$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa File: 974F9BA0A87011EFB3944C13C4F9AE02.roa (raw, json) Hash identifier: sJTUAzwirYIZpl1wnA3/i/mf1sEf8bCtv90HcGqZGeI= Subject key identifier: C0:7E:AD:D1:A7:20:10:82:8C:34:0E:FA:C5:75:8C:28:37:D5:E5:7E Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 1917 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa Signing time: Mon 22 Sep 2025 06:55:25 +0000 ROA not before: Mon 22 Sep 2025 06:55:25 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 59256 IP address blocks: 103.39.238.0/24 maxlen: 24 103.39.239.0/24 maxlen: 24 103.39.248.0/24 maxlen: 24 2001:df6:9000::/48 maxlen: 48 2401:9cc0::/32 maxlen: 32 2401:9cc0:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6423 (0x1917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Sep 22 06:55:25 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68d0f2dd-2efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7c:75:3f:22:b9:5a:79:d3:49:eb:8b:21:34: 93:3a:dd:4c:12:10:a2:b4:51:5d:72:1b:f4:8a:44: 4b:23:ed:49:62:f4:b1:c7:06:5e:40:dc:09:dd:c1: 59:6d:12:cc:e3:80:f9:65:76:c8:b3:e3:76:67:71: 1c:d3:d3:6f:7c:d2:90:1a:8c:b6:fa:05:4d:95:fa: 84:e2:df:15:f6:52:e0:c8:27:12:b5:46:74:8f:01: 8d:d9:37:94:55:71:2c:a7:fb:14:43:a4:3b:57:64: 44:4a:6d:80:4f:bf:91:9c:18:d0:a7:81:ca:3d:01: 69:23:29:94:62:c7:ab:1e:51:d4:61:f7:4a:fa:88: 03:8c:62:56:a1:48:d3:ea:86:b0:a1:8b:da:43:2c: 3e:ae:60:78:cb:74:0d:f7:53:fc:33:cf:30:e5:a9: 8a:c6:3a:d2:63:3b:3e:0e:e3:c2:5d:4c:c8:11:6b: 4f:47:6e:14:27:e3:58:72:62:7f:1a:82:78:ac:2e: d7:80:41:4d:e4:0b:eb:b9:bb:7b:f6:b5:96:cf:1f: a3:82:5b:6b:7b:ad:36:52:6f:18:b0:7d:85:c5:83: c7:f3:55:94:6a:bf:03:6e:fd:86:be:4d:8c:90:60: 64:85:a9:b7:50:ca:0d:ef:48:5c:bc:47:d8:37:f5: 72:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7E:AD:D1:A7:20:10:82:8C:34:0E:FA:C5:75:8C:28:37:D5:E5:7E X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.238.0/23 103.39.248.0/24 IPv6: 2001:df6:9000::/48 2401:9cc0::/32 Signature Algorithm: sha256WithRSAEncryption 99:db:b5:9f:3b:b6:72:b9:7d:0e:86:65:f8:3a:8c:c7:31:aa: ec:78:42:8b:49:25:d8:19:ce:f5:c3:94:c1:06:7b:fb:06:19: 9a:73:25:5c:31:ff:18:9e:41:dd:b9:8f:6c:73:78:ef:c1:52: 8f:ce:58:a6:62:c0:ad:78:64:3a:c8:bf:91:89:92:d1:8a:9d: 44:92:f5:03:27:87:9e:83:1b:3c:1e:c6:f8:36:59:ee:ab:be: 2f:c7:73:a7:a4:0d:bc:41:7a:34:5c:67:52:1f:df:06:96:bf: 94:47:35:cd:ec:2e:34:71:e1:b2:1f:94:67:cf:79:40:6e:a8: 06:62:51:1c:3a:1d:4d:6b:d7:66:37:26:e5:db:6f:42:9d:06: f4:3c:93:a1:f1:6f:a1:9e:9a:e5:8c:29:c0:10:73:92:a5:cc: c0:7e:fc:55:be:ed:1e:da:f8:bb:cc:4d:c9:a8:51:69:26:bf: 63:47:f7:9f:68:cd:08:35:f8:5b:a9:c5:ab:25:eb:25:74:c3: 0f:6a:b3:60:3a:8f:fb:b8:2e:75:28:68:15:fe:df:58:41:37: d2:fe:b2:8a:12:ce:c9:5f:ee:2e:7e:c7:d4:92:81:ea:96:b9: 1d:b5:a1:b0:f2:c1:a3:22:f1:61:66:ce:c8:17:a3:a4:93:c9: 13:59:58:53 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICGRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjUwOTIyMDY1NTI1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQwZjJkZC0yZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznx1PyK5WnnTSeuLITSTOt1MEhCitFFdchv0ikRLI+1JYvSxxwZeQNwJ3cFZ bRLM44D5ZXbIs+N2Z3Ec09NvfNKQGoy2+gVNlfqE4t8V9lLgyCcStUZ0jwGN2TeU VXEsp/sUQ6Q7V2RESm2AT7+RnBjQp4HKPQFpIymUYserHlHUYfdK+ogDjGJWoUjT 6oawoYvaQyw+rmB4y3QN91P8M88w5amKxjrSYzs+DuPCXUzIEWtPR24UJ+NYcmJ/ GoJ4rC7XgEFN5Avrubt79rWWzx+jgltre602Um8YsH2FxYPH81WUar8Dbv2Gvk2M kGBkham3UMoN70hcvEfYN/Vy1QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFMB+rdGn IBCCjDQO+sV1jCg31eV+MB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQ2QkYvRTM2MUJBMjBBNUExMTFFN0IzQTMxMjdEQzRGOUFFMDIvOTc0RjlCQTBB ODcwMTFFRkIzOTQ0QzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBAFnJ+4DBABnJ/gwFgQCAAIwEAMHACABDfaQAAMFACQBnMAw DQYJKoZIhvcNAQELBQADggEBAJnbtZ87tnK5fQ6GZfg6jMcxqux4QotJJdgZzvXD lMEGe/sGGZpzJVwx/xieQd25j2xzeO/BUo/OWKZiwK14ZDrIv5GJktGKnUSS9QMn h56DGzwexvg2We6rvi/Hc6ekDbxBejRcZ1If3waWv5RHNc3sLjRx4bIflGfPeUBu qAZiURw6HU1r12Y3JuXbb0KdBvQ8k6Hxb6GemuWMKcAQc5KlzMB+/FW+7R7a+LvM TcmoUWkmv2NH959ozQg1+Fupxasl6yV0ww9qs2A6j/u4LnUoaBX+31hBN9L+sooS zslf7i5+x9SSgeqWuR21obDywaMi8WFmzsgXo6STyRNZWFM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:59:34 2025 by rpki-client