$ rpki-client -vvf rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/7142AA1A062E11EDA95B3143C4F9AE02.roa File: 7142AA1A062E11EDA95B3143C4F9AE02.roa (raw, json) Hash identifier: sAHMyFBwbehSytK0bjkDhBpvCN1HCAvo6oyZeTkv4Hs= Subject key identifier: 73:EE:A8:F8:9F:9A:0E:E4:89:C3:A5:FF:F9:0B:FC:E0:1A:0D:FA:A9 Certificate issuer: /CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D Certificate serial: 0310 Authority key identifier: 25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/7142AA1A062E11EDA95B3143C4F9AE02.roa Signing time: Fri 07 Mar 2025 01:17:01 +0000 ROA not before: Fri 07 Mar 2025 01:17:01 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 132309 IP address blocks: 103.9.240.0/22 maxlen: 22 103.9.240.0/24 maxlen: 24 103.9.241.0/24 maxlen: 24 103.9.242.0/24 maxlen: 24 103.9.243.0/24 maxlen: 24 123.253.40.0/24 maxlen: 24 123.253.42.0/24 maxlen: 24 123.253.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 784 (0x310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137AD6, serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D Validity Not Before: Mar 7 01:17:01 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ca490d-77d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:60:f7:d7:e2:85:08:dc:90:c4:cc:36:40: 8e:80:e6:c1:86:c1:b1:55:ac:4d:17:9e:01:d4:47: f6:47:54:6d:b2:68:39:de:97:58:a1:4e:c7:ab:dc: e7:8f:af:9e:8c:d4:f5:25:bb:d8:19:cb:73:0f:76: 62:91:c5:83:81:0a:76:24:c4:73:d7:16:73:79:fb: cb:1d:42:1b:07:73:3c:a1:bb:59:cd:37:db:64:a1: ec:3d:20:ee:87:b2:de:1d:b1:5c:d3:c7:73:21:17: df:83:59:78:33:76:90:61:60:26:13:26:0b:7c:ef: eb:91:81:5a:f5:aa:70:54:82:9e:7f:77:27:3b:f9: 26:03:5f:15:fb:bc:e5:03:39:3d:12:81:b3:79:dc: 93:bf:82:b6:2a:7b:69:9e:7a:05:b1:2d:64:72:39: 62:ec:72:77:22:19:57:fb:99:5f:52:79:78:9e:7f: ef:ad:84:68:68:34:79:dd:c1:7d:df:a8:8d:60:e9: 5b:8e:c7:ba:69:10:cc:78:68:a8:71:00:9f:32:20: 1d:e0:72:50:df:70:6b:4d:71:b9:10:8c:63:34:ab: 03:62:d0:b4:8c:cb:a3:60:6b:85:b4:d3:c9:4d:15: ed:83:28:76:47:98:dc:f6:d6:72:56:35:4e:fa:ea: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EE:A8:F8:9F:9A:0E:E4:89:C3:A5:FF:F9:0B:FC:E0:1A:0D:FA:A9 X509v3 Authority Key Identifier: keyid:25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/7142AA1A062E11EDA95B3143C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.9.240.0/22 123.253.40.0/24 123.253.42.0/23 Signature Algorithm: sha256WithRSAEncryption 53:fa:b1:57:e0:94:17:18:42:0e:70:fb:79:a3:4e:3c:a1:0d: a8:d1:6a:17:bd:e3:0b:1d:b0:35:29:e4:43:34:8d:d0:f0:23: 1d:cb:90:4b:74:cf:56:69:05:cb:23:f9:dc:e9:8e:cc:56:c1: 53:e9:3b:ca:73:15:11:d2:d5:73:63:db:5d:6e:94:3d:bb:25: 2f:64:1f:a7:fd:be:e0:d8:cb:e3:4c:83:c6:0d:e2:80:13:d9: ba:20:88:6f:35:ac:b2:5c:08:b4:e7:69:02:53:6e:c3:81:92: 3e:f6:7e:e3:62:d1:9b:92:17:4f:cf:3e:6e:f9:c3:50:0b:be: 16:d8:a9:44:18:0b:9d:1d:2b:3d:03:c0:4d:55:2e:13:16:67: 4e:96:e4:eb:64:0d:df:9a:51:32:23:5b:0a:ca:12:53:b8:f7: 6d:c5:71:cd:82:f5:37:4c:2b:24:4b:b5:2d:d6:3e:8e:13:5a: ed:10:b3:70:ad:d0:ab:b8:b2:4a:e2:22:04:25:9d:6f:88:98: fe:32:91:7b:37:8c:70:46:1b:b5:34:3d:6b:32:e8:b6:92:6a: 60:5f:da:79:da:e8:1c:8e:26:fe:4c:0c:e1:c7:85:78:0c:02: 7e:21:0b:e6:92:56:d7:93:d7:2b:21:b2:35:dc:16:80:09:3d: 2e:8c:bf:49 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBRDYxMTAvBgNVBAUTKDI1NzhDQkNBRkNBMjZCMTcyMDU3RTM3QUI3N0E2MUM4 MTAzMjIyMkQwHhcNMjUwMzA3MDExNzAxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhNDkwZC03N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTNg99fihQjckMTMNkCOgObBhsGxVaxNF54B1Ef2R1Rtsmg53pdYoU7Hq9zn j6+ejNT1JbvYGctzD3ZikcWDgQp2JMRz1xZzefvLHUIbB3M8obtZzTfbZKHsPSDu h7LeHbFc08dzIRffg1l4M3aQYWAmEyYLfO/rkYFa9apwVIKef3cnO/kmA18V+7zl Azk9EoGzedyTv4K2KntpnnoFsS1kcjli7HJ3IhlX+5lfUnl4nn/vrYRoaDR53cF9 36iNYOlbjse6aRDMeGiocQCfMiAd4HJQ33BrTXG5EIxjNKsDYtC0jMujYGuFtNPJ TRXtgyh2R5jc9tZyVjVO+uo34QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHPuqPif mg7kicOl//kL/OAaDfqpMB8GA1UdIwQYMBaAFCV4y8r8omsXIFfjerd6YcgQMiIt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FENi9BMkNFNkJEOEM3 NzYxMUVDQjczQUQ1NjZDNEY5QUUwMi9KWGpMeXZ5aWF4Y2dWLU42dDNwaHlCQXlJ aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYakx5dnlpYXhjZ1YtTjZ0M3BoeUJBeUlpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBRDYvQTJDRTZCRDhDNzc2MTFFQ0I3M0FENTY2QzRGOUFFMDIvNzE0MkFBMUEw NjJFMTFFREE5NUIzMTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnCfADBAB7/SgDBAF7/SowDQYJKoZIhvcNAQELBQADggEB AFP6sVfglBcYQg5w+3mjTjyhDajRahe94wsdsDUp5EM0jdDwIx3LkEt0z1ZpBcsj +dzpjsxWwVPpO8pzFRHS1XNj211ulD27JS9kH6f9vuDYy+NMg8YN4oAT2bogiG81 rLJcCLTnaQJTbsOBkj72fuNi0ZuSF0/PPm75w1ALvhbYqUQYC50dKz0DwE1VLhMW Z06W5OtkDd+aUTIjWwrKElO4923Fcc2C9TdMKyRLtS3WPo4TWu0Qs3Ct0Ku4skri IgQlnW+ImP4ykXs3jHBGG7U0PWsy6LaSamBf2nna6ByOJv5MDOHHhXgMAn4hC+aS VteT1yshsjXcFoAJPS6Mv0k= -----END CERTIFICATE-----Generated at Thu Nov 6 05:53:47 2025 by rpki-client