$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/74BA16C04A8611F08884C659C4F9AE02.roa File: 74BA16C04A8611F08884C659C4F9AE02.roa (raw, json) Hash identifier: 78WKR0aB90eg+DMuEsDjeSMy8OpsveQATPc6t2hqkwo= Subject key identifier: 5F:8C:0A:82:71:6D:EC:B2:9B:69:A3:98:66:A2:B3:EC:68:FD:F7:CF Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0851 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/74BA16C04A8611F08884C659C4F9AE02.roa Signing time: Wed 08 Oct 2025 22:54:16 +0000 ROA not before: Wed 08 Oct 2025 22:54:16 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 23532 IP address blocks: 43.252.209.0/24 maxlen: 24 103.225.196.0/24 maxlen: 24 103.234.54.0/24 maxlen: 24 150.107.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 00:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2129 (0x851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:16 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e6eb98-15d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:d7:02:a3:07:65:8c:1e:46:a7:00:ee:0d: 87:95:82:5d:e9:fe:55:73:0d:d2:19:7b:cc:57:5a: b4:28:e0:2c:88:b5:36:18:d6:f6:3e:19:f7:b1:25: 0c:03:7b:77:5b:02:63:aa:e9:db:10:7a:ab:d9:5f: cc:fb:fd:b7:73:20:4d:e4:18:6c:48:6d:64:cf:82: b3:6e:b6:8b:f9:f6:99:b9:ec:4d:67:97:2c:bf:11: 96:fa:8b:0a:c2:68:92:f7:72:7a:eb:e8:8a:5a:0a: 5d:af:29:30:4d:6e:6b:0b:c3:3a:c1:94:0f:e7:ed: ce:07:5f:16:20:5e:28:85:23:0f:7a:28:76:27:99: 43:bd:87:30:0b:9d:26:ee:39:90:eb:6e:49:e0:a2: 3b:1a:fc:16:e9:d9:5e:a3:03:3c:82:c5:e9:4c:b6: 4d:12:7b:d3:02:58:9b:67:e2:87:a2:7a:e3:c7:d3: 93:76:3c:0b:6e:a6:99:d7:fd:72:16:fa:9a:78:06: d6:b9:e0:73:6b:4c:fb:d3:fc:32:65:83:2b:7e:5f: bb:82:77:48:b6:82:1d:91:7c:8e:8e:5a:af:50:0a: ca:5e:6d:40:69:86:4e:85:cb:c5:19:d8:ef:d6:a4: 7b:2d:a0:56:92:9a:b5:98:fc:4c:c3:73:e3:83:61: 06:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8C:0A:82:71:6D:EC:B2:9B:69:A3:98:66:A2:B3:EC:68:FD:F7:CF X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/74BA16C04A8611F08884C659C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.209.0/24 103.225.196.0/24 103.234.54.0/24 150.107.2.0/24 Signature Algorithm: sha256WithRSAEncryption 82:cb:d3:04:ac:49:f0:70:bc:7a:1b:b2:d0:c7:7f:ff:79:48: 07:03:d7:ac:b5:d4:07:60:55:d5:e2:f7:a1:0b:c3:c9:42:ba: 73:b4:43:82:3a:48:20:90:53:b6:89:f7:73:cd:2f:2b:60:4a: d3:93:43:05:bd:bf:2b:da:53:66:3f:52:53:03:6c:4a:59:13: 9c:eb:e1:fa:a5:76:29:ad:5b:98:2d:4c:fd:67:19:3e:85:61: 6d:69:0d:a7:a0:eb:4a:7b:ae:a5:27:f9:b6:1e:23:5b:2e:9b: 01:8f:00:94:bc:6e:d2:aa:f4:9c:f0:f7:ca:a0:1c:3f:5e:3f: a1:05:3a:a6:13:2d:9c:56:0b:3e:cb:b8:b8:08:2a:cb:66:2f: 65:58:65:e9:72:d6:16:86:6b:27:80:24:05:69:4f:f5:d8:07: 8b:b0:5d:44:ef:ed:59:cc:0a:78:11:2f:a4:c7:43:ab:0c:5a: 8b:9d:65:1a:85:e5:64:2d:31:25:8f:a5:f0:59:6b:0c:c5:7f: ee:4a:28:28:40:c8:43:e1:b1:d7:fd:bc:61:66:ec:76:07:58: fc:9d:e6:35:0b:f1:8b:e4:40:ef:71:8d:7b:68:a9:8d:82:9d: 01:8b:1e:1b:d2:b6:3c:cb:97:af:c9:df:17:2b:59:89:89:1a: a7:1f:4f:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDE2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZWI5OC0xNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvTXAqMHZYweRqcA7g2HlYJd6f5Vcw3SGXvMV1q0KOAsiLU2GNb2Phn3sSUM A3t3WwJjqunbEHqr2V/M+/23cyBN5BhsSG1kz4KzbraL+faZuexNZ5csvxGW+osK wmiS93J66+iKWgpdrykwTW5rC8M6wZQP5+3OB18WIF4ohSMPeih2J5lDvYcwC50m 7jmQ625J4KI7GvwW6dleowM8gsXpTLZNEnvTAlibZ+KHonrjx9OTdjwLbqaZ1/1y FvqaeAbWueBza0z70/wyZYMrfl+7gndItoIdkXyOjlqvUArKXm1AaYZOhcvFGdjv 1qR7LaBWkpq1mPxMw3Pjg2EGNwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFF+MCoJx beyym2mjmGais+xo/ffPMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNzRCQTE2QzA0 QTg2MTFGMDg4ODRDNjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAr/NEDBABn4cQDBABn6jYDBACWawIwDQYJKoZIhvcNAQEL BQADggEBAILL0wSsSfBwvHobstDHf/95SAcD16y11AdgVdXi96ELw8lCunO0Q4I6 SCCQU7aJ93PNLytgStOTQwW9vyvaU2Y/UlMDbEpZE5zr4fqldimtW5gtTP1nGT6F YW1pDaeg60p7rqUn+bYeI1sumwGPAJS8btKq9Jzw98qgHD9eP6EFOqYTLZxWCz7L uLgIKstmL2VYZely1haGayeAJAVpT/XYB4uwXUTv7VnMCngRL6THQ6sMWoudZRqF 5WQtMSWPpfBZawzFf+5KKChAyEPhsdf9vGFm7HYHWPyd5jUL8YvkQO9xjXtoqY2C nQGLHhvStjzLl6/J3xcrWYmJGqcfTyY= -----END CERTIFICATE-----Generated at Tue Oct 14 17:29:04 2025 by rpki-client