$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/EF260118D54211EEA18A7234C4F9AE02.roa File: EF260118D54211EEA18A7234C4F9AE02.roa (raw, json) Hash identifier: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0= Subject key identifier: 35:5A:1A:4C:D2:69:1E:A6:7A:31:03:1E:F0:22:AA:A8:D0:64:B6:79 Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Certificate serial: 98 Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/EF260118D54211EEA18A7234C4F9AE02.roa Signing time: Wed 11 Dec 2024 05:19:08 +0000 ROA not before: Wed 11 Dec 2024 05:19:08 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 134461 IP address blocks: 103.160.140.0/24 maxlen: 24 103.160.141.0/24 maxlen: 24 2001:df5:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 08:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF Validity Not Before: Dec 11 05:19:08 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675920cc-548c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:95:87:f7:9c:f2:a5:69:87:b7:af:fc:c7: 83:db:85:bb:9c:b4:cc:fb:6e:86:de:7b:de:68:38: f4:b4:7e:0b:06:b4:8b:4d:ce:22:65:29:92:9f:41: 5b:7a:ef:29:f1:d8:ab:ea:af:da:b7:38:61:4a:1d: b0:4f:a0:dd:82:6d:de:03:98:5f:e2:d0:df:50:cb: 7a:cf:72:e8:9a:54:6c:33:f1:2f:8f:2a:5b:5e:2f: bd:8b:f9:ad:5e:c7:d2:a2:1b:9a:a2:54:38:fd:bd: 79:e9:1b:82:cb:4b:7a:bc:bc:15:a5:c2:ac:5a:1e: 75:05:ec:7c:66:2a:8f:bf:b5:9a:12:27:87:34:9b: dc:1a:79:86:c8:a6:3b:91:6c:0b:ec:8b:9b:6c:7a: 36:84:a9:c4:74:0c:c3:2c:8b:5f:12:d3:6f:4e:ac: c5:68:60:84:a2:f8:1b:99:76:e4:80:6e:fc:a3:11: b3:32:0d:5c:2a:d2:f7:07:68:67:77:47:88:0e:7b: 56:c0:f7:81:86:f3:25:8a:4d:fe:f4:b9:df:85:6a: 54:94:a8:87:2b:ca:7e:2a:30:cb:4a:58:15:9f:14: d2:62:60:8d:7b:ed:1d:aa:40:9d:29:60:14:fc:86: 6a:16:88:9e:ff:f7:cb:59:9d:9d:41:34:19:89:51: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5A:1A:4C:D2:69:1E:A6:7A:31:03:1E:F0:22:AA:A8:D0:64:B6:79 X509v3 Authority Key Identifier: keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/EF260118D54211EEA18A7234C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.140.0/23 IPv6: 2001:df5:a080::/48 Signature Algorithm: sha256WithRSAEncryption 0c:5f:a5:df:e5:24:5a:d2:ce:1e:53:8f:b2:eb:01:a6:03:25: 67:f0:4a:0d:2c:ee:12:44:53:f5:f0:a9:d5:5f:41:04:ca:9c: 44:01:c4:1e:0a:26:78:f3:ac:5e:b0:4a:29:7d:9e:a6:65:1d: 88:1a:7a:c9:b1:38:dc:e2:3e:91:38:db:b2:1e:80:a9:ad:7e: 82:7b:a1:5a:eb:8d:01:0a:e5:84:e1:90:e6:47:f8:d4:24:dd: c5:6c:c0:f3:72:a0:97:e9:fd:0b:e4:10:0d:a0:a0:35:7a:da: d6:28:e0:8d:59:01:a5:5c:69:82:b5:8a:ac:a2:c5:e3:91:70: 46:46:af:a5:d8:6a:5b:db:0b:fc:fc:a2:85:59:5c:0d:19:6b: d1:db:18:7a:0a:69:0e:ba:ed:17:ae:46:24:e3:4d:4d:96:62: ec:b2:15:3d:99:f0:6d:1b:aa:3e:13:5c:43:6d:5e:a1:b7:ec: 31:b8:5a:2a:57:1c:de:4e:ee:52:04:df:ab:ac:07:de:27:76: 92:d6:27:bd:6e:1a:98:30:78:69:95:ea:d3:5b:f0:c5:b7:71: c0:61:a2:fb:e9:74:30:9a:f7:34:bb:dd:51:e0:2e:25:c4:b8: 38:e0:e2:4d:ed:4d:8d:e2:24:c6:d0:fe:fd:7c:ee:4f:d6:8d: ef:00:57:9c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMTAxMTAvBgNVBAUTKEE2MDlBOTRFNkEyMTAxQkFGOTVDOEMyRjU1Q0VDNDE3 OTI1QkVGQ0YwHhcNMjQxMjExMDUxOTA4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU5MjBjYy01NDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsmVh/ec8qVph7ev/MeD24W7nLTM+26G3nveaDj0tH4LBrSLTc4iZSmSn0Fb eu8p8dir6q/atzhhSh2wT6Ddgm3eA5hf4tDfUMt6z3LomlRsM/EvjypbXi+9i/mt XsfSohuaolQ4/b156RuCy0t6vLwVpcKsWh51Bex8ZiqPv7WaEieHNJvcGnmGyKY7 kWwL7IubbHo2hKnEdAzDLItfEtNvTqzFaGCEovgbmXbkgG78oxGzMg1cKtL3B2hn d0eIDntWwPeBhvMlik3+9LnfhWpUlKiHK8p+KjDLSlgVnxTSYmCNe+0dqkCdKWAU /IZqFoie//fLWZ2dQTQZiVEMgwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDVaGkzS aR6mejEDHvAiqqjQZLZ5MB8GA1UdIwQYMBaAFKYJqU5qIQG6+VyML1XOxBeSW+/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAxMC9FQTAyMUE5NEQ1 M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFicjVYSXd2VmM3RUY1SmI3 ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnbXBUbW9oQWJyNVhJd3ZWYzdFRjVKYjc4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjIwMTAvRUEwMjFBOTRENTNGMTFFRUE4RDYyNDBGQzRGOUFFMDIvRUYyNjAxMThE NTQyMTFFRUExOEE3MjM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnoIwwDwQCAAIwCQMHACABDfWggDANBgkqhkiG9w0BAQsF AAOCAQEADF+l3+UkWtLOHlOPsusBpgMlZ/BKDSzuEkRT9fCp1V9BBMqcRAHEHgom ePOsXrBKKX2epmUdiBp6ybE43OI+kTjbsh6Aqa1+gnuhWuuNAQrlhOGQ5kf41CTd xWzA83Kgl+n9C+QQDaCgNXra1ijgjVkBpVxpgrWKrKLF45FwRkavpdhqW9sL/Pyi hVlcDRlr0dsYegppDrrtF65GJONNTZZi7LIVPZnwbRuqPhNcQ21eobfsMbhaKlcc 3k7uUgTfq6wH3id2ktYnvW4amDB4aZXq01vwxbdxwGGi++l0MJr3NLvdUeAuJcS4 OODiTe1NjeIkxtD+/XzuT9aN7wBXnA== -----END CERTIFICATE-----Generated at Sun Oct 26 03:59:53 2025 by rpki-client