$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/D0A263DCB09A11F0937ACB4DC4F9AE02.roa File: D0A263DCB09A11F0937ACB4DC4F9AE02.roa (raw, json) Hash identifier: XS9U/4ivaEDpjnWXRAxlXAVyykx5I7GF4YfzVGEDsf4= Subject key identifier: CA:E0:D4:6D:DA:A3:A4:E7:FB:A3:67:1D:EC:F5:7E:2B:2A:EE:22:BD Certificate issuer: /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Certificate serial: 01F8 Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/D0A263DCB09A11F0937ACB4DC4F9AE02.roa Signing time: Fri 24 Oct 2025 05:32:23 +0000 ROA not before: Fri 24 Oct 2025 05:32:23 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 24323 IP address blocks: 103.39.196.0/23 maxlen: 23 103.39.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD Validity Not Before: Oct 24 05:32:23 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68fb0f66-e965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:ee:55:70:dc:5b:2b:03:55:41:f1:73:50: c2:80:93:b6:91:2f:6f:f7:0a:49:b2:12:bc:f6:e5: 29:4d:b9:82:13:78:dd:dd:b5:48:f6:0e:fb:ed:82: 21:f6:38:11:6e:5c:80:34:fc:7d:36:6c:5b:09:c6: 61:54:40:ca:3e:8b:38:63:d4:22:d3:95:c5:4e:80: 13:73:3b:82:eb:ba:72:01:99:b5:3e:b8:f4:64:45: ea:a4:aa:05:ae:23:6f:3a:6a:43:ac:66:7c:f9:d0: 5b:98:95:d4:ff:a7:d3:03:b9:a5:95:fb:c5:cd:22: 0b:2d:c2:00:fe:04:3a:04:30:a6:db:94:19:03:d0: b5:ea:fd:81:54:b5:53:2c:d3:ce:e3:c6:f8:6c:04: 6b:bc:0a:86:3f:d6:99:ef:68:55:3f:c7:f8:af:ef: 48:4d:28:f3:27:53:2f:93:dd:9f:02:48:54:02:c2: 58:78:e1:ee:e5:21:7e:0d:31:a3:77:ef:e5:ac:67: 66:9b:73:72:0a:9e:66:57:f1:ea:26:4c:57:2f:98: 2e:74:fd:3e:10:05:3a:be:01:02:8f:ba:7c:dd:a4: 34:80:c9:c4:47:75:91:4c:bc:f8:64:54:29:cd:1e: 78:36:9d:7c:cc:c1:38:2f:9d:7b:31:25:2e:d2:dd: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E0:D4:6D:DA:A3:A4:E7:FB:A3:67:1D:EC:F5:7E:2B:2A:EE:22:BD X509v3 Authority Key Identifier: keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/D0A263DCB09A11F0937ACB4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.39.196.0/23 Signature Algorithm: sha256WithRSAEncryption 83:83:84:4a:18:cb:e0:05:68:13:fa:61:db:e3:e2:f3:85:83: 49:27:d5:07:a1:d2:45:2b:b8:ec:c2:db:80:4c:d7:83:c3:8f: ed:f0:41:5b:74:f7:9f:70:00:cb:a8:e6:25:2f:64:dc:f2:43: 87:bf:61:78:8d:53:81:ab:91:f3:13:7a:95:a5:77:df:d1:b5: 5e:b5:e6:f0:3a:a8:ec:b9:5d:f1:8a:ee:0e:07:63:a7:f0:aa: 51:58:d3:a7:cf:cb:69:3d:3d:c2:0e:b7:e3:d8:f9:b9:77:ca: 17:ad:f9:c9:29:f9:74:69:b1:53:52:70:4a:fd:b3:0a:e3:32: c1:e1:39:60:82:6b:49:13:ac:e9:ef:ec:ca:dd:3f:34:48:c9: dc:21:e4:47:d2:dd:23:98:86:50:d8:26:6d:d7:12:8f:79:25: 1d:c5:8c:7b:f3:49:2b:f6:3c:d4:1b:bc:36:98:3e:2a:1d:5a: 5c:18:14:b0:bb:9a:f1:b4:e6:03:7d:b0:5f:1b:ce:61:ba:53: 1d:99:55:1f:49:76:06:bb:92:67:ae:52:4b:dc:c6:48:01:ae: 5e:27:cf:d4:1e:3c:8b:4e:d5:c3:e7:bc:af:f9:3f:ca:fe:2d: 47:9c:03:08:71:51:3c:bc:ca:c3:47:6a:ee:ef:9c:c6:0a:3b: 3b:d7:2e:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0YxMTAvBgNVBAUTKEVGRDg4RjhBMjg5QjE0Qzc5NDQzMTI4QkJCQjc5MUI1 MkRBNTExQUQwHhcNMjUxMDI0MDUzMjIzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZiMGY2Ni1lOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiDuVXDcWysDVUHxc1DCgJO2kS9v9wpJshK89uUpTbmCE3jd3bVI9g777YIh 9jgRblyANPx9NmxbCcZhVEDKPos4Y9Qi05XFToATczuC67pyAZm1Prj0ZEXqpKoF riNvOmpDrGZ8+dBbmJXU/6fTA7mllfvFzSILLcIA/gQ6BDCm25QZA9C16v2BVLVT LNPO48b4bARrvAqGP9aZ72hVP8f4r+9ITSjzJ1Mvk92fAkhUAsJYeOHu5SF+DTGj d+/lrGdmm3NyCp5mV/HqJkxXL5gudP0+EAU6vgECj7p83aQ0gMnER3WRTLz4ZFQp zR54Np18zME4L517MSUu0t0FPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMrg1G3a o6Tn+6NnHez1fisq7iK9MB8GA1UdIwQYMBaAFO/Yj4oomxTHlEMSi7u3kbUtpRGt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzRi85QjlDOEU2QUIx QjUxMUVEOTlFMzI2NjlDNEY5QUUwMi83OWlQaWlpYkZNZVVReEtMdTdlUnRTMmxF YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc5aVBpaWliRk1lVVF4S0x1N2VSdFMybEVhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFEM0YvOUI5QzhFNkFCMUI1MTFFRDk5RTMyNjY5QzRGOUFFMDIvRDBBMjYzRENC MDlBMTFGMDkzN0FDQjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnJ8QwDQYJKoZIhvcNAQELBQADggEBAIODhEoYy+AFaBP6 Ydvj4vOFg0kn1Qeh0kUruOzC24BM14PDj+3wQVt0959wAMuo5iUvZNzyQ4e/YXiN U4GrkfMTepWld9/RtV615vA6qOy5XfGK7g4HY6fwqlFY06fPy2k9PcIOt+PY+bl3 yhet+ckp+XRpsVNScEr9swrjMsHhOWCCa0kTrOnv7MrdPzRIydwh5EfS3SOYhlDY Jm3XEo95JR3FjHvzSSv2PNQbvDaYPiodWlwYFLC7mvG05gN9sF8bzmG6Ux2ZVR9J dga7kmeuUkvcxkgBrl4nz9QePItO1cPnvK/5P8r+LUecAwhxUTy8ysNHau7vnMYK OzvXLjk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:56 2025 by rpki-client