$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/642AEE6EB3FF11F0A569692DC4F9AE02.roa File: 642AEE6EB3FF11F0A569692DC4F9AE02.roa (raw, json) Hash identifier: 06OWDIqMBpACeuE4oEOzcbVBDwiweM8yZ9MBzLlKdEk= Subject key identifier: E4:8C:0C:2C:F6:95:09:97:58:61:0A:0B:3E:86:1A:C2:6B:BE:34:13 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 022E Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/642AEE6EB3FF11F0A569692DC4F9AE02.roa Signing time: Tue 28 Oct 2025 13:09:53 +0000 ROA not before: Tue 28 Oct 2025 13:09:53 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 24556 IP address blocks: 103.113.196.0/24 maxlen: 24 103.113.197.0/24 maxlen: 24 103.113.198.0/24 maxlen: 24 103.113.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Oct 28 13:09:53 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6900c0a0-ac4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a3:b4:15:a0:c2:3b:70:7e:e2:20:fa:97:44: 17:37:86:1b:25:20:fd:5b:90:cf:91:6c:f1:56:de: ad:57:fd:49:06:8e:62:ca:59:db:0d:cb:73:51:37: 68:37:e6:72:1d:1e:db:1e:21:e6:ff:88:81:a4:76: 71:a2:81:2e:4b:e7:a6:39:28:83:68:5b:fe:5a:98: 80:67:ed:0f:c4:5f:f9:e2:e2:af:d8:83:cc:72:bc: 3e:20:27:d2:02:a4:d2:00:59:51:7a:d3:7e:10:f3: b0:fe:06:71:b2:76:ef:1d:ce:49:30:97:09:a3:7e: be:fe:58:62:e7:c1:1f:61:05:f6:57:6d:3e:6d:a7: 9d:ed:1f:dd:83:69:c2:ac:18:ff:e3:18:c4:e8:97: 4e:79:f3:5e:8d:17:d1:a4:ed:38:1f:79:34:f2:97: 9c:bb:05:00:fb:22:e3:c8:74:cd:31:02:28:9d:64: 0c:00:a7:60:53:d1:09:07:b5:04:6c:bc:20:9a:8d: 6e:c2:f1:c3:1f:41:10:dd:b6:13:21:30:e6:dd:ce: a1:dd:a6:82:ed:36:2d:e7:ce:11:3c:25:50:ce:6d: 99:8a:ed:11:fc:2e:78:11:b8:6f:dd:4d:83:3c:58: 50:1a:f1:8b:ee:0e:a7:20:cb:6a:51:83:9d:7e:f1: 79:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8C:0C:2C:F6:95:09:97:58:61:0A:0B:3E:86:1A:C2:6B:BE:34:13 X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/642AEE6EB3FF11F0A569692DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.196.0/22 Signature Algorithm: sha256WithRSAEncryption 83:f4:ea:d7:24:30:2f:3b:f3:6e:1d:90:3d:6b:4e:cd:83:0a: 12:31:fd:7b:c8:19:56:a7:83:8b:0b:45:80:7d:e0:9b:38:45: 5e:84:60:e5:9b:ea:52:e5:b7:82:1d:67:3f:ec:79:1c:c8:f8: 22:92:33:90:91:bc:28:5b:de:bb:e4:e3:7f:21:9a:d9:fe:01: 65:80:ed:91:79:e7:b2:ed:b1:7e:df:a2:a2:80:60:7b:da:1b: 15:c8:23:f2:eb:aa:52:19:6c:33:98:78:9b:8a:5e:f9:50:fe: d3:df:62:95:c5:0e:7a:23:0e:6a:36:62:d9:f9:b0:31:93:2d: 14:ba:83:2b:e2:7b:67:47:bd:47:88:02:68:5e:05:a2:5c:85: c2:b5:f6:b3:0c:7c:d3:32:ee:3a:1d:c4:bb:fb:a4:80:0b:d4: 31:cf:17:c6:e5:91:85:67:84:d7:62:dc:d1:ff:50:ce:5b:a2: 4b:58:d4:61:e2:d7:0c:0b:eb:90:eb:b6:f3:be:d2:a3:8f:24: 33:24:dc:1e:6d:09:fb:0e:33:04:a2:2f:e1:fa:67:83:07:67: ab:2f:fe:e8:b9:2e:24:84:dd:87:db:ea:0a:f5:32:d1:37:95: f6:0d:3d:a1:a6:45:51:8d:64:65:47:54:b7:7f:cb:1d:75:19: cd:d2:77:6c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjUxMDI4MTMwOTUzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAwYzBhMC1hYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qO0FaDCO3B+4iD6l0QXN4YbJSD9W5DPkWzxVt6tV/1JBo5iylnbDctzUTdo N+ZyHR7bHiHm/4iBpHZxooEuS+emOSiDaFv+WpiAZ+0PxF/54uKv2IPMcrw+ICfS AqTSAFlRetN+EPOw/gZxsnbvHc5JMJcJo36+/lhi58EfYQX2V20+baed7R/dg2nC rBj/4xjE6JdOefNejRfRpO04H3k08pecuwUA+yLjyHTNMQIonWQMAKdgU9EJB7UE bLwgmo1uwvHDH0EQ3bYTITDm3c6h3aaC7TYt584RPCVQzm2Ziu0R/C54Ebhv3U2D PFhQGvGL7g6nIMtqUYOdfvF5MQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOSMDCz2 lQmXWGEKCz6GGsJrvjQTMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU3NEYvMUUxNTcwMzg2MzhCMTFFREIxMDNDMDJDQzRGOUFFMDIvNjQyQUVFNkVC M0ZGMTFGMEE1Njk2OTJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnccQwDQYJKoZIhvcNAQELBQADggEBAIP06tckMC87824d kD1rTs2DChIx/XvIGVang4sLRYB94Js4RV6EYOWb6lLlt4IdZz/seRzI+CKSM5CR vChb3rvk438hmtn+AWWA7ZF557LtsX7foqKAYHvaGxXII/LrqlIZbDOYeJuKXvlQ /tPfYpXFDnojDmo2Ytn5sDGTLRS6gyvie2dHvUeIAmheBaJchcK19rMMfNMy7jod xLv7pIAL1DHPF8blkYVnhNdi3NH/UM5boktY1GHi1wwL65DrtvO+0qOPJDMk3B5t CfsOMwSiL+H6Z4MHZ6sv/ui5LiSE3Yfb6gr1MtE3lfYNPaGmRVGNZGVHVLd/yx11 Gc3Sd2w= -----END CERTIFICATE-----Generated at Tue Nov 4 12:11:04 2025 by rpki-client