$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/4D73A1D0978411F08E9E8257C4F9AE02.roa File: 4D73A1D0978411F08E9E8257C4F9AE02.roa (raw, json) Hash identifier: L8QEVm/urvKx/zsnpDGugITdnYLFZRAyZqA4pzLEkzE= Subject key identifier: 8C:36:39:5F:D2:C1:BB:7B:21:D3:AC:51:AF:80:E9:87:C4:8F:D0:7D Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Certificate serial: 0153 Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/4D73A1D0978411F08E9E8257C4F9AE02.roa Signing time: Mon 22 Sep 2025 07:18:14 +0000 ROA not before: Mon 22 Sep 2025 07:18:14 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 135523 IP address blocks: 103.101.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Validity Not Before: Sep 22 07:18:14 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68d0f836-a011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:1c:0a:fc:11:4d:8a:6c:07:57:f2:50:a3: a0:01:cb:d2:03:b3:5d:66:60:fe:34:cd:06:a1:61: e1:b0:d4:13:a2:6c:bd:dc:5b:80:cb:a3:29:e6:5d: 93:25:1f:41:f3:a8:96:28:2d:e4:1e:6c:c0:84:e1: 67:29:7d:73:a9:dd:99:ba:0a:88:03:ee:90:31:56: e8:bd:22:b1:d6:62:0b:3d:d3:38:af:28:32:fc:54: 7f:0c:63:80:d9:c1:66:91:6a:8a:ce:56:38:c4:a1: 6c:a5:fb:d8:44:59:09:b7:79:71:9a:25:47:02:81: f7:7b:22:13:ad:11:40:87:2f:eb:5f:93:ad:6e:ff: e0:1e:9d:1c:2d:b8:de:1e:0c:22:9f:2e:1e:d3:95: ae:6f:54:f5:c0:b2:da:58:be:09:fc:08:83:2f:80: 44:0a:fb:cb:87:5a:30:10:75:96:15:60:e3:4e:61: cd:a8:1e:ab:aa:eb:d5:2e:76:cf:c2:0a:82:4f:0b: c6:0f:7e:12:08:92:ab:f6:de:e3:51:42:2c:df:d2: cc:6e:77:f4:d8:e0:e3:2a:b8:a3:b8:a0:1d:d4:77: 98:1b:bd:17:4c:0c:86:4e:fe:17:2c:3b:e7:46:7e: 1c:b1:82:97:12:40:eb:38:8e:02:e3:d2:84:3c:82: d2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:36:39:5F:D2:C1:BB:7B:21:D3:AC:51:AF:80:E9:87:C4:8F:D0:7D X509v3 Authority Key Identifier: keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/4D73A1D0978411F08E9E8257C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.232.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:21:3e:af:4d:43:42:7d:b0:1e:04:7f:50:c1:34:a5:20:f9: d9:da:54:5d:a2:b4:b4:cf:88:de:45:d2:be:4b:e9:15:86:d6: 22:e6:fc:c6:f9:78:00:66:47:ad:1e:c1:e0:3e:dc:0b:05:4e: 23:ae:39:19:1f:fe:22:0d:d7:52:6b:26:3e:04:62:f2:ed:35: 15:97:2c:a8:42:32:ae:47:7e:ce:5a:9a:35:79:63:34:20:08: a1:bc:2b:90:89:d1:ab:39:07:9f:94:ce:43:c1:4d:c8:b0:bf: 47:c8:7c:8e:fa:a4:72:b2:17:b6:0d:d7:e4:58:c2:c0:f0:6e: 86:d9:03:2c:84:aa:31:1f:1d:84:7a:37:b3:da:0f:19:5b:b2: 8a:52:39:f8:12:d5:33:b9:61:09:27:99:f4:83:a2:ad:fa:e6: 57:a7:27:8c:bf:18:3f:4a:86:64:99:4b:a6:68:0c:ae:a2:79: f4:7c:ad:f6:9b:53:4b:31:ac:e9:29:5e:0d:f0:e8:11:a2:5b: 25:29:99:de:6e:2f:c0:1c:3e:ed:0c:87:39:8d:bc:0b:c6:c8: 0e:1e:1b:6c:95:ce:3e:a2:42:82:a4:9a:56:10:af:8b:4e:45: b4:34:47:d9:ae:22:89:dc:2d:6d:19:96:01:e7:ff:21:f2:63: 64:53:2f:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDQTgxMTAvBgNVBAUTKENFNjM3MDk5N0RCRDEzRDIwRTVFQzYxNjVCNUE5RUUz QTI4MkE2QjAwHhcNMjUwOTIyMDcxODE0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQwZjgzNi1hMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3wcCvwRTYpsB1fyUKOgAcvSA7NdZmD+NM0GoWHhsNQTomy93FuAy6Mp5l2T JR9B86iWKC3kHmzAhOFnKX1zqd2ZugqIA+6QMVbovSKx1mILPdM4rygy/FR/DGOA 2cFmkWqKzlY4xKFspfvYRFkJt3lxmiVHAoH3eyITrRFAhy/rX5Otbv/gHp0cLbje Hgwiny4e05Wub1T1wLLaWL4J/AiDL4BECvvLh1owEHWWFWDjTmHNqB6rquvVLnbP wgqCTwvGD34SCJKr9t7jUUIs39LMbnf02ODjKrijuKAd1HeYG70XTAyGTv4XLDvn Rn4csYKXEkDrOI4C49KEPILSCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIw2OV/S wbt7IdOsUa+A6YfEj9B9MB8GA1UdIwQYMBaAFM5jcJl9vRPSDl7GFltanuOigqaw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNBOC9GOTcxNEFFNkFB RkExMUVFQTIyMUU3MkVDNEY5QUUwMi96bU53bVgyOUU5SU9Yc1lXVzFxZTQ2S0Nw ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3ByQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0FDQTgvRjk3MTRBRTZBQUZBMTFFRUEyMjFFNzJFQzRGOUFFMDIvNEQ3M0ExRDA5 Nzg0MTFGMDhFOUU4MjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZegwDQYJKoZIhvcNAQELBQADggEBAB4hPq9NQ0J9sB4E f1DBNKUg+dnaVF2itLTPiN5F0r5L6RWG1iLm/Mb5eABmR60eweA+3AsFTiOuORkf /iIN11JrJj4EYvLtNRWXLKhCMq5Hfs5amjV5YzQgCKG8K5CJ0as5B5+UzkPBTciw v0fIfI76pHKyF7YN1+RYwsDwbobZAyyEqjEfHYR6N7PaDxlbsopSOfgS1TO5YQkn mfSDoq365lenJ4y/GD9KhmSZS6ZoDK6iefR8rfabU0sxrOkpXg3w6BGiWyUpmd5u L8AcPu0MhzmNvAvGyA4eG2yVzj6iQoKkmlYQr4tORbQ0R9muIoncLW0ZlgHn/yHy Y2RTL8I= -----END CERTIFICATE-----Generated at Mon Oct 20 07:50:42 2025 by rpki-client