$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/A01CB8D409DD11EBB507BD1DC4F9AE02.roa File: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (raw, json) Hash identifier: OxZStMenvNbbBM0B5p11XZWipGKvwq8HkkBRgx7lHnc= Subject key identifier: 3A:28:A2:25:55:3A:DE:36:5A:51:0A:78:E0:16:A2:47:31:4F:AC:4F Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 07AD Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/A01CB8D409DD11EBB507BD1DC4F9AE02.roa Signing time: Tue 08 Jul 2025 22:02:26 +0000 ROA not before: Tue 08 Jul 2025 22:02:26 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55720 IP address blocks: 45.120.28.0/24 maxlen: 24 45.120.29.0/24 maxlen: 24 45.120.30.0/24 maxlen: 24 45.120.31.0/24 maxlen: 24 103.232.84.0/24 maxlen: 24 103.232.85.0/24 maxlen: 24 103.232.86.0/24 maxlen: 24 103.232.87.0/24 maxlen: 24 2402:90c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: Jul 8 22:02:26 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686d9572-ec01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:a0:b7:2b:f4:fe:ca:b5:1e:bc:70:7b:63: 87:6b:0a:63:1b:e3:9c:60:3e:af:a1:1c:32:79:e4: a3:7b:00:60:8d:7f:5b:46:a4:f3:df:ba:dd:59:20: 3b:aa:44:6a:03:e0:b5:9d:8d:f3:32:f2:e5:a9:5d: 98:52:b4:e2:f2:b4:a7:53:8e:77:53:89:55:26:4d: 0a:2d:49:bc:a3:20:cd:16:64:fc:e0:15:4c:b6:fb: c6:e0:ae:39:50:7e:9f:96:f6:24:ba:92:5f:cd:ae: 68:46:f0:27:80:e7:f4:0f:89:f6:5e:ea:80:d5:30: 5a:e0:26:c1:73:bd:38:a1:39:dd:17:c7:28:f1:ff: 12:d9:6c:15:44:d1:37:d7:b1:98:9c:9f:3f:9f:dd: 22:be:aa:0a:05:a5:90:ac:1f:6b:87:0e:c8:e7:2f: cf:39:0c:d2:3d:a6:5c:a6:9a:98:78:77:b6:0c:e6: ec:60:6c:b9:e4:78:b1:d5:25:3e:36:ec:e7:44:f1: 92:5c:0f:4c:20:1c:50:15:99:43:dc:f9:7d:c1:7b: 44:a5:b0:99:e2:9f:be:dd:fd:d5:5a:c3:1c:65:d6: 44:8b:a7:df:14:4e:90:55:92:04:c5:87:d6:e8:7f: 57:03:20:85:1d:48:c4:81:14:5d:fb:76:17:2a:cb: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:A2:25:55:3A:DE:36:5A:51:0A:78:E0:16:A2:47:31:4F:AC:4F X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/A01CB8D409DD11EBB507BD1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.28.0/22 103.232.84.0/22 IPv6: 2402:90c0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:a1:e5:0f:6b:d0:68:fe:89:66:a6:d6:4b:24:2f:0a:b3:a1: 28:23:e7:bc:48:57:0f:fd:81:07:ef:af:14:47:b6:a2:67:81: a5:58:8e:d6:09:0d:e4:b5:a2:a3:02:21:c9:f8:3f:d0:af:a4: 18:07:19:7d:67:42:d8:2e:3a:9b:04:e2:18:92:49:8c:d6:38: 75:22:0e:40:5e:8f:a2:87:16:a8:dc:04:92:b5:6b:02:3c:e4: e0:45:2b:6e:6e:d6:42:e5:10:a0:0b:1e:7b:38:a7:9d:6d:41: 98:90:71:9c:c5:40:d2:82:55:63:0b:23:7c:8c:e7:3d:ab:42: 63:c3:93:35:be:db:38:ce:5a:4f:e0:90:80:9b:31:9c:68:de: e0:52:da:a3:c1:9d:67:83:b7:27:1b:dc:26:7e:ad:1e:22:6e: ba:68:2c:1f:ba:11:c8:75:3e:79:a7:63:e1:3c:30:2c:df:bb: 23:ff:8b:a9:aa:5a:00:cb:a4:5f:83:83:71:fb:a8:3e:eb:cb: 26:a1:59:f5:07:13:e0:9e:70:e9:8e:27:6e:98:4d:00:9c:7b: 6e:43:af:af:9e:36:c3:f3:20:50:49:e0:24:fb:8e:bb:5a:63: 8e:6f:6c:3b:18:a3:5a:43:df:cd:d1:07:e6:76:bb:77:04:08: cf:ca:64:3b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjUwNzA4MjIwMjI2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkOTU3Mi1lYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwmgtyv0/sq1Hrxwe2OHawpjG+OcYD6voRwyeeSjewBgjX9bRqTz37rdWSA7 qkRqA+C1nY3zMvLlqV2YUrTi8rSnU453U4lVJk0KLUm8oyDNFmT84BVMtvvG4K45 UH6flvYkupJfza5oRvAngOf0D4n2XuqA1TBa4CbBc704oTndF8co8f8S2WwVRNE3 17GYnJ8/n90ivqoKBaWQrB9rhw7I5y/POQzSPaZcppqYeHe2DObsYGy55Hix1SU+ NuznRPGSXA9MIBxQFZlD3Pl9wXtEpbCZ4p++3f3VWsMcZdZEi6ffFE6QVZIExYfW 6H9XAyCFHUjEgRRd+3YXKsuQBwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFDoooiVV Ot42WlEKeOAWokcxT6xPMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNERDkvN0M5MkI4RTIwOURDMTFFQkFGNDc5RDFDQzRGOUFFMDIvQTAxQ0I4RDQw OUREMTFFQkI1MDdCRDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIteBwDBAJn6FQwDQQCAAIwBwMFACQCkMAwDQYJKoZIhvcN AQELBQADggEBAAuh5Q9r0Gj+iWam1kskLwqzoSgj57xIVw/9gQfvrxRHtqJngaVY jtYJDeS1oqMCIcn4P9CvpBgHGX1nQtguOpsE4hiSSYzWOHUiDkBej6KHFqjcBJK1 awI85OBFK25u1kLlEKALHns4p51tQZiQcZzFQNKCVWMLI3yM5z2rQmPDkzW+2zjO Wk/gkICbMZxo3uBS2qPBnWeDtycb3CZ+rR4ibrpoLB+6Ech1PnmnY+E8MCzfuyP/ i6mqWgDLpF+Dg3H7qD7ryyahWfUHE+CecOmOJ26YTQCce25Dr6+eNsPzIFBJ4CT7 jrtaY45vbDsYo1pD383RB+Z2u3cECM/KZDs= -----END CERTIFICATE-----Generated at Wed Nov 5 09:40:15 2025 by rpki-client