$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa File: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (raw, json) Hash identifier: HRtaeBIfXS4j0TAnrmFrjM5dZZkH7hynrpn4rWDNaLw= Subject key identifier: C7:75:D6:BE:9D:14:42:3B:FC:0A:EE:80:5A:F3:2B:33:B4:F9:78:3D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 019A Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa Signing time: Wed 29 Oct 2025 03:18:13 +0000 ROA not before: Wed 29 Oct 2025 03:18:13 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151791 IP address blocks: 103.72.64.0/24 maxlen: 24 2001:df2:e840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Oct 29 03:18:13 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69018775-b4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:1a:dd:56:a3:3b:10:36:eb:13:03:f8:40: fd:c1:f2:16:2a:9d:ec:15:67:3f:96:13:ef:bb:ff: e5:6c:52:fd:94:84:d7:aa:6e:04:aa:d8:67:b2:35: ec:ff:7a:83:f4:d5:69:88:92:8f:61:76:fb:b2:66: 70:c7:0f:8a:c1:64:10:43:9f:8a:96:6f:c3:3a:ac: 9f:4d:89:71:8e:b2:d8:e6:50:cc:2f:44:c9:de:da: 1d:4d:e8:32:d8:5c:29:76:6a:eb:83:bd:64:d4:12: 7f:b8:88:d2:cd:8f:32:50:8a:7d:4b:a6:4a:23:d3: 3b:2e:68:2b:cc:ff:34:5d:92:ae:59:e0:cc:f6:9b: c3:a8:53:7e:ee:10:47:f4:98:d2:81:f1:42:10:b1: 06:87:93:38:84:66:37:07:23:18:1f:0f:78:e7:3f: a9:2a:e7:41:94:03:5c:08:e4:3a:e0:0a:3f:a4:fc: a5:80:d2:67:10:da:83:a4:c9:0b:41:9d:2c:01:00: 30:ff:78:c7:43:9b:2f:1a:91:b7:1d:f5:81:d2:58: f1:5d:f1:21:eb:ea:a6:57:65:93:fe:b9:77:48:8e: 20:15:4a:95:c5:e9:b9:b1:8d:70:e0:2d:fc:73:3d: bc:e2:46:41:b7:fa:34:73:b5:4b:25:fc:c2:49:a7: 74:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:75:D6:BE:9D:14:42:3B:FC:0A:EE:80:5A:F3:2B:33:B4:F9:78:3D X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.64.0/24 IPv6: 2001:df2:e840::/48 Signature Algorithm: sha256WithRSAEncryption 83:01:dd:f8:69:2e:aa:af:16:13:72:eb:cb:32:b7:f7:0f:42: 19:32:23:ba:08:0a:e2:9d:5e:03:63:46:c5:9c:ea:3e:59:1a: 6c:f6:7b:6e:bb:0c:7b:4d:a0:46:48:98:68:b9:3c:6a:69:df: 89:26:5b:4f:ad:3e:5a:ac:e9:74:d0:12:ca:e3:cb:13:50:9b: 1f:f2:3b:f3:00:74:35:ed:f4:e3:e0:68:0a:46:69:37:e8:60: f6:82:45:a6:6e:84:f3:1e:f4:58:15:d5:28:ed:12:52:59:6d: 38:94:61:15:fb:13:dd:d0:69:ce:6e:5e:82:d6:43:d4:92:f5: 17:9a:d3:f3:50:0f:2c:82:e7:bf:63:ff:7f:75:18:a9:32:7a: 7a:73:0d:3a:37:15:e9:5e:c8:61:47:af:5e:aa:01:e2:39:fb: f2:44:98:08:35:e3:1d:a8:18:e2:00:28:37:af:56:ea:3a:f7: c8:b3:e7:a1:f0:ac:40:43:f0:4c:96:85:5a:dd:e7:1e:23:59: 6d:98:01:48:9f:73:5e:af:0a:69:a4:e8:d2:4b:15:a0:aa:eb: 68:27:9e:76:65:03:d1:9b:bb:66:b2:41:2e:c4:8c:ab:28:5b: ab:af:6b:1b:23:23:d1:5a:e2:72:03:50:63:e5:e6:2a:6b:6e: 40:3d:8f:68 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUxMDI5MDMxODEzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAxODc3NS1iNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsga3VajOxA26xMD+ED9wfIWKp3sFWc/lhPvu//lbFL9lITXqm4EqthnsjXs /3qD9NVpiJKPYXb7smZwxw+KwWQQQ5+Klm/DOqyfTYlxjrLY5lDML0TJ3todTegy 2Fwpdmrrg71k1BJ/uIjSzY8yUIp9S6ZKI9M7LmgrzP80XZKuWeDM9pvDqFN+7hBH 9JjSgfFCELEGh5M4hGY3ByMYHw945z+pKudBlANcCOQ64Ao/pPylgNJnENqDpMkL QZ0sAQAw/3jHQ5svGpG3HfWB0ljxXfEh6+qmV2WT/rl3SI4gFUqVxem5sY1w4C38 cz284kZBt/o0c7VLJfzCSad0LwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMd11r6d FEI7/ArugFrzKzO0+Xg9MB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZGMjUvNjA2NEJBQjI1MkY0MTFFRTg5OEI5QjQzQzRGOUFFMDIvM0Q4NzBEMUM2 ODVGMTFFRUEyOUQ5RjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnSEAwDwQCAAIwCQMHACABDfLoQDANBgkqhkiG9w0BAQsF AAOCAQEAgwHd+Gkuqq8WE3LryzK39w9CGTIjuggK4p1eA2NGxZzqPlkabPZ7brsM e02gRkiYaLk8amnfiSZbT60+WqzpdNASyuPLE1CbH/I78wB0Ne304+BoCkZpN+hg 9oJFpm6E8x70WBXVKO0SUlltOJRhFfsT3dBpzm5egtZD1JL1F5rT81APLILnv2P/ f3UYqTJ6enMNOjcV6V7IYUevXqoB4jn78kSYCDXjHagY4gAoN69W6jr3yLPnofCs QEPwTJaFWt3nHiNZbZgBSJ9zXq8KaaTo0ksVoKrraCeedmUD0Zu7ZrJBLsSMqyhb q69rGyMj0VricgNQY+XmKmtuQD2PaA== -----END CERTIFICATE-----Generated at Tue Nov 4 12:13:22 2025 by rpki-client