$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa File: 99D6FBE6341F11E9BF826924C4F9AE02.roa (raw, json) Hash identifier: YlOygXlIDX3GFV4d167GBuN4YNBn3vpIbjUm1yh/9cQ= Subject key identifier: ED:C3:7B:AB:7D:1B:2A:E4:9D:8B:43:FE:F0:FC:61:71:71:35:22:0A Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E Certificate serial: 18A8 Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa Signing time: Tue 30 Sep 2025 16:45:16 +0000 ROA not before: Tue 30 Sep 2025 16:45:16 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 133229 IP address blocks: 103.71.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6312 (0x18a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E Validity Not Before: Sep 30 16:45:16 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dc091c-9db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:3e:91:29:e6:b9:c6:16:0a:fd:d0:6a:38: 72:77:aa:76:1b:39:f7:b7:51:83:76:44:cc:29:24: 51:b4:78:d7:ca:85:ec:6c:e4:1b:de:a5:e1:3f:d3: de:cf:bb:86:5f:79:64:94:37:06:ba:95:17:4e:52: 87:4a:52:11:15:88:04:82:de:1a:ad:6d:ff:83:36: c1:af:5f:de:7e:a3:ab:bd:bf:63:8f:df:82:bd:b4: 34:7b:2c:97:ca:bc:92:ad:dc:75:03:b9:cb:dc:c7: 77:24:ac:7b:c7:66:73:84:84:c9:11:2f:ec:b2:40: 3d:fc:3a:e4:f2:85:15:f5:5a:e0:bf:d7:72:86:f7: f0:8c:b3:f7:75:b3:38:5c:84:9b:e1:a2:1b:d0:4d: 0b:af:67:f4:49:1c:5a:58:1d:de:6d:75:f3:78:0f: 02:65:39:85:d1:ca:90:bf:22:6e:7f:28:1b:81:b9: f8:07:26:9c:43:59:4f:50:de:65:5c:42:31:52:ed: 1f:24:44:ec:c6:5b:3d:d0:53:3a:fa:ef:3a:ae:72: 08:fb:c7:7e:21:59:23:5e:fc:26:50:a6:02:9f:e3: d3:e0:81:4c:e7:92:28:10:99:d3:ee:8e:98:be:b2: cb:4c:3d:c6:ad:ff:ef:7c:6f:83:e1:04:61:64:16: 3c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C3:7B:AB:7D:1B:2A:E4:9D:8B:43:FE:F0:FC:61:71:71:35:22:0A X509v3 Authority Key Identifier: keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/99D6FBE6341F11E9BF826924C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.173.0/24 Signature Algorithm: sha256WithRSAEncryption 49:e4:a9:d1:96:85:83:b7:7d:f3:93:55:70:fc:fc:e8:92:cd: c0:0e:b1:5f:5d:a9:33:f5:4f:51:59:a9:85:10:85:e0:a0:cb: 48:b8:5f:d6:78:b4:40:41:89:2f:15:4b:c7:a6:20:45:1e:b0: 20:6c:18:a9:ee:5f:85:df:76:12:af:72:01:9e:a1:ab:a5:1c: 4b:38:57:f3:62:b2:5b:63:e0:51:ba:36:cc:b3:14:bc:c4:ea: ed:d9:c8:8b:47:0c:63:db:4e:20:13:28:8c:7c:e8:cd:a5:c0: a3:c8:d0:81:cd:8a:ee:f9:78:6c:76:4f:a3:f2:51:3e:3a:0f: 02:6a:66:59:a0:78:8d:f7:ef:16:b1:d6:22:42:57:a7:38:1a: 4c:e5:72:52:ef:a1:27:6e:c5:4e:70:54:c1:f0:71:ff:a3:3f: af:9f:c2:ea:9f:14:49:0a:d6:4f:46:2d:9e:c1:65:ff:d9:b0: 5d:2c:e7:89:d8:a8:34:15:f1:2d:2c:7e:a0:30:e5:09:de:d2: 12:7e:8b:0e:8a:5d:5c:82:fe:a1:c5:12:0b:09:7c:e0:ec:1e: 80:f0:ed:66:91:7f:0e:6b:c1:17:21:0a:aa:12:e1:0c:2f:db: 43:80:6b:0c:3b:83:84:b2:e7:81:f8:28:a9:4d:93:3a:a1:10: f3:bb:95:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI1QkQxMTAvBgNVBAUTKDIyRTgxQjMyN0NCMUZCMzUwMUUwNUFGQUI5NDEyMTkx OEZEQjVCNUUwHhcNMjUwOTMwMTY0NTE2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjMDkxYy05ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtf0+kSnmucYWCv3Qajhyd6p2Gzn3t1GDdkTMKSRRtHjXyoXsbOQb3qXhP9Pe z7uGX3lklDcGupUXTlKHSlIRFYgEgt4arW3/gzbBr1/efqOrvb9jj9+CvbQ0eyyX yrySrdx1A7nL3Md3JKx7x2ZzhITJES/sskA9/Drk8oUV9Vrgv9dyhvfwjLP3dbM4 XISb4aIb0E0Lr2f0SRxaWB3ebXXzeA8CZTmF0cqQvyJufygbgbn4ByacQ1lPUN5l XEIxUu0fJETsxls90FM6+u86rnII+8d+IVkjXvwmUKYCn+PT4IFM55IoEJnT7o6Y vrLLTD3Grf/vfG+D4QRhZBY8wwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO3De6t9 GyrknYtD/vD8YXFxNSIKMB8GA1UdIwQYMBaAFCLoGzJ8sfs1AeBa+rlBIZGP21te MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjVCRC8zM0NCMTE3QUI1 QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16VUI0RnI2dVVFaGtZX2JX MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1Z2JNbnl4LXpVQjRGcjZ1VUVoa1lfYlcxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI1QkQvMzNDQjExN0FCNUE5MTFFNzlDNzRDQjcyQzRGOUFFMDIvOTlENkZCRTYz NDFGMTFFOUJGODI2OTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnR60wDQYJKoZIhvcNAQELBQADggEBAEnkqdGWhYO3ffOT VXD8/OiSzcAOsV9dqTP1T1FZqYUQheCgy0i4X9Z4tEBBiS8VS8emIEUesCBsGKnu X4XfdhKvcgGeoaulHEs4V/Nisltj4FG6NsyzFLzE6u3ZyItHDGPbTiATKIx86M2l wKPI0IHNiu75eGx2T6PyUT46DwJqZlmgeI337xax1iJCV6c4GkzlclLvoSduxU5w VMHwcf+jP6+fwuqfFEkK1k9GLZ7BZf/ZsF0s54nYqDQV8S0sfqAw5Qne0hJ+iw6K XVyC/qHFEgsJfODsHoDw7WaRfw5rwRchCqoS4Qwv20OAaww7g4Sy54H4KKlNkzqh EPO7lXk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:39 2025 by rpki-client