$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa File: 8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa (raw, json) Hash identifier: 5isKKj264kPgvcdF8hBz70YJR1jtU24tZnWCibLQbs8= Subject key identifier: 2C:F0:8F:BF:69:45:29:46:7D:C5:4C:1E:F4:1B:54:2B:64:33:EF:EB Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Certificate serial: 07BD Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa Signing time: Wed 16 Apr 2025 21:31:48 +0000 ROA not before: Wed 16 Apr 2025 21:31:48 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 23862 IP address blocks: 103.53.58.0/24 maxlen: 24 103.53.59.0/24 maxlen: 24 202.92.128.0/24 maxlen: 24 202.92.129.0/24 maxlen: 24 202.92.130.0/24 maxlen: 24 202.92.131.0/24 maxlen: 24 202.92.132.0/24 maxlen: 24 202.92.134.0/24 maxlen: 24 202.92.135.0/24 maxlen: 24 202.92.136.0/22 maxlen: 22 202.92.136.0/24 maxlen: 24 202.92.141.0/24 maxlen: 24 202.92.159.0/24 maxlen: 24 2400:b000:100::/48 maxlen: 48 2400:b000:c0e::/48 maxlen: 48 2400:b000:eee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 22:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Validity Not Before: Apr 16 21:31:48 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=680021c4-74ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:46:64:cf:d5:cf:07:ed:f8:e7:78:4b:28:38: cc:36:7a:d4:5a:2d:fc:ee:02:57:eb:77:39:49:d5: 13:69:21:f0:8e:ce:c8:26:d8:40:fa:65:1f:11:f9: 1f:9f:03:52:27:e0:b9:90:d7:d2:5c:3a:2d:a9:80: fa:a8:cc:4f:a7:16:9b:11:7b:72:ae:59:ea:87:b2: 73:19:e2:7a:b9:e3:74:98:b8:f3:9c:c4:38:55:70: 02:4c:8c:64:08:37:25:aa:9a:ee:fc:60:73:9f:c9: d9:0f:48:31:31:b1:7b:7a:dc:5e:ea:a1:d3:af:32: 43:d6:28:2f:0e:f1:ee:ff:b0:48:d2:86:b6:51:35: 21:f7:16:5b:2d:bd:72:a5:57:1e:0f:6c:45:e1:7d: 9d:71:c8:4e:bb:be:ab:1a:ea:82:75:81:70:6b:8d: 6e:0d:63:3b:d1:6e:f4:8e:ea:39:c3:31:4c:23:1f: c1:3e:a7:0e:ac:52:e6:18:6b:10:52:cc:67:a8:14: c1:e9:9a:a9:31:8e:7b:98:0d:c4:82:35:de:dc:05: 60:41:51:0a:20:dc:d9:41:bc:cc:91:30:00:7b:c4: 37:f0:02:dc:9d:27:24:8e:5e:62:d4:f3:75:ee:60: be:fd:30:63:ae:44:21:af:f5:1c:88:5a:64:c0:20: 10:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F0:8F:BF:69:45:29:46:7D:C5:4C:1E:F4:1B:54:2B:64:33:EF:EB X509v3 Authority Key Identifier: keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.53.58.0/23 202.92.128.0-202.92.132.255 202.92.134.0-202.92.139.255 202.92.141.0/24 202.92.159.0/24 IPv6: 2400:b000:100::/48 2400:b000:c0e::/48 2400:b000:eee::/48 Signature Algorithm: sha256WithRSAEncryption 0e:0b:8d:88:b2:30:98:bf:dd:9a:83:4c:7f:28:ed:5e:fb:1d: 9b:9d:a7:d6:ec:45:86:81:fc:78:93:a8:c1:a5:d4:75:5b:ff: 6e:50:53:33:9d:f2:58:29:de:eb:27:9c:76:d6:c5:e8:7f:4a: 4b:89:23:ea:48:a7:1f:fc:67:23:fa:8e:53:02:a8:1a:94:84: 4c:0d:4a:a2:2f:ed:c3:48:62:61:53:6a:f6:cc:d5:4c:5f:3e: 77:1b:bd:bd:53:23:fd:b5:9d:b4:95:ef:fe:b8:11:be:d2:84: 5b:fd:5a:6f:f7:d9:64:e5:56:6b:8c:4c:ae:a8:7d:61:bb:e6: 64:4d:81:4b:a2:c7:c9:0a:e8:f8:15:d0:a0:95:71:ca:cd:6d: 0b:ba:a4:a3:d8:a2:db:b5:43:74:2f:67:22:b9:d7:f0:e3:c0: b7:1a:c5:89:b8:1e:cf:7a:cb:3d:73:41:1e:46:05:65:b5:8a: 16:cf:7e:dd:99:11:d4:07:e1:51:54:4e:dc:17:95:b5:d3:dc: 5b:b3:af:0c:14:60:f5:f6:6d:ad:e3:47:48:09:b8:22:aa:7b: 17:24:ef:2a:28:58:61:97:a1:7e:f3:9a:a2:a5:6f:05:b0:67: 91:55:b2:1f:b0:5d:58:9a:4d:38:ed:76:58:5d:b7:69:2b:41: 15:50:d9:af -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB Mjg4N0U2RjUwHhcNMjUwNDE2MjEzMTQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAwMjFjNC03NGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EZkz9XPB+3453hLKDjMNnrUWi387gJX63c5SdUTaSHwjs7IJthA+mUfEfkf nwNSJ+C5kNfSXDotqYD6qMxPpxabEXtyrlnqh7JzGeJ6ueN0mLjznMQ4VXACTIxk CDclqpru/GBzn8nZD0gxMbF7etxe6qHTrzJD1igvDvHu/7BI0oa2UTUh9xZbLb1y pVceD2xF4X2dcchOu76rGuqCdYFwa41uDWM70W70juo5wzFMIx/BPqcOrFLmGGsQ UsxnqBTB6ZqpMY57mA3EgjXe3AVgQVEKINzZQbzMkTAAe8Q38ALcnSckjl5i1PN1 7mC+/TBjrkQhr/UciFpkwCAQjQIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFCzwj79p RSlGfcVMHvQbVCtkM+/rMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1 dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA3MTgvOTI4M0VERUUwRTk0MTFFQjk2NjlFMTMzQzRGOUFFMDIvODQzM0ZGNkEw RTk3MTFFQjlBNkMyQjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwagYIKwYBBQUHAQcBAf8E WzBZMDQEAgABMC4DBAFnNTowDAMEB8pcgAMEAMpchDAMAwQBylyGAwQCylyIAwQA ylyNAwQAylyfMCEEAgACMBsDBwAkALAAAQADBwAkALAADA4DBwAkALAADu4wDQYJ KoZIhvcNAQELBQADggEBAA4LjYiyMJi/3ZqDTH8o7V77HZudp9bsRYaB/HiTqMGl 1HVb/25QUzOd8lgp3usnnHbWxeh/SkuJI+pIpx/8ZyP6jlMCqBqUhEwNSqIv7cNI YmFTavbM1UxfPncbvb1TI/21nbSV7/64Eb7ShFv9Wm/32WTlVmuMTK6ofWG75mRN gUuix8kK6PgV0KCVccrNbQu6pKPYotu1Q3QvZyK51/DjwLcaxYm4Hs96yz1zQR5G BWW1ihbPft2ZEdQH4VFUTtwXlbXT3FuzrwwUYPX2ba3jR0gJuCKqexck7yooWGGX oX7zmqKlbwWwZ5FVsh+wXViaTTjtdlhdt2krQRVQ2a8= -----END CERTIFICATE-----Generated at Fri Oct 24 06:38:34 2025 by rpki-client