$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/9BDA59F69C8C11F0A27C535EC4F9AE02.roa File: 9BDA59F69C8C11F0A27C535EC4F9AE02.roa (raw, json) Hash identifier: tcpEfQimbgGgCKxs43ap0j00HaFFUo0cjpbDGWWFteI= Subject key identifier: 38:61:7A:C3:A3:66:92:7A:EC:89:68:56:17:BD:8C:68:E3:93:38:9B Certificate issuer: /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B Certificate serial: 0263 Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/9BDA59F69C8C11F0A27C535EC4F9AE02.roa Signing time: Tue 07 Oct 2025 02:29:28 +0000 ROA not before: Tue 07 Oct 2025 02:29:28 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150316 IP address blocks: 103.5.216.0/23 maxlen: 23 103.5.216.0/24 maxlen: 24 103.5.217.0/24 maxlen: 24 2001:df6:2940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD27, serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B Validity Not Before: Oct 7 02:29:28 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e47b07-51b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:60:b3:54:e6:cf:a0:a9:60:9a:2f:6d:74:57: 23:1b:ee:91:e4:be:26:ce:a2:31:b1:d9:34:31:b8: 5b:44:7b:f0:85:1c:0c:3f:a2:4c:14:20:9e:4c:b0: 03:3d:7e:d2:5c:15:d6:30:f8:28:e4:92:27:f9:2b: 29:f1:2c:5d:ea:e2:67:de:ae:a3:c7:b5:07:00:c2: 08:71:b0:a2:1d:ed:d8:5d:95:e2:f2:7f:d1:64:41: 64:64:b1:11:78:38:39:43:c4:6d:cb:4d:bc:cb:c3: 3b:d4:f0:90:e9:f6:c7:50:04:9f:89:d3:1c:1a:ec: e1:be:af:a4:95:04:c6:6f:1e:92:29:3b:73:b3:9e: 69:71:6a:7c:7e:ad:06:12:20:b1:97:cb:b1:3a:5c: 08:a7:0a:bd:7b:20:6e:b1:a9:38:8a:b0:ac:ee:d5: 85:4a:c5:d7:47:af:01:6a:6c:8c:3e:5b:c6:31:d0: 4f:dc:3d:1a:d7:c6:e3:f8:09:98:34:83:32:fa:3b: 3d:12:02:ce:97:51:f3:5c:58:39:87:ea:8b:ce:56: 74:e1:92:de:ce:75:e2:e3:47:00:07:3b:d4:8c:10: 0e:e0:a4:8b:f2:8b:ea:a3:13:fd:d7:20:75:ea:e9: 67:1d:c7:e0:49:f4:b4:1e:4e:ec:6a:38:77:fd:14: d4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:61:7A:C3:A3:66:92:7A:EC:89:68:56:17:BD:8C:68:E3:93:38:9B X509v3 Authority Key Identifier: keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/9BDA59F69C8C11F0A27C535EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.216.0/23 IPv6: 2001:df6:2940::/48 Signature Algorithm: sha256WithRSAEncryption 20:84:8d:7a:d8:fe:b2:e4:dd:d2:c2:40:e1:e2:40:05:8c:a4: b3:80:e4:97:e6:45:e0:8a:7e:25:17:8b:ad:ca:44:c3:bf:24: 81:57:8c:a4:ef:f9:09:36:e6:7e:c0:45:9d:e4:c3:fb:a3:b3: f3:21:b6:ed:11:98:b7:94:8a:99:8e:d8:b9:c4:2d:f8:13:28: 42:a5:45:84:49:e4:a4:91:f1:1b:ca:e9:82:0e:3a:ad:e1:4d: c7:d0:24:dd:be:8d:12:ce:84:c0:24:30:38:d9:33:5e:ae:f4: b6:1d:b7:ff:87:ad:5d:47:34:ac:8d:75:fa:46:79:b5:93:30: b1:1e:b4:e0:1d:e2:a1:5f:f6:e0:4d:cb:12:9e:44:b9:cc:39: a4:3e:5d:53:83:86:80:c9:99:1f:df:df:2c:fc:d7:a8:74:53: e8:e3:03:58:19:23:79:76:6e:c9:73:3a:35:bd:4b:e8:52:c0: 9b:c4:a6:31:68:a1:59:94:a1:17:1f:b4:f2:7f:a8:70:d5:18: af:ba:71:7c:74:d2:0d:a1:4b:b9:6d:e4:86:db:a4:49:b7:0d: ce:58:60:6c:05:ce:99:f3:d9:3d:6a:7c:cd:66:59:fe:33:43: 31:89:ce:ef:07:cd:f0:be:5e:af:e2:f2:33:f1:b6:75:27:70: 04:42:05:d2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEMjcxMTAvBgNVBAUTKEQ0NTJDNjdFRjY4NzQ0MzhBRkE5OTNBODRBRDBBQkMx ODUxNjkyMUIwHhcNMjUxMDA3MDIyOTI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU0N2IwNy01MWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmCzVObPoKlgmi9tdFcjG+6R5L4mzqIxsdk0MbhbRHvwhRwMP6JMFCCeTLAD PX7SXBXWMPgo5JIn+Ssp8Sxd6uJn3q6jx7UHAMIIcbCiHe3YXZXi8n/RZEFkZLER eDg5Q8Rty028y8M71PCQ6fbHUASfidMcGuzhvq+klQTGbx6SKTtzs55pcWp8fq0G EiCxl8uxOlwIpwq9eyBusak4irCs7tWFSsXXR68BamyMPlvGMdBP3D0a18bj+AmY NIMy+js9EgLOl1HzXFg5h+qLzlZ04ZLeznXi40cABzvUjBAO4KSL8ovqoxP91yB1 6ulnHcfgSfS0Hk7sajh3/RTU/wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDhhesOj ZpJ67IloVhe9jGjjkzibMB8GA1UdIwQYMBaAFNRSxn72h0Q4r6mTqErQq8GFFpIb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQyNy9BODBEQjM4MjM1 RUYxMUVEODIzOUFGMkJDNEY5QUUwMi8xRkxHZnZhSFJEaXZxWk9vU3RDcndZVVdr aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGTEdmdmFIUkRpdnFaT29TdENyd1lVV2tocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZEMjcvQTgwREIzODIzNUVGMTFFRDgyMzlBRjJCQzRGOUFFMDIvOUJEQTU5RjY5 QzhDMTFGMEEyN0M1MzVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnBdgwDwQCAAIwCQMHACABDfYpQDANBgkqhkiG9w0BAQsF AAOCAQEAIISNetj+suTd0sJA4eJABYyks4Dkl+ZF4Ip+JReLrcpEw78kgVeMpO/5 CTbmfsBFneTD+6Oz8yG27RGYt5SKmY7YucQt+BMoQqVFhEnkpJHxG8rpgg46reFN x9Ak3b6NEs6EwCQwONkzXq70th23/4etXUc0rI11+kZ5tZMwsR604B3ioV/24E3L Ep5Eucw5pD5dU4OGgMmZH9/fLPzXqHRT6OMDWBkjeXZuyXM6Nb1L6FLAm8SmMWih WZShFx+08n+ocNUYr7pxfHTSDaFLuW3khtukSbcNzlhgbAXOmfPZPWp8zWZZ/jND MYnO7wfN8L5er+LyM/G2dSdwBEIF0g== -----END CERTIFICATE-----Generated at Wed Nov 5 10:12:02 2025 by rpki-client