$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa File: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (raw, json) Hash identifier: z3K308cWVqAEh897XBjNlJlHxtZw2Llz47fylxLHRHo= Subject key identifier: CF:CD:62:57:2E:B4:AB:E0:C4:5A:5F:C3:98:56:8E:BA:76:07:D4:68 Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Certificate serial: 08C8 Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa Signing time: Tue 04 Nov 2025 20:40:03 +0000 ROA not before: Tue 04 Nov 2025 20:40:03 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 140900 IP address blocks: 103.153.38.0/24 maxlen: 24 103.153.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Validity Not Before: Nov 4 20:40:03 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=690a64a2-0a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:db:27:ce:f9:fa:94:0b:ed:7f:61:65:30:51: 0c:e1:e5:15:84:27:26:e2:e0:03:c0:89:88:90:eb: 8e:b8:fe:90:b5:dc:a5:d5:96:cf:c5:f9:80:85:e8: b1:b7:27:02:7b:8e:66:b1:7d:b6:e7:93:4d:18:01: 26:38:4c:33:11:5f:15:8d:28:28:2a:d4:37:81:08: f0:ec:da:e7:f6:72:f8:f9:ec:14:e4:c5:b3:53:38: 00:3b:68:b3:10:5c:4c:4a:51:59:7f:0f:5a:ee:c3: 88:1b:c2:e1:00:76:67:3e:b7:23:df:ae:fe:e2:f5: 92:92:ff:bf:cd:b1:e3:e8:88:f7:06:05:61:93:ed: cd:39:48:76:5c:ad:19:2f:07:87:2f:aa:2d:6d:d2: 4c:b6:02:7d:06:98:09:bb:c3:1e:74:68:61:0d:62: 5c:ec:04:97:df:cd:5a:33:d1:08:a0:97:41:62:4d: b8:0f:bd:9a:89:f4:f9:47:51:90:e9:ae:98:ca:df: dd:56:94:19:41:01:f7:f2:f8:19:f7:ef:2a:3f:ee: c4:b7:dc:6c:96:bc:ce:2a:cc:71:fe:ed:48:e1:f8: 87:0d:37:13:80:70:12:c2:5e:f8:0d:5f:a9:7d:4b: 0f:a8:65:bd:f1:85:95:5f:82:f2:eb:67:85:b0:24: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CD:62:57:2E:B4:AB:E0:C4:5A:5F:C3:98:56:8E:BA:76:07:D4:68 X509v3 Authority Key Identifier: keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.38.0/23 Signature Algorithm: sha256WithRSAEncryption 15:6f:98:b1:d2:86:bd:0c:3c:20:f6:50:88:3a:f9:cf:9b:8f: 11:75:ed:ae:b2:2c:9d:a9:7b:40:08:f4:c8:db:6b:74:16:15: 7d:69:91:10:d4:65:5b:77:80:9a:13:3e:3d:a9:be:92:cb:ff: 67:72:f5:2f:f4:9f:c2:04:d5:1d:ef:c2:ee:3f:b2:31:46:f8: 48:26:03:fe:0a:e2:1f:c8:7b:43:a2:25:22:0f:36:e1:31:00: 78:f2:cc:dc:04:7f:fc:26:5b:5a:ca:ad:88:3c:e2:26:51:68: 4a:fa:c1:f1:0f:e2:82:49:ba:4a:7c:37:7a:f2:26:20:9a:9f: 02:37:85:b8:79:8e:cc:c4:29:86:54:59:a2:07:50:84:86:57: f6:a4:a2:9b:0c:5d:4b:fb:ad:36:ba:c7:cc:5d:c3:de:45:b2: c4:47:36:b7:fa:b9:15:78:fb:48:e0:9a:a7:55:13:37:94:f2: b2:47:a0:5b:c7:7f:11:b1:83:c3:4a:3d:6d:01:04:65:4c:a6: fe:64:3d:bb:3f:3c:7a:fa:84:ba:fe:0f:33:59:c5:b4:38:62: 85:1f:77:1d:45:f1:e2:89:35:73:fc:16:a4:5c:2d:9f:da:fd: c5:a5:38:88:54:00:cd:7f:bd:e9:b9:1b:8c:39:41:1b:c4:c6: de:40:0d:00 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2 NUIxQTJEQUQwHhcNMjUxMTA0MjA0MDAzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhNjRhMi0wYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNsnzvn6lAvtf2FlMFEM4eUVhCcm4uADwImIkOuOuP6Qtdyl1ZbPxfmAheix tycCe45msX2255NNGAEmOEwzEV8VjSgoKtQ3gQjw7Nrn9nL4+ewU5MWzUzgAO2iz EFxMSlFZfw9a7sOIG8LhAHZnPrcj367+4vWSkv+/zbHj6Ij3BgVhk+3NOUh2XK0Z LweHL6otbdJMtgJ9BpgJu8MedGhhDWJc7ASX381aM9EIoJdBYk24D72aifT5R1GQ 6a6Yyt/dVpQZQQH38vgZ9+8qP+7Et9xslrzOKsxx/u1I4fiHDTcTgHASwl74DV+p fUsPqGW98YWVX4Ly62eFsCSOCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM/NYlcu tKvgxFpfw5hWjrp2B9RoMB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDFBNkEvNjJCRTBBQzZDRTlFMTFFQTg4NTRBMTUwQzRGOUFFMDIvQjM3QTFBQjRF MUE4MTFFRkJDMDVBMjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmSYwDQYJKoZIhvcNAQELBQADggEBABVvmLHShr0MPCD2 UIg6+c+bjxF17a6yLJ2pe0AI9Mjba3QWFX1pkRDUZVt3gJoTPj2pvpLL/2dy9S/0 n8IE1R3vwu4/sjFG+EgmA/4K4h/Ie0OiJSIPNuExAHjyzNwEf/wmW1rKrYg84iZR aEr6wfEP4oJJukp8N3ryJiCanwI3hbh5jszEKYZUWaIHUISGV/akopsMXUv7rTa6 x8xdw95FssRHNrf6uRV4+0jgmqdVEzeU8rJHoFvHfxGxg8NKPW0BBGVMpv5kPbs/ PHr6hLr+DzNZxbQ4YoUfdx1F8eKJNXP8FqRcLZ/a/cWlOIhUAM1/vem5G4w5QRvE xt5ADQA= -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:25 2025 by rpki-client