$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa File: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (raw, json) Hash identifier: fVV5tH5xnHJ5RPLy9jThqMkcctu4xGaw9Zeg+LUw1yQ= Subject key identifier: E4:02:4C:FB:68:EE:BD:57:8A:75:77:B0:2C:B1:93:F0:DD:55:F5:DA Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0E23 Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa Signing time: Thu 28 Aug 2025 18:08:36 +0000 ROA not before: Thu 28 Aug 2025 18:08:36 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 134148 IP address blocks: 103.5.242.0/23 maxlen: 24 2401:c7c0:21a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3619 (0xe23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Aug 28 18:08:36 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b09b24-7511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:05:42:4f:eb:91:14:07:0e:94:b5:83:65: 1c:94:b3:e1:d7:1a:8f:e9:ed:63:a7:52:3a:91:5e: 66:79:c4:26:ce:1f:eb:71:46:8e:02:55:53:e0:91: 9e:c5:87:99:47:b1:cd:89:8f:5b:33:7e:10:13:8d: 9c:16:a1:44:3f:7e:c5:57:ed:6c:6c:a4:1d:1f:0c: 96:85:10:a9:60:e3:57:3d:09:43:fc:ff:d9:5e:fd: 1b:eb:d2:1c:c6:a8:b8:70:8a:30:4c:6e:62:87:3d: 72:71:6d:fd:6b:92:41:3c:af:85:45:d8:ca:d6:21: e8:e3:d4:9c:85:19:a4:a9:9f:61:fe:9f:43:c4:94: 36:f5:6e:92:2b:68:e0:7a:ef:46:e4:e9:87:dd:e6: fa:57:b9:d3:31:c9:af:a6:b1:21:66:61:66:7e:fc: dc:13:9e:1a:fa:50:d8:ea:5a:32:c5:45:83:8f:35: 66:0d:af:0f:e9:7a:ac:b3:33:91:d6:07:de:99:dd: d0:c3:5e:ab:1c:c2:91:00:de:59:51:50:fe:4e:6d: 70:27:60:71:46:1d:93:9d:67:f5:33:36:e3:e8:f5: 2b:fd:71:13:34:04:79:71:db:c0:c6:99:04:5e:2a: 5e:3c:90:61:1d:cc:c3:e1:e7:48:d1:28:e1:8e:1b: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:02:4C:FB:68:EE:BD:57:8A:75:77:B0:2C:B1:93:F0:DD:55:F5:DA X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/9E78AEC4C78E11EBB4983F5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.242.0/23 IPv6: 2401:c7c0:21a::/48 Signature Algorithm: sha256WithRSAEncryption 04:92:32:29:ee:f9:3c:4c:4e:ff:2b:e1:c8:cb:5b:08:be:64: d8:b7:4d:6e:4a:89:21:a5:9d:16:0f:b8:fd:7e:9e:d5:77:ce: 78:93:f4:36:5c:56:cc:bb:9e:3f:8e:b5:80:f6:06:02:a6:fb: bd:2c:bd:ed:00:87:28:22:c1:9f:c3:8b:27:36:04:1a:40:75: 49:bc:5b:6f:10:2d:86:c9:c7:80:e6:2e:66:5c:e3:a8:58:2a: eb:fc:a5:6d:2e:f0:37:43:1f:a3:70:6e:b5:53:10:df:63:13: 64:bb:5a:97:60:45:f5:3a:1f:62:d8:b5:1c:ae:9f:08:b4:47: b7:04:4e:a0:0e:57:90:58:9b:0e:3e:33:ca:f1:4d:80:c6:30: 0e:d9:71:48:ee:04:0f:20:fa:d3:95:3a:14:82:c7:97:8d:8f: 6e:81:ab:21:3d:78:d7:e9:dd:3b:11:85:26:59:69:de:30:b5: fc:d2:59:ea:b3:f1:5e:48:d3:d6:9a:14:c5:85:ba:5d:7a:f8: e4:22:b2:8c:d4:eb:59:cc:bb:f3:a9:9f:0d:08:93:bd:b2:5e: 67:62:60:0b:53:c3:d6:1e:3b:14:a9:33:ea:dd:bd:76:62:f5: 5a:1d:37:1c:5a:0c:b4:59:60:8f:dc:d7:e6:2a:af:ea:63:cc: 63:77:27:5e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjUwODI4MTgwODM2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwOWIyNC03NTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZMFQk/rkRQHDpS1g2UclLPh1xqP6e1jp1I6kV5mecQmzh/rcUaOAlVT4JGe xYeZR7HNiY9bM34QE42cFqFEP37FV+1sbKQdHwyWhRCpYONXPQlD/P/ZXv0b69Ic xqi4cIowTG5ihz1ycW39a5JBPK+FRdjK1iHo49SchRmkqZ9h/p9DxJQ29W6SK2jg eu9G5OmH3eb6V7nTMcmvprEhZmFmfvzcE54a+lDY6loyxUWDjzVmDa8P6XqsszOR 1gfemd3Qw16rHMKRAN5ZUVD+Tm1wJ2BxRh2TnWf1Mzbj6PUr/XETNAR5cdvAxpkE XipePJBhHczD4edI0SjhjhtmGwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOQCTPto 7r1XinV3sCyxk/DdVfXaMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1QjQvNzA5RjdBMjZCODI5MTFFOTkzNzM4QTA5QzRGOUFFMDIvOUU3OEFFQzRD NzhFMTFFQkI0OTgzRjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnBfIwDwQCAAIwCQMHACQBx8ACGjANBgkqhkiG9w0BAQsF AAOCAQEABJIyKe75PExO/yvhyMtbCL5k2LdNbkqJIaWdFg+4/X6e1XfOeJP0NlxW zLueP461gPYGAqb7vSy97QCHKCLBn8OLJzYEGkB1SbxbbxAthsnHgOYuZlzjqFgq 6/ylbS7wN0Mfo3ButVMQ32MTZLtal2BF9TofYti1HK6fCLRHtwROoA5XkFibDj4z yvFNgMYwDtlxSO4EDyD605U6FILHl42PboGrIT141+ndOxGFJllp3jC1/NJZ6rPx XkjT1poUxYW6XXr45CKyjNTrWcy786mfDQiTvbJeZ2JgC1PD1h47FKkz6t29dmL1 Wh03HFoMtFlgj9zX5iqv6mPMY3cnXg== -----END CERTIFICATE-----Generated at Fri Sep 19 15:19:10 2025 by rpki-client