$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/9A859F8A480611EDBC63AD52C4F9AE02.roa File: 9A859F8A480611EDBC63AD52C4F9AE02.roa (raw, json) Hash identifier: WXoVKsbEpghMIIdNaEQbkL+bcA9WkVBDLvgK1gCCHVE= Subject key identifier: 4C:E3:8F:B7:B5:20:B1:2B:86:44:C0:4E:D4:75:86:48:DE:E0:C8:77 Certificate issuer: /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB Certificate serial: 0250 Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/9A859F8A480611EDBC63AD52C4F9AE02.roa Signing time: Thu 23 Oct 2025 03:16:08 +0000 ROA not before: Thu 23 Oct 2025 03:16:08 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 135330 IP address blocks: 103.15.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B202, serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB Validity Not Before: Oct 23 03:16:08 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f99df7-b2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:18:e6:75:dd:6c:30:35:83:61:94:98:5d: 06:3f:a6:aa:0e:af:20:2d:2c:a3:4f:27:92:95:b2: c1:f2:92:a7:b2:cf:79:04:c8:5b:35:81:b3:e3:44: 21:8f:23:a2:b5:36:23:95:fc:e5:39:be:56:69:39: ab:75:ab:3c:b7:8e:99:e7:a9:3a:51:5d:55:94:1b: 79:1a:df:c6:10:7e:46:48:b9:b6:5d:e1:2f:ae:fe: cb:88:eb:c9:63:16:c6:e7:17:71:b9:4a:29:69:d5: 4e:33:b5:03:93:4d:c3:76:44:73:cf:e8:a7:a4:cf: 9c:be:28:98:8f:47:d7:74:a5:8a:47:e1:92:14:b2: 2f:3f:3d:ec:2a:7d:3a:80:0e:9b:8e:6f:53:3d:fd: 83:cb:09:a9:b3:68:01:60:54:3e:c6:46:7a:a1:e3: d7:08:e2:54:7c:37:9d:7a:2e:6a:e6:e3:e4:fe:cd: 26:a7:64:ab:2d:ca:3c:15:05:01:ba:57:6e:56:87: 85:96:51:cd:a9:c4:62:e0:c8:3c:04:67:e1:93:14: b1:28:81:b7:50:6b:c4:0a:15:d1:10:9e:b6:6d:6e: 22:61:dd:25:aa:e0:c3:4e:59:24:71:a7:e0:dd:d6: 98:59:e4:87:5e:f7:a3:38:c5:a4:fa:93:53:c3:7a: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E3:8F:B7:B5:20:B1:2B:86:44:C0:4E:D4:75:86:48:DE:E0:C8:77 X509v3 Authority Key Identifier: keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/9A859F8A480611EDBC63AD52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.220.0/24 Signature Algorithm: sha256WithRSAEncryption ad:c3:fd:fb:70:25:55:d0:39:8b:25:37:9c:bb:f1:8a:69:1e: 87:67:b6:3b:04:ca:ab:0f:9e:99:e6:bc:1d:bf:3b:65:1b:d1: 9d:77:01:41:d0:22:7b:61:c8:9a:b8:60:bb:11:aa:a4:e6:37: 49:48:c9:b8:d9:5b:3d:ff:ab:a3:fb:1e:b2:36:66:3e:86:d7: 25:88:1c:35:d1:bd:0f:f7:f3:6e:b9:98:89:99:a1:77:6e:53: 9b:7d:33:fc:ce:cf:c6:79:30:86:7b:bf:94:60:64:09:cd:04: 79:15:a5:93:3f:2d:93:7d:2f:61:43:15:42:59:1a:6d:5d:fd: 70:d0:32:68:b6:c9:3c:40:b1:86:24:ea:9f:7c:34:7b:63:28: 1c:5f:de:fa:c0:ac:bd:a7:8a:7a:d1:20:e7:40:8a:88:78:52: e8:3f:e8:4f:cc:ba:37:16:b5:35:76:56:4f:86:5c:3b:78:e2: 24:9b:58:c9:8a:0c:14:25:4a:86:e4:8c:23:ea:af:73:ff:28: 7a:68:cd:e1:d9:23:5b:86:34:3d:12:55:a3:3b:f5:d6:dc:05: f1:e3:fc:2d:8e:05:ba:af:db:99:62:3c:78:e0:4d:62:64:fd: f1:90:84:5e:e3:0f:ae:7b:7f:e1:c6:d0:aa:7f:44:3b:34:e1: 5a:2c:20:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyMDIxMTAvBgNVBAUTKDhDQkU5REQ1OTkzNEM5QUQyMDVGQ0U2QUY4RUY0REI4 MDFGMUQzRUIwHhcNMjUxMDIzMDMxNjA4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5OWRmNy1iMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNsY5nXdbDA1g2GUmF0GP6aqDq8gLSyjTyeSlbLB8pKnss95BMhbNYGz40Qh jyOitTYjlfzlOb5WaTmrdas8t46Z56k6UV1VlBt5Gt/GEH5GSLm2XeEvrv7LiOvJ YxbG5xdxuUopadVOM7UDk03DdkRzz+inpM+cviiYj0fXdKWKR+GSFLIvPz3sKn06 gA6bjm9TPf2Dywmps2gBYFQ+xkZ6oePXCOJUfDedei5q5uPk/s0mp2SrLco8FQUB ulduVoeFllHNqcRi4Mg8BGfhkxSxKIG3UGvEChXREJ62bW4iYd0lquDDTlkkcafg 3daYWeSHXvejOMWk+pNTw3qsvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEzjj7e1 ILErhkTATtR1hkje4Mh3MB8GA1UdIwQYMBaAFIy+ndWZNMmtIF/OavjvTbgB8dPr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjIwMi80RDQxQ0Y5MjQw OUUxMUVEQjM1MkVFNUVDNEY5QUUwMi9qTDZkMVprMHlhMGdYODVxLU85TnVBSHgw LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMNmQxWmsweWEwZ1g4NXEtTzlOdUFIeDAtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUIyMDIvNEQ0MUNGOTI0MDlFMTFFREIzNTJFRTVFQzRGOUFFMDIvOUE4NTlGOEE0 ODA2MTFFREJDNjNBRDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnD9wwDQYJKoZIhvcNAQELBQADggEBAK3D/ftwJVXQOYsl N5y78YppHodntjsEyqsPnpnmvB2/O2Ub0Z13AUHQInthyJq4YLsRqqTmN0lIybjZ Wz3/q6P7HrI2Zj6G1yWIHDXRvQ/38265mImZoXduU5t9M/zOz8Z5MIZ7v5RgZAnN BHkVpZM/LZN9L2FDFUJZGm1d/XDQMmi2yTxAsYYk6p98NHtjKBxf3vrArL2ninrR IOdAioh4Uug/6E/MujcWtTV2Vk+GXDt44iSbWMmKDBQlSobkjCPqr3P/KHpozeHZ I1uGND0SVaM79dbcBfHj/C2OBbqv25liPHjgTWJk/fGQhF7jD657f+HG0Kp/RDs0 4VosIHA= -----END CERTIFICATE-----Generated at Wed Nov 5 17:03:28 2025 by rpki-client