$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/13C099EE366711F0B5877C84C4F9AE02.roa File: 13C099EE366711F0B5877C84C4F9AE02.roa (raw, json) Hash identifier: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic= Subject key identifier: 74:42:D1:D0:B6:57:67:EA:3B:48:25:27:12:B8:3D:AC:CB:7A:B4:FC Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0D95 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/13C099EE366711F0B5877C84C4F9AE02.roa Signing time: Wed 21 May 2025 17:18:22 +0000 ROA not before: Wed 21 May 2025 17:18:22 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138640 IP address blocks: 43.246.200.0/24 maxlen: 24 43.246.201.0/24 maxlen: 24 103.109.56.0/24 maxlen: 24 103.109.57.0/24 maxlen: 24 103.109.59.0/24 maxlen: 24 103.111.13.0/24 maxlen: 24 2402:76c0::/32 maxlen: 36 2402:76c0:f000::/48 maxlen: 48 2402:76c0:f001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3477 (0xd95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: May 21 17:18:22 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=682e0add-5013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:97:ba:f4:97:d1:c6:87:7b:3b:19:fd:cb: 50:36:4f:c3:3a:ba:d4:f6:31:c7:30:bd:68:8e:3e: 88:8e:9c:19:5b:f0:6f:af:3a:2a:b0:ae:a9:24:30: cc:32:bd:fa:60:a6:09:d7:83:ad:5b:5c:25:fb:60: 94:ed:c9:6f:1b:0b:61:b1:8c:b8:f6:5c:6b:0c:58: 8f:a1:26:fa:86:2a:3f:fc:4c:e3:4f:26:4c:93:91: 2b:51:58:d5:e7:62:7c:af:bb:05:6d:b5:9c:25:32: d2:10:86:55:60:c4:6a:b7:c4:64:34:9a:91:10:bd: 42:8b:56:32:99:ed:1d:ab:dc:20:bb:31:fc:52:ef: b8:e1:72:f9:a6:db:d9:32:49:52:2f:c6:c8:19:c2: fd:60:f5:3b:72:eb:52:09:78:c2:97:01:54:36:7c: f7:10:7a:c5:4d:d6:26:33:53:a2:c2:ed:8f:a2:54: 74:37:a6:61:3a:c4:ac:84:b1:99:3d:31:56:6d:90: 65:0e:e2:bd:0f:8a:0f:4e:1e:5d:59:5d:2e:19:18: ef:fa:ab:33:58:b0:91:1c:22:5b:29:3e:b3:68:79: 22:40:7d:fc:d6:77:01:7d:e2:73:57:64:1c:0a:47: 3a:08:d8:5a:53:51:04:df:ec:3d:81:08:df:91:86: 13:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:42:D1:D0:B6:57:67:EA:3B:48:25:27:12:B8:3D:AC:CB:7A:B4:FC X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/13C099EE366711F0B5877C84C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.200.0/23 103.109.56.0/23 103.109.59.0/24 103.111.13.0/24 IPv6: 2402:76c0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:40:ab:b0:9e:21:ff:10:32:2f:47:f5:6d:1a:92:41:11:c8: 5a:66:34:e7:ca:28:2b:26:40:f1:cc:e4:4a:dc:5c:5d:60:84: 4c:af:a3:34:1a:e4:6e:fe:32:9d:11:66:74:cf:57:ee:f7:e5: e4:dc:52:69:ba:ad:26:fc:17:ab:5e:2e:c5:0d:4a:42:74:49: 1c:fc:21:f2:cd:67:19:61:07:24:61:b7:35:ec:32:76:c8:63: fe:10:e3:d7:5e:58:90:e0:83:89:94:8f:d1:80:e9:f4:5b:69: 17:ed:04:c5:7f:06:21:b5:de:9f:8c:9f:b0:64:11:28:6b:20: a7:f9:92:16:a1:2b:a2:13:3a:ce:c2:96:f5:48:bc:2d:f3:40: 47:32:03:57:33:4d:5f:72:54:74:bf:a0:5d:e5:00:ae:21:c7: 74:1e:81:14:88:d9:58:85:7a:8d:b2:89:85:ca:ef:fc:91:70: 7d:7d:14:e6:12:73:8a:25:a5:f0:0f:48:6b:d8:30:2b:5c:2f: e9:71:db:fc:23:13:9e:75:d1:20:c9:76:9c:21:2d:43:05:8d: 9e:c5:e0:5e:68:be:c9:f9:39:fa:2c:04:0e:27:f9:f0:55:2b: e3:d1:c3:3b:db:8f:46:06:b2:31:4a:72:2e:5b:69:e6:50:98: 08:8a:5e:de -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICDZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjUwNTIxMTcxODIyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODJlMGFkZC01MDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08mXuvSX0caHezsZ/ctQNk/DOrrU9jHHML1ojj6IjpwZW/BvrzoqsK6pJDDM Mr36YKYJ14OtW1wl+2CU7clvGwthsYy49lxrDFiPoSb6hio//EzjTyZMk5ErUVjV 52J8r7sFbbWcJTLSEIZVYMRqt8RkNJqREL1Ci1Yyme0dq9wguzH8Uu+44XL5ptvZ MklSL8bIGcL9YPU7cutSCXjClwFUNnz3EHrFTdYmM1Oiwu2PolR0N6ZhOsSshLGZ PTFWbZBlDuK9D4oPTh5dWV0uGRjv+qszWLCRHCJbKT6zaHkiQH381ncBfeJzV2Qc Ckc6CNhaU1EE3+w9gQjfkYYTyQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFHRC0dC2 V2fqO0glJxK4PazLerT8MB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg4NDcvRERGQkIwQjhENzgxMTFFOUI0MjNBQzRCQzRGOUFFMDIvMTNDMDk5RUUz NjY3MTFGMEI1ODc3Qzg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAEr9sgDBAFnbTgDBABnbTsDBABnbw0wDQQCAAIwBwMFACQC dsAwDQYJKoZIhvcNAQELBQADggEBAApAq7CeIf8QMi9H9W0akkERyFpmNOfKKCsm QPHM5ErcXF1ghEyvozQa5G7+Mp0RZnTPV+735eTcUmm6rSb8F6teLsUNSkJ0SRz8 IfLNZxlhByRhtzXsMnbIY/4Q49deWJDgg4mUj9GA6fRbaRftBMV/BiG13p+Mn7Bk EShrIKf5khahK6ITOs7ClvVIvC3zQEcyA1czTV9yVHS/oF3lAK4hx3QegRSI2ViF eo2yiYXK7/yRcH19FOYSc4olpfAPSGvYMCtcL+lx2/wjE5510SDJdpwhLUMFjZ7F 4F5ovsn5OfosBA4n+fBVK+PRwzvbj0YGsjFKci5baeZQmAiKXt4= -----END CERTIFICATE-----Generated at Mon Oct 27 12:34:59 2025 by rpki-client