$ rpki-client -vvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/613CF60638D211EF88A7B370C4F9AE02.roa File: 613CF60638D211EF88A7B370C4F9AE02.roa (raw, json) Hash identifier: 1/vF949GbK+OG3Z/P4BA3CvZ9C9A8c3eyhSNg3p4hZ0= Subject key identifier: 15:25:C8:F9:AC:94:B4:7D:64:14:4A:78:79:2F:35:A6:E9:AB:45:C4 Certificate issuer: /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1 Certificate serial: 068D Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/613CF60638D211EF88A7B370C4F9AE02.roa Signing time: Tue 04 Nov 2025 22:42:32 +0000 ROA not before: Tue 04 Nov 2025 22:42:32 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150127 IP address blocks: 203.10.6.0/24 maxlen: 24 203.10.7.0/24 maxlen: 24 203.10.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1 Validity Not Before: Nov 4 22:42:32 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690a8158-342d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:8c:71:09:60:2a:c1:9a:5f:8b:a3:47:70:2a: 6c:df:2f:8b:41:98:1b:f3:21:b7:69:a6:ef:89:79: 4c:c6:36:87:b2:e4:d4:c6:69:86:74:c6:f7:33:e6: 75:59:74:ec:58:5b:e3:8f:a6:b4:3f:78:c7:d5:1e: 12:a5:1e:b0:7a:2f:56:bb:a0:2b:63:54:3b:da:a9: 4c:45:9b:22:a0:0f:20:b3:68:10:b1:4a:4c:19:a2: 42:2f:31:1f:93:13:ec:84:f2:75:84:5b:82:93:5b: ab:d5:90:8c:27:7f:f4:18:99:91:78:c6:36:04:7f: fd:49:9f:bf:58:a4:9f:27:4e:6b:3d:c9:a0:99:93: 8a:de:37:e1:8a:12:5c:02:75:27:6c:86:e2:b0:44: a2:80:a3:c2:58:0d:df:ce:74:62:14:15:61:7d:62: 07:9c:9c:b1:87:50:b6:61:15:4f:b2:67:26:08:d7: b8:15:3c:b2:e3:c6:55:94:d8:80:1e:f9:75:3e:77: 87:45:8c:15:43:ab:6d:8f:fa:61:e9:26:ab:6d:b9: 00:d9:aa:dc:35:a8:30:96:33:a7:32:3a:c2:30:7d: 8d:1a:f1:3d:65:b2:63:15:37:ab:3e:02:47:ce:05: 63:ea:27:e5:c6:2c:0d:47:e8:19:14:ea:53:b6:f1: 55:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:25:C8:F9:AC:94:B4:7D:64:14:4A:78:79:2F:35:A6:E9:AB:45:C4 X509v3 Authority Key Identifier: keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/613CF60638D211EF88A7B370C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.10.6.0-203.10.8.255 Signature Algorithm: sha256WithRSAEncryption 8b:08:1d:c6:30:69:d7:60:3d:58:34:fa:f6:e0:d4:f1:00:a3: 2b:b0:cb:3f:78:26:b0:45:4a:4a:66:1e:22:a4:04:5a:61:9e: f1:9b:86:1e:50:65:cb:14:1f:88:e0:ba:5d:b8:1e:cb:59:4c: ea:e8:a6:86:a5:be:38:ef:ef:d2:06:01:96:96:c4:df:4c:ce: 5e:59:02:04:ce:70:f9:f8:cd:f4:22:8d:36:61:5a:94:e1:07: 14:5c:14:be:c6:b1:41:23:78:8d:59:20:19:8b:40:82:f4:10: 56:c9:58:ea:59:ce:40:4d:96:85:d8:ba:09:a7:66:76:80:5d: f8:9b:5d:50:86:a6:14:ec:4d:5e:ca:e3:3a:f7:ac:e3:e6:92: 66:c0:9a:74:07:18:95:12:44:fa:30:70:99:5a:44:d5:07:01: 94:6b:22:56:3e:9d:1b:56:25:e2:b3:62:09:d7:20:6c:da:fb: 16:d0:f0:25:15:aa:c0:fb:d1:b4:9a:ba:65:34:a8:6c:87:dd: 36:35:50:9d:95:23:dc:ef:53:87:fe:87:e8:22:af:1c:77:29: a8:1a:c1:88:ce:2c:08:f1:30:2a:a0:0a:18:2f:1e:4f:17:bd: 98:3b:b2:df:9a:0e:37:42:9d:ee:f3:f6:6a:0a:c7:82:af:64: 7a:54:09:20 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCRkIxMTAvBgNVBAUTKEY2RTcxMkZDNUM2OUU3MkY2OTM5NkU1RTExNDJDQzdG NzhDNjhGRDEwHhcNMjUxMTA0MjI0MjMyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhODE1OC0zNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+oxxCWAqwZpfi6NHcCps3y+LQZgb8yG3aabviXlMxjaHsuTUxmmGdMb3M+Z1 WXTsWFvjj6a0P3jH1R4SpR6wei9Wu6ArY1Q72qlMRZsioA8gs2gQsUpMGaJCLzEf kxPshPJ1hFuCk1ur1ZCMJ3/0GJmReMY2BH/9SZ+/WKSfJ05rPcmgmZOK3jfhihJc AnUnbIbisESigKPCWA3fznRiFBVhfWIHnJyxh1C2YRVPsmcmCNe4FTyy48ZVlNiA Hvl1PneHRYwVQ6ttj/ph6SarbbkA2arcNagwljOnMjrCMH2NGvE9ZbJjFTerPgJH zgVj6iflxiwNR+gZFOpTtvFVZQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFBUlyPms lLR9ZBRKeHkvNabpq0XEMB8GA1UdIwQYMBaAFPbnEvxcaecvaTluXhFCzH94xo/R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUJGQi9ERTJERTY0Njk4 MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5OXBPVzVlRVVMTWYzakdq OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl1Y1NfRnhwNXk5cE9XNWVFVUxNZjNqR2o5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlCRkIvREUyREU2NDY5ODAwMTFFQjgwNzFERDY4QzRGOUFFMDIvNjEzQ0Y2MDYz OEQyMTFFRjg4QTdCMzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAcsKBgMEAMsKCDANBgkqhkiG9w0BAQsFAAOCAQEAiwgd xjBp12A9WDT69uDU8QCjK7DLP3gmsEVKSmYeIqQEWmGe8ZuGHlBlyxQfiOC6Xbge y1lM6uimhqW+OO/v0gYBlpbE30zOXlkCBM5w+fjN9CKNNmFalOEHFFwUvsaxQSN4 jVkgGYtAgvQQVslY6lnOQE2Whdi6CadmdoBd+JtdUIamFOxNXsrjOves4+aSZsCa dAcYlRJE+jBwmVpE1QcBlGsiVj6dG1Yl4rNiCdcgbNr7FtDwJRWqwPvRtJq6ZTSo bIfdNjVQnZUj3O9Th/6H6CKvHHcpqBrBiM4sCPEwKqAKGC8eTxe9mDuy35oON0Kd 7vP2agrHgq9kelQJIA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:58 2025 by rpki-client