$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/DC130EBC913A11F08A1B3D3DC4F9AE02.roa File: DC130EBC913A11F08A1B3D3DC4F9AE02.roa (raw, json) Hash identifier: DQnHl31CJCa6fulX34rSYao3uxop1q0eB7CtOK8kjP4= Subject key identifier: 4F:A3:D1:1D:02:4E:E5:5C:D3:0C:02:7F:B4:4E:29:43:86:CB:BA:2D Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Certificate serial: 06A2 Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/DC130EBC913A11F08A1B3D3DC4F9AE02.roa Signing time: Sun 14 Sep 2025 07:17:24 +0000 ROA not before: Sun 14 Sep 2025 07:17:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142577 IP address blocks: 103.164.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Validity Not Before: Sep 14 07:17:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68c66c03-ec79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:58:d4:d7:99:6b:98:50:f8:c2:ce:54:ff: 96:30:f2:05:66:7f:4e:15:5d:37:bd:05:b3:a1:4d: 9a:64:75:65:81:b2:e1:f4:a9:78:29:51:d9:cd:36: fc:d8:a6:2e:96:76:8e:b3:79:9b:70:29:dc:26:69: 83:a7:7f:00:f9:89:c8:ff:57:58:2e:c2:b8:47:ca: d3:a1:ca:8e:b7:27:22:ef:20:61:04:cd:eb:d6:fc: 4b:95:b1:3d:2c:f6:8e:95:69:62:3f:42:8f:4d:92: 39:f4:39:26:d9:bb:d8:1f:d4:ff:29:f2:ee:18:86: 3b:52:6d:08:8a:d2:c3:51:2f:a2:7c:43:ba:21:8e: 59:08:59:d7:33:e1:36:76:2e:09:e0:b8:06:4c:99: f1:21:8e:88:1c:21:4b:24:a4:3f:38:0c:a5:21:da: c8:bf:5c:f4:71:53:9b:00:0f:d6:02:97:fa:d3:59: 57:62:fe:86:44:e3:45:2d:06:c5:95:6e:cf:20:9a: b0:7a:9b:4c:47:0e:23:16:d2:56:16:5a:73:fe:d4: 78:55:65:ce:52:1e:b9:11:dd:43:92:4c:e8:65:3e: f2:9a:0c:e5:f7:19:9f:73:74:0c:ae:21:9f:b5:95: 75:dd:ce:9f:6c:43:6d:09:10:2d:69:3a:6e:7c:19: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A3:D1:1D:02:4E:E5:5C:D3:0C:02:7F:B4:4E:29:43:86:CB:BA:2D X509v3 Authority Key Identifier: keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/DC130EBC913A11F08A1B3D3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.255.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:59:f5:3e:f6:83:d7:3a:53:ab:b6:e1:f1:cc:c4:be:5c:9f: 5a:15:01:04:d3:f0:26:9d:46:bf:07:a7:b5:5c:8a:d0:16:b9: 44:d6:71:22:09:95:dd:3a:a0:f1:fc:72:48:7f:84:a2:26:cf: a5:9a:b9:05:01:8a:a4:82:f2:7b:18:42:c9:4e:fb:d0:72:74: a7:b6:52:d2:ff:43:d3:18:6f:03:04:29:29:0a:35:a9:ff:be: 71:67:91:96:ae:7d:01:66:30:e9:c6:0e:cc:ea:77:cb:c3:41: 23:4f:78:da:b1:b4:d1:49:9e:75:00:4f:9c:53:39:ae:57:df: cc:c2:d2:9c:7e:54:ff:d0:6d:b3:81:f0:32:20:fd:2d:34:26: 62:0a:c4:1d:fb:c7:5e:ab:e7:d8:28:60:5e:5d:ca:80:a6:b3: a8:2c:a3:fd:b7:1e:63:63:70:16:8f:4f:ce:52:f3:d6:8c:ee: 61:7c:8f:96:0b:5f:ef:7c:aa:a6:ea:d6:6f:21:21:2a:45:2d: b4:8f:c9:fd:03:e9:36:b6:46:b8:11:5b:0d:64:b5:5c:dc:5e: 9b:a6:92:a3:1d:f1:89:0d:a5:e4:e0:c8:3d:83:29:9d:93:e9: ca:fc:25:8f:69:9a:12:fb:c6:14:b7:66:78:04:5d:c9:1a:0a: 7e:50:e4:67 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEQjUxMTAvBgNVBAUTKDQ3RUM1M0JGREQzNTEzMjBFODlCMkM1NDFCQUNERDRE OEQ1MkEwQjMwHhcNMjUwOTE0MDcxNzI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM2NmMwMy1lYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvtY1NeZa5hQ+MLOVP+WMPIFZn9OFV03vQWzoU2aZHVlgbLh9Kl4KVHZzTb8 2KYulnaOs3mbcCncJmmDp38A+YnI/1dYLsK4R8rTocqOtyci7yBhBM3r1vxLlbE9 LPaOlWliP0KPTZI59Dkm2bvYH9T/KfLuGIY7Um0IitLDUS+ifEO6IY5ZCFnXM+E2 di4J4LgGTJnxIY6IHCFLJKQ/OAylIdrIv1z0cVObAA/WApf601lXYv6GRONFLQbF lW7PIJqweptMRw4jFtJWFlpz/tR4VWXOUh65Ed1DkkzoZT7ymgzl9xmfc3QMriGf tZV13c6fbENtCRAtaTpufBk1AwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE+j0R0C TuVc0wwCf7ROKUOGy7otMB8GA1UdIwQYMBaAFEfsU7/dNRMg6JssVBus3U2NUqCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0RCNS8wQzk5OUVDMDhG QTExMUVCQTIyMDY2MUVDNEY5QUUwMi9SLXhUdjkwMUV5RG9teXhVRzZ6ZFRZMVNv TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IteFR2OTAxRXlEb215eFVHNnpkVFkxU29MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNEQjUvMEM5OTlFQzA4RkExMTFFQkEyMjA2NjFFQzRGOUFFMDIvREMxMzBFQkM5 MTNBMTFGMDhBMUIzRDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnpP8wDQYJKoZIhvcNAQELBQADggEBAEpZ9T72g9c6U6u2 4fHMxL5cn1oVAQTT8CadRr8Hp7VcitAWuUTWcSIJld06oPH8ckh/hKImz6WauQUB iqSC8nsYQslO+9BydKe2UtL/Q9MYbwMEKSkKNan/vnFnkZaufQFmMOnGDszqd8vD QSNPeNqxtNFJnnUAT5xTOa5X38zC0px+VP/QbbOB8DIg/S00JmIKxB37x16r59go YF5dyoCms6gso/23HmNjcBaPT85S89aM7mF8j5YLX+98qqbq1m8hISpFLbSPyf0D 6Ta2RrgRWw1ktVzcXpumkqMd8YkNpeTgyD2DKZ2T6cr8JY9pmhL7xhS3ZngEXcka Cn5Q5Gc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:28:50 2025 by rpki-client