$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/38C8C2E6B3FF11F0B056312DC4F9AE02.roa File: 38C8C2E6B3FF11F0B056312DC4F9AE02.roa (raw, json) Hash identifier: eGvi9ehXeYJN73mQ/IC0/2k5dRBhN6mtIFIP3LLFsyA= Subject key identifier: BF:7B:B0:42:DB:5B:78:60:B3:A5:28:6B:21:2C:22:2F:C9:A5:D1:47 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 022C Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/38C8C2E6B3FF11F0B056312DC4F9AE02.roa Signing time: Tue 28 Oct 2025 13:08:40 +0000 ROA not before: Tue 28 Oct 2025 13:08:40 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137704 IP address blocks: 103.113.196.0/22 maxlen: 22 103.113.196.0/23 maxlen: 23 2402:c140::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Oct 28 13:08:40 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6900c058-2502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:37:72:fb:16:9d:71:a3:85:52:b3:9a:93: 0e:2f:ff:95:ca:a5:62:cb:ef:8e:24:39:46:f6:15: 5a:19:5d:73:87:1a:84:b1:5d:72:9a:a4:71:39:54: 66:a6:65:fd:e4:5c:13:f6:5e:48:40:43:75:fc:ab: 77:61:7b:08:6e:39:95:f8:ad:bb:af:e3:db:9e:1b: e2:f0:6a:38:7e:0d:82:35:a9:8f:7b:9d:43:5e:cf: bc:7a:e9:f3:b7:23:ea:b5:ff:75:76:d7:07:73:46: 58:b0:f5:51:5c:7b:b7:fa:1f:57:40:c4:2d:ad:47: 15:36:22:49:09:af:3c:2f:b4:9a:a4:12:7c:a0:06: f7:85:fd:9b:ab:b6:d0:0b:e5:45:aa:0e:de:b2:a6: 9e:3f:28:78:01:28:8c:9e:8c:7c:79:1c:f7:2e:0c: e2:e6:df:7d:04:d9:31:2e:ea:4f:08:52:27:bd:c1: 07:fc:f8:e0:70:b3:4b:24:dc:f5:7a:54:4f:ca:d0: e8:0a:50:1e:7d:93:e3:7b:51:44:ec:00:a7:1f:0d: 4c:43:7a:30:3e:ee:63:66:0b:1b:a4:99:b6:b0:25: 9f:f7:5b:25:65:e7:53:69:e2:a2:68:76:34:af:58: 6d:4c:0e:1c:b9:c9:6b:8c:e4:3f:c3:24:55:41:b0: 79:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7B:B0:42:DB:5B:78:60:B3:A5:28:6B:21:2C:22:2F:C9:A5:D1:47 X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/38C8C2E6B3FF11F0B056312DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.196.0/22 IPv6: 2402:c140::/32 Signature Algorithm: sha256WithRSAEncryption 8c:87:f8:ef:69:17:60:8d:81:a5:7e:e7:a0:fd:71:8f:b3:67: f8:b1:ad:9b:98:dc:37:b1:06:3f:d9:ee:8e:d1:91:12:30:86: f5:6a:4c:5d:32:2e:67:af:26:d2:a0:6c:ff:45:67:d7:5c:0a: 94:92:99:7e:59:4f:10:be:10:13:23:a9:e1:83:53:1a:86:f7: be:0a:63:d6:98:97:43:02:87:3a:c9:6a:6c:16:9b:6a:64:85: 8b:42:18:23:29:57:5c:ec:5a:47:0d:c0:7d:e1:bf:86:bb:69: fb:8f:fd:20:5b:3c:e5:62:2b:b0:4f:2b:ec:20:a9:54:d7:4f: 30:63:1b:48:81:e7:19:d7:82:9d:fe:f2:74:cb:bc:fa:c5:69: 5d:4e:ca:e5:6d:24:28:54:29:69:48:a2:59:15:4c:86:04:74: de:1e:0c:91:59:7c:ee:94:5e:21:fa:e0:67:c6:bb:64:62:ab: bc:1b:d1:32:2d:d0:57:d5:a0:58:c5:cd:0e:b9:c5:a0:dd:bb: fc:6f:9e:24:24:2f:d2:81:01:98:d3:c5:4c:09:a9:d0:9d:a3: b6:3e:ae:10:ce:1b:a2:f2:e3:4a:5d:48:84:87:56:61:6e:6f: 66:9b:e1:56:9a:8f:9e:e0:21:bd:a8:ee:29:b5:43:69:27:b3: 5c:a6:4b:96 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjUxMDI4MTMwODQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAwYzA1OC0yNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNQ3cvsWnXGjhVKzmpMOL/+VyqViy++OJDlG9hVaGV1zhxqEsV1ymqRxOVRm pmX95FwT9l5IQEN1/Kt3YXsIbjmV+K27r+Pbnhvi8Go4fg2CNamPe51DXs+8eunz tyPqtf91dtcHc0ZYsPVRXHu3+h9XQMQtrUcVNiJJCa88L7SapBJ8oAb3hf2bq7bQ C+VFqg7esqaePyh4ASiMnox8eRz3Lgzi5t99BNkxLupPCFInvcEH/PjgcLNLJNz1 elRPytDoClAefZPje1FE7ACnHw1MQ3owPu5jZgsbpJm2sCWf91slZedTaeKiaHY0 r1htTA4cuclrjOQ/wyRVQbB5VQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFL97sELb W3hgs6UoayEsIi/JpdFHMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU3NEYvMUUxNTcwMzg2MzhCMTFFREIxMDNDMDJDQzRGOUFFMDIvMzhDOEMyRTZC M0ZGMTFGMEIwNTYzMTJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnccQwDQQCAAIwBwMFACQCwUAwDQYJKoZIhvcNAQELBQAD ggEBAIyH+O9pF2CNgaV+56D9cY+zZ/ixrZuY3DexBj/Z7o7RkRIwhvVqTF0yLmev JtKgbP9FZ9dcCpSSmX5ZTxC+EBMjqeGDUxqG974KY9aYl0MChzrJamwWm2pkhYtC GCMpV1zsWkcNwH3hv4a7afuP/SBbPOViK7BPK+wgqVTXTzBjG0iB5xnXgp3+8nTL vPrFaV1OyuVtJChUKWlIolkVTIYEdN4eDJFZfO6UXiH64GfGu2Riq7wb0TIt0FfV oFjFzQ65xaDdu/xvniQkL9KBAZjTxUwJqdCdo7Y+rhDOG6Ly40pdSISHVmFub2ab 4Vaaj57gIb2o7im1Q2kns1ymS5Y= -----END CERTIFICATE-----Generated at Wed Nov 5 02:28:27 2025 by rpki-client