$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/73438FF06DED11E9A21D1341C4F9AE02.roa File: 73438FF06DED11E9A21D1341C4F9AE02.roa (raw, json) Hash identifier: iWI19VTOrnz2nGN4modDRd0Vbot3Y2khTy6hDIMLekE= Subject key identifier: E2:CB:3B:5C:42:AF:EB:E7:DB:6A:F4:71:35:3E:04:10:02:6A:37:48 Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 34EF Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/73438FF06DED11E9A21D1341C4F9AE02.roa Signing time: Sat 20 Sep 2025 15:00:52 +0000 ROA not before: Sat 20 Sep 2025 15:00:52 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 134376 IP address blocks: 103.63.27.0/24 maxlen: 24 2001:de8:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Sep 20 15:00:52 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68cec1a4-e721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:d9:a5:b6:d4:76:b6:d8:b5:d6:68:bf:bd: 64:8f:95:27:83:3a:33:01:0f:c8:b7:8a:93:53:40: 21:a3:07:75:03:72:7e:3a:bd:a5:a8:98:04:93:ae: de:b6:21:b8:d8:47:28:f9:60:9b:ea:01:81:b2:8c: 90:2e:e0:c4:b0:bc:8b:a1:84:41:ee:04:d2:3e:51: d7:65:75:4d:a9:26:c7:dd:67:ca:d5:39:f6:d5:6b: 11:94:91:72:cb:32:96:85:96:34:fa:6e:bd:94:0d: 8b:1e:d6:ca:10:37:15:ea:3e:3b:53:ae:7b:17:65: c5:75:88:41:8e:de:a6:0b:36:ee:bd:18:a2:f5:1e: ad:85:5c:c7:d4:d3:5d:f1:7d:0a:bb:af:c0:c8:8c: 5b:6b:bc:5f:2f:8c:44:e4:19:29:81:a8:ec:9e:60: 67:8e:c4:f9:e5:76:35:bf:d9:2e:66:3b:d0:44:82: 2b:e4:e4:6e:b8:ed:9d:d5:c7:12:7d:ea:5d:f1:79: a5:f8:eb:af:4a:04:95:c5:e5:25:88:94:85:57:a7: f7:3d:d0:dd:1d:d5:1c:16:d5:15:70:9b:e3:55:65: d9:1c:99:1d:95:24:58:0b:c9:30:91:78:3b:33:e6: ef:05:39:c9:5a:4a:29:bf:19:61:39:76:0c:f8:c8: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CB:3B:5C:42:AF:EB:E7:DB:6A:F4:71:35:3E:04:10:02:6A:37:48 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/73438FF06DED11E9A21D1341C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.63.27.0/24 IPv6: 2001:de8:8000::/48 Signature Algorithm: sha256WithRSAEncryption 7f:99:d7:31:30:ea:1d:d7:74:a3:cf:05:21:55:e6:dc:0b:f9: c6:61:3b:d0:36:b1:1e:4f:45:40:30:3a:6d:68:4c:78:29:91: 98:e6:3a:bb:79:7a:3b:1f:1a:4f:07:21:20:38:f9:de:42:0c: fd:f5:9a:a5:11:57:d9:d4:24:6d:31:26:19:92:2d:ca:c3:99: 35:8d:0d:74:b1:d5:c3:f3:35:fa:a6:79:f6:24:3d:cf:5c:bd: fd:3b:c2:f0:0a:7f:68:e2:6c:67:c5:0a:cd:8f:28:10:e2:38: da:4b:df:bf:27:1f:4d:77:1a:87:46:91:d9:f8:5f:ee:72:eb: f6:94:16:4e:e0:99:fb:55:45:06:f2:46:98:b8:d3:fd:09:dc: f1:06:9d:bf:47:3d:60:50:69:d5:3d:3f:11:3b:09:b3:8d:3d: 4c:0d:b8:30:61:5f:04:f3:bb:b2:81:1f:d1:0d:36:9a:d2:a2: 0b:1f:8c:f0:17:45:16:43:67:71:9a:4e:17:90:0a:dc:f0:79: e8:2e:30:4a:4c:9e:a7:d2:02:27:7f:d4:3e:21:b3:60:14:2c: 2f:d1:ac:05:c9:ef:c6:8a:fa:f1:df:b8:9e:65:46:15:71:a3: 5a:50:33:f9:b0:83:7c:47:ff:2e:66:fa:73:78:8c:b4:86:eb: d2:2b:29:dd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjUwOTIwMTUwMDUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNlYzFhNC1lNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxHZpbbUdrbYtdZov71kj5UngzozAQ/It4qTU0Ahowd1A3J+Or2lqJgEk67e tiG42Eco+WCb6gGBsoyQLuDEsLyLoYRB7gTSPlHXZXVNqSbH3WfK1Tn21WsRlJFy yzKWhZY0+m69lA2LHtbKEDcV6j47U657F2XFdYhBjt6mCzbuvRii9R6thVzH1NNd 8X0Ku6/AyIxba7xfL4xE5BkpgajsnmBnjsT55XY1v9kuZjvQRIIr5ORuuO2d1ccS fepd8Xml+OuvSgSVxeUliJSFV6f3PdDdHdUcFtUVcJvjVWXZHJkdlSRYC8kwkXg7 M+bvBTnJWkopvxlhOXYM+Mgp+wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOLLO1xC r+vn22r0cTU+BBACajdIMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzIwMUQvQ0QxRTI5NDgxRDkyMTFFMkEzQjFGNEY1MDhCMDJDRDIvNzM0MzhGRjA2 REVEMTFFOUEyMUQxMzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnPxswDwQCAAIwCQMHACABDeiAADANBgkqhkiG9w0BAQsF AAOCAQEAf5nXMTDqHdd0o88FIVXm3Av5xmE70DaxHk9FQDA6bWhMeCmRmOY6u3l6 Ox8aTwchIDj53kIM/fWapRFX2dQkbTEmGZItysOZNY0NdLHVw/M1+qZ59iQ9z1y9 /TvC8Ap/aOJsZ8UKzY8oEOI42kvfvycfTXcah0aR2fhf7nLr9pQWTuCZ+1VFBvJG mLjT/Qnc8Qadv0c9YFBp1T0/ETsJs409TA24MGFfBPO7soEf0Q02mtKiCx+M8BdF FkNncZpOF5AK3PB56C4wSkyep9ICJ3/UPiGzYBQsL9GsBcnvxor68d+4nmVGFXGj WlAz+bCDfEf/Lmb6c3iMtIbr0isp3Q== -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:11 2025 by rpki-client