$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/2F5670EAABF411F0A51AED16C4F9AE02.roa File: 2F5670EAABF411F0A51AED16C4F9AE02.roa (raw, json) Hash identifier: JRoDal5bVz7qmsDJQA+Q/hdAU+W6lHUDGMrJuCQ18nk= Subject key identifier: F8:84:E8:28:A4:F0:3C:CD:3E:3C:BE:FE:4A:86:4F:E3:95:E1:30:6B Certificate issuer: /CN=A9112B24/serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Certificate serial: E1 Authority key identifier: CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/2F5670EAABF411F0A51AED16C4F9AE02.roa Signing time: Sat 18 Oct 2025 07:29:30 +0000 ROA not before: Sat 18 Oct 2025 07:29:30 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 26658 IP address blocks: 103.69.120.0/22 maxlen: 24 203.88.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112B24, serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516 Validity Not Before: Oct 18 07:29:30 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68f341da-0528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:28:c1:e9:d3:c6:07:8c:7c:c9:af:ce:c7: 2f:3b:5c:f4:31:23:83:6e:84:5d:84:8c:ac:0d:17: 6f:c5:4a:4a:95:1a:bf:31:60:86:11:37:fe:bd:bf: 14:ff:64:54:90:89:85:b2:0a:a6:ca:22:5d:7a:e9: 92:34:e3:62:41:a5:d7:df:54:6b:d6:0e:42:48:71: 76:19:55:74:96:db:b0:d3:81:60:fe:5a:1b:79:65: 98:cc:9c:a0:00:e5:51:fd:dd:42:4b:00:76:5c:9d: c0:b9:01:68:b9:5b:39:56:55:59:81:6d:23:bf:0c: de:b7:5e:eb:04:f2:61:70:ea:20:eb:a1:56:c3:ea: 43:2d:02:09:20:d1:f5:4b:0c:2b:ff:8a:28:c0:3e: 93:74:6c:36:45:28:32:57:92:76:b2:cc:18:6d:8b: b5:8c:4a:7f:dd:30:7d:b8:92:8e:63:73:2c:b2:23: b9:83:d7:d0:af:f1:28:3a:03:82:cc:c5:b2:7d:3c: a3:fa:c8:be:b6:87:28:f5:48:8c:2d:00:7e:16:c3: 25:c8:dd:30:80:84:2b:c5:fe:53:fd:2c:bf:56:91: 5d:12:2c:3c:4c:f3:c4:1d:12:b9:eb:6d:eb:af:50: 8a:22:22:7f:4e:b1:27:bd:56:a6:6e:2f:af:09:41: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:84:E8:28:A4:F0:3C:CD:3E:3C:BE:FE:4A:86:4F:E3:95:E1:30:6B X509v3 Authority Key Identifier: keyid:CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/2F5670EAABF411F0A51AED16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.69.120.0/22 203.88.108.0/22 Signature Algorithm: sha256WithRSAEncryption 04:bb:a6:85:eb:67:0f:ef:70:84:c1:9e:0f:60:0b:23:02:69: f7:20:81:48:b5:49:af:c5:49:80:85:1a:5c:b3:19:e0:66:45: b6:1c:a6:9c:b1:af:f7:4c:15:a8:8b:a2:fd:ec:17:89:3e:1d: 5f:98:d9:e1:5c:7a:6e:59:5d:ed:d1:d9:42:a1:91:69:55:c1: 16:36:5c:a1:a3:85:3e:36:06:4b:67:c0:af:41:4f:54:91:f1: 20:a1:eb:46:48:8d:a0:1c:e5:62:d4:91:1f:2e:f9:b0:7f:de: 86:7e:73:28:76:0a:07:57:51:45:7c:ae:08:c2:48:53:ac:0a: cc:6a:5d:31:e4:a0:2f:75:96:9b:44:d7:85:34:d2:18:ef:30: 66:a3:24:27:1a:53:92:4a:d9:0d:43:51:ab:cb:9e:4a:51:eb: 1d:17:a6:3f:42:62:1c:85:1f:6b:20:ad:35:d4:c2:e8:4b:fb: 4c:b9:84:16:66:87:c0:42:86:e8:8f:0d:fe:48:1f:e1:a2:3e: d1:7e:6d:b1:f1:3f:70:c5:66:58:f6:e2:19:e5:0a:f2:8a:ea: 40:e3:58:b4:78:96:32:38:b7:06:1e:78:8c:11:cc:fc:c5:e0: bc:93:e4:c3:89:37:42:c3:7c:8e:96:59:4a:fa:30:42:d1:8c: 82:3b:27:5b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCMjQxMTAvBgNVBAUTKENBNjRCMTczMTE5NTIwOTNDRDRENjBEQUFGMTdCNkFD QTBGN0E1MTYwHhcNMjUxMDE4MDcyOTMwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYzNDFkYS0wNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwooowenTxgeMfMmvzscvO1z0MSODboRdhIysDRdvxUpKlRq/MWCGETf+vb8U /2RUkImFsgqmyiJdeumSNONiQaXX31Rr1g5CSHF2GVV0ltuw04Fg/lobeWWYzJyg AOVR/d1CSwB2XJ3AuQFouVs5VlVZgW0jvwzet17rBPJhcOog66FWw+pDLQIJINH1 Swwr/4oowD6TdGw2RSgyV5J2sswYbYu1jEp/3TB9uJKOY3MssiO5g9fQr/EoOgOC zMWyfTyj+si+toco9UiMLQB+FsMlyN0wgIQrxf5T/Sy/VpFdEiw8TPPEHRK5623r r1CKIiJ/TrEnvVambi+vCUFbtwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPiE6Cik 8DzNPjy+/kqGT+OV4TBrMB8GA1UdIwQYMBaAFMpksXMRlSCTzU1g2q8Xtqyg96UW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkIyNC84QTE2RkY3MjVC QTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklKUE5UV0RhcnhlMnJLRDNw UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltU3hjeEdWSUpQTlRXRGFyeGUycktEM3BSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJCMjQvOEExNkZGNzI1QkEwMTFFRjlGMkYyMzYxQzRGOUFFMDIvMkY1NjcwRUFB QkY0MTFGMEE1MUFFRDE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnRXgDBALLWGwwDQYJKoZIhvcNAQELBQADggEBAAS7poXr Zw/vcITBng9gCyMCafcggUi1Sa/FSYCFGlyzGeBmRbYcppyxr/dMFaiLov3sF4k+ HV+Y2eFcem5ZXe3R2UKhkWlVwRY2XKGjhT42BktnwK9BT1SR8SCh60ZIjaAc5WLU kR8u+bB/3oZ+cyh2CgdXUUV8rgjCSFOsCsxqXTHkoC91lptE14U00hjvMGajJCca U5JK2Q1DUavLnkpR6x0Xpj9CYhyFH2sgrTXUwuhL+0y5hBZmh8BChuiPDf5IH+Gi PtF+bbHxP3DFZlj24hnlCvKK6kDjWLR4ljI4twYeeIwRzPzF4LyT5MOJN0LDfI6W WUr6MELRjII7J1s= -----END CERTIFICATE-----Generated at Tue Oct 28 06:43:34 2025 by rpki-client