqpvSlfV4hHKmoQqj++9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0NCMy8xREI3OTgzQzI1 OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05S1Y5WGlFY3FhaENxUDc3 M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k2R1h3RXlxbTlLVjlYaUVjcWFoQ3FQNzczQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNDQjMvMURCNzk4M0MyNTlEMTFFNzg1RDMyNTBBQzRGOUFFMDIvRDkwOTYxNDg5 QzEzMTFFRkEwQkYxNDgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMCMEAgABMB0DBAAr+AQDBAAr+AcDAwM8EAMEAGcDhAMEAHEJxDANBgkqhkiG 9w0BAQsFAAOCAQEAY6fKwoJpkAMvsqCJ5n5zVz+ijcIU4CqSUNof7iB5YNg5rg1J GMd/2mv93oQNwEPD7ZEqo6/4zt4Cc7iNat3zWxpTuFElYW1Xb6d3aENTs73LP7Yi 3E4dce+fnB7qt2+P4OfnvwgGiNHWsATULjX8GvmFJ/jGeJv524wh2C9P3xJXx2uE F8IPyBL6hDYlcWuyND59biW+1fMtjcp6WLryhta9sm5vKaHBFo4jq8M4s1J/oj5p /VidgeHhlJm8U3236AbWkMLS4afqMDPzino3pWJa6LxtJeRtbhuzxkUr5YaEogGO Q1BkZ4TLzOgeRnXqLdFXyHoBtWagWB0Xkc73uw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:47 2025 by rpki-client