$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa File: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (raw, json) Hash identifier: RO65RMNM2Nj+skVx9D4SwK+SURjH9kvIKLTrXVq1cDk= Subject key identifier: 8B:D7:84:16:FD:80:77:73:66:87:F9:2D:B5:0F:3F:ED:05:85:F5:FB Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 0921 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa Signing time: Tue 02 Sep 2025 20:41:09 +0000 ROA not before: Tue 02 Sep 2025 20:41:09 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45634 IP address blocks: 103.5.44.0/22 maxlen: 22 103.5.44.0/24 maxlen: 24 103.5.45.0/24 maxlen: 24 103.5.46.0/24 maxlen: 24 103.5.47.0/24 maxlen: 24 103.35.204.0/22 maxlen: 22 103.35.204.0/24 maxlen: 24 103.35.205.0/24 maxlen: 24 103.35.206.0/24 maxlen: 24 103.35.207.0/24 maxlen: 24 103.249.160.0/22 maxlen: 22 103.249.160.0/24 maxlen: 24 103.249.161.0/24 maxlen: 24 103.249.162.0/24 maxlen: 24 103.249.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2337 (0x921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Sep 2 20:41:09 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b75664-23de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:b1:94:43:06:a8:6b:86:3a:46:8b:7d:6e: f9:cd:b6:47:ee:15:24:4c:1d:74:48:48:42:8d:ad: 63:d8:e7:f3:73:de:4a:d4:96:0d:ec:77:80:28:b8: 60:69:3f:c1:e5:a9:de:7c:a0:ae:30:7c:df:5c:7d: 6d:6d:ee:3c:f4:35:c1:f1:7a:58:d5:01:b5:9e:d7: f7:d7:29:25:15:64:af:99:c9:c5:58:0b:04:f8:2e: ca:cd:25:3c:0e:4c:30:98:b5:8c:89:8c:13:86:01: 82:ce:4c:9b:2a:48:bb:d2:1b:1e:ca:e2:ec:98:9a: 78:6d:f5:2e:77:aa:0b:60:5c:be:1a:51:80:6c:fb: bb:46:1c:f0:33:a9:ec:02:b6:67:47:7a:79:74:55: 23:f0:cf:72:0f:8a:aa:23:d6:79:cf:4f:ce:70:9e: c7:dd:f8:46:a0:a5:da:97:c6:fc:fd:1e:18:e7:fe: ea:8e:e3:3c:5d:37:74:e1:2c:e7:58:9d:7d:cf:bd: 9d:af:88:30:be:d9:0c:a5:bc:65:c5:e4:3f:58:14: 4c:70:ed:cd:1e:08:cd:41:9e:11:48:a2:23:50:a8: 42:4f:db:24:ef:63:0a:7d:e8:2a:d4:58:11:60:f5: c4:f8:c4:95:ba:29:09:ba:8a:a3:ed:55:5b:1a:8f: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D7:84:16:FD:80:77:73:66:87:F9:2D:B5:0F:3F:ED:05:85:F5:FB X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4C5CCE6EB46A11EAB5A01176C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.44.0/22 103.35.204.0/22 103.249.160.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:7a:e7:81:4f:7a:52:ed:78:1c:1a:99:2f:05:2d:39:d1:3d: 63:b7:d5:bd:db:8e:85:b2:3c:90:8c:04:3b:89:7f:03:2d:1d: ec:4b:3b:29:2c:84:e8:56:5a:d1:bf:da:f0:3c:b2:33:45:1a: 50:9f:26:c7:9d:89:93:b4:b9:75:5f:92:14:96:a7:2e:84:52: 1a:06:b1:47:10:cb:6a:98:d8:9d:2a:f8:fe:15:61:db:99:1f: 5c:de:cf:4c:12:f6:42:e8:0c:86:40:f7:17:f9:2e:da:28:8a: fd:66:a9:60:6d:73:f6:45:82:2a:7c:f6:c0:3c:a1:50:b7:f7: 8d:7d:b6:4e:b7:dd:2a:c8:01:35:e5:0f:75:8d:65:36:92:84: 7a:e7:95:cd:bb:fa:fc:36:95:82:e5:71:00:7c:3b:06:f9:96: 1f:7d:0d:d8:8b:97:ba:89:48:08:43:0a:77:06:5c:1a:67:39: 80:06:aa:4e:8e:ee:c7:90:ca:dd:72:41:c9:4a:3e:17:f8:4d: f9:76:19:62:07:06:fe:82:63:63:f9:b9:7b:65:9c:a2:18:a9: 4a:1b:ca:c6:07:f5:45:d8:a6:c2:35:58:1a:d9:28:34:e2:76: 34:c8:a6:07:e3:00:d5:c1:52:95:f3:97:88:84:ab:96:b9:7c: aa:ac:36:3d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjUwOTAyMjA0MTA5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NTY2NC0yM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRuxlEMGqGuGOkaLfW75zbZH7hUkTB10SEhCja1j2Ofzc95K1JYN7HeAKLhg aT/B5anefKCuMHzfXH1tbe489DXB8XpY1QG1ntf31yklFWSvmcnFWAsE+C7KzSU8 DkwwmLWMiYwThgGCzkybKki70hseyuLsmJp4bfUud6oLYFy+GlGAbPu7RhzwM6ns ArZnR3p5dFUj8M9yD4qqI9Z5z0/OcJ7H3fhGoKXal8b8/R4Y5/7qjuM8XTd04Szn WJ19z72dr4gwvtkMpbxlxeQ/WBRMcO3NHgjNQZ4RSKIjUKhCT9sk72MKfegq1FgR YPXE+MSVuikJuoqj7VVbGo80qQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIvXhBb9 gHdzZof5LbUPP+0FhfX7MB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxMkYvNEI4QkZGRUNCNDY5MTFFQUFCQTcxQzc1QzRGOUFFMDIvNEM1Q0NFNkVC NDZBMTFFQUI1QTAxMTc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnBSwDBAJnI8wDBAJn+aAwDQYJKoZIhvcNAQELBQADggEB AE5654FPelLteBwamS8FLTnRPWO31b3bjoWyPJCMBDuJfwMtHexLOykshOhWWtG/ 2vA8sjNFGlCfJsediZO0uXVfkhSWpy6EUhoGsUcQy2qY2J0q+P4VYduZH1zez0wS 9kLoDIZA9xf5Ltooiv1mqWBtc/ZFgip89sA8oVC39419tk633SrIATXlD3WNZTaS hHrnlc27+vw2lYLlcQB8Owb5lh99DdiLl7qJSAhDCncGXBpnOYAGqk6O7seQyt1y QclKPhf4Tfl2GWIHBv6CY2P5uXtlnKIYqUobysYH9UXYpsI1WBrZKDTidjTIpgfj ANXBUpXzl4iEq5a5fKqsNj0= -----END CERTIFICATE-----Generated at Fri Sep 19 09:06:12 2025 by rpki-client