$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/5573F3D8979F11F0BD27D51AC4F9AE02.roa File: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (raw, json) Hash identifier: jBmeI5y0SVJB4aMWbKmtmiFdyrbiBVSMzrKP/rJrmhI= Subject key identifier: 8C:BF:BB:7A:AE:DC:A0:86:34:2B:DA:42:68:23:D1:E8:01:67:B0:AC Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Certificate serial: 07A9 Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/5573F3D8979F11F0BD27D51AC4F9AE02.roa Signing time: Mon 22 Sep 2025 10:49:43 +0000 ROA not before: Mon 22 Sep 2025 10:49:43 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 64074 IP address blocks: 103.203.176.0/24 maxlen: 24 103.203.177.0/24 maxlen: 24 103.203.178.0/24 maxlen: 24 103.203.179.0/24 maxlen: 24 223.29.212.0/24 maxlen: 24 223.29.213.0/24 maxlen: 24 223.29.215.0/24 maxlen: 24 2401:b8c0::/32 maxlen: 32 2401:b8c0::/36 maxlen: 36 2401:b8c0:1000::/36 maxlen: 36 2401:b8c0:2000::/36 maxlen: 36 2401:b8c0:3000::/36 maxlen: 36 2401:b8c0:4000::/36 maxlen: 36 2401:b8c0:5000::/36 maxlen: 36 2401:b8c0:6000::/36 maxlen: 36 2401:b8c0:7000::/36 maxlen: 36 2401:b8c0:8000::/36 maxlen: 36 2401:b8c0:9000::/36 maxlen: 36 2401:b8c0:a000::/36 maxlen: 36 2401:b8c0:b000::/36 maxlen: 36 2401:b8c0:c000::/36 maxlen: 36 2401:b8c0:d000::/36 maxlen: 36 2401:b8c0:e000::/36 maxlen: 36 2401:b8c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Validity Not Before: Sep 22 10:49:43 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68d129c7-bc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:6d:38:49:0f:2c:b0:4c:f0:59:be:0f:fa: 3b:27:76:f3:e4:99:05:97:d2:cb:55:cf:63:b2:91: 29:3c:13:de:32:79:26:1e:78:82:1d:a0:3b:0e:2e: 25:cc:29:12:f7:df:c8:c8:a9:c3:b1:4b:64:7b:a2: 12:dc:4c:ac:b3:e7:99:3b:7e:77:1d:88:b8:43:09: 1e:fd:df:13:11:51:4b:0a:22:ec:52:19:15:24:85: fc:f9:bd:19:21:be:f3:24:f2:5a:c0:9b:0f:69:30: 47:2d:a8:e4:53:d0:ea:fb:bc:cc:4d:f2:03:d7:92: c5:29:8c:e8:ec:01:b5:35:4b:22:c4:d8:a0:9c:db: 9e:de:7a:64:b4:bc:da:0b:db:be:e2:8c:eb:23:66: 42:1f:5f:02:0e:84:5a:4b:c3:b2:66:16:20:fe:bc: 89:56:b9:37:31:10:31:07:e6:ba:a8:17:e4:88:82: 42:6c:42:96:7d:5f:81:9c:f3:44:ee:7d:73:0f:65: 4f:71:d5:88:84:7a:df:76:f0:4a:a5:ff:66:5b:9f: 1e:a4:fb:f1:bb:01:73:1f:c7:5e:35:d5:52:90:ae: ac:99:31:e4:fd:3c:03:9d:6c:f1:ce:ff:4b:ce:de: ab:ad:38:d4:42:b2:f0:f3:37:a2:67:ff:b4:e6:84: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BF:BB:7A:AE:DC:A0:86:34:2B:DA:42:68:23:D1:E8:01:67:B0:AC X509v3 Authority Key Identifier: keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/5573F3D8979F11F0BD27D51AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.176.0/22 223.29.212.0/23 223.29.215.0/24 IPv6: 2401:b8c0::/32 Signature Algorithm: sha256WithRSAEncryption 4e:ce:82:a1:36:87:46:39:57:db:ec:fe:28:f0:7b:12:46:f9: eb:e1:21:8f:d5:c3:69:ad:9e:d2:61:50:05:0c:57:6c:64:bb: 1b:8a:54:1f:da:86:03:09:dc:9e:84:7b:73:4a:38:4b:4e:e7: 68:c8:cf:0a:84:9f:88:3b:33:03:62:08:7e:7f:15:38:81:f3: a2:c6:0d:41:a9:c6:89:d3:43:ea:1c:30:2a:4e:09:dc:e7:2b: c1:73:b3:b6:72:c5:ab:0c:98:b3:4e:6e:c6:e7:0a:ad:65:10: 85:ea:58:62:02:18:fe:ac:99:df:ab:15:18:65:3c:72:df:c5: 54:14:e5:32:e5:6b:1a:8b:5a:4a:f4:47:df:97:6f:31:3e:ab: 1b:69:8d:f0:30:74:cf:01:ff:cc:8b:38:a6:3b:0f:7e:f9:4d: 46:7d:17:bd:5e:dd:37:50:e6:12:35:c1:be:f8:5d:7e:b4:e4: 44:64:91:15:b6:83:1f:05:d4:30:4b:9f:cb:4a:c3:00:a6:bf: 87:ad:ce:b3:c3:68:50:03:df:a7:81:42:47:0f:24:b7:88:47: 7b:5b:b0:bc:ae:6e:27:1c:3f:e9:92:73:03:55:cd:fc:59:d1: 88:ea:4d:81:d4:db:60:29:b4:d8:1b:54:fb:6c:a0:61:85:4d: ab:c9:a8:83 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC QTI0QTFFMDYwHhcNMjUwOTIyMTA0OTQzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxMjljNy1iYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NFtOEkPLLBM8Fm+D/o7J3bz5JkFl9LLVc9jspEpPBPeMnkmHniCHaA7Di4l zCkS99/IyKnDsUtke6IS3Eyss+eZO353HYi4Qwke/d8TEVFLCiLsUhkVJIX8+b0Z Ib7zJPJawJsPaTBHLajkU9Dq+7zMTfID15LFKYzo7AG1NUsixNignNue3npktLza C9u+4ozrI2ZCH18CDoRaS8OyZhYg/ryJVrk3MRAxB+a6qBfkiIJCbEKWfV+BnPNE 7n1zD2VPcdWIhHrfdvBKpf9mW58epPvxuwFzH8deNdVSkK6smTHk/TwDnWzxzv9L zt6rrTjUQrLw8zeiZ/+05oTH4wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIy/u3qu 3KCGNCvaQmgj0egBZ7CsMB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM2NDYvNkI4RUZBNUFGRjk4MTFFOTg3QzgwQTZBQzRGOUFFMDIvNTU3M0YzRDg5 NzlGMTFGMEJEMjdENTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJny7ADBAHfHdQDBADfHdcwDQQCAAIwBwMFACQBuMAwDQYJ KoZIhvcNAQELBQADggEBAE7OgqE2h0Y5V9vs/ijwexJG+evhIY/Vw2mtntJhUAUM V2xkuxuKVB/ahgMJ3J6Ee3NKOEtO52jIzwqEn4g7MwNiCH5/FTiB86LGDUGpxonT Q+ocMCpOCdznK8Fzs7ZyxasMmLNObsbnCq1lEIXqWGICGP6smd+rFRhlPHLfxVQU 5TLlaxqLWkr0R9+XbzE+qxtpjfAwdM8B/8yLOKY7D375TUZ9F71e3TdQ5hI1wb74 XX605ERkkRW2gx8F1DBLn8tKwwCmv4etzrPDaFAD36eBQkcPJLeIR3tbsLyubicc P+mScwNVzfxZ0YjqTYHU22AptNgbVPtsoGGFTavJqIM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:17:18 2025 by rpki-client