$ rpki-client -vvf rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/BF289EBC6F7911EBA5D39C85C4F9AE02.roa File: BF289EBC6F7911EBA5D39C85C4F9AE02.roa (raw, json) Hash identifier: rYmfs/RpISA0+rLDC4rvjoN2LC7fOP83NH3OmfB3ty0= Subject key identifier: 2D:8A:9C:28:73:3E:DA:3C:80:12:06:B9:23:EE:94:88:89:5B:AD:5C Certificate issuer: /CN=A9191EE7/serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43 Certificate serial: 06DD Authority key identifier: B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/BF289EBC6F7911EBA5D39C85C4F9AE02.roa Signing time: Mon 06 Oct 2025 22:23:31 +0000 ROA not before: Mon 06 Oct 2025 22:23:31 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139697 IP address blocks: 103.143.204.0/24 maxlen: 24 103.143.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191EE7, serialNumber=B7DFC802720B43F036351B0BC7163F22E5353D43 Validity Not Before: Oct 6 22:23:31 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e44162-f4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:a3:8f:40:fe:81:b3:03:27:1f:c0:25:3f: 6b:80:f4:99:7d:11:d3:8e:f0:05:20:07:38:de:66: da:70:f6:77:f1:68:7e:07:33:f5:3c:89:f6:49:a1: c3:12:05:1e:d0:7a:96:fb:43:bf:9f:6f:e6:07:24: ac:6d:e9:56:d6:98:02:5d:f2:91:14:b0:b6:3c:d2: f2:c6:ae:7d:eb:81:7a:c3:20:1a:ab:63:6c:3b:cf: f3:3c:be:5b:e1:0b:a5:2c:43:c4:3b:4a:2c:74:cc: d4:93:fd:05:49:30:c0:13:23:8a:d4:54:6f:a6:ce: 85:1d:cd:d6:3d:bd:70:20:3e:88:80:15:5d:d7:91: 91:b2:48:87:ab:03:a4:12:28:99:4e:bd:e1:33:1e: 7c:3f:39:00:4b:7d:d8:82:c8:c6:2e:6a:c9:08:de: e5:c7:6d:7d:1b:0a:e9:9d:72:c4:21:b4:fe:b0:ca: a1:23:74:3a:3c:38:30:1d:47:7e:c7:b1:d6:2e:33: 9e:b3:a5:9c:e9:f3:df:33:c2:15:19:ea:4a:72:a3: c7:e1:b8:ae:e7:27:23:41:2e:96:e0:9c:3f:7c:ff: 21:9f:d7:e7:02:70:11:4c:7f:fe:bd:f9:23:40:63: 9d:ea:6c:74:25:19:0a:bd:bd:82:cd:09:68:3c:6f: 1f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8A:9C:28:73:3E:DA:3C:80:12:06:B9:23:EE:94:88:89:5B:AD:5C X509v3 Authority Key Identifier: keyid:B7:DF:C8:02:72:0B:43:F0:36:35:1B:0B:C7:16:3F:22:E5:35:3D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/t9_IAnILQ_A2NRsLxxY_IuU1PUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9_IAnILQ_A2NRsLxxY_IuU1PUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191EE7/04DC30426F7811EB92FE0782C4F9AE02/BF289EBC6F7911EBA5D39C85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.204.0/23 Signature Algorithm: sha256WithRSAEncryption a4:82:c9:6e:20:51:35:a6:48:86:28:70:2b:d6:71:85:15:fc: 7c:36:57:f6:4d:e0:8d:43:65:85:42:33:2f:e3:84:71:3c:49: c4:d8:0a:b7:b9:c2:c4:31:3b:7b:d6:49:73:89:90:a6:56:0e: bd:24:21:e7:e3:ff:d4:2c:60:6a:a4:b8:0b:1c:2e:b1:11:94: 8d:39:32:77:f4:e0:cb:97:73:39:c8:9a:f1:d2:0b:09:5a:d4: e2:c7:71:47:be:68:19:c8:f6:b7:1b:00:2f:de:cc:a3:8a:fa: a5:45:bc:31:f4:0b:74:16:f4:eb:6c:38:10:63:1a:d8:c9:19: 0e:7e:f2:c4:32:0a:f7:58:1f:71:f2:2d:b2:e3:85:ff:6e:6a: 9e:81:81:8f:ac:e4:03:d6:8a:63:2e:28:68:19:3a:d5:ba:2b: 58:94:00:c0:bf:28:c6:b2:d9:f4:f9:12:a6:40:49:ff:a8:8b: 70:79:a6:99:e6:12:9f:48:0a:c0:ba:9d:a5:61:14:d0:8d:ba: 38:03:22:9d:d8:87:3b:20:05:c0:16:3e:a0:65:ca:7e:ee:dc: ed:d2:d9:e0:b7:e7:f7:2b:e8:c0:61:66:65:6a:e6:0c:b1:2a: 34:46:9a:76:b7:be:e2:7a:c3:4a:75:83:39:a3:4a:53:55:5a: 17:66:65:d6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFRTcxMTAvBgNVBAUTKEI3REZDODAyNzIwQjQzRjAzNjM1MUIwQkM3MTYzRjIy RTUzNTNENDMwHhcNMjUxMDA2MjIyMzMxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU0NDE2Mi1mNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliOjj0D+gbMDJx/AJT9rgPSZfRHTjvAFIAc43mbacPZ38Wh+BzP1PIn2SaHD EgUe0HqW+0O/n2/mBySsbelW1pgCXfKRFLC2PNLyxq5964F6wyAaq2NsO8/zPL5b 4QulLEPEO0osdMzUk/0FSTDAEyOK1FRvps6FHc3WPb1wID6IgBVd15GRskiHqwOk EiiZTr3hMx58PzkAS33YgsjGLmrJCN7lx219GwrpnXLEIbT+sMqhI3Q6PDgwHUd+ x7HWLjOes6Wc6fPfM8IVGepKcqPH4biu5ycjQS6W4Jw/fP8hn9fnAnARTH/+vfkj QGOd6mx0JRkKvb2CzQloPG8fawIDAQABo4IClTCCApEwHQYDVR0OBBYEFC2KnChz Pto8gBIGuSPulIiJW61cMB8GA1UdIwQYMBaAFLffyAJyC0PwNjUbC8cWPyLlNT1D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUVFNy8wNERDMzA0MjZG NzgxMUVCOTJGRTA3ODJDNEY5QUUwMi90OV9JQW5JTFFfQTJOUnNMeHhZX0l1VTFQ VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5X0lBbklMUV9BMk5Sc0x4eFlfSXVVMVBVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFFRTcvMDREQzMwNDI2Rjc4MTFFQjkyRkUwNzgyQzRGOUFFMDIvQkYyODlFQkM2 Rjc5MTFFQkE1RDM5Qzg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnj8wwDQYJKoZIhvcNAQELBQADggEBAKSCyW4gUTWmSIYo cCvWcYUV/Hw2V/ZN4I1DZYVCMy/jhHE8ScTYCre5wsQxO3vWSXOJkKZWDr0kIefj /9QsYGqkuAscLrERlI05Mnf04MuXcznImvHSCwla1OLHcUe+aBnI9rcbAC/ezKOK +qVFvDH0C3QW9OtsOBBjGtjJGQ5+8sQyCvdYH3HyLbLjhf9uap6BgY+s5APWimMu KGgZOtW6K1iUAMC/KMay2fT5EqZASf+oi3B5ppnmEp9ICsC6naVhFNCNujgDIp3Y hzsgBcAWPqBlyn7u3O3S2eC35/cr6MBhZmVq5gyxKjRGmna3vuJ6w0p1gzmjSlNV WhdmZdY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:04:45 2025 by rpki-client