$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/2B601BDCA05811F0BE7DD54BC4F9AE02.roa File: 2B601BDCA05811F0BE7DD54BC4F9AE02.roa (raw, json) Hash identifier: rcoAf/XSP+JMK9+dzb4AOtxnapjuQECNQvM4hbbxzDo= Subject key identifier: AF:78:05:DC:63:9B:36:B6:6E:EE:1E:57:B1:4B:07:CB:14:01:40:33 Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Certificate serial: 0B37 Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/2B601BDCA05811F0BE7DD54BC4F9AE02.roa Signing time: Fri 03 Oct 2025 12:54:59 +0000 ROA not before: Fri 03 Oct 2025 12:54:59 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 147314 IP address blocks: 103.145.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Validity Not Before: Oct 3 12:54:59 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68dfc7a3-23bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fd:b0:16:97:8c:8b:24:87:4f:87:f3:8b:fd: 78:79:19:c3:5e:d0:b5:60:65:8d:92:b3:7d:70:c3: 6f:26:c3:0c:ec:f4:f8:32:86:2d:b1:f6:12:a7:9d: 93:40:97:c0:a6:ba:ce:46:bd:c9:07:0a:23:36:c3: 61:b0:f1:0a:bb:ed:9a:99:8d:d2:2d:10:5d:8f:c3: 94:60:ab:fd:78:e7:e6:af:fa:0f:be:59:cb:ca:3d: 10:be:57:1a:7c:5a:6d:48:bc:ef:f7:98:0a:c6:d7: 09:a6:71:26:90:f4:c3:10:77:20:04:47:ad:48:9e: bb:11:f0:04:85:6c:ee:55:31:fd:d1:74:75:b6:6d: 0c:f2:ea:6b:ce:76:85:5f:73:a6:63:d3:ab:27:79: 86:9e:16:88:ae:43:21:50:6e:63:d7:cc:76:84:83: 83:90:c3:c3:18:cd:6d:ec:78:58:5c:62:9f:e1:2f: 70:10:15:18:01:6e:14:20:0c:15:af:b6:8c:f5:69: 0b:d1:4a:47:a3:71:95:93:8b:d3:ec:12:b4:df:5b: 14:fa:dc:0c:c6:2c:25:06:a9:c7:63:ed:55:d3:59: a4:0c:48:50:aa:24:04:a6:3d:00:15:1e:b0:d6:51: 22:98:3d:14:ee:f4:bf:b7:f2:d0:19:18:9d:8f:b4: 3d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:78:05:DC:63:9B:36:B6:6E:EE:1E:57:B1:4B:07:CB:14:01:40:33 X509v3 Authority Key Identifier: keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/2B601BDCA05811F0BE7DD54BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.77.0/24 Signature Algorithm: sha256WithRSAEncryption 34:94:d5:89:63:47:af:91:1c:a5:46:83:7d:97:8b:5e:d5:e2: 09:9b:51:25:71:71:e8:45:37:6e:fc:a9:57:52:69:7c:4d:a2: cf:11:77:ba:22:cf:1e:76:bd:a8:2e:49:30:8d:60:09:5c:b3: 12:41:0c:1a:fb:5c:b2:03:eb:93:81:2e:e7:ab:cf:55:b1:ce: 94:e1:87:1a:e2:cb:44:88:6e:dc:56:8c:9a:4c:5f:7a:b7:9e: 90:e6:48:0b:9d:7e:f9:72:0b:20:6e:22:45:03:f5:68:bc:a6: e6:f9:f9:b6:49:e6:96:ee:a0:52:d9:01:c0:60:ab:ff:21:d4: 24:12:1b:f5:e9:9a:57:eb:bd:0a:c3:a0:ea:e6:43:87:a5:a4: 29:06:c5:eb:1e:30:55:c2:d9:64:be:19:1b:b5:2e:9f:b1:b3: ed:81:1a:4b:3b:ff:9c:78:a0:7d:ee:0c:bd:a9:df:38:cf:d9: 9a:31:56:e2:c6:d7:7a:b1:e3:21:0f:13:a8:38:bc:38:bf:2c: ce:8b:aa:0c:4a:88:12:14:fe:97:03:f2:f5:29:af:60:c9:6f: c3:54:3f:93:df:ae:9d:07:6c:6f:32:fc:12:48:94:89:06:16: 2d:88:f6:30:1d:fb:12:a7:74:83:9b:7a:51:ef:3a:bb:c3:b7: 0a:3c:3a:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2 Qzk0MjlGMjEwHhcNMjUxMDAzMTI1NDU5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRmYzdhMy0yM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmv2wFpeMiySHT4fzi/14eRnDXtC1YGWNkrN9cMNvJsMM7PT4MoYtsfYSp52T QJfAprrORr3JBwojNsNhsPEKu+2amY3SLRBdj8OUYKv9eOfmr/oPvlnLyj0Qvlca fFptSLzv95gKxtcJpnEmkPTDEHcgBEetSJ67EfAEhWzuVTH90XR1tm0M8uprznaF X3OmY9OrJ3mGnhaIrkMhUG5j18x2hIODkMPDGM1t7HhYXGKf4S9wEBUYAW4UIAwV r7aM9WkL0UpHo3GVk4vT7BK031sU+twMxiwlBqnHY+1V01mkDEhQqiQEpj0AFR6w 1lEimD0U7vS/t/LQGRidj7Q98wIDAQABo4IClTCCApEwHQYDVR0OBBYEFK94Bdxj mza2bu4eV7FLB8sUAUAzMB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3 NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTBEMEQvRjAzN0JEMDg0NzY2MTFFQUFCQjExQTY1QzRGOUFFMDIvMkI2MDFCRENB MDU4MTFGMEJFN0RENTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkU0wDQYJKoZIhvcNAQELBQADggEBADSU1YljR6+RHKVG g32Xi17V4gmbUSVxcehFN278qVdSaXxNos8Rd7oizx52vaguSTCNYAlcsxJBDBr7 XLID65OBLuerz1WxzpThhxriy0SIbtxWjJpMX3q3npDmSAudfvlyCyBuIkUD9Wi8 pub5+bZJ5pbuoFLZAcBgq/8h1CQSG/XpmlfrvQrDoOrmQ4elpCkGxeseMFXC2WS+ GRu1Lp+xs+2BGks7/5x4oH3uDL2p3zjP2ZoxVuLG13qx4yEPE6g4vDi/LM6LqgxK iBIU/pcD8vUpr2DJb8NUP5Pfrp0HbG8y/BJIlIkGFi2I9jAd+xKndIObelHvOrvD two8Onk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:32:38 2025 by rpki-client