$ rpki-client -vvf rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/D5E5F60E92BF11F0BA90D823C4F9AE02.roa File: D5E5F60E92BF11F0BA90D823C4F9AE02.roa (raw, json) Hash identifier: r5MD1RHeYrmwx+4qL0Z/lL7AllWPwSQqqeUriNLY+mo= Subject key identifier: C1:24:BA:53:60:59:4A:1C:54:03:E8:1C:7A:F3:82:96:5D:7C:BD:07 Certificate issuer: /CN=A9152705/serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C Certificate serial: 02 Authority key identifier: 6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/D5E5F60E92BF11F0BA90D823C4F9AE02.roa Signing time: Tue 16 Sep 2025 05:41:48 +0000 ROA not before: Tue 16 Sep 2025 05:41:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13213 IP address blocks: 103.111.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152705, serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C Validity Not Before: Sep 16 05:41:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68c8f89b-d01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:ec:54:56:21:46:f9:8b:4d:7f:80:ff:78: 08:1a:56:4a:0e:ab:03:e2:d0:0b:9f:d1:67:5f:90: 85:2e:81:11:34:68:55:a6:81:50:f3:25:a4:59:71: bb:77:69:71:36:ee:ad:06:c4:2b:27:b4:f4:2b:4f: bc:2f:ef:75:f9:dd:e7:b2:fb:24:ae:68:b8:8b:cb: 45:99:1d:b6:78:da:34:70:b7:bd:38:6c:0b:75:cd: c7:9f:12:7c:d3:47:9c:f8:8d:15:55:c0:a0:fe:63: 10:fb:d7:24:1e:24:4d:14:c7:a5:e9:9f:fa:81:cf: 20:98:69:3f:a3:23:ba:af:d2:84:24:81:67:7d:7e: 8d:95:53:4f:11:cc:82:66:b5:5c:01:69:9d:47:89: e5:05:25:4d:e2:22:0a:b0:4f:ad:28:90:de:6b:4d: 4b:ea:9f:59:a1:96:eb:9b:4d:77:b6:18:53:aa:21: 18:3d:59:f0:75:2b:6c:36:d8:38:1d:1a:c5:78:9f: d9:39:6f:44:df:ec:27:9b:b2:b2:d9:f3:e9:d0:58: 68:a1:ff:ce:99:a9:4c:11:8b:b8:06:ca:9f:ec:ed: 18:a5:eb:0b:cb:50:a7:30:c1:f8:af:34:84:a5:01: 03:67:52:40:4c:49:4d:d2:18:63:00:4b:aa:a8:b7: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:24:BA:53:60:59:4A:1C:54:03:E8:1C:7A:F3:82:96:5D:7C:BD:07 X509v3 Authority Key Identifier: keyid:6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/D5E5F60E92BF11F0BA90D823C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.33.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:56:07:e5:9d:05:e2:06:d6:a8:b0:a1:73:4a:fb:46:37:22: 68:ed:89:a9:65:3f:e0:b5:05:ec:e6:ce:b5:f4:5a:15:3f:df: f0:58:28:de:a6:56:67:69:bd:6f:7e:89:1b:81:c5:93:3d:49: 5d:27:db:e0:f2:b6:a1:b8:10:cc:f8:e6:45:80:48:48:e8:d9: 18:58:0a:c9:17:53:59:ed:eb:a1:07:b9:b7:49:ba:cd:0a:49: 2a:c1:6a:de:ef:e8:fb:81:87:0c:9c:64:d3:34:c5:9d:de:22: b4:ef:db:fa:8c:2e:0a:62:77:ad:c4:a5:1e:82:78:c6:4e:6a: 09:ff:9d:88:71:0f:41:c3:f8:ee:8b:a3:75:d9:90:80:b9:fd: 91:1c:13:4e:0c:32:fc:ec:68:79:71:ed:52:d9:4c:2c:ef:e0: fb:16:84:87:04:75:40:2d:9e:15:c9:cb:44:ee:0c:9a:96:c5: a4:17:0a:62:2e:38:31:1d:72:e4:ae:23:c3:59:10:61:08:c2: 35:42:bb:a8:3c:fc:46:18:fa:eb:1f:6f:05:4f:3a:e5:f8:0a: 51:68:21:c3:af:e4:38:1a:3b:89:f9:4e:7a:06:b0:92:b6:81: b1:14:2c:d8:76:fd:4d:d6:01:45:f0:e9:f6:04:90:74:bf:f0: 88:22:9b:5c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjcwNTExMC8GA1UEBRMoNkJFQkMwMjEyRDZGRUQ4MzIxQzhENkYwQzVDOUM0QTY2 RUQ3MTE3QzAeFw0yNTA5MTYwNTQxNDhaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YzhmODliLWQwMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIz+xUViFG+YtNf4D/eAgaVkoOqwPi0Auf0WdfkIUugRE0aFWmgVDzJaRZcbt3 aXE27q0GxCsntPQrT7wv73X53eey+ySuaLiLy0WZHbZ42jRwt704bAt1zcefEnzT R5z4jRVVwKD+YxD71yQeJE0Ux6Xpn/qBzyCYaT+jI7qv0oQkgWd9fo2VU08RzIJm tVwBaZ1HieUFJU3iIgqwT60okN5rTUvqn1mhluubTXe2GFOqIRg9WfB1K2w22Dgd GsV4n9k5b0Tf7CebsrLZ8+nQWGih/86ZqUwRi7gGyp/s7Ril6wvLUKcwwfivNISl AQNnUkBMSU3SGGMAS6qotwh5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUwSS6U2BZ ShxUA+gcevOCll18vQcwHwYDVR0jBBgwFoAUa+vAIS1v7YMhyNbwxcnEpm7XEXww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyNzA1LzYyNzYwRDI2OTJC RjExRjA5OUFDMTMyM0M0RjlBRTAyL2EtdkFJUzF2N1lNaHlOYnd4Y25FcG03WEVY dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYS12QUlTMXY3WU1oeU5id3hjbkVwbTdYRVh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjcwNS82Mjc2MEQyNjkyQkYxMUYwOTlBQzEzMjNDNEY5QUUwMi9ENUU1RjYwRTky QkYxMUYwQkE5MEQ4MjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGdvITANBgkqhkiG9w0BAQsFAAOCAQEAnFYH5Z0F4gbWqLCh c0r7RjciaO2JqWU/4LUF7ObOtfRaFT/f8Fgo3qZWZ2m9b36JG4HFkz1JXSfb4PK2 obgQzPjmRYBISOjZGFgKyRdTWe3roQe5t0m6zQpJKsFq3u/o+4GHDJxk0zTFnd4i tO/b+owuCmJ3rcSlHoJ4xk5qCf+diHEPQcP47oujddmQgLn9kRwTTgwy/OxoeXHt UtlMLO/g+xaEhwR1QC2eFcnLRO4MmpbFpBcKYi44MR1y5K4jw1kQYQjCNUK7qDz8 Rhj66x9vBU865fgKUWghw6/kOBo7iflOegawkraBsRQs2Hb9TdYBRfDp9gSQdL/w iCKbXA== -----END CERTIFICATE-----Generated at Wed Sep 17 16:08:05 2025 by rpki-client