$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/B5D70D9ACE3311EFA7B9B640C4F9AE02.roa File: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (raw, json) Hash identifier: YGJLT2fYDhmz5xGHsZzCsBINR5owfOYXZwH2Xtyir7M= Subject key identifier: 81:85:5B:22:33:29:EA:94:AE:22:B2:58:26:85:A0:DF:A7:33:C2:97 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 052B Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/B5D70D9ACE3311EFA7B9B640C4F9AE02.roa Signing time: Wed 15 Oct 2025 01:55:12 +0000 ROA not before: Wed 15 Oct 2025 01:55:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134963 IP address blocks: 103.173.12.0/24 maxlen: 24 103.173.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: Oct 15 01:55:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68eeff00-d6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:f3:2e:7a:6b:a7:c3:3a:77:41:9c:10:f1: 58:1a:74:4a:d3:8f:03:f4:5e:46:7e:00:6a:ff:7b: c1:dd:fe:57:2b:f3:ec:67:ed:7a:12:8f:68:37:21: a1:8a:3e:e0:c4:57:82:7e:10:18:a1:62:74:fc:48: 1d:69:f2:a8:12:4f:73:b2:19:57:41:46:d9:8b:8e: e6:79:fb:27:c9:10:c7:f9:79:35:12:46:77:20:fd: 70:9a:27:43:23:97:dd:bc:42:8e:04:6c:80:1d:f9: b2:02:b3:a8:68:0d:f5:dc:c5:a6:da:49:3d:65:8c: 47:c2:1b:d6:88:df:71:cc:ea:e7:ea:90:97:a9:3a: 76:61:1f:9e:84:41:a8:77:19:3f:d9:a2:c8:cf:73: 87:61:26:71:49:58:db:14:1e:db:d2:c3:7b:f9:4b: d4:80:1a:9d:b9:80:eb:2c:f8:c2:12:01:9b:ba:0b: 1d:73:61:f7:72:cf:d2:0f:c9:a9:f6:a4:05:d2:a2: 04:78:67:8b:78:4a:ab:e3:84:56:51:0c:79:14:11: 75:e6:2c:bf:f0:19:a9:48:6e:11:29:d9:0b:22:cb: 85:32:8b:a2:63:bc:8f:83:e4:7d:5c:b6:fb:e2:2e: e4:c1:39:7f:e6:97:29:70:69:06:fc:14:ac:d7:a9: 41:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:85:5B:22:33:29:EA:94:AE:22:B2:58:26:85:A0:DF:A7:33:C2:97 X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/B5D70D9ACE3311EFA7B9B640C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.12.0/23 Signature Algorithm: sha256WithRSAEncryption 83:c8:67:e2:1d:7e:f7:92:a7:50:98:95:fd:2d:4d:3d:fd:9b: fb:b1:2a:51:8c:f5:7d:05:62:ec:ea:3b:1c:23:67:a6:1c:ed: 53:0c:21:d5:4e:0f:8f:db:07:2e:6a:09:c0:c6:53:eb:b3:47: 03:8f:e4:3e:2d:13:de:b5:3a:d1:a6:dd:6e:ea:45:26:be:6e: d9:be:06:8a:09:9c:ae:38:d5:a6:7a:f5:68:ab:6b:2f:37:e7: ee:fb:70:c7:55:46:9d:bd:81:b5:5a:1c:99:fe:6b:b8:cc:61: d1:b0:24:d4:6a:23:e4:ac:93:0b:f4:7e:76:90:72:7e:47:cc: 7d:e2:86:b8:ea:b8:c6:ea:f5:49:84:6b:57:af:81:08:a6:83: 70:fc:cf:45:42:37:7d:30:d9:f6:16:9c:43:ea:38:e8:2b:9b: bb:c3:17:c0:60:33:19:02:7f:41:b4:66:94:08:59:c8:24:bd: ea:0a:2f:dc:87:db:a7:63:8b:27:37:7c:23:51:f9:a3:67:1a: 2a:a3:84:e8:45:a9:1d:dd:80:8e:16:b8:c3:88:40:e6:7a:57: a6:c9:66:bc:a1:2b:e2:9b:73:7e:6d:6f:ff:dd:43:a8:e6:65: 39:a0:bf:78:59:7f:61:91:82:56:5e:5e:50:30:b6:5e:f1:0d: 5c:43:b0:17 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjUxMDE1MDE1NTEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVlZmYwMC1kNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4LzLnprp8M6d0GcEPFYGnRK048D9F5GfgBq/3vB3f5XK/PsZ+16Eo9oNyGh ij7gxFeCfhAYoWJ0/EgdafKoEk9zshlXQUbZi47mefsnyRDH+Xk1EkZ3IP1wmidD I5fdvEKOBGyAHfmyArOoaA313MWm2kk9ZYxHwhvWiN9xzOrn6pCXqTp2YR+ehEGo dxk/2aLIz3OHYSZxSVjbFB7b0sN7+UvUgBqduYDrLPjCEgGbugsdc2H3cs/SD8mp 9qQF0qIEeGeLeEqr44RWUQx5FBF15iy/8BmpSG4RKdkLIsuFMouiY7yPg+R9XLb7 4i7kwTl/5pcpcGkG/BSs16lBGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIGFWyIz KeqUriKyWCaFoN+nM8KXMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjkzODIvQTVGQjgxNTgxQ0Q5MTFFQzkyQUQ1NzFDQzRGOUFFMDIvQjVENzBEOUFD RTMzMTFFRkE3QjlCNjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrQwwDQYJKoZIhvcNAQELBQADggEBAIPIZ+IdfveSp1CY lf0tTT39m/uxKlGM9X0FYuzqOxwjZ6Yc7VMMIdVOD4/bBy5qCcDGU+uzRwOP5D4t E961OtGm3W7qRSa+btm+BooJnK441aZ69Wiray835+77cMdVRp29gbVaHJn+a7jM YdGwJNRqI+Sskwv0fnaQcn5HzH3ihrjquMbq9UmEa1evgQimg3D8z0VCN30w2fYW nEPqOOgrm7vDF8BgMxkCf0G0ZpQIWcgkveoKL9yH26djiyc3fCNR+aNnGiqjhOhF qR3dgI4WuMOIQOZ6V6bJZryhK+Kbc35tb//dQ6jmZTmgv3hZf2GRglZeXlAwtl7x DVxDsBc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:17:53 2025 by rpki-client