$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/1291593861AC11ED9EFE1B4DC4F9AE02.roa File: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (raw, json) Hash identifier: NIvct8fJn9M1iEY9RRPmR0E04PRAFDynGMtQ70vSFyE= Subject key identifier: 2A:F2:2A:F0:C1:DC:B7:28:4C:43:F3:0B:37:3F:4F:E6:47:81:10:DF Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 04C4 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/1291593861AC11ED9EFE1B4DC4F9AE02.roa Signing time: Wed 01 Oct 2025 00:27:18 +0000 ROA not before: Wed 01 Oct 2025 00:27:18 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138170 IP address blocks: 103.121.218.0/23 maxlen: 23 103.121.218.0/24 maxlen: 24 103.121.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Oct 1 00:27:18 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dc7566-6854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:2b:0c:62:a1:47:bf:7c:7c:7e:35:a4:a9: f2:d4:7e:b5:f9:b5:78:6e:38:43:cb:d9:ed:2d:75: 45:ce:73:15:d3:b2:ba:36:1c:93:d6:05:4a:55:9d: 90:e1:52:28:84:c4:0e:ed:f0:a0:ce:ff:43:59:cc: dc:b6:c3:3d:aa:d2:f0:f9:3d:23:5e:7d:eb:19:1a: 18:e3:6d:84:3a:40:33:5e:6e:5e:00:87:88:bf:75: 0e:2c:eb:6b:2a:ab:66:2b:5b:35:dc:28:87:64:ff: 4b:6f:c1:ae:3c:ac:c5:5a:ae:e1:4e:15:9d:81:0c: 30:42:e8:01:32:24:1f:3f:11:9f:db:17:86:11:d1: 12:b5:43:90:42:af:f7:1f:65:17:10:62:46:12:13: 28:b8:41:2f:46:ce:19:33:ae:9a:94:1b:b2:5d:37: ba:fa:2b:71:0b:0e:cf:24:12:53:e8:7b:13:48:f6: 74:3a:e5:a7:cb:af:19:95:9d:fa:3e:b2:74:c3:78: d5:5f:02:62:c7:7f:58:81:2f:18:f3:f0:24:a1:c2: c0:a5:eb:8a:51:18:ca:e3:a9:f7:37:4b:37:dc:2a: 7a:27:e5:b0:57:42:f2:d7:96:41:3e:9a:68:97:cb: 1c:d2:32:7c:d8:53:14:df:0c:dd:3f:41:c4:cb:dc: 5c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F2:2A:F0:C1:DC:B7:28:4C:43:F3:0B:37:3F:4F:E6:47:81:10:DF X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/1291593861AC11ED9EFE1B4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.218.0/23 Signature Algorithm: sha256WithRSAEncryption 02:dc:2d:3a:4b:5b:97:9b:97:97:19:bd:53:0a:c6:dc:c5:49: fb:3d:eb:4b:df:01:71:53:80:95:f1:8b:b3:83:ee:eb:40:83: 82:94:93:29:7d:13:09:a0:c0:72:5a:d0:23:57:fa:2b:28:1f: b4:2f:4f:95:31:b0:3e:2f:8f:01:04:5f:04:a3:2c:6c:38:36: ff:a7:dc:95:d5:b3:da:3a:ee:c3:6c:42:13:b8:d7:77:cf:ab: 20:ae:29:67:cb:77:6d:85:da:fa:eb:8d:93:23:f4:c3:2b:4f: a9:7f:00:ee:b8:65:67:b1:5f:c5:df:1a:30:85:4d:de:16:0f: 60:1d:5a:5c:85:39:3b:c6:09:02:f2:28:bc:5c:41:95:29:db: 65:ab:0e:59:8a:73:d8:be:a9:50:25:6f:05:dc:39:f5:6e:d6: 02:fd:d8:fd:9a:f8:45:d7:fb:4e:4b:68:b1:59:9e:8b:9d:f2: 01:1a:bf:60:52:c4:7e:56:ca:fb:d0:56:87:bd:42:e9:07:fe: de:8b:bc:69:09:2a:e5:8c:c5:b6:83:ec:d1:b3:45:d4:21:7d: 8a:41:bd:68:5f:6d:a4:7c:c2:23:7e:bc:58:fb:07:6b:6d:0e: a3:db:e8:1c:c6:15:28:ca:90:1c:91:9f:6f:a0:9f:dc:59:79: 3c:59:34:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUxMDAxMDAyNzE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjNzU2Ni02ODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXUrDGKhR798fH41pKny1H61+bV4bjhDy9ntLXVFznMV07K6NhyT1gVKVZ2Q 4VIohMQO7fCgzv9DWczctsM9qtLw+T0jXn3rGRoY422EOkAzXm5eAIeIv3UOLOtr KqtmK1s13CiHZP9Lb8GuPKzFWq7hThWdgQwwQugBMiQfPxGf2xeGEdEStUOQQq/3 H2UXEGJGEhMouEEvRs4ZM66alBuyXTe6+itxCw7PJBJT6HsTSPZ0OuWny68ZlZ36 PrJ0w3jVXwJix39YgS8Y8/AkocLApeuKURjK46n3N0s33Cp6J+WwV0Ly15ZBPppo l8sc0jJ82FMU3wzdP0HEy9xcfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCryKvDB 3LcoTEPzCzc/T+ZHgRDfMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJDODkvOEZBOTdBRkU0NTEwMTFFQzhDODZFRDQ4QzRGOUFFMDIvMTI5MTU5Mzg2 MUFDMTFFRDlFRkUxQjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnedowDQYJKoZIhvcNAQELBQADggEBAALcLTpLW5ebl5cZ vVMKxtzFSfs960vfAXFTgJXxi7OD7utAg4KUkyl9EwmgwHJa0CNX+isoH7QvT5Ux sD4vjwEEXwSjLGw4Nv+n3JXVs9o67sNsQhO413fPqyCuKWfLd22F2vrrjZMj9MMr T6l/AO64ZWexX8XfGjCFTd4WD2AdWlyFOTvGCQLyKLxcQZUp22WrDlmKc9i+qVAl bwXcOfVu1gL92P2a+EXX+05LaLFZnoud8gEav2BSxH5WyvvQVoe9QukH/t6LvGkJ KuWMxbaD7NGzRdQhfYpBvWhfbaR8wiN+vFj7B2ttDqPb6BzGFSjKkByRn2+gn9xZ eTxZNLE= -----END CERTIFICATE-----Generated at Tue Oct 21 02:56:54 2025 by rpki-client