$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/0DE55A7CAA4411F0B070DC19C4F9AE02.roa File: 0DE55A7CAA4411F0B070DC19C4F9AE02.roa (raw, json) Hash identifier: QZnpi1XJxd86ZX8V2EZQmrcAMBdQtNXdb6YyTgLqo34= Subject key identifier: EE:F7:6A:94:24:26:38:0B:B4:82:D5:86:B1:00:2C:54:DF:08:1D:0B Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Certificate serial: 1272 Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/0DE55A7CAA4411F0B070DC19C4F9AE02.roa Signing time: Thu 16 Oct 2025 03:56:12 +0000 ROA not before: Thu 16 Oct 2025 03:56:12 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 138403 IP address blocks: 103.124.180.0/24 maxlen: 24 103.124.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4722 (0x1272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Validity Not Before: Oct 16 03:56:12 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68f06cdb-fa20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:2d:a1:1e:d9:4c:ec:6b:a2:a9:b2:d7:17: 75:dc:16:73:7d:6b:8d:23:ea:41:84:59:b0:4a:39: e3:af:2e:e3:f1:ab:99:fd:9d:f5:bf:a9:96:f4:f6: 00:4a:93:25:97:0e:79:c4:77:28:b7:f9:fb:37:60: 40:23:63:7f:01:ff:a6:ed:6f:96:88:24:bd:f8:b0: 5d:ab:4f:6f:62:80:d4:56:b2:e4:31:ee:63:ae:56: 93:b9:7c:c2:fe:7e:ca:ff:4b:32:04:bf:a1:1d:7f: 46:e1:06:81:8d:6c:1a:c4:15:26:7e:48:b7:bf:79: eb:95:b1:62:b0:32:f9:a8:5b:37:93:11:82:fb:6d: 1f:2d:1e:5b:d0:95:31:7e:c0:ab:34:58:bf:88:43: 48:b7:fb:f7:32:dd:78:65:2f:33:7f:48:79:81:03: 71:bc:05:33:9b:ef:ed:c9:43:d2:65:15:61:75:61: ad:80:6c:d4:59:da:11:a8:4a:ec:03:43:d6:74:ed: 4d:a5:48:b2:c0:9f:56:c9:a6:96:ac:fe:18:88:85: 3b:c0:24:c5:d9:bf:82:64:a9:30:ee:7e:86:e9:bb: f9:fd:e7:9e:fd:b6:44:41:2c:0c:7f:e0:9c:81:78: 49:9d:24:b6:3d:99:c0:58:5d:f3:52:a8:9f:d4:ff: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F7:6A:94:24:26:38:0B:B4:82:D5:86:B1:00:2C:54:DF:08:1D:0B X509v3 Authority Key Identifier: keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/0DE55A7CAA4411F0B070DC19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.180.0/23 Signature Algorithm: sha256WithRSAEncryption 64:0a:c2:51:49:35:d7:30:ae:b0:6a:54:66:8a:13:1a:78:64: 79:b7:43:7a:ee:c5:fd:1e:e4:e0:9e:7f:2c:6e:0e:07:07:96: 93:fe:ce:5b:4c:0e:18:5b:91:c2:32:a9:be:02:e6:38:40:6d: 24:00:79:a5:40:83:37:2b:13:e2:bf:de:63:15:7c:e0:89:92: 93:15:45:e6:78:da:41:41:3b:eb:aa:63:cf:83:b6:09:bd:29: 63:0d:d8:51:bf:2e:d2:a3:c9:e7:92:d2:78:6f:be:3d:78:c1: 67:96:1c:98:81:11:0a:dd:1a:d5:4f:59:65:cb:d8:5d:9d:bb: 4d:b9:79:68:c2:12:86:c6:e8:39:92:b6:ed:ee:c1:f6:52:6a: e6:c1:a0:4a:03:ae:3c:d1:39:6b:e9:2d:e4:2e:d3:2c:2b:db: 90:d0:47:58:81:70:fe:75:79:db:7f:c3:ec:a7:8f:99:3c:3d: 1e:38:53:b3:0c:ca:0c:96:08:c2:a9:e2:d5:ff:60:56:46:4f: 36:bb:85:fa:e4:8e:be:63:e6:f0:b1:e2:56:d1:bb:3a:85:22: d9:f8:e0:19:5a:fd:99:33:2d:1a:b2:87:6e:62:a5:64:b2:81: 76:4f:a8:15:7c:04:0b:35:1d:6a:f2:c7:80:49:f4:c5:de:8f: 9d:dd:34:cc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGRjcxMTAvBgNVBAUTKEVFRTk0RTNBRjQwRUFDOENBMzZEQzMyRTQ5RTQ0NDZF Q0ZCMzM1MDUwHhcNMjUxMDE2MDM1NjEyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYwNmNkYi1mYTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcktoR7ZTOxroqmy1xd13BZzfWuNI+pBhFmwSjnjry7j8auZ/Z31v6mW9PYA SpMllw55xHcot/n7N2BAI2N/Af+m7W+WiCS9+LBdq09vYoDUVrLkMe5jrlaTuXzC /n7K/0syBL+hHX9G4QaBjWwaxBUmfki3v3nrlbFisDL5qFs3kxGC+20fLR5b0JUx fsCrNFi/iENIt/v3Mt14ZS8zf0h5gQNxvAUzm+/tyUPSZRVhdWGtgGzUWdoRqErs A0PWdO1NpUiywJ9WyaaWrP4YiIU7wCTF2b+CZKkw7n6G6bv5/eee/bZEQSwMf+Cc gXhJnSS2PZnAWF3zUqif1P8gnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO73apQk JjgLtILVhrEALFTfCB0LMB8GA1UdIwQYMBaAFO7pTjr0DqyMo23DLknkRG7PszUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUZGNy8yMTg2MkM2NEUw QzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJeWpiY011U2VSRWJzLXpO UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bE9PdlFPckl5amJjTXVTZVJFYnMtek5RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFGRjcvMjE4NjJDNjRFMEMwMTFFODlFOUJGRTE1QzRGOUFFMDIvMERFNTVBN0NB QTQ0MTFGMEIwNzBEQzE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnfLQwDQYJKoZIhvcNAQELBQADggEBAGQKwlFJNdcwrrBq VGaKExp4ZHm3Q3ruxf0e5OCefyxuDgcHlpP+zltMDhhbkcIyqb4C5jhAbSQAeaVA gzcrE+K/3mMVfOCJkpMVReZ42kFBO+uqY8+Dtgm9KWMN2FG/LtKjyeeS0nhvvj14 wWeWHJiBEQrdGtVPWWXL2F2du025eWjCEobG6DmStu3uwfZSaubBoEoDrjzROWvp LeQu0ywr25DQR1iBcP51edt/w+ynj5k8PR44U7MMygyWCMKp4tX/YFZGTza7hfrk jr5j5vCx4lbRuzqFItn44Bla/ZkzLRqyh25ipWSygXZPqBV8BAs1HWryx4BJ9MXe j53dNMw= -----END CERTIFICATE-----Generated at Mon Oct 20 19:50:52 2025 by rpki-client