$ rpki-client -vvf rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/47DA361A3F8F11EF8FA3802DC4F9AE02.roa File: 47DA361A3F8F11EF8FA3802DC4F9AE02.roa (raw, json) Hash identifier: kZKPpO1uHctSo/EMrUHJdQ+fm1ea4u/f5P1GBGfWwQ4= Subject key identifier: 5F:7F:9C:D9:CE:87:F3:EB:80:92:2D:44:0F:01:CE:35:B5:70:85:EA Certificate issuer: /CN=A9110FEF/serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45 Certificate serial: 023F Authority key identifier: 32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/47DA361A3F8F11EF8FA3802DC4F9AE02.roa Signing time: Fri 24 Oct 2025 12:43:28 +0000 ROA not before: Fri 24 Oct 2025 12:43:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 133034 IP address blocks: 103.156.126.0/23 maxlen: 23 103.156.126.0/24 maxlen: 24 103.156.127.0/24 maxlen: 24 103.251.232.0/22 maxlen: 22 103.251.232.0/23 maxlen: 23 103.251.232.0/24 maxlen: 24 103.251.233.0/24 maxlen: 24 103.251.234.0/23 maxlen: 23 103.251.234.0/24 maxlen: 24 103.251.235.0/24 maxlen: 24 121.46.70.0/24 maxlen: 24 2400:a740::/32 maxlen: 32 2400:a740::/48 maxlen: 48 2400:a740:1::/48 maxlen: 48 2400:a740:2::/48 maxlen: 48 2400:a740:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110FEF, serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45 Validity Not Before: Oct 24 12:43:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68fb746f-33a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:ba:b3:9b:7e:1c:b1:60:89:70:9e:ba:d4: b3:8e:bc:26:86:f4:a3:e4:db:0a:3a:0b:8e:df:e2: 10:6e:c1:9e:85:6f:d9:52:f1:03:66:8a:8d:e7:2d: 12:ff:e3:c6:51:fd:e1:fc:25:9c:6b:d8:da:e4:b6: 3f:c2:74:92:f5:53:0b:6a:79:c5:6c:c6:1b:1b:43: 90:ec:a6:08:1a:68:54:71:73:50:ec:ea:f1:c5:e1: 35:0c:ad:ef:d1:54:7e:e6:c3:74:6b:02:83:83:36: c7:51:a2:e0:78:fe:35:75:11:66:f3:de:66:bb:93: 8c:1d:d1:54:de:be:6f:05:21:ae:af:85:07:57:db: 63:1f:8b:f3:77:8c:e1:60:7c:24:5d:34:ef:3f:f5: 34:c3:7f:20:dd:c4:c7:1f:db:26:50:02:d3:a7:71: b8:c3:89:d3:c8:3b:57:ac:e0:e1:54:98:01:b9:c2: e1:8d:00:30:e3:fc:e0:a1:2d:37:65:1d:4e:11:ac: a6:77:41:b5:06:46:62:24:ed:a2:69:dc:a3:f7:ed: 52:3f:c1:6c:9e:91:2d:96:df:44:39:20:26:12:77: c9:12:9c:19:d0:7e:e0:23:73:34:a5:18:aa:7c:9d: 5f:2d:28:ea:02:0a:4c:7d:62:ec:7e:94:c6:3b:6f: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7F:9C:D9:CE:87:F3:EB:80:92:2D:44:0F:01:CE:35:B5:70:85:EA X509v3 Authority Key Identifier: keyid:32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/47DA361A3F8F11EF8FA3802DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.126.0/23 103.251.232.0/22 121.46.70.0/24 IPv6: 2400:a740::/32 Signature Algorithm: sha256WithRSAEncryption 3d:48:b6:4e:df:97:62:88:84:3a:09:b2:76:96:ee:38:df:83: dd:1b:b4:b5:a7:3a:56:a0:3f:38:56:f6:10:a7:ad:62:12:9e: 1f:d6:bf:19:25:d4:ea:24:2f:9b:c3:0d:09:91:10:41:91:ed: a9:fe:61:d2:42:0d:1d:18:01:0e:19:a3:dc:ef:8a:a3:b7:be: 6b:1b:dc:fd:d2:ba:f9:cd:f1:3a:77:a8:04:ce:b0:52:9c:16: d4:7f:46:9c:fe:70:9e:7f:c7:a1:6a:04:5a:e8:66:33:76:e7: 95:0a:91:8a:e5:66:b1:0f:2c:bd:50:a5:f1:86:54:2e:f9:ce: 0c:70:69:2d:1e:0f:62:7e:b2:f4:91:44:0d:a1:d4:d7:3f:b9: 48:6d:8f:c5:0e:96:5f:fd:9f:02:1e:cd:64:3b:c9:d3:4a:fb: c3:38:a5:2e:a5:48:df:f9:c9:f2:b8:12:bb:12:30:50:dc:80: b1:c8:03:c5:86:b3:c3:32:6e:cd:aa:5c:76:08:97:3d:f4:b6: 5e:79:9a:c2:ca:da:67:a5:ff:57:8d:37:aa:a1:27:f6:65:9c: 62:9c:2d:03:89:0b:1c:3e:f0:07:31:31:9f:ed:95:37:8b:5a: ba:3d:4e:2e:78:b6:b5:de:a9:83:89:34:56:9b:74:85:42:32: 20:e1:c9:35 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGRUYxMTAvBgNVBAUTKDMyMUQwQUI3OEExQUJFMzUxQTdEQjc5MzIwRDlGRkQz NzJBMDhDNDUwHhcNMjUxMDI0MTI0MzI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZiNzQ2Zi0zM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk26s5t+HLFgiXCeutSzjrwmhvSj5NsKOguO3+IQbsGehW/ZUvEDZoqN5y0S /+PGUf3h/CWca9ja5LY/wnSS9VMLannFbMYbG0OQ7KYIGmhUcXNQ7OrxxeE1DK3v 0VR+5sN0awKDgzbHUaLgeP41dRFm895mu5OMHdFU3r5vBSGur4UHV9tjH4vzd4zh YHwkXTTvP/U0w38g3cTHH9smUALTp3G4w4nTyDtXrODhVJgBucLhjQAw4/zgoS03 ZR1OEaymd0G1BkZiJO2iadyj9+1SP8FsnpEtlt9EOSAmEnfJEpwZ0H7gI3M0pRiq fJ1fLSjqAgpMfWLsfpTGO2+81QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFF9/nNnO h/PrgJItRA8BzjW1cIXqMB8GA1UdIwQYMBaAFDIdCreKGr41Gn23kyDZ/9NyoIxF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEZFRi9CMDM2M0Q2MDY0 RjUxMUVEODJCMDNDMTFDNEY5QUUwMi9NaDBLdDRvYXZqVWFmYmVUSU5uXzAzS2dq RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oMEt0NG9hdmpVYWZiZVRJTm5fMDNLZ2pFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBGRUYvQjAzNjNENjA2NEY1MTFFRDgyQjAzQzExQzRGOUFFMDIvNDdEQTM2MUEz RjhGMTFFRjhGQTM4MDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAFnnH4DBAJn++gDBAB5LkYwDQQCAAIwBwMFACQAp0AwDQYJ KoZIhvcNAQELBQADggEBAD1Itk7fl2KIhDoJsnaW7jjfg90btLWnOlagPzhW9hCn rWISnh/Wvxkl1OokL5vDDQmREEGR7an+YdJCDR0YAQ4Zo9zviqO3vmsb3P3SuvnN 8Tp3qATOsFKcFtR/Rpz+cJ5/x6FqBFroZjN255UKkYrlZrEPLL1QpfGGVC75zgxw aS0eD2J+svSRRA2h1Nc/uUhtj8UOll/9nwIezWQ7ydNK+8M4pS6lSN/5yfK4ErsS MFDcgLHIA8WGs8Mybs2qXHYIlz30tl55msLK2mel/1eNN6qhJ/ZlnGKcLQOJCxw+ 8AcxMZ/tlTeLWro9Ti54trXeqYOJNFabdIVCMiDhyTU= -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:45 2025 by rpki-client