$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/44E9156C730811EC89C1CE31C4F9AE02.roa File: 44E9156C730811EC89C1CE31C4F9AE02.roa (raw, json) Hash identifier: +RlQrZP27VhwQZfpQ7NB0SSwiNNy2ueJpVSFdx75riA= Subject key identifier: 89:44:AE:20:15:11:B3:3F:A1:E3:FE:0C:7B:69:35:E5:E2:60:8B:72 Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Certificate serial: 06F2 Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/44E9156C730811EC89C1CE31C4F9AE02.roa Signing time: Fri 31 Oct 2025 22:13:15 +0000 ROA not before: Fri 31 Oct 2025 22:13:15 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 134353 IP address blocks: 103.129.44.0/22 maxlen: 22 103.129.44.0/24 maxlen: 24 103.129.45.0/24 maxlen: 24 103.129.46.0/24 maxlen: 24 103.129.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2 Validity Not Before: Oct 31 22:13:15 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=6905347b-32c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8d:17:50:d9:df:a8:54:85:be:a4:7f:76:8a: 7f:3d:4f:8b:52:d6:00:cc:56:dd:85:2a:c2:40:cb: 13:6f:0a:49:72:39:61:cf:55:9b:bb:c3:22:d1:90: be:17:d1:be:6c:29:ad:fc:68:58:ad:9e:d2:46:94: cd:3e:ed:c5:4b:ed:4e:5a:57:98:4f:79:32:69:4c: 57:8e:d1:19:0f:f8:51:35:42:f7:19:17:f0:e5:f4: 6e:00:9e:6b:c8:c7:53:d8:91:7e:1c:a5:75:cc:ec: de:12:80:fb:26:46:a2:1d:ef:5c:ab:fe:42:bc:fb: d1:1b:b9:d2:60:01:c9:50:aa:4c:93:85:39:96:6c: 6b:4a:8a:32:3e:29:c9:76:44:6f:ab:b7:84:5f:8b: d1:c6:e3:3c:76:76:b0:27:eb:7b:1e:18:a9:2a:53: fa:34:a4:2e:4d:25:0a:7b:df:34:16:c6:5b:40:3d: dd:1b:75:95:ea:b0:5b:66:15:e7:b1:80:64:9f:ae: 3c:27:9c:49:0b:9d:ac:c0:54:e8:ee:96:66:94:03: 43:1a:c8:0b:58:ca:c9:92:2a:4b:f3:ce:2e:bb:46: bc:02:db:ec:ff:55:e1:0f:92:67:9c:ed:2c:ef:de: 69:4e:4c:76:e1:ad:bf:26:b2:3b:d8:a1:ee:d7:26: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:44:AE:20:15:11:B3:3F:A1:E3:FE:0C:7B:69:35:E5:E2:60:8B:72 X509v3 Authority Key Identifier: keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/44E9156C730811EC89C1CE31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.129.44.0/22 Signature Algorithm: sha256WithRSAEncryption 30:23:ed:5e:32:c3:bb:6c:49:ab:0d:4a:88:d6:23:b4:86:b0: 54:83:37:40:10:4e:73:ec:69:ee:8e:32:7e:3c:da:18:ef:15: 99:f8:2f:0a:cb:43:dc:43:39:45:be:5d:0c:45:d6:cb:38:8e: 30:cf:90:ec:87:eb:0b:57:3d:b7:4a:1c:09:7e:c0:76:b6:e3: e5:4b:1c:f1:3a:bb:84:9c:27:4a:ee:d2:27:16:03:fd:4f:95: f7:77:b5:c3:cd:82:eb:8f:63:c3:fb:37:89:ae:48:05:e6:dc: 88:8d:aa:39:1f:0d:e8:9c:74:f2:8a:50:90:4d:fb:8f:51:76: 3c:64:e7:83:68:73:ad:fc:8e:8c:25:77:a3:98:da:9e:ce:44: dc:ec:47:29:92:58:c9:7a:82:b3:93:c2:e9:99:8f:4e:bd:d2: a6:ac:b8:32:60:bb:29:78:96:75:28:fb:2d:c7:46:2e:99:78: f0:4f:95:59:56:d2:21:22:2c:66:3c:8b:d0:3a:dc:4a:30:33: 8b:11:b2:a4:a7:e5:32:d5:ae:32:c3:05:6a:f0:e8:ab:9f:93: 76:00:06:35:33:e8:12:25:fe:49:9d:98:8c:2b:e3:46:a9:65: 55:27:6e:b0:7f:52:dd:25:0c:0d:f2:c5:1c:c2:8e:4a:75:94: 36:15:90:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3 MTNFNDFCQjIwHhcNMjUxMDMxMjIxMzE1WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1MzQ3Yi0zMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw40XUNnfqFSFvqR/dop/PU+LUtYAzFbdhSrCQMsTbwpJcjlhz1Wbu8Mi0ZC+ F9G+bCmt/GhYrZ7SRpTNPu3FS+1OWleYT3kyaUxXjtEZD/hRNUL3GRfw5fRuAJ5r yMdT2JF+HKV1zOzeEoD7JkaiHe9cq/5CvPvRG7nSYAHJUKpMk4U5lmxrSooyPinJ dkRvq7eEX4vRxuM8dnawJ+t7HhipKlP6NKQuTSUKe980FsZbQD3dG3WV6rBbZhXn sYBkn648J5xJC52swFTo7pZmlANDGsgLWMrJkipL884uu0a8Atvs/1XhD5JnnO0s 795pTkx24a2/JrI72KHu1yZEuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIlEriAV EbM/oeP+DHtpNeXiYItyMB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdEODUvNzFBNkY3RDQ2QzZDMTFFQkI5Qzc5RDRDQzRGOUFFMDIvNDRFOTE1NkM3 MzA4MTFFQzg5QzFDRTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJngSwwDQYJKoZIhvcNAQELBQADggEBADAj7V4yw7tsSasN SojWI7SGsFSDN0AQTnPsae6OMn482hjvFZn4LwrLQ9xDOUW+XQxF1ss4jjDPkOyH 6wtXPbdKHAl+wHa24+VLHPE6u4ScJ0ru0icWA/1Plfd3tcPNguuPY8P7N4muSAXm 3IiNqjkfDeicdPKKUJBN+49Rdjxk54Noc638jowld6OY2p7ORNzsRymSWMl6grOT wumZj0690qasuDJguyl4lnUo+y3HRi6ZePBPlVlW0iEiLGY8i9A63EowM4sRsqSn 5TLVrjLDBWrw6Kufk3YABjUz6BIl/kmdmIwr40apZVUnbrB/Ut0lDA3yxRzCjkp1 lDYVkLs= -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:04 2025 by rpki-client