$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/D98071A44F4411F0AF01D40FC4F9AE02.roa File: D98071A44F4411F0AF01D40FC4F9AE02.roa (raw, json) Hash identifier: jPpBuj/csuD+KDzy/QfN9S3fduIPNOyEYRQiDC1LErw= Subject key identifier: C6:25:C3:50:77:C4:AF:7D:87:25:76:41:22:04:11:EA:E5:A8:7C:3C Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Certificate serial: 023F Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/D98071A44F4411F0AF01D40FC4F9AE02.roa Signing time: Wed 15 Oct 2025 04:58:01 +0000 ROA not before: Wed 15 Oct 2025 04:58:01 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150434 IP address blocks: 103.40.156.0/23 maxlen: 24 2400:c360::/36 maxlen: 36 2400:c360:1000::/36 maxlen: 36 2400:c360:2000::/36 maxlen: 36 2400:c360:3000::/36 maxlen: 36 2400:c360:4000::/36 maxlen: 36 2400:c360:5000::/36 maxlen: 36 2400:c360:6000::/36 maxlen: 36 2400:c360:7000::/36 maxlen: 36 2400:c360:8000::/36 maxlen: 36 2400:c360:9000::/36 maxlen: 36 2400:c360:a000::/36 maxlen: 36 2400:c360:b000::/36 maxlen: 36 2400:c360:c000::/36 maxlen: 36 2400:c360:d000::/36 maxlen: 36 2400:c360:e000::/36 maxlen: 36 2400:c360:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Validity Not Before: Oct 15 04:58:01 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68ef29d8-d1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:b5:c6:ff:83:c0:4e:e9:ca:12:ce:b1:2b: 5a:7f:e6:e6:d8:d9:07:0c:7d:c2:dc:22:e3:6e:3f: 6e:17:bf:e5:22:6c:de:89:e4:8d:3f:de:ad:af:4b: 3c:f8:ed:b0:9c:13:97:bf:52:aa:b0:e9:64:a9:cb: 7a:65:93:83:11:0e:9b:03:58:4e:22:17:18:b5:0f: a5:01:ed:22:84:19:e7:bd:de:19:9b:51:73:74:04: 1a:94:91:bb:5b:a8:38:40:1c:c0:b1:e7:7c:4f:cc: d1:5a:b5:c4:69:cd:25:cd:3f:92:99:89:8f:4c:56: 1e:57:5b:2e:5e:b4:c1:ac:b3:c8:9e:c8:82:65:0e: de:08:84:df:4e:40:9f:c6:48:50:f4:c4:b0:c3:7f: 04:08:3f:af:10:86:e1:87:ad:cf:9f:08:00:49:49: 64:8e:29:e8:3d:8e:89:a7:ae:e3:7b:e5:0e:05:af: 62:eb:56:10:17:b8:73:e0:fc:47:bf:56:07:2f:17: 3d:47:09:4f:35:8b:d7:e5:ed:bd:d5:eb:e2:4a:7c: 24:0b:37:b5:e5:3d:41:83:3d:e2:5e:97:90:59:a6: c1:32:2d:1b:1a:7b:c3:4c:65:fb:9c:db:93:d4:f6: a4:c2:44:99:7b:45:29:6d:57:49:24:53:7a:14:47: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:25:C3:50:77:C4:AF:7D:87:25:76:41:22:04:11:EA:E5:A8:7C:3C X509v3 Authority Key Identifier: keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/D98071A44F4411F0AF01D40FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.156.0/23 IPv6: 2400:c360::/32 Signature Algorithm: sha256WithRSAEncryption ab:22:ec:50:7f:d9:fb:26:34:93:fc:d4:37:b2:00:d6:d6:32: a3:b7:80:57:3d:ae:24:0c:31:74:dd:be:4a:6f:39:d2:6c:ff: 01:6d:e8:33:3c:67:8c:b5:02:a8:31:d8:1a:cc:81:96:55:87: 4f:7b:c0:db:20:71:06:f2:1a:e8:55:20:b9:09:2c:1d:ee:84: e9:50:2f:b0:07:3b:f9:67:42:6b:86:c7:bd:fc:af:6e:f9:4f: 5f:17:83:b0:00:19:6a:7e:b5:f1:b1:7a:e9:0f:76:b8:6b:cb: f8:34:19:56:6c:01:5e:06:34:37:cd:b1:8f:00:d7:35:e7:06: 06:7c:e5:54:9b:a9:29:d2:5d:1c:08:1c:ab:d5:27:e5:ce:e8: 18:7f:83:bd:23:0c:8d:cc:d9:0f:91:9e:1c:2f:86:94:47:ca: df:9f:e8:dd:22:66:02:2e:85:27:51:b6:80:a4:76:04:ef:c6: be:2f:45:d9:c6:60:ab:7d:0e:73:04:d6:29:56:e3:73:e7:5a: 5a:91:36:63:aa:fd:e9:44:db:08:02:6b:4f:78:62:bc:b2:04: cc:12:6e:a5:d2:e5:03:90:e8:c5:67:b5:1d:97:af:3c:d6:47: a6:78:59:ab:2f:08:9a:16:da:23:0c:b3:c9:45:d1:83:81:5c: 83:d0:9f:8c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0 RTIyRTk0NDUwHhcNMjUxMDE1MDQ1ODAxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVmMjlkOC1kMWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKu1xv+DwE7pyhLOsStaf+bm2NkHDH3C3CLjbj9uF7/lImzeieSNP96tr0s8 +O2wnBOXv1KqsOlkqct6ZZODEQ6bA1hOIhcYtQ+lAe0ihBnnvd4Zm1FzdAQalJG7 W6g4QBzAsed8T8zRWrXEac0lzT+SmYmPTFYeV1suXrTBrLPInsiCZQ7eCITfTkCf xkhQ9MSww38ECD+vEIbhh63PnwgASUlkjinoPY6Jp67je+UOBa9i61YQF7hz4PxH v1YHLxc9RwlPNYvX5e291eviSnwkCze15T1Bgz3iXpeQWabBMi0bGnvDTGX7nNuT 1PakwkSZe0UpbVdJJFN6FEeOCQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMYlw1B3 xK99hyV2QSIEEerlqHw8MB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2 RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTYzNkEvQjBGMzNEMkE2NkVFMTFFREIzQjQxQTVEQzRGOUFFMDIvRDk4MDcxQTQ0 RjQ0MTFGMEFGMDFENDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnKJwwDQQCAAIwBwMFACQAw2AwDQYJKoZIhvcNAQELBQAD ggEBAKsi7FB/2fsmNJP81DeyANbWMqO3gFc9riQMMXTdvkpvOdJs/wFt6DM8Z4y1 Aqgx2BrMgZZVh097wNsgcQbyGuhVILkJLB3uhOlQL7AHO/lnQmuGx738r275T18X g7AAGWp+tfGxeukPdrhry/g0GVZsAV4GNDfNsY8A1zXnBgZ85VSbqSnSXRwIHKvV J+XO6Bh/g70jDI3M2Q+RnhwvhpRHyt+f6N0iZgIuhSdRtoCkdgTvxr4vRdnGYKt9 DnME1ilW43PnWlqRNmOq/elE2wgCa094YryyBMwSbqXS5QOQ6MVntR2XrzzWR6Z4 WasvCJoW2iMMs8lF0YOBXIPQn4w= -----END CERTIFICATE-----Generated at Wed Nov 5 16:49:02 2025 by rpki-client