$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/17BA5658D1FA11EDA0A31C2FC4F9AE02.roa File: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (raw, json) Hash identifier: 1qzItKWorYUUOmMK79qcFmJ05vCRXkNln617yx1hDtI= Subject key identifier: DC:40:30:CB:93:E3:AA:7E:2A:E2:11:95:01:9D:5B:FD:F0:11:74:94 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0C55 Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/17BA5658D1FA11EDA0A31C2FC4F9AE02.roa Signing time: Mon 22 Sep 2025 19:09:33 +0000 ROA not before: Mon 22 Sep 2025 19:09:33 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139326 IP address blocks: 103.141.70.0/23 maxlen: 23 103.141.70.0/24 maxlen: 24 103.141.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Sep 22 19:09:33 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68d19eed-b10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:89:0c:c7:8d:87:e8:c0:79:81:86:61:ef: 2d:37:d6:77:c6:bb:10:d2:65:ec:40:fd:fd:d1:94: 56:ec:c3:8c:a0:7c:ee:07:19:36:e4:d6:37:b9:9e: 14:ab:97:63:31:10:1a:fb:1b:08:b5:e4:46:db:42: 52:ba:0e:db:c0:6c:a7:59:9f:90:28:99:7f:f6:40: 84:2b:37:bd:21:8c:d9:38:37:55:07:c3:18:aa:97: 89:5c:fd:d5:2e:4a:21:00:38:1d:91:cb:0f:28:8c: 4d:0c:4d:f8:2a:bf:23:b3:c1:96:d4:af:6a:15:96: df:36:92:31:06:ee:02:20:36:0f:f5:78:c8:f6:a7: 7f:cc:2f:22:f2:4d:cc:8e:c4:0b:ad:27:ad:e2:06: 77:5d:30:9d:15:27:ea:36:7f:45:50:2e:08:f7:d1: 98:35:d1:f6:76:56:ec:f6:b6:9b:5a:99:0c:a5:98: 86:4a:f3:c6:44:b7:58:97:51:e5:cf:b6:9c:14:ad: 04:01:b1:6c:74:11:77:fd:4f:bb:ff:aa:2b:3f:ce: ed:65:8b:5c:4d:98:b4:32:69:f0:3d:9c:31:79:19: a8:fe:b4:58:c7:f5:39:c0:77:2a:4f:0f:51:29:bf: b7:45:14:67:f5:2d:14:43:06:dc:73:7e:e7:33:54: a1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:40:30:CB:93:E3:AA:7E:2A:E2:11:95:01:9D:5B:FD:F0:11:74:94 X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/17BA5658D1FA11EDA0A31C2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.70.0/23 Signature Algorithm: sha256WithRSAEncryption 11:84:ae:a7:8f:d6:ac:99:dd:49:b6:42:70:c6:ff:99:74:fd: ba:19:89:fa:a9:2c:bd:f8:24:39:fc:43:d9:07:e2:45:a0:1c: 36:76:d9:6d:57:48:ee:c3:1e:56:98:8f:a6:ed:72:89:07:fa: b9:8a:de:f9:07:e6:62:40:75:73:aa:b2:32:41:fb:c0:ee:e2: fd:b9:01:1f:a9:c5:d6:0c:2e:40:03:14:9f:e9:5e:5c:0f:b0: f6:27:11:6f:b8:5f:12:c7:3a:01:ea:70:a6:c8:72:55:6a:9a: 1b:c9:7a:78:45:e1:1c:83:0c:53:02:46:5c:1c:14:b9:9c:9a: 61:f0:ff:c2:c2:f4:21:0e:24:6a:c5:fb:97:f9:68:09:8b:15: dc:d4:ac:22:90:46:4d:a3:4a:3a:a9:fc:a2:0b:8a:8b:91:e9: 19:fe:17:27:28:7c:e6:57:df:c1:b0:e4:03:0a:97:29:1f:02: 58:43:ba:20:ec:b4:9d:0e:51:a7:5c:a7:47:6a:d4:57:2e:c3: 5e:18:c7:e4:e0:b6:67:8a:e2:26:7e:70:93:ff:4e:35:90:c8: ec:2a:2c:17:06:0b:ec:34:a6:4f:60:7a:b5:f1:7e:5d:1a:0e: d1:19:8b:52:2c:33:94:c0:da:6e:c4:b1:e7:6d:34:0c:2a:51: 5a:11:be:b9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjUwOTIyMTkwOTMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxOWVlZC1iMTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUqJDMeNh+jAeYGGYe8tN9Z3xrsQ0mXsQP390ZRW7MOMoHzuBxk25NY3uZ4U q5djMRAa+xsIteRG20JSug7bwGynWZ+QKJl/9kCEKze9IYzZODdVB8MYqpeJXP3V LkohADgdkcsPKIxNDE34Kr8js8GW1K9qFZbfNpIxBu4CIDYP9XjI9qd/zC8i8k3M jsQLrSet4gZ3XTCdFSfqNn9FUC4I99GYNdH2dlbs9rabWpkMpZiGSvPGRLdYl1Hl z7acFK0EAbFsdBF3/U+7/6orP87tZYtcTZi0MmnwPZwxeRmo/rRYx/U5wHcqTw9R Kb+3RRRn9S0UQwbcc37nM1ShTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNxAMMuT 46p+KuIRlQGdW/3wEXSUMB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0NBQkIvMDc2NzVGMUUwRjY5MTFFQUE5RDUyNjUwQzRGOUFFMDIvMTdCQTU2NThE MUZBMTFFREEwQTMxQzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjUYwDQYJKoZIhvcNAQELBQADggEBABGErqeP1qyZ3Um2 QnDG/5l0/boZifqpLL34JDn8Q9kH4kWgHDZ22W1XSO7DHlaYj6btcokH+rmK3vkH 5mJAdXOqsjJB+8Du4v25AR+pxdYMLkADFJ/pXlwPsPYnEW+4XxLHOgHqcKbIclVq mhvJenhF4RyDDFMCRlwcFLmcmmHw/8LC9CEOJGrF+5f5aAmLFdzUrCKQRk2jSjqp /KILiouR6Rn+FycofOZX38Gw5AMKlykfAlhDuiDstJ0OUadcp0dq1Fcuw14Yx+Tg tmeK4iZ+cJP/TjWQyOwqLBcGC+w0pk9gerXxfl0aDtEZi1IsM5TA2m7EsedtNAwq UVoRvrk= -----END CERTIFICATE-----Generated at Mon Oct 20 22:24:09 2025 by rpki-client