$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa File: 0853C13CA2F011E9B721795CC4F9AE02.roa (raw, json) Hash identifier: F23CXCLEdHEHx/0prljjzO2nfGEWKXpGSMmp6uriDiQ= Subject key identifier: 68:8E:6B:F3:D3:78:59:0A:FF:06:1A:92:69:02:01:EF:30:C1:67:49 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0E6E Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa Signing time: Tue 02 Sep 2025 18:08:09 +0000 ROA not before: Tue 02 Sep 2025 18:08:09 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139301 IP address blocks: 103.141.6.0/24 maxlen: 24 103.141.7.0/24 maxlen: 24 2405:8c0::/48 maxlen: 48 2405:8c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3694 (0xe6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: Sep 2 18:08:09 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b73289-cdc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:21:71:e3:14:57:1e:58:3a:90:a6:91:38: 0b:69:bd:8b:a3:6e:6c:d1:a3:16:8b:33:f6:7e:8b: 2f:b4:30:de:84:e7:6d:d3:6e:e9:6e:a3:a8:e6:b8: 66:a2:4b:30:3f:95:f5:ee:21:d4:a0:ab:02:6e:82: 73:89:b0:c3:16:f5:5b:9a:5b:00:f8:70:8a:af:6c: 7f:21:84:06:a2:29:1b:82:d4:a8:d3:61:46:a9:ed: 4e:6d:a3:f7:20:6a:90:3a:5a:4d:3a:52:0b:4e:1d: d7:0a:d6:c5:ef:40:f0:d2:0d:84:43:9b:df:51:4d: 33:75:06:57:8e:9b:57:7c:b2:e4:b2:94:62:53:c0: 93:c6:1e:a1:e9:c7:39:5f:24:76:93:8a:3f:38:4d: ef:d2:49:3d:9b:f1:af:82:f3:06:e2:b3:d8:2a:3f: 01:08:16:19:25:1f:78:ab:61:d5:fb:42:d8:9c:95: 90:a9:a4:4b:d9:77:32:b2:ea:74:59:b7:57:cd:7a: 39:e1:f9:83:4e:70:e7:e7:4f:e3:35:70:58:30:e9: e5:dc:4a:02:4e:c9:b3:e6:81:db:9b:a0:09:5f:93: e2:d5:62:f7:00:cc:d9:aa:b9:b2:db:12:aa:49:15: 52:8e:cc:47:55:ac:11:1c:e8:02:1f:b6:eb:99:d4: 10:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8E:6B:F3:D3:78:59:0A:FF:06:1A:92:69:02:01:EF:30:C1:67:49 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.6.0/23 IPv6: 2405:8c0::/47 Signature Algorithm: sha256WithRSAEncryption 4b:b5:4e:8c:99:2f:b8:7b:99:d3:42:90:ed:6e:4e:b0:14:64: cb:5a:35:b7:7f:76:2c:d5:e6:30:78:10:a7:70:95:8a:9d:f2: 76:43:cd:e3:e4:33:69:25:2f:e4:b6:0c:27:b5:f1:33:ac:a5: b6:02:46:93:ab:cc:68:95:63:90:62:56:ae:8e:22:0e:27:5f: 60:c5:2c:26:2c:0e:8f:2e:f9:b0:71:8a:c8:2b:20:ee:ea:32: 9c:25:3f:a2:ca:bd:39:c7:b4:7e:72:22:7e:ad:c5:90:a6:fc: 06:c8:29:7b:de:7d:e3:19:03:8c:92:d8:2a:8d:a7:eb:bc:4d: 0f:1c:87:e7:21:eb:12:7b:fa:39:53:b8:00:f3:7f:1a:4d:6d: 49:db:4a:4a:5c:2f:e0:ec:4d:dd:17:50:f5:62:e8:e0:6e:41: 47:a1:e2:74:4f:fe:9c:a1:1b:29:76:ea:36:0b:83:48:f4:2c: 3a:ba:c0:f3:e5:b5:88:ec:2c:a4:0c:36:08:79:ad:50:a8:47: 80:e6:df:d2:6e:76:5b:88:66:8e:db:9f:22:c8:0b:ee:36:59: 2a:05:2f:24:eb:70:f6:70:4a:13:72:05:ad:2f:69:ca:1e:6e: c4:75:e3:84:1a:fa:71:04:1b:17:07:41:25:46:b9:5f:9d:70: 5a:20:25:07 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjUwOTAyMTgwODA5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MzI4OS1jZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAow4hceMUVx5YOpCmkTgLab2Lo25s0aMWizP2fosvtDDehOdt027pbqOo5rhm okswP5X17iHUoKsCboJzibDDFvVbmlsA+HCKr2x/IYQGoikbgtSo02FGqe1ObaP3 IGqQOlpNOlILTh3XCtbF70Dw0g2EQ5vfUU0zdQZXjptXfLLkspRiU8CTxh6h6cc5 XyR2k4o/OE3v0kk9m/GvgvMG4rPYKj8BCBYZJR94q2HV+0LYnJWQqaRL2Xcysup0 WbdXzXo54fmDTnDn50/jNXBYMOnl3EoCTsmz5oHbm6AJX5Pi1WL3AMzZqrmy2xKq SRVSjsxHVawRHOgCH7brmdQQDwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGiOa/PT eFkK/wYakmkCAe8wwWdJMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI4ODAvMUY1MTE4QTRBMkVGMTFFOTlENEUwQTVCQzRGOUFFMDIvMDg1M0MxM0NB MkYwMTFFOUI3MjE3OTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjQYwDwQCAAIwCQMHASQFCMAAADANBgkqhkiG9w0BAQsF AAOCAQEAS7VOjJkvuHuZ00KQ7W5OsBRky1o1t392LNXmMHgQp3CVip3ydkPN4+Qz aSUv5LYMJ7XxM6yltgJGk6vMaJVjkGJWro4iDidfYMUsJiwOjy75sHGKyCsg7uoy nCU/osq9Oce0fnIifq3FkKb8Bsgpe9594xkDjJLYKo2n67xNDxyH5yHrEnv6OVO4 APN/Gk1tSdtKSlwv4OxN3RdQ9WLo4G5BR6HidE/+nKEbKXbqNguDSPQsOrrA8+W1 iOwspAw2CHmtUKhHgObf0m52W4hmjtufIsgL7jZZKgUvJOtw9nBKE3IFrS9pyh5u xHXjhBr6cQQbFwdBJUa5X51wWiAlBw== -----END CERTIFICATE-----Generated at Tue Nov 4 16:37:10 2025 by rpki-client