$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D226E012A4EA11ECA8C4D151C4F9AE02.roa File: D226E012A4EA11ECA8C4D151C4F9AE02.roa (raw, json) Hash identifier: LegWRIHcFoKxOTl/RoZPTqnhGh7caDlHuymj8lMlN4w= Subject key identifier: 3F:3C:9B:07:F7:D1:78:98:FF:6C:AB:66:B3:9B:36:68:D0:31:56:9D Certificate issuer: /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF Certificate serial: 03CC Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D226E012A4EA11ECA8C4D151C4F9AE02.roa Signing time: Fri 05 Sep 2025 01:06:58 +0000 ROA not before: Fri 05 Sep 2025 01:06:58 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 4755 IP address blocks: 103.121.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF Validity Not Before: Sep 5 01:06:58 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68ba37b2-b7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:42:f5:51:45:e6:70:fc:4a:aa:86:71:3a:a3: 78:87:7e:01:30:2b:0c:a0:3c:1b:e0:2b:ca:57:d5: c0:5d:aa:b9:80:82:93:b9:0d:b1:45:66:1f:21:58: 36:a0:06:0c:95:61:aa:15:bf:12:a7:e5:f5:d3:5f: f5:f6:1d:d6:27:8e:4c:07:b9:7e:a7:8d:0b:19:a8: 0d:58:27:f3:d0:4f:b0:d0:ea:a2:c9:3b:9a:10:44: ec:00:77:e4:ad:f4:00:0d:14:d4:c1:c6:e5:b1:77: 5f:07:8d:4d:c6:de:e8:85:22:cf:ae:bf:aa:a0:49: e9:49:2e:24:e9:ee:7b:cc:ce:37:a4:25:dd:59:60: 8a:78:c4:57:ed:17:aa:1e:45:79:e7:3e:cd:89:32: 1c:91:a7:65:53:cd:d5:b3:b9:45:84:0a:02:f1:2f: a9:4f:b8:25:8c:05:bb:c2:61:54:62:c9:80:f6:26: 79:30:cc:38:31:0c:d0:86:b8:be:3d:5d:e0:39:fc: 19:60:bd:ff:cb:63:24:c8:74:46:64:83:b4:a9:0f: c7:fc:8b:c7:21:7f:15:6c:81:dc:1b:c6:ce:8d:a9: 65:79:c4:36:bb:58:5b:ee:22:0b:1b:b5:f4:ee:5a: 29:df:ca:07:5a:50:08:a7:13:1a:c6:22:04:17:a9: 00:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3C:9B:07:F7:D1:78:98:FF:6C:AB:66:B3:9B:36:68:D0:31:56:9D X509v3 Authority Key Identifier: keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D226E012A4EA11ECA8C4D151C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.192.0/24 Signature Algorithm: sha256WithRSAEncryption 01:b0:11:e1:46:4b:57:65:b1:b1:f3:32:b4:a3:c7:ab:3f:fd: c6:6f:ce:9d:86:88:2e:65:ab:5f:67:54:e3:f6:09:ee:b7:fb: 77:c6:51:31:a1:ce:ac:db:85:48:1b:e0:64:73:cd:28:13:93: 0d:ca:04:92:c8:de:ff:63:08:3e:c2:40:0f:b6:90:e9:9d:70: 8c:ab:f7:83:bc:bf:a5:f3:08:3e:39:43:32:36:32:ce:00:22: d5:e6:04:47:2a:f9:d6:2c:b6:ee:75:e9:b5:1e:49:58:ec:d5: 2c:08:dd:0c:c2:42:4c:48:52:ce:82:fb:e3:c4:ba:f1:4f:fc: 7c:ba:5a:55:17:e9:68:95:5b:23:34:01:8d:1b:89:d1:ab:f7: 48:6e:5c:45:d4:e1:69:94:4a:e4:cc:31:6a:c1:3d:bf:40:c1: 09:c8:e1:17:df:08:ac:1b:10:9c:f5:1c:c7:3e:51:c0:fc:6d: ba:f3:7f:bf:f5:e9:1b:7e:2a:d5:e8:c2:ec:b5:e1:1e:12:b1: 03:06:16:8c:88:a4:18:3b:40:1e:40:85:36:f5:5a:73:96:18: 8b:39:f1:22:4c:1e:aa:a3:98:0c:9c:62:61:f0:6d:4b:65:2c: fe:03:6d:ea:ae:d6:e1:07:bb:51:eb:59:85:79:e3:13:7a:be: 4b:f5:f0:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxNEIxMTAvBgNVBAUTKDRGREU5NDkwRkYyRkYzRTlCRjkzQjQ5OEQ3NEYzMUY3 NUVBOUZDRkYwHhcNMjUwOTA1MDEwNjU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJhMzdiMi1iN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UL1UUXmcPxKqoZxOqN4h34BMCsMoDwb4CvKV9XAXaq5gIKTuQ2xRWYfIVg2 oAYMlWGqFb8Sp+X101/19h3WJ45MB7l+p40LGagNWCfz0E+w0OqiyTuaEETsAHfk rfQADRTUwcblsXdfB41Nxt7ohSLPrr+qoEnpSS4k6e57zM43pCXdWWCKeMRX7Req HkV55z7NiTIckadlU83Vs7lFhAoC8S+pT7gljAW7wmFUYsmA9iZ5MMw4MQzQhri+ PV3gOfwZYL3/y2MkyHRGZIO0qQ/H/IvHIX8VbIHcG8bOjallecQ2u1hb7iILG7X0 7lop38oHWlAIpxMaxiIEF6kAqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD88mwf3 0XiY/2yrZrObNmjQMVadMB8GA1UdIwQYMBaAFE/elJD/L/Ppv5O0mNdPMfdeqfz/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDE0Qi9EQzFFNzIxNEE0 RTYxMUVDOUVGNDMxNERDNEY5QUUwMi9UOTZVa1A4djgtbV9rN1NZMTA4eDkxNnBf UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5NlVrUDh2OC1tX2s3U1kxMDh4OTE2cF9QOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQxNEIvREMxRTcyMTRBNEU2MTFFQzlFRjQzMTREQzRGOUFFMDIvRDIyNkUwMTJB NEVBMTFFQ0E4QzREMTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnecAwDQYJKoZIhvcNAQELBQADggEBAAGwEeFGS1dlsbHz MrSjx6s//cZvzp2GiC5lq19nVOP2Ce63+3fGUTGhzqzbhUgb4GRzzSgTkw3KBJLI 3v9jCD7CQA+2kOmdcIyr94O8v6XzCD45QzI2Ms4AItXmBEcq+dYstu516bUeSVjs 1SwI3QzCQkxIUs6C++PEuvFP/Hy6WlUX6WiVWyM0AY0bidGr90huXEXU4WmUSuTM MWrBPb9AwQnI4RffCKwbEJz1HMc+UcD8bbrzf7/16Rt+KtXowuy14R4SsQMGFoyI pBg7QB5AhTb1WnOWGIs58SJMHqqjmAycYmHwbUtlLP4Dbequ1uEHu1HrWYV54xN6 vkv18DA= -----END CERTIFICATE-----Generated at Sat Sep 6 14:25:06 2025 by rpki-client