$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/286C872684B011F08D2ED42CC4F9AE02.roa File: 286C872684B011F08D2ED42CC4F9AE02.roa (raw, json) Hash identifier: zLa9BDHDG7v+U27ctD90rRBbm+JhYqq8GC5uRJX34CA= Subject key identifier: 68:55:72:F3:72:F0:B8:5A:CC:42:42:1C:93:DA:6A:D1:BE:D6:35:CB Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Certificate serial: 02 Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/286C872684B011F08D2ED42CC4F9AE02.roa Signing time: Fri 29 Aug 2025 08:14:17 +0000 ROA not before: Fri 29 Aug 2025 08:14:17 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 153995 IP address blocks: 103.147.18.0/23 maxlen: 23 103.147.18.0/24 maxlen: 24 103.147.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Validity Not Before: Aug 29 08:14:17 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68b16159-9ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:a8:9f:82:5c:54:ee:ac:9d:24:fe:45:df: 68:38:5b:9e:35:3c:96:78:f5:f0:84:ac:f8:70:da: 7d:a9:7f:c1:da:dc:54:5a:5e:46:07:7c:cc:82:e2: eb:7e:89:dd:e1:0b:f2:ff:55:df:f2:a4:ef:2a:66: 27:34:da:a2:cc:ac:e4:0f:f5:d4:55:d7:4f:d5:94: b4:fc:4c:9d:02:2b:b1:3a:95:fe:f9:65:2d:10:20: 29:45:c5:88:59:bf:35:96:0c:7d:53:ba:c8:5a:62: de:5a:66:3b:90:c5:d3:05:51:9d:eb:f5:65:c6:fd: dc:94:d6:23:32:7a:b8:d0:60:0d:23:df:b6:49:69: 15:19:9e:d8:1c:59:a8:3f:bf:ac:1f:6a:32:a3:b2: 16:92:59:1c:96:e2:21:bc:f5:02:dc:16:8b:ea:26: 33:6b:6d:6c:47:c9:72:07:e3:f4:9a:1c:28:7c:e4: f5:97:13:9a:da:c4:22:85:dd:f6:40:57:5c:1f:7e: 43:b3:0c:2c:bc:f9:a4:82:78:9b:e4:aa:ef:df:cf: 74:10:5f:81:e8:09:f2:a8:ca:df:76:82:dd:d7:3f: 99:aa:82:0c:ed:aa:4c:36:e8:78:00:e7:15:25:fd: 27:86:bc:99:39:d0:3b:4c:5e:0e:27:7d:04:ab:d1: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:55:72:F3:72:F0:B8:5A:CC:42:42:1C:93:DA:6A:D1:BE:D6:35:CB X509v3 Authority Key Identifier: keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/286C872684B011F08D2ED42CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.18.0/23 Signature Algorithm: sha256WithRSAEncryption 55:5c:76:01:3a:53:71:3e:49:89:3a:b6:37:4a:3e:46:ed:44: be:70:c6:8e:22:04:23:8c:dc:1b:e5:d0:19:76:a4:07:84:30: 48:ae:67:99:31:5f:a6:a6:d5:40:5a:c7:e8:2d:12:a1:0d:c1: 24:69:76:21:f1:e8:70:46:5b:88:bd:71:f4:ef:16:93:9e:ec: d3:8f:31:26:d7:6f:31:93:3c:a1:8d:29:ad:d6:b4:ab:f4:21: 89:f0:75:de:45:f0:e7:eb:c9:7e:b8:4c:ca:a7:45:18:49:98: 7b:20:f9:66:98:c5:b3:9b:f7:e8:b5:04:e1:46:96:0f:04:33: 60:70:4c:fb:28:71:41:c4:68:7e:4f:eb:ee:fe:86:1c:61:1f: 0b:17:32:92:df:d7:6d:f4:0f:b8:47:8f:01:c2:b4:34:41:a3: 58:04:f3:26:cd:f6:b3:4f:31:10:d3:5a:b6:1b:43:43:1f:7e: ef:a9:b9:f2:c4:5d:0d:9d:d6:31:5e:35:f9:e3:d6:be:ee:11: 1d:1a:a3:ca:6f:cb:f5:73:8b:82:6f:72:4a:e9:f7:55:5c:2c: f1:9c:b3:61:ad:47:f2:39:7c:90:73:27:26:67:16:6c:4e:a5: 7d:3b:59:ba:b5:ba:d8:7a:15:78:83:15:31:0d:ac:22:ad:10: d3:7e:e3:a2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUFDRDExMC8GA1UEBRMoNTMyRTcwNTRDNDcxQkZGMkVEN0E2QTE4OEVEMzczNjM2 NUU0NjA4QTAeFw0yNTA4MjkwODE0MTdaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YjE2MTU5LTlhYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWaaifglxU7qydJP5F32g4W541PJZ49fCErPhw2n2pf8Ha3FRaXkYHfMyC4ut+ id3hC/L/Vd/ypO8qZic02qLMrOQP9dRV10/VlLT8TJ0CK7E6lf75ZS0QIClFxYhZ vzWWDH1TushaYt5aZjuQxdMFUZ3r9WXG/dyU1iMyerjQYA0j37ZJaRUZntgcWag/ v6wfajKjshaSWRyW4iG89QLcFovqJjNrbWxHyXIH4/SaHCh85PWXE5raxCKF3fZA V1wffkOzDCy8+aSCeJvkqu/fz3QQX4HoCfKoyt92gt3XP5mqggztqkw26HgA5xUl /SeGvJk50DtMXg4nfQSr0SPfAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUaFVy83Lw uFrMQkIck9pq0b7WNcswHwYDVR0jBBgwFoAUUy5wVMRxv/LtemoYjtNzY2XkYIow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QUNEL0Q4MzVBOTBFODRB RjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9MdGVtb1lqdE56WTJYa1lJ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXk1d1ZNUnh2X0x0ZW1vWWp0TnpZMlhrWUlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFDRC9EODM1QTkwRTg0QUYxMUYwQUQ3Q0RFMkJDNEY5QUUwMi8yODZDODcyNjg0 QjAxMUYwOEQyRUQ0MkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeTEjANBgkqhkiG9w0BAQsFAAOCAQEAVVx2ATpTcT5JiTq2 N0o+Ru1EvnDGjiIEI4zcG+XQGXakB4QwSK5nmTFfpqbVQFrH6C0SoQ3BJGl2IfHo cEZbiL1x9O8Wk57s048xJtdvMZM8oY0prda0q/QhifB13kXw5+vJfrhMyqdFGEmY eyD5ZpjFs5v36LUE4UaWDwQzYHBM+yhxQcRofk/r7v6GHGEfCxcykt/XbfQPuEeP AcK0NEGjWATzJs32s08xENNathtDQx9+76m58sRdDZ3WMV41+ePWvu4RHRqjym/L 9XOLgm9ySun3VVws8ZyzYa1H8jl8kHMnJmcWbE6lfTtZurW62HoVeIMVMQ2sIq0Q 037jog== -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:29 2025 by rpki-client