$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/8E7802B4AD3911F0992C7B7CC4F9AE02.roa File: 8E7802B4AD3911F0992C7B7CC4F9AE02.roa (raw, json) Hash identifier: LAmTYqluf0IIC60/QbcPZtF2FgRuKfItkv3OxnG47U8= Subject key identifier: 58:65:9A:6C:59:AF:DF:BB:D6:41:16:F8:B8:2F:C0:B3:45:66:0E:68 Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Certificate serial: 3545 Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/8E7802B4AD3911F0992C7B7CC4F9AE02.roa Signing time: Sun 19 Oct 2025 22:18:36 +0000 ROA not before: Sun 19 Oct 2025 22:18:36 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 834 IP address blocks: 103.21.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13637 (0x3545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Validity Not Before: Oct 19 22:18:36 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68f563bc-8078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:e7:3b:b3:29:eb:93:11:77:30:01:55:58: b3:fe:c5:8f:8d:c0:0b:7b:19:30:f1:60:5d:a1:fb: 49:04:2a:fa:22:4a:1c:05:fc:b8:19:40:1d:e4:b8: 5e:04:90:1e:05:2f:06:f2:9f:39:c4:ec:8f:8f:d2: 67:ea:b4:94:16:c7:04:dd:45:73:78:be:23:3c:1f: 2c:7d:f2:2c:96:73:8f:e4:15:54:bc:d9:54:ca:b6: 30:0a:8a:1e:86:39:72:b7:ee:b5:67:09:23:e6:c6: c6:48:e3:91:e9:7f:0a:31:fe:d6:33:fd:50:7a:2a: df:60:bc:13:2c:cd:a8:bd:48:87:6c:eb:f9:0c:70: 87:5d:74:ec:29:61:a4:76:a6:8a:bd:6c:68:08:6a: cb:1d:ca:b0:9a:9e:15:9d:d7:e5:ac:16:62:9b:60: 53:f5:ba:44:9d:85:9c:2f:d2:96:aa:dd:fe:29:4d: 6a:a0:98:de:34:c9:e4:e7:53:64:90:20:4f:71:7c: 38:a1:42:7b:6e:fb:0f:1c:bc:a0:d3:9c:b6:52:80: b1:c5:e4:07:43:df:e4:86:05:68:dc:29:ec:cd:76: 89:98:f6:77:e3:65:4a:78:64:5a:5f:6c:ef:8f:b7: 5b:d6:65:e6:23:3b:e8:73:a2:0a:54:a5:e1:03:34: 48:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:65:9A:6C:59:AF:DF:BB:D6:41:16:F8:B8:2F:C0:B3:45:66:0E:68 X509v3 Authority Key Identifier: keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/8E7802B4AD3911F0992C7B7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.21.139.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:b3:74:86:28:29:b5:3a:c7:e2:ce:ac:6b:d2:d6:5b:be:4d: 95:70:f5:14:b1:9e:4b:14:b1:e4:26:3a:2e:f3:71:17:a9:96: 85:8e:62:dc:06:71:5e:f5:5b:12:0d:ec:7f:8e:27:b2:b5:34: 12:71:c3:05:48:1e:2c:bf:22:06:72:f2:f4:5b:08:8f:5b:a3: 28:80:63:a1:b5:a0:57:ee:df:ae:d3:2b:6e:d4:2a:00:73:3b: 51:dc:0b:b8:98:24:be:80:59:3f:2c:ba:ef:fa:9a:6d:4d:78: f0:b7:84:5e:a8:94:20:03:44:96:a5:2c:cc:af:c3:46:17:11: ab:fe:17:77:6f:ca:57:98:5e:38:65:38:35:d4:45:d5:bc:43: 2c:03:29:80:da:cf:98:d8:c9:60:db:d9:0e:7f:32:0a:dc:1b: 57:2b:82:f0:6c:96:f9:0b:8f:e3:ff:0c:25:c2:84:fd:3e:1c: f7:87:35:09:5a:4d:14:76:eb:2a:4d:59:de:53:5a:e2:07:72: c9:48:78:96:d3:08:f1:95:4a:86:80:23:8f:2f:7e:17:87:09: f6:a0:e7:98:8d:2d:89:c7:d9:a5:7a:2e:9a:b2:45:49:ff:1f: dc:01:c3:cd:46:38:6a:ac:58:3e:8a:d7:f9:81:30:8f:bf:c1: 84:f8:b4:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4 RTA4Rjg1NkUwHhcNMjUxMDE5MjIxODM2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY1NjNiYy04MDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLfnO7Mp65MRdzABVViz/sWPjcALexkw8WBdoftJBCr6IkocBfy4GUAd5Lhe BJAeBS8G8p85xOyPj9Jn6rSUFscE3UVzeL4jPB8sffIslnOP5BVUvNlUyrYwCooe hjlyt+61Zwkj5sbGSOOR6X8KMf7WM/1QeirfYLwTLM2ovUiHbOv5DHCHXXTsKWGk dqaKvWxoCGrLHcqwmp4VndflrBZim2BT9bpEnYWcL9KWqt3+KU1qoJjeNMnk51Nk kCBPcXw4oUJ7bvsPHLyg05y2UoCxxeQHQ9/khgVo3CnszXaJmPZ342VKeGRaX2zv j7db1mXmIzvoc6IKVKXhAzRI4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFhlmmxZ r9+71kEW+LgvwLNFZg5oMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJGNzYvOTQ0RTM4OTIxREFCMTFFMkJCMzBDQUE5MDhCMDJDRDIvOEU3ODAyQjRB RDM5MTFGMDk5MkM3QjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnFYswDQYJKoZIhvcNAQELBQADggEBAEqzdIYoKbU6x+LO rGvS1lu+TZVw9RSxnksUseQmOi7zcReploWOYtwGcV71WxIN7H+OJ7K1NBJxwwVI Hiy/IgZy8vRbCI9boyiAY6G1oFfu367TK27UKgBzO1HcC7iYJL6AWT8suu/6mm1N ePC3hF6olCADRJalLMyvw0YXEav+F3dvyleYXjhlODXURdW8QywDKYDaz5jYyWDb 2Q5/MgrcG1crgvBslvkLj+P/DCXChP0+HPeHNQlaTRR26ypNWd5TWuIHcslIeJbT CPGVSoaAI48vfheHCfag55iNLYnH2aV6LpqyRUn/H9wBw81GOGqsWD6K1/mBMI+/ wYT4tFk= -----END CERTIFICATE-----Generated at Fri Oct 31 05:45:09 2025 by rpki-client