$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/424D6EC4ACBC11EBB0651B63C4F9AE02.roa File: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (raw, json) Hash identifier: uh6Udu7tl5B51JnewZD4hvjUOCA+o54nu1BVBecsrkw= Subject key identifier: 79:11:BF:00:65:8A:F5:DA:C6:91:EE:69:50:A7:30:D8:21:D0:6F:22 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 0805 Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/424D6EC4ACBC11EBB0651B63C4F9AE02.roa Signing time: Sun 31 Aug 2025 21:13:17 +0000 ROA not before: Sun 31 Aug 2025 21:13:17 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 132825 IP address blocks: 103.153.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2053 (0x805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Aug 31 21:13:17 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b4baed-0c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:a5:0d:4c:ff:b8:80:71:2f:68:52:43:1d: 7e:29:96:be:1a:56:38:8e:02:37:17:40:0e:e9:41: 9b:90:a5:ca:6d:a7:f4:92:c6:8f:64:0e:60:2e:3b: 7c:55:75:5a:6d:74:bb:c3:9f:8c:1e:30:de:bf:bc: 5c:6e:9d:58:66:33:86:62:8b:84:fa:a8:ce:af:5d: 78:fb:7d:fd:11:6e:04:9e:01:f3:65:4e:fc:ae:04: b9:13:12:02:ed:c1:a6:64:eb:40:f3:19:22:1e:9c: 7d:59:80:e8:87:19:98:0f:c5:5e:a7:80:8a:db:3f: 2c:a3:67:27:42:11:e0:ef:2d:2b:df:f0:b7:ec:69: 21:3b:74:12:fc:3a:11:d3:fc:ce:a4:05:03:d8:1e: b3:c8:c1:3d:cc:60:bb:f4:cb:b6:20:06:50:5d:54: 3d:de:60:f3:20:68:a8:ec:2b:45:27:03:32:03:ee: 16:06:cd:22:ec:8e:8d:82:a0:ee:35:8a:3e:ec:02: 65:41:c6:af:b4:e0:d1:fc:1d:be:0a:9c:17:64:bc: bd:9e:0a:58:35:3c:c0:78:16:ab:8c:1b:eb:5f:63: e8:10:09:4a:5b:9a:d2:b8:ab:14:87:72:02:2e:30: 1e:98:f0:93:10:73:82:1a:f9:60:d3:d3:87:06:e3: 96:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:11:BF:00:65:8A:F5:DA:C6:91:EE:69:50:A7:30:D8:21:D0:6F:22 X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/424D6EC4ACBC11EBB0651B63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.138.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:3d:32:89:c3:62:25:2d:82:9e:99:d3:fb:e2:13:5a:bd:5c: d9:54:b4:8b:68:48:ea:44:13:02:5b:66:a7:02:e2:5b:e1:88: 49:c9:06:a0:e8:b0:30:c5:2a:c0:16:d2:af:0a:6a:46:1b:4b: aa:b9:35:bf:d4:f1:1f:77:3b:c1:78:1a:b1:f9:f9:42:66:fa: 78:f5:40:43:81:c0:07:0d:ed:63:56:d0:8e:1e:6c:bd:30:51: 69:57:55:d7:4a:f3:7a:61:94:1c:12:04:f0:c4:a1:bb:95:c3: 01:04:6d:90:6d:b0:2a:7d:09:e0:c2:09:d9:7b:92:3d:f8:e8: df:d1:50:12:f5:6a:31:20:1c:b3:03:1a:2c:88:07:6e:0b:05: 6e:ad:96:be:03:c7:6c:a3:6a:22:27:3c:9a:25:79:4d:68:8f: e9:f2:ee:0a:78:fe:34:4e:66:44:3f:fa:5b:ac:f6:a1:b0:d3: d6:6b:7c:29:f1:40:a3:4f:26:e1:0d:5b:3f:84:6a:f8:f3:0d: 00:5a:a5:03:4e:76:df:27:83:ce:e6:e8:6c:a5:28:68:41:25: 60:8f:61:19:29:29:b8:61:18:64:79:13:fe:e9:bd:bb:9a:e2: 2e:1c:88:79:5b:b6:c3:c7:3f:8d:d3:f8:a0:a6:f1:9a:f1:3f: 24:26:67:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjUwODMxMjExMzE3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI0YmFlZC0wYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIylDUz/uIBxL2hSQx1+KZa+GlY4jgI3F0AO6UGbkKXKbaf0ksaPZA5gLjt8 VXVabXS7w5+MHjDev7xcbp1YZjOGYouE+qjOr114+339EW4EngHzZU78rgS5ExIC 7cGmZOtA8xkiHpx9WYDohxmYD8Vep4CK2z8so2cnQhHg7y0r3/C37GkhO3QS/DoR 0/zOpAUD2B6zyME9zGC79Mu2IAZQXVQ93mDzIGio7CtFJwMyA+4WBs0i7I6NgqDu NYo+7AJlQcavtODR/B2+CpwXZLy9ngpYNTzAeBarjBvrX2PoEAlKW5rSuKsUh3IC LjAemPCTEHOCGvlg09OHBuOW6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHkRvwBl ivXaxpHuaVCnMNgh0G8iMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQwNzIvM0E0MTg5MzZGQkU2MTFFQUIzNTM2NjBDQzRGOUFFMDIvNDI0RDZFQzRB Q0JDMTFFQkIwNjUxQjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmYowDQYJKoZIhvcNAQELBQADggEBAA49MonDYiUtgp6Z 0/viE1q9XNlUtItoSOpEEwJbZqcC4lvhiEnJBqDosDDFKsAW0q8KakYbS6q5Nb/U 8R93O8F4GrH5+UJm+nj1QEOBwAcN7WNW0I4ebL0wUWlXVddK83phlBwSBPDEobuV wwEEbZBtsCp9CeDCCdl7kj346N/RUBL1ajEgHLMDGiyIB24LBW6tlr4Dx2yjaiIn PJoleU1oj+ny7gp4/jROZkQ/+lus9qGw09ZrfCnxQKNPJuENWz+EavjzDQBapQNO dt8ng87m6GylKGhBJWCPYRkpKbhhGGR5E/7pvbua4i4ciHlbtsPHP43T+KCm8Zrx PyQmZ4c= -----END CERTIFICATE-----Generated at Sun Sep 7 12:45:21 2025 by rpki-client