$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/FF7010DCAE9811F081180758C4F9AE02.roa File: FF7010DCAE9811F081180758C4F9AE02.roa (raw, json) Hash identifier: dcjW8tb18sprYtlqQuwATsQiWyTAdpnnMw5dfO30D4A= Subject key identifier: 01:99:7F:38:E0:FC:3A:A4:64:B2:64:57:8A:A0:F3:14:F0:DD:FD:D5 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 07BD Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/FF7010DCAE9811F081180758C4F9AE02.roa Signing time: Tue 21 Oct 2025 16:14:19 +0000 ROA not before: Tue 21 Oct 2025 16:14:19 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 31898 IP address blocks: 103.42.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Oct 21 16:14:19 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68f7b15b-fa48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:5c:36:cf:91:bb:d4:52:a0:65:4b:a4:00: 0f:a9:28:94:39:a0:9f:3f:96:4f:08:98:fe:8a:22: 22:a8:e4:fa:a5:37:33:29:2f:4d:62:04:1b:88:33: 38:6a:ca:2a:1c:9d:b7:ac:a0:c9:51:a3:85:09:1f: 43:fb:04:c4:1a:3f:68:fa:f4:fb:27:86:33:2c:86: 0e:be:55:4c:a6:bc:4e:29:9e:f2:df:d5:d1:45:3a: 7b:6f:33:dd:7b:26:03:91:cc:61:8b:d1:cd:53:d0: 0e:0f:cb:fb:c1:20:fb:0c:ee:d0:78:5c:16:88:f2: 03:dc:9a:8d:7d:0c:0f:0d:6f:a1:6c:63:f4:11:23: 25:f3:58:7d:1a:a7:a7:8f:ad:ad:6a:e5:8c:31:40: 43:39:d3:f6:60:3e:03:d2:da:44:1d:22:3c:0e:4f: 97:0b:f5:bd:e4:f5:dc:b4:ba:88:16:9e:18:a5:c3: cc:30:86:1b:f1:d5:bb:6c:04:95:e1:87:27:3a:18: ab:e9:fb:12:21:a9:79:10:d6:2f:ca:8c:7f:ea:9f: 21:4b:d6:62:51:98:94:2f:c8:97:6c:ce:b6:71:63: 60:21:c6:65:8a:0c:e3:47:fd:ef:cd:fc:85:09:65: 9d:f3:3f:7f:ec:f0:14:d0:05:37:40:cd:a5:8f:12: ac:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:99:7F:38:E0:FC:3A:A4:64:B2:64:57:8A:A0:F3:14:F0:DD:FD:D5 X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/FF7010DCAE9811F081180758C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.224.0/23 Signature Algorithm: sha256WithRSAEncryption 85:6b:8c:dc:05:59:f9:6b:3d:02:60:33:ee:b3:24:b3:41:53: 33:6d:b0:04:f6:d2:65:4a:54:c1:ee:55:1d:aa:0a:f9:10:3a: 13:4a:c2:7a:3a:34:8a:d4:ad:e7:35:86:e3:e0:c1:33:15:1f: a3:2b:f0:fa:57:e8:2f:f6:a4:47:cd:d7:e8:3b:3d:17:b8:3f: 39:2c:f2:f1:8b:51:49:09:72:68:20:fd:74:c7:31:d8:91:ec: ba:6e:6a:2d:c4:6d:a8:11:f5:e4:45:28:0a:3a:56:e9:f0:80: 4b:8c:68:f7:59:aa:d6:ce:d4:1b:c9:78:12:a9:d7:3e:72:61: 25:a0:96:93:53:1e:df:e5:52:41:c1:15:a0:88:ad:20:d7:0f: 49:0c:a8:e5:4e:9f:8e:3e:f2:7e:7c:a1:6d:20:f8:03:2b:53: 06:f2:de:c6:3e:19:bd:be:df:75:76:fa:94:13:69:17:ee:fe: 19:be:76:98:ca:0d:de:f5:83:b3:90:c0:bc:72:92:d0:a6:9b: 93:c9:2a:b4:0f:e9:71:f1:76:cb:ac:b7:3d:03:25:02:ac:54: 49:a0:51:02:7c:32:b8:6d:ec:69:35:53:72:fc:cf:82:cf:2f: a6:69:f8:c1:3e:30:64:fc:a6:8c:34:07:eb:09:88:bf:08:4b: 50:b1:e6:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjUxMDIxMTYxNDE5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY3YjE1Yi1mYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoy9cNs+Ru9RSoGVLpAAPqSiUOaCfP5ZPCJj+iiIiqOT6pTczKS9NYgQbiDM4 asoqHJ23rKDJUaOFCR9D+wTEGj9o+vT7J4YzLIYOvlVMprxOKZ7y39XRRTp7bzPd eyYDkcxhi9HNU9AOD8v7wSD7DO7QeFwWiPID3JqNfQwPDW+hbGP0ESMl81h9Gqen j62tauWMMUBDOdP2YD4D0tpEHSI8Dk+XC/W95PXctLqIFp4YpcPMMIYb8dW7bASV 4YcnOhir6fsSIal5ENYvyox/6p8hS9ZiUZiUL8iXbM62cWNgIcZligzjR/3vzfyF CWWd8z9/7PAU0AU3QM2ljxKsUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAGZfzjg /DqkZLJkV4qg8xTw3f3VMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI4NzEvOEEyREFCRTAxREE3MTFFQjgwNzEyQTRGQzRGOUFFMDIvRkY3MDEwRENB RTk4MTFGMDgxMTgwNzU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnKuAwDQYJKoZIhvcNAQELBQADggEBAIVrjNwFWflrPQJg M+6zJLNBUzNtsAT20mVKVMHuVR2qCvkQOhNKwno6NIrUrec1huPgwTMVH6Mr8PpX 6C/2pEfN1+g7PRe4Pzks8vGLUUkJcmgg/XTHMdiR7Lpuai3EbagR9eRFKAo6Vunw gEuMaPdZqtbO1BvJeBKp1z5yYSWglpNTHt/lUkHBFaCIrSDXD0kMqOVOn44+8n58 oW0g+AMrUwby3sY+Gb2+33V2+pQTaRfu/hm+dpjKDd71g7OQwLxyktCmm5PJKrQP 6XHxdsustz0DJQKsVEmgUQJ8Mrht7Gk1U3L8z4LPL6Zp+ME+MGT8pow0B+sJiL8I S1Cx5so= -----END CERTIFICATE-----Generated at Mon Nov 3 17:12:24 2025 by rpki-client