$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/9C9660D4FC6E11E9BC6D4822C4F9AE02.roa File: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (raw, json) Hash identifier: ivTBLc1IHemjBh5C9Wu0pV5fBOGymo+VSgfkbB+w5w8= Subject key identifier: 1B:FE:4D:52:0F:B0:32:D2:87:68:44:3B:25:3F:C4:58:2B:DC:EA:20 Certificate issuer: /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B Certificate serial: 0CBC Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/9C9660D4FC6E11E9BC6D4822C4F9AE02.roa Signing time: Tue 14 Oct 2025 19:17:41 +0000 ROA not before: Tue 14 Oct 2025 19:17:41 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139647 IP address blocks: 103.143.34.0/23 maxlen: 23 103.143.34.0/24 maxlen: 24 103.143.35.0/24 maxlen: 24 2001:df1:6a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B Validity Not Before: Oct 14 19:17:41 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68eea1d5-1f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ab:6f:e9:9f:34:5d:49:57:bc:5e:92:9f:69: 0c:f7:de:5f:46:d6:8a:58:f6:0f:46:eb:b9:5d:e5: a9:20:9d:25:42:06:ff:39:59:8e:d0:c5:01:b8:9a: 81:38:82:d1:65:95:c7:f1:69:6b:3c:2a:5c:6b:f7: 09:da:f8:12:12:fe:e6:1e:86:0e:66:f0:15:a9:a1: 17:6a:14:a0:79:14:ce:7b:df:94:a7:d8:58:4c:47: f1:72:32:f6:02:d5:d9:8b:03:bf:0f:5d:af:39:82: e6:7a:1e:15:49:0d:83:58:ab:31:a7:c8:2e:dc:b0: 73:be:4e:14:45:55:5a:eb:f8:d6:2e:ed:b3:dd:ed: da:c3:b6:a4:39:a1:22:de:09:72:37:11:f2:14:fe: fb:80:ff:43:c5:3f:75:d7:3c:35:31:36:90:66:e7: 4f:52:6f:fa:c3:8c:c7:18:a1:20:f0:ad:53:f5:c2: 95:33:78:9b:a5:36:4d:29:4d:9a:1f:61:4e:4f:83: 01:67:3e:96:21:dc:60:10:f2:6a:71:02:7f:4d:28: 4a:5b:af:83:0a:89:80:fc:e2:31:6a:89:10:ed:60: c8:33:02:61:ac:c7:27:1e:42:a9:8e:fe:e8:e6:8e: 19:04:37:1d:db:2b:62:ed:26:72:28:42:05:75:67: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FE:4D:52:0F:B0:32:D2:87:68:44:3B:25:3F:C4:58:2B:DC:EA:20 X509v3 Authority Key Identifier: keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/9C9660D4FC6E11E9BC6D4822C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.34.0/23 IPv6: 2001:df1:6a80::/48 Signature Algorithm: sha256WithRSAEncryption 89:aa:0f:02:29:7f:9d:0c:ff:8a:64:94:1f:9d:fc:65:c9:59: a5:c0:f2:f7:57:34:c2:d6:d2:2a:ca:37:8e:22:f9:fc:3a:1f: 1b:d2:68:ff:71:40:2e:9d:6a:e6:98:1e:c3:08:fe:a2:a8:d7: 5b:5d:f3:5c:43:cc:6a:f3:c9:e9:c8:53:6e:cc:1e:3a:2e:bc: 03:0f:3a:60:7c:49:29:32:51:d6:6e:3a:53:9f:45:5f:4c:ab: 25:ab:f1:e0:04:a8:33:d2:71:82:2c:24:eb:ff:76:4d:d1:7c: cf:b0:8d:5b:40:6d:0e:0b:a3:1f:5c:35:f1:a5:ab:4c:f0:f9: 2a:51:bf:a0:8b:14:72:9a:f3:d7:bc:ab:d5:c4:78:f2:e6:9a: c3:a9:43:d1:f6:44:6f:bc:32:1a:9d:c3:22:dd:68:53:47:59: 41:a4:54:72:97:67:d7:c9:35:c6:9d:c2:42:5d:79:97:1a:55: d2:e6:07:38:e9:39:78:78:1b:d0:aa:76:2a:a2:3b:6e:25:e6: aa:a7:ce:5e:1b:84:32:0b:67:bd:9a:1a:74:d5:c5:41:7f:98: 7f:d6:25:0f:59:c8:05:26:09:a5:33:92:ab:07:b0:19:9b:67: c8:73:fc:c5:61:c9:9e:2c:16:f7:11:88:ca:e0:7f:ca:ce:3e: b6:78:86:51 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0RTYxMTAvBgNVBAUTKDk3RjlCOTA2Mjg0NzY1MzA4RUMyNjg4NTVENTYzREFC OTE4NjMwNUIwHhcNMjUxMDE0MTkxNzQxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVlYTFkNS0xZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16tv6Z80XUlXvF6Sn2kM995fRtaKWPYPRuu5XeWpIJ0lQgb/OVmO0MUBuJqB OILRZZXH8WlrPCpca/cJ2vgSEv7mHoYOZvAVqaEXahSgeRTOe9+Up9hYTEfxcjL2 AtXZiwO/D12vOYLmeh4VSQ2DWKsxp8gu3LBzvk4URVVa6/jWLu2z3e3aw7akOaEi 3glyNxHyFP77gP9DxT911zw1MTaQZudPUm/6w4zHGKEg8K1T9cKVM3ibpTZNKU2a H2FOT4MBZz6WIdxgEPJqcQJ/TShKW6+DComA/OIxaokQ7WDIMwJhrMcnHkKpjv7o 5o4ZBDcd2yti7SZyKEIFdWd3mwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBv+TVIP sDLSh2hEOyU/xFgr3OogMB8GA1UdIwQYMBaAFJf5uQYoR2UwjsJohV1WPauRhjBb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRFNi8yQjNCMkZDRUZD NkQxMUU5OEZDMkM5MUNDNEY5QUUwMi9sX201QmloSFpUQ093bWlGWFZZOXE1R0dN RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfbTVCaWhIWlRDT3dtaUZYVlk5cTVHR01Gcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0RTYvMkIzQjJGQ0VGQzZEMTFFOThGQzJDOTFDQzRGOUFFMDIvOUM5NjYwRDRG QzZFMTFFOUJDNkQ0ODIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjyIwDwQCAAIwCQMHACABDfFqgDANBgkqhkiG9w0BAQsF AAOCAQEAiaoPAil/nQz/imSUH538ZclZpcDy91c0wtbSKso3jiL5/DofG9Jo/3FA Lp1q5pgewwj+oqjXW13zXEPMavPJ6chTbsweOi68Aw86YHxJKTJR1m46U59FX0yr Javx4ASoM9Jxgiwk6/92TdF8z7CNW0BtDgujH1w18aWrTPD5KlG/oIsUcprz17yr 1cR48uaaw6lD0fZEb7wyGp3DIt1oU0dZQaRUcpdn18k1xp3CQl15lxpV0uYHOOk5 eHgb0Kp2KqI7biXmqqfOXhuEMgtnvZoadNXFQX+Yf9YlD1nIBSYJpTOSqwewGZtn yHP8xWHJniwW9xGIyuB/ys4+tniGUQ== -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:33 2025 by rpki-client