$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/07F7821E890011EEB1D8307EC4F9AE02.roa File: 07F7821E890011EEB1D8307EC4F9AE02.roa (raw, json) Hash identifier: TP6KiR24AE1rJtE2B5ixs4F+w/Dm+L3xZIA6bf8jfKw= Subject key identifier: EF:5D:C2:EE:9F:75:1C:61:6F:47:76:95:E4:82:39:0A:97:50:47:F0 Certificate issuer: /CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Certificate serial: 0159 Authority key identifier: 14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/07F7821E890011EEB1D8307EC4F9AE02.roa Signing time: Wed 10 Sep 2025 18:28:21 +0000 ROA not before: Wed 10 Sep 2025 18:28:21 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 136902 IP address blocks: 103.142.120.0/24 maxlen: 24 103.142.121.0/24 maxlen: 24 2001:df1:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542, serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Validity Not Before: Sep 10 18:28:21 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68c1c344-8333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:a7:89:94:cf:4a:71:21:54:4f:b9:25:8b: c6:fd:67:2d:56:1c:ca:fa:64:c6:d2:42:a6:91:ca: 29:93:f9:f3:f2:81:d5:78:b6:80:b7:07:b1:8e:9d: 19:b6:46:10:f0:45:1b:27:41:c3:c3:b7:cc:d8:f7: 7e:26:f0:df:d5:bd:10:0d:fe:33:e6:ec:35:ff:7e: 9c:36:bc:0a:1b:c0:a2:2d:a3:cb:a7:b7:e8:77:32: b8:5a:8a:47:36:9e:de:55:90:0b:4c:b9:78:71:dd: 45:f9:26:45:20:e0:11:c9:6e:89:8d:da:e7:0d:9a: 24:c5:77:b5:7b:0a:0e:6a:51:a8:ba:fc:42:aa:0c: 15:24:8d:d2:ab:19:11:30:22:ea:4d:cc:3f:e7:93: 5a:0b:71:bd:5e:33:b1:47:fd:d7:76:68:be:f3:4f: 20:1b:e4:13:ae:dc:b8:6d:ea:59:b6:02:3c:86:c5: d5:2b:03:37:68:35:0b:5a:0b:d7:04:d6:63:1c:7b: db:25:f0:e3:f3:c6:e5:86:67:0d:24:69:63:83:89: 58:f3:47:58:a6:32:db:2f:4d:ac:f4:0c:97:c8:12: 23:4d:5d:ca:ff:ea:11:da:51:5e:88:b5:8f:5e:91: 05:1d:4e:7f:ef:c3:42:3e:53:37:44:b7:04:2a:9c: 25:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5D:C2:EE:9F:75:1C:61:6F:47:76:95:E4:82:39:0A:97:50:47:F0 X509v3 Authority Key Identifier: keyid:14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/07F7821E890011EEB1D8307EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.120.0/23 IPv6: 2001:df1:4080::/48 Signature Algorithm: sha256WithRSAEncryption 78:e5:b5:e9:6c:77:9d:83:c5:d6:82:a1:a6:9b:2f:29:73:8d: b2:2d:eb:0e:a8:56:18:cc:0c:f6:51:f0:33:0f:7e:eb:c8:23: 9e:5e:24:99:1f:05:e0:c7:28:65:67:fd:e7:bc:d2:89:4f:f3: 3e:b0:e6:03:c8:a0:9f:f2:a3:5a:33:6a:0b:42:d2:6f:83:74: 40:7e:4e:58:be:e8:44:9b:fe:ab:95:92:1c:ad:64:53:20:11: 9c:89:63:66:d9:74:ab:a7:2d:04:c4:68:04:b0:78:7f:76:39: 5b:8a:5d:39:26:12:e4:44:3a:37:6c:52:1c:6a:d3:47:d8:9c: 59:37:2a:0d:64:67:be:3a:7f:e4:3d:e8:53:c9:61:37:ad:a1: 00:4b:81:d1:9a:33:4d:c5:07:4d:d6:fd:d8:cc:43:e8:b7:3f: cc:8b:de:23:39:29:91:92:c0:46:12:47:1d:52:95:e5:f5:97: 7c:83:c3:56:78:9b:5f:13:fc:f3:eb:37:92:62:1a:6f:70:5a: 51:78:81:1e:2c:4b:7a:8b:d9:d5:18:7a:31:9a:72:e3:af:04: 9b:80:71:49:1e:fe:f3:27:e4:aa:e6:88:5d:3a:95:60:cf:f3: 0e:ca:99:80:f5:3c:66:3a:80:9f:0f:eb:1d:2a:5f:58:71:1a: 71:c5:9f:aa -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKDE0QzQ3NUNGRDI4Qjc3RUMxMTUyQzJFRjMzRTVFNDNF MTc1QUMyMjEwHhcNMjUwOTEwMTgyODIxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMxYzM0NC04MzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTSniZTPSnEhVE+5JYvG/WctVhzK+mTG0kKmkcopk/nz8oHVeLaAtwexjp0Z tkYQ8EUbJ0HDw7fM2Pd+JvDf1b0QDf4z5uw1/36cNrwKG8CiLaPLp7fodzK4WopH Np7eVZALTLl4cd1F+SZFIOARyW6JjdrnDZokxXe1ewoOalGouvxCqgwVJI3SqxkR MCLqTcw/55NaC3G9XjOxR/3Xdmi+808gG+QTrty4bepZtgI8hsXVKwM3aDULWgvX BNZjHHvbJfDj88blhmcNJGljg4lY80dYpjLbL02s9AyXyBIjTV3K/+oR2lFeiLWP XpEFHU5/78NCPlM3RLcEKpwlvQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFO9dwu6f dRxhb0d2leSCOQqXUEfwMB8GA1UdIwQYMBaAFBTEdc/Si3fsEVLC7zPl5D4XWsIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi9GTVIxejlLTGQtd1JVc0x2TS1Ya1BoZGF3 aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZNUjF6OUtMZC13UlVzTHZNLVhrUGhkYXdpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODA1NDIvMEE0NzlDOTBDQUU5MTFFOUJCRTkyMTgzQzRGOUFFMDIvMDdGNzgyMUU4 OTAwMTFFRUIxRDgzMDdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjngwDwQCAAIwCQMHACABDfFAgDANBgkqhkiG9w0BAQsF AAOCAQEAeOW16Wx3nYPF1oKhppsvKXONsi3rDqhWGMwM9lHwMw9+68gjnl4kmR8F 4McoZWf957zSiU/zPrDmA8ign/KjWjNqC0LSb4N0QH5OWL7oRJv+q5WSHK1kUyAR nIljZtl0q6ctBMRoBLB4f3Y5W4pdOSYS5EQ6N2xSHGrTR9icWTcqDWRnvjp/5D3o U8lhN62hAEuB0ZozTcUHTdb92MxD6Lc/zIveIzkpkZLARhJHHVKV5fWXfIPDVnib XxP88+s3kmIab3BaUXiBHixLeovZ1Rh6MZpy468Em4BxSR7+8yfkquaIXTqVYM/z DsqZgPU8ZjqAnw/rHSpfWHEaccWfqg== -----END CERTIFICATE-----Generated at Mon Oct 20 05:42:37 2025 by rpki-client