$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/DB87E692ADB211E99AAEE879C4F9AE02.roa File: DB87E692ADB211E99AAEE879C4F9AE02.roa (raw, json) Hash identifier: 2kXWl4Cs1R/aPiAdtvMJLAsl+3ClYTwwDDVh+n0Dv2Y= Subject key identifier: D1:47:82:7D:31:0E:1B:0C:1E:8B:0E:25:A2:A6:6D:08:84:97:D8:63 Certificate issuer: /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B Certificate serial: 0E36 Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/DB87E692ADB211E99AAEE879C4F9AE02.roa Signing time: Sat 02 Aug 2025 18:27:34 +0000 ROA not before: Sat 02 Aug 2025 18:27:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139339 IP address blocks: 103.141.120.0/23 maxlen: 23 103.141.120.0/24 maxlen: 24 103.141.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3638 (0xe36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B Validity Not Before: Aug 2 18:27:34 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=688e5896-7545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:33:e0:14:d7:f5:c6:bc:06:b1:67:d4:3d:9c: dc:7a:1f:78:4d:eb:05:36:3c:49:65:c3:c0:af:03: 72:7f:3d:93:47:c4:2f:f5:6f:5b:df:7b:83:45:17: 94:7a:71:dc:b0:41:1f:3d:35:3c:bc:b8:d1:92:9d: 47:18:95:7b:c7:e4:f3:5b:f4:02:97:0d:0d:de:49: 08:90:e0:ab:19:73:a2:c5:fb:64:09:73:12:3b:24: 33:b4:4d:50:b9:96:bb:7f:15:43:28:e6:83:2d:00: 4a:7b:9c:43:75:6c:17:ba:9f:9b:f6:ba:05:a2:05: 8b:b7:90:69:43:e8:e8:cb:a5:e5:5a:d9:55:8e:8f: 44:5a:5b:3a:89:6a:4c:63:ae:60:e2:1e:60:2b:34: aa:4d:c3:f6:65:b9:a0:3b:c1:e0:8b:c6:8c:9c:3f: 84:fd:a1:22:c7:ae:07:6d:ea:3b:45:b0:c5:75:c5: 13:5e:36:96:1d:3e:75:2c:0c:7f:8a:d0:bc:18:87: 8c:1d:75:52:f2:3e:d8:ab:a3:69:e2:2a:34:62:df: ff:38:a7:31:ae:6d:65:18:b6:be:43:1a:cd:e9:ef: 04:c3:5b:a8:3c:2e:f1:cf:6e:89:d4:90:44:ef:2f: d0:65:37:a2:aa:5b:6d:c0:93:6f:b2:7a:6f:20:7c: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:47:82:7D:31:0E:1B:0C:1E:8B:0E:25:A2:A6:6D:08:84:97:D8:63 X509v3 Authority Key Identifier: keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/DB87E692ADB211E99AAEE879C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.120.0/23 Signature Algorithm: sha256WithRSAEncryption 68:a4:d4:6e:3c:3b:a3:1e:ec:b6:6a:9d:4c:8e:ba:29:ce:14: 81:58:92:20:e7:ad:c3:ae:20:ad:a6:80:b2:8c:9f:6f:ef:33: 70:13:89:1d:e4:0c:2b:45:73:86:1e:20:98:47:64:21:75:11: e3:5f:ee:77:ca:66:b8:b8:f0:22:5e:09:e6:d0:43:6b:a9:f7: 30:c4:ad:bb:fc:46:21:00:85:e7:19:75:d7:62:2c:8d:5b:38: 58:4a:f6:a0:80:f3:61:d6:d6:98:a3:60:f6:62:eb:64:c4:af: cc:92:ea:91:8c:8a:f8:93:49:1b:52:4a:71:df:6b:6b:29:b5: aa:41:57:a5:ea:f3:e2:ae:94:d8:51:a6:df:9d:be:2b:d8:b5: 84:0c:64:b5:53:80:c7:d6:74:9c:30:eb:31:31:fc:63:0e:34: cd:4e:c4:6a:07:ff:49:b0:39:e7:f0:67:d8:af:4d:f7:7d:9c: 74:ad:14:fd:4e:a9:1b:eb:b9:1c:e3:93:ce:59:3e:f9:ab:12: af:c6:4d:e5:80:30:20:4c:7b:87:af:37:f7:41:06:8c:b7:06: 69:cd:d2:a1:7e:a1:bb:35:71:80:a2:28:04:95:27:47:e9:26: 45:5f:5d:c9:5f:25:2b:71:be:9d:b2:a1:dc:f2:d6:a0:cf:61: 35:99:3d:68 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMxNTMxMTAvBgNVBAUTKDQ4QzI3RkZGQjY0MjQ3MTJGQzZGQzYyODcxRDUzNkM1 MzFGRUYxOUIwHhcNMjUwODAyMTgyNzM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlNTg5Ni03NTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zPgFNf1xrwGsWfUPZzceh94TesFNjxJZcPArwNyfz2TR8Qv9W9b33uDRReU enHcsEEfPTU8vLjRkp1HGJV7x+TzW/QClw0N3kkIkOCrGXOixftkCXMSOyQztE1Q uZa7fxVDKOaDLQBKe5xDdWwXup+b9roFogWLt5BpQ+joy6XlWtlVjo9EWls6iWpM Y65g4h5gKzSqTcP2ZbmgO8Hgi8aMnD+E/aEix64Hbeo7RbDFdcUTXjaWHT51LAx/ itC8GIeMHXVS8j7Yq6Np4io0Yt//OKcxrm1lGLa+QxrN6e8Ew1uoPC7xz26J1JBE 7y/QZTeiqlttwJNvsnpvIHwKowIDAQABo4IClTCCApEwHQYDVR0OBBYEFNFHgn0x DhsMHosOJaKmbQiEl9hjMB8GA1UdIwQYMBaAFEjCf/+2QkcS/G/GKHHVNsUx/vGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzE1My84NjA3Nzk4MEFE QjIxMUU5OERBRUM0NzlDNEY5QUUwMi9TTUpfXzdaQ1J4TDhiOFlvY2RVMnhUSC04 WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NNSl9fN1pDUnhMOGI4WW9jZFUyeFRILThacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTMxNTMvODYwNzc5ODBBREIyMTFFOThEQUVDNDc5QzRGOUFFMDIvREI4N0U2OTJB REIyMTFFOTlBQUVFODc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjXgwDQYJKoZIhvcNAQELBQADggEBAGik1G48O6Me7LZq nUyOuinOFIFYkiDnrcOuIK2mgLKMn2/vM3ATiR3kDCtFc4YeIJhHZCF1EeNf7nfK Zri48CJeCebQQ2up9zDErbv8RiEAhecZdddiLI1bOFhK9qCA82HW1pijYPZi62TE r8yS6pGMiviTSRtSSnHfa2sptapBV6Xq8+KulNhRpt+dvivYtYQMZLVTgMfWdJww 6zEx/GMONM1OxGoH/0mwOefwZ9ivTfd9nHStFP1OqRvruRzjk85ZPvmrEq/GTeWA MCBMe4evN/dBBoy3BmnN0qF+obs1cYCiKASVJ0fpJkVfXclfJStxvp2yodzy1qDP YTWZPWg= -----END CERTIFICATE-----Generated at Wed Nov 5 20:58:22 2025 by rpki-client