$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/89340B10B5E011EE91DD4D53C4F9AE02.roa File: 89340B10B5E011EE91DD4D53C4F9AE02.roa (raw, json) Hash identifier: Q9mMB9C2C5zqftIwQCLURXaOhu4FrV/pPVzwERgSn2Q= Subject key identifier: BF:9E:F1:F5:BB:9E:5A:F4:62:09:EA:F4:CD:B6:C1:8A:64:08:FB:5D Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0B76 Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/89340B10B5E011EE91DD4D53C4F9AE02.roa Signing time: Tue 28 Oct 2025 10:15:54 +0000 ROA not before: Tue 28 Oct 2025 10:15:54 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 138385 IP address blocks: 103.124.52.0/22 maxlen: 23 103.124.52.0/24 maxlen: 24 103.124.53.0/24 maxlen: 24 103.124.54.0/24 maxlen: 24 103.124.55.0/24 maxlen: 24 2403:da40::/32 maxlen: 32 2403:da40::/33 maxlen: 33 2403:da40:b::/48 maxlen: 48 2403:da40:100::/40 maxlen: 40 2403:da40:100::/48 maxlen: 48 2403:da40:101::/48 maxlen: 48 2403:da40:102::/48 maxlen: 48 2403:da40:103::/48 maxlen: 48 2403:da40:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 18:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2934 (0xb76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: Oct 28 10:15:54 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=690097d9-4bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:db:6d:77:63:c7:92:9c:22:66:04:59:81: 78:d4:3e:50:47:75:7c:04:d8:7e:42:b1:70:22:9c: 5f:f9:b0:7e:4f:55:f8:b2:bd:7d:0f:d8:63:cf:c8: 1e:cb:78:a7:9b:09:06:28:80:00:3f:31:b7:40:9f: 39:ca:ab:73:73:a7:f5:94:03:b5:f2:00:fc:5d:aa: da:42:0f:f8:1b:68:36:f3:51:c7:a7:df:88:27:3f: 16:52:f3:24:88:6b:80:ed:2e:70:f6:bb:1c:f6:9d: f5:96:dd:fa:28:cb:7b:43:d2:83:aa:40:33:a3:a6: 5a:c7:39:a0:bf:ff:f7:91:1b:3e:45:22:70:00:59: 8a:9d:61:51:c5:ca:4e:d0:ba:7b:e9:b9:4d:23:34: 35:67:94:e1:a4:2a:5c:8c:d5:81:b8:6d:4a:e4:dd: bf:c9:d4:8f:1a:c0:3b:94:b5:68:3a:a0:02:82:41: c1:2a:a9:ba:03:a3:83:6d:f9:d7:0b:70:54:a8:83: 26:51:e3:53:47:83:f8:ba:f7:16:9d:ca:2c:ea:55: d9:fc:c2:52:c2:fa:fc:c5:7d:05:11:93:f3:f0:53: 71:49:69:89:75:eb:f1:3e:ce:8d:6f:aa:21:de:79: f2:45:38:9c:aa:f8:de:72:d9:c9:2e:ba:45:de:e9: d5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9E:F1:F5:BB:9E:5A:F4:62:09:EA:F4:CD:B6:C1:8A:64:08:FB:5D X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/89340B10B5E011EE91DD4D53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.124.52.0/22 IPv6: 2403:da40::/32 Signature Algorithm: sha256WithRSAEncryption 2a:db:1e:95:17:ff:f1:37:57:29:a4:ce:be:5e:35:74:b2:9c: 69:4e:39:39:bf:37:10:64:3f:83:0f:43:7f:9b:13:8a:93:07: f7:be:b3:0c:cb:59:fb:07:1d:8d:22:00:06:f2:24:ae:67:71: 82:67:96:ab:00:3c:e2:a4:c8:92:2b:4a:0d:84:04:0d:66:21: 76:d1:64:8a:22:b0:5a:3b:ce:1a:5e:d7:5b:f7:62:1d:15:91: 9c:49:18:a7:e3:f8:5d:1e:6f:5c:9c:18:aa:43:db:d9:09:7c: 9c:43:0a:12:8a:d3:a8:3c:6f:9c:63:c8:cf:e9:45:c7:21:13: a8:e0:08:5e:ee:f6:17:c6:b7:44:2e:46:15:89:a1:f9:b4:fc: a8:d8:d9:8c:f3:35:fb:43:8d:34:04:9b:95:ff:02:12:d7:7a: e1:16:48:ac:e9:9c:a8:37:86:e6:8e:85:a7:18:26:7b:8d:13: 9e:a2:1d:0a:be:60:94:f2:a2:5e:8d:42:86:35:5d:3b:5a:15: 5f:c6:53:ea:f9:6a:62:3e:50:9d:47:9e:23:0a:bb:7e:a7:f2: 62:e4:e1:d9:92:ad:9d:18:10:84:2d:d1:10:f7:00:1f:94:62: f1:82:99:15:00:a6:d4:f0:30:8c:24:45:97:2c:c3:c0:3a:ee: 9e:bd:d0:37 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjUxMDI4MTAxNTU0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAwOTdkOS00YmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSHbbXdjx5KcImYEWYF41D5QR3V8BNh+QrFwIpxf+bB+T1X4sr19D9hjz8ge y3inmwkGKIAAPzG3QJ85yqtzc6f1lAO18gD8XaraQg/4G2g281HHp9+IJz8WUvMk iGuA7S5w9rsc9p31lt36KMt7Q9KDqkAzo6Zaxzmgv//3kRs+RSJwAFmKnWFRxcpO 0Lp76blNIzQ1Z5ThpCpcjNWBuG1K5N2/ydSPGsA7lLVoOqACgkHBKqm6A6ODbfnX C3BUqIMmUeNTR4P4uvcWncos6lXZ/MJSwvr8xX0FEZPz8FNxSWmJdevxPs6Nb6oh 3nnyRTicqvjectnJLrpF3unViwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFL+e8fW7 nlr0Ygnq9M22wYpkCPtdMB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUyOTkvMjY4OTBFREE0MkM1MTFFQUIyNkNGRDFCQzRGOUFFMDIvODkzNDBCMTBC NUUwMTFFRTkxREQ0RDUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfDQwDQQCAAIwBwMFACQD2kAwDQYJKoZIhvcNAQELBQAD ggEBACrbHpUX//E3Vymkzr5eNXSynGlOOTm/NxBkP4MPQ3+bE4qTB/e+swzLWfsH HY0iAAbyJK5ncYJnlqsAPOKkyJIrSg2EBA1mIXbRZIoisFo7zhpe11v3Yh0VkZxJ GKfj+F0eb1ycGKpD29kJfJxDChKK06g8b5xjyM/pRcchE6jgCF7u9hfGt0QuRhWJ ofm0/KjY2YzzNftDjTQEm5X/AhLXeuEWSKzpnKg3huaOhacYJnuNE56iHQq+YJTy ol6NQoY1XTtaFV/GU+r5amI+UJ1HniMKu36n8mLk4dmSrZ0YEIQt0RD3AB+UYvGC mRUAptTwMIwkRZcsw8A67p690Dc= -----END CERTIFICATE-----Generated at Fri Nov 7 11:31:47 2025 by rpki-client