$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/899B070834D511ED99B1921FC4F9AE02.roa File: 899B070834D511ED99B1921FC4F9AE02.roa (raw, json) Hash identifier: DtjpfqyjZlakf0xzeut64F+fX426PqMmTFhB5bn8kYo= Subject key identifier: CD:C9:2C:26:7E:1E:C6:3F:7D:44:EA:FC:7F:17:83:5D:33:01:FA:AD Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 02AB Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/899B070834D511ED99B1921FC4F9AE02.roa Signing time: Mon 03 Nov 2025 01:46:17 +0000 ROA not before: Mon 03 Nov 2025 01:46:17 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 141723 IP address blocks: 103.146.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: Nov 3 01:46:17 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=69080969-5ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cb:6a:de:bc:35:52:43:4e:30:e6:75:00:5c: 0a:60:29:5c:ed:13:74:86:3f:88:64:e4:02:09:f7: f2:71:30:d0:16:56:80:bc:90:05:b4:1b:6b:e6:8a: f3:66:fc:2c:d9:44:4b:c1:bb:ea:16:a3:53:ca:d3: b4:13:3d:a1:65:8b:4a:41:4c:50:26:78:08:0e:62: f4:80:f4:05:32:f2:ef:5f:7b:10:9d:0c:96:d4:c8: 1e:44:e1:0a:7d:6f:dd:39:a7:d3:8f:e6:f6:f0:93: 5f:b3:63:5c:1a:60:be:0d:1a:29:49:11:e5:e0:44: d8:60:44:68:06:83:8e:56:9e:06:77:6b:0e:73:09: 19:c0:e5:d3:9e:d2:43:97:b8:a9:e1:c1:f8:be:71: 91:21:9f:53:49:13:35:a0:46:f0:77:ef:06:c3:b4: 27:c4:96:dc:56:c7:64:9f:10:df:95:85:78:ff:6d: ff:82:a2:e0:50:87:24:7b:2a:9d:dc:e9:32:96:d3: a9:09:75:10:ee:39:87:a9:28:26:91:43:10:18:66: 77:ba:52:52:97:13:8d:a9:ea:45:ad:7f:65:dd:94: bf:fb:02:dd:67:59:7d:d3:39:fb:ca:3c:8c:29:62: e4:79:f8:1c:1e:1d:48:23:a4:72:5c:b8:66:39:ba: a7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C9:2C:26:7E:1E:C6:3F:7D:44:EA:FC:7F:17:83:5D:33:01:FA:AD X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/899B070834D511ED99B1921FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.57.0/24 Signature Algorithm: sha256WithRSAEncryption 82:1e:39:dd:a6:f0:6e:4f:2a:d4:02:77:d9:d0:18:d1:15:ab: f7:b3:81:f0:f7:dd:25:88:e1:64:e3:62:5e:5e:53:12:01:6b: e5:d1:79:aa:cf:e9:73:8e:eb:d9:c2:51:2c:63:ab:98:73:6b: 48:0d:ae:2c:42:3c:9e:64:02:db:d5:fb:a2:68:e5:92:e9:13: 12:ca:39:13:e5:f0:69:35:d8:d9:93:c9:c2:70:f0:89:fa:01: 21:a2:2f:a9:24:bc:ed:b4:65:13:3a:e2:a3:73:04:c1:dd:cb: ea:01:a5:47:f0:ff:10:b4:18:13:1b:bf:2d:11:89:89:c4:a6: 80:4a:37:c9:9d:35:ab:ff:69:8a:15:dd:3f:08:6a:91:ea:0a: b0:71:38:3a:e8:cb:20:ec:e8:b6:b5:b1:a6:ef:16:10:9a:a6: 79:18:9e:00:03:25:e5:3f:c4:c4:34:fa:f7:fc:f1:68:f4:07: 18:ba:db:9e:e5:8a:76:17:72:3c:1a:ba:21:0f:07:5b:6e:25: b7:a8:8c:af:45:e2:84:eb:01:b8:12:ca:c4:3a:0d:a5:51:46: ed:09:ea:54:7f:ba:80:fe:a4:4a:e2:b1:38:59:ac:fa:86:bc: 0a:73:e1:c9:4e:53:6a:a3:8c:47:37:84:08:21:e1:0a:7a:99: be:19:02:98 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjUxMTAzMDE0NjE3WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MDk2OS01Y2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48tq3rw1UkNOMOZ1AFwKYClc7RN0hj+IZOQCCffycTDQFlaAvJAFtBtr5orz Zvws2URLwbvqFqNTytO0Ez2hZYtKQUxQJngIDmL0gPQFMvLvX3sQnQyW1MgeROEK fW/dOafTj+b28JNfs2NcGmC+DRopSRHl4ETYYERoBoOOVp4Gd2sOcwkZwOXTntJD l7ip4cH4vnGRIZ9TSRM1oEbwd+8Gw7QnxJbcVsdknxDflYV4/23/gqLgUIckeyqd 3OkyltOpCXUQ7jmHqSgmkUMQGGZ3ulJSlxONqepFrX9l3ZS/+wLdZ1l90zn7yjyM KWLkefgcHh1II6RyXLhmObqnvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM3JLCZ+ HsY/fUTq/H8Xg10zAfqtMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0RGMUUvQ0M2NUE2NkExRjlBMTFFRDgzNUNBQTNGQzRGOUFFMDIvODk5QjA3MDgz NEQ1MTFFRDk5QjE5MjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnkjkwDQYJKoZIhvcNAQELBQADggEBAIIeOd2m8G5PKtQC d9nQGNEVq/ezgfD33SWI4WTjYl5eUxIBa+XRearP6XOO69nCUSxjq5hza0gNrixC PJ5kAtvV+6Jo5ZLpExLKORPl8Gk12NmTycJw8In6ASGiL6kkvO20ZRM64qNzBMHd y+oBpUfw/xC0GBMbvy0RiYnEpoBKN8mdNav/aYoV3T8IapHqCrBxODroyyDs6La1 sabvFhCapnkYngADJeU/xMQ0+vf88Wj0Bxi6257linYXcjwauiEPB1tuJbeojK9F 4oTrAbgSysQ6DaVRRu0J6lR/uoD+pErisThZrPqGvApz4clOU2qjjEc3hAgh4Qp6 mb4ZApg= -----END CERTIFICATE-----Generated at Wed Nov 5 01:15:56 2025 by rpki-client