$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/A80ACC3E8FAC11F080997C1BC4F9AE02.roa File: A80ACC3E8FAC11F080997C1BC4F9AE02.roa (raw, json) Hash identifier: wyl2VjB+JrQ992/1CEy9yjDu2bkgD+voUgvs64ehg2A= Subject key identifier: 94:25:67:3D:93:F8:1B:80:93:D7:67:06:52:75:2D:35:EE:9F:61:54 Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Certificate serial: 350A Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/A80ACC3E8FAC11F080997C1BC4F9AE02.roa Signing time: Fri 12 Sep 2025 07:46:56 +0000 ROA not before: Fri 12 Sep 2025 07:46:56 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 58599 IP address blocks: 43.225.204.0/22 maxlen: 24 103.9.104.0/23 maxlen: 24 2403:dd00::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 15:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13578 (0x350a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Validity Not Before: Sep 12 07:46:56 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68c3cff0-46de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f9:b2:1a:9f:54:78:46:87:eb:61:3a:3a:ab: 4e:1d:9d:22:90:1c:2c:47:ec:63:86:f9:1b:b8:ad: 75:6f:5f:4e:10:a3:95:fb:05:0a:51:4e:e4:97:eb: 59:b6:00:32:6c:a4:63:bc:6f:a9:9d:8e:80:3b:d7: 3e:61:50:77:1d:1e:5c:0f:ad:6e:b2:67:86:88:f4: 3b:a2:62:a4:75:ea:2e:38:2e:a1:ae:b2:f2:50:25: 4e:dc:5e:12:de:f5:e4:cb:24:4a:e2:84:1b:48:13: 91:9d:32:df:d8:87:2c:16:6d:eb:2a:80:5c:bc:25: 08:2c:51:d3:e5:df:da:5b:c8:b1:60:96:ba:cf:3f: 02:ed:d6:f6:44:64:17:0d:f9:86:7c:12:4d:c7:45: 4a:b2:62:bf:f6:c8:12:35:79:0a:9f:1c:49:7b:ed: d8:c5:ad:80:32:4f:dc:29:d5:e6:84:55:50:43:25: b1:76:c3:f1:58:d4:b3:e2:38:1d:a3:9e:48:2a:70: 04:0f:8d:8c:1a:e6:b0:d8:08:d5:1b:e1:ce:db:cf: a9:ba:7e:30:34:e8:dc:39:20:aa:fc:d7:12:70:8e: 9f:7c:58:69:72:d1:1d:51:4a:49:ba:a0:c0:f8:52: 93:71:07:d1:53:58:70:9a:d3:43:91:08:8b:0b:4b: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:25:67:3D:93:F8:1B:80:93:D7:67:06:52:75:2D:35:EE:9F:61:54 X509v3 Authority Key Identifier: keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/A80ACC3E8FAC11F080997C1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.204.0/22 103.9.104.0/23 IPv6: 2403:dd00::/32 Signature Algorithm: sha256WithRSAEncryption 2e:2e:65:b5:d7:0b:66:f4:e8:78:8c:b2:73:cc:ce:03:7a:6b: 69:5c:44:d8:c4:09:a7:6d:87:9f:11:c7:67:4b:4d:a4:99:ef: 0f:0c:ff:a9:8e:f7:a9:bd:ab:74:6b:65:79:f6:7b:10:66:25: c9:6a:7b:19:30:d7:00:d1:ed:54:02:8e:a1:da:d6:25:cb:ed: 12:80:e0:b8:ce:e5:43:dd:b1:61:d9:ad:09:a4:da:07:6d:40: bb:59:05:f8:2d:23:94:8e:6d:6b:24:41:20:92:5c:04:64:b5: 04:06:b3:b7:72:d7:37:e9:77:2d:e5:de:a9:73:be:dc:59:9d: cc:ca:21:8c:03:63:31:1b:22:23:87:e4:3e:da:2e:a5:60:e2: f9:92:d9:9b:e3:79:17:dd:8d:d6:a1:42:4f:45:fc:cf:9c:8b: de:49:b0:21:29:86:42:fb:b2:70:81:5a:43:71:54:ff:97:4e: 7e:7c:50:da:a5:a8:a0:4b:81:e1:01:32:79:38:b1:f1:fe:97: 96:fc:2c:20:c3:b6:49:32:60:b7:1b:fa:d7:7d:cc:8c:9e:90: c8:d5:c9:8e:c2:ae:72:6c:42:5b:8b:3f:59:75:c9:4a:2c:66: 66:d6:18:34:03:3d:3a:8c:31:5e:8c:01:7f:54:dd:8a:ac:d0: 43:69:b4:f0 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICNQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NEYxMTAvBgNVBAUTKDRCRUQ1OEJDNDU0NEU3RTNCNUU5Nzg5QzY3QzYzQkVD OTFDMjdDREQwHhcNMjUwOTEyMDc0NjU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMzY2ZmMC00NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/myGp9UeEaH62E6OqtOHZ0ikBwsR+xjhvkbuK11b19OEKOV+wUKUU7kl+tZ tgAybKRjvG+pnY6AO9c+YVB3HR5cD61usmeGiPQ7omKkdeouOC6hrrLyUCVO3F4S 3vXkyyRK4oQbSBORnTLf2IcsFm3rKoBcvCUILFHT5d/aW8ixYJa6zz8C7db2RGQX DfmGfBJNx0VKsmK/9sgSNXkKnxxJe+3Yxa2AMk/cKdXmhFVQQyWxdsPxWNSz4jgd o55IKnAED42MGuaw2AjVG+HO28+pun4wNOjcOSCq/NcScI6ffFhpctEdUUpJuqDA +FKTcQfRU1hwmtNDkQiLC0vKhQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJQlZz2T +BuAk9dnBlJ1LTXun2FUMB8GA1UdIwQYMBaAFEvtWLxFROfjtel4nGfGO+yRwnzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk0Ri9BMDI5QTUyNjFE QUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUtTzE2WGljWjhZNzdKSENm TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtMVl2RVZFNS1PMTZYaWNaOFk3N0pIQ2ZOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk5NEYvQTAyOUE1MjYxREFBMTFFMjlCRkM2N0E2MDhCMDJDRDIvQTgwQUNDM0U4 RkFDMTFGMDgwOTk3QzFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr4cwDBAFnCWgwDQQCAAIwBwMFACQD3QAwDQYJKoZIhvcN AQELBQADggEBAC4uZbXXC2b06HiMsnPMzgN6a2lcRNjECadth58Rx2dLTaSZ7w8M /6mO96m9q3RrZXn2exBmJclqexkw1wDR7VQCjqHa1iXL7RKA4LjO5UPdsWHZrQmk 2gdtQLtZBfgtI5SObWskQSCSXARktQQGs7dy1zfpdy3l3qlzvtxZnczKIYwDYzEb IiOH5D7aLqVg4vmS2ZvjeRfdjdahQk9F/M+ci95JsCEphkL7snCBWkNxVP+XTn58 UNqlqKBLgeEBMnk4sfH+l5b8LCDDtkkyYLcb+td9zIyekMjVyY7CrnJsQluLP1l1 yUosZmbWGDQDPTqMMV6MAX9U3Yqs0ENptPA= -----END CERTIFICATE-----Generated at Thu Sep 18 04:33:45 2025 by rpki-client