$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa File: E09D5D9C7F0711F092740742C4F9AE02.roa (raw, json) Hash identifier: CfbrIA0HCJd5bnnoqk4fH/y8a3ECzbTG+URIorF3jYk= Subject key identifier: 67:0E:CF:AA:D1:CE:33:9F:AA:89:15:A6:23:EA:7C:71:08:FA:62:AD Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Certificate serial: 18 Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa Signing time: Tue 23 Sep 2025 11:43:33 +0000 ROA not before: Tue 23 Sep 2025 11:43:33 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 149014 IP address blocks: 103.147.202.0/24 maxlen: 24 103.147.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Validity Not Before: Sep 23 11:43:33 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68d287e5-5df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:93:96:dc:fe:2e:b2:be:07:59:e4:c1:1c: 8c:8f:94:95:66:6b:28:d7:65:5b:35:7b:a2:0c:f6: f9:79:e4:75:09:15:cc:5e:f7:4a:e9:e9:d9:04:90: f9:e2:82:d9:40:f6:46:6d:6b:61:86:43:5e:b7:c7: da:f4:64:12:13:ba:e2:36:a7:7e:f5:cf:64:81:8d: 93:26:64:01:9a:f5:34:fa:b8:70:72:d0:7a:b9:1c: 83:14:36:00:76:0d:ad:e5:f5:0f:e4:f3:bb:bc:f3: c4:c0:f5:16:46:de:bf:21:12:94:a7:4f:ba:b1:1e: 94:91:ed:fd:a4:a7:3a:35:63:37:32:06:0b:25:2b: 48:4f:20:09:47:f8:a8:e9:b5:af:f0:2c:84:19:c8: 16:30:f6:50:13:c3:88:ae:13:66:f9:7d:93:b9:22: 0b:6a:2a:c9:fb:3f:5d:f9:99:c8:4e:98:3d:d1:d0: 45:30:36:5d:28:18:ba:4c:e0:e3:dd:a8:b6:5a:5f: b9:0d:e7:5f:b5:1b:77:70:df:17:64:0e:3c:dd:6e: cd:43:ee:94:27:a0:a7:32:2f:f0:c5:d7:83:61:81: c5:5d:a5:9c:ea:91:d4:79:59:eb:8f:d4:8a:bf:b0: 2c:9e:cb:fa:57:bd:81:08:70:e3:f4:8d:cd:cb:6c: 1e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0E:CF:AA:D1:CE:33:9F:AA:89:15:A6:23:EA:7C:71:08:FA:62:AD X509v3 Authority Key Identifier: keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/E09D5D9C7F0711F092740742C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.202.0/23 Signature Algorithm: sha256WithRSAEncryption 73:5d:ab:bb:8a:a5:e6:e1:ff:95:f5:eb:99:12:fa:16:a3:1f: 44:3b:b1:6b:a0:a8:6a:4b:cd:cc:a1:06:ce:29:f0:4d:fc:38: dd:29:c6:b6:bb:49:ab:3c:5e:5d:9b:93:19:09:bd:92:61:8a: 30:bf:56:9f:e9:57:3a:30:ed:45:56:77:da:62:ef:bb:3b:56: 1f:cf:76:3a:50:f4:05:ea:47:71:55:9f:dd:f1:cf:d2:ec:cc: 95:e4:f9:27:2d:7a:ae:47:e5:cf:6a:d3:63:ec:b9:0b:28:ec: 1c:07:50:5f:b3:69:a8:05:f4:7e:03:e3:3f:f5:f4:f1:69:a1: 36:6c:34:cb:ce:54:f4:53:24:57:ad:e1:47:2e:7e:9b:d6:d5: cf:2d:5b:5d:60:ca:7f:f9:05:d2:57:c6:09:d9:10:91:36:22: 42:27:d0:16:85:91:24:bf:f9:39:ed:b6:f3:a2:34:06:2c:04: 40:58:55:d8:fa:ed:1f:0f:4c:16:fe:8a:3b:3a:97:79:f5:bb: be:0f:89:cb:5a:3e:74:6f:63:97:e6:4b:cb:94:4d:fa:c2:ee: 23:21:d0:a4:73:22:27:13:eb:ad:74:25:6e:61:76:90:a7:bf: f3:7e:2b:77:3e:7d:ac:eb:c3:37:cb:fd:f7:55:7b:8b:c0:9c: 6a:0d:2e:4b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0Q1ODExMC8GA1UEBRMoMTgzRkE5MERDMzU1NkMxRDE2NTY4RUJFQkIxOEUyRkM1 QTc4MUQ5MzAeFw0yNTA5MjMxMTQzMzNaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZDI4N2U1LTVkZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHGJOW3P4usr4HWeTBHIyPlJVmayjXZVs1e6IM9vl55HUJFcxe90rp6dkEkPni gtlA9kZta2GGQ163x9r0ZBITuuI2p371z2SBjZMmZAGa9TT6uHBy0Hq5HIMUNgB2 Da3l9Q/k87u888TA9RZG3r8hEpSnT7qxHpSR7f2kpzo1YzcyBgslK0hPIAlH+Kjp ta/wLIQZyBYw9lATw4iuE2b5fZO5IgtqKsn7P135mchOmD3R0EUwNl0oGLpM4OPd qLZaX7kN51+1G3dw3xdkDjzdbs1D7pQnoKcyL/DF14NhgcVdpZzqkdR5WeuP1Iq/ sCyey/pXvYEIcOP0jc3LbB4rAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZw7PqtHO M5+qiRWmI+p8cQj6Yq0wHwYDVR0jBBgwFoAUGD+pDcNVbB0WVo6+uxji/Fp4HZMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RDU4LzU5RDA2QTEyN0Yw NjExRjA5NTIwNTkzQUM0RjlBRTAyL0dELXBEY05WYkIwV1ZvNi11eGppX0ZwNEha TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0QtcERjTlZiQjBXVm82LXV4amlfRnA0SFpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0Q1OC81OUQwNkExMjdGMDYxMUYwOTUyMDU5M0FDNEY5QUUwMi9FMDlENUQ5QzdG MDcxMUYwOTI3NDA3NDJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeTyjANBgkqhkiG9w0BAQsFAAOCAQEAc12ru4ql5uH/lfXr mRL6FqMfRDuxa6CoakvNzKEGzinwTfw43SnGtrtJqzxeXZuTGQm9kmGKML9Wn+lX OjDtRVZ32mLvuztWH892OlD0BepHcVWf3fHP0uzMleT5Jy16rkflz2rTY+y5Cyjs HAdQX7NpqAX0fgPjP/X08WmhNmw0y85U9FMkV63hRy5+m9bVzy1bXWDKf/kF0lfG CdkQkTYiQifQFoWRJL/5Oe2286I0BiwEQFhV2PrtHw9MFv6KOzqXefW7vg+Jy1o+ dG9jl+ZLy5RN+sLuIyHQpHMiJxPrrXQlbmF2kKe/834rdz59rOvDN8v991V7i8Cc ag0uSw== -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:57 2025 by rpki-client