$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/7AE0B322AFEB11F08458536FC4F9AE02.roa File: 7AE0B322AFEB11F08458536FC4F9AE02.roa (raw, json) Hash identifier: bL0DFCoelj0kIlJ7veAcHaSNypZLRoUp9tJOGV1SdK4= Subject key identifier: 3D:F1:47:68:5D:F3:EB:59:72:AD:F0:6A:92:68:F7:B5:E6:73:91:B5 Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08 Certificate serial: 081E Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/7AE0B322AFEB11F08458536FC4F9AE02.roa Signing time: Thu 23 Oct 2025 08:37:16 +0000 ROA not before: Thu 23 Oct 2025 08:37:16 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 24323 IP address blocks: 103.243.81.0/24 maxlen: 24 103.243.82.0/24 maxlen: 24 103.243.83.0/24 maxlen: 24 116.206.60.0/24 maxlen: 24 116.206.62.0/24 maxlen: 24 116.206.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2078 (0x81e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08 Validity Not Before: Oct 23 08:37:16 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68f9e93c-36e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:ef:b4:32:e2:7d:6c:ff:fb:db:68:a4:0a: 09:04:d5:40:d2:7c:0d:17:5e:eb:11:f8:98:62:bf: ff:19:7d:60:7e:94:ff:66:d4:bb:67:2c:51:ac:af: c8:9e:4c:61:71:16:45:44:ed:69:88:8d:c3:cc:ac: 4c:7a:2d:3a:e3:6f:1b:67:a9:9e:3e:9c:51:bb:cf: f8:4c:e2:99:26:9d:30:4a:ad:43:18:56:7d:ca:5a: b8:f0:84:d1:7f:84:a5:0f:d0:30:23:ad:15:c2:9f: ac:21:24:e3:81:f6:7d:b6:06:6f:bd:a8:78:d8:6b: cb:b3:1e:25:25:69:98:11:90:19:ba:04:c1:28:d9: 13:aa:c7:f6:87:bc:f9:6b:7d:e7:69:94:98:a4:48: dd:e9:51:ff:3b:91:be:3c:6a:b5:1f:d3:1d:ad:1a: da:bd:39:9e:8d:4a:30:94:fc:3b:4a:9e:91:a6:ce: 3c:c5:59:0c:eb:25:9d:b6:94:c9:7c:1f:3d:1e:09: 2f:df:68:93:9c:dd:64:48:34:1c:e8:a6:a7:5c:98: e0:77:c9:cd:e9:4a:8c:60:4e:02:82:36:0c:23:a4: f4:72:98:d3:ef:8b:76:ed:0b:ab:b0:fc:ec:97:a9: e2:f1:93:ba:a2:53:e1:99:59:df:ee:ad:23:c2:61: 12:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F1:47:68:5D:F3:EB:59:72:AD:F0:6A:92:68:F7:B5:E6:73:91:B5 X509v3 Authority Key Identifier: keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/7AE0B322AFEB11F08458536FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.81.0-103.243.83.255 116.206.60.0/24 116.206.62.0/23 Signature Algorithm: sha256WithRSAEncryption 20:ad:93:d6:90:09:90:1f:d6:cb:02:96:60:c5:f2:95:2e:74: e0:97:5a:be:80:ca:3f:b5:54:8e:40:0c:ba:1e:f3:98:66:f8: 04:50:cc:24:ca:47:35:fb:28:df:e0:10:90:a1:5b:a5:cb:f8: f2:d2:fb:7c:79:b6:d2:ce:c2:6d:74:21:3c:c3:16:c8:96:6f: e4:53:a3:22:93:5b:c5:14:53:8f:0a:83:a2:97:9b:bf:a1:b3: ad:1b:b4:91:27:b2:b7:5b:ec:db:6d:ab:f9:70:05:ee:dc:10: 52:84:26:16:26:4b:df:e4:e4:76:a0:e2:fc:81:d3:7c:77:22: 92:05:74:b6:5f:2a:9a:c2:9e:d5:04:60:be:a3:51:38:c5:92: ca:e2:8c:98:ef:bb:33:5d:82:ff:2a:a4:68:a8:56:c7:f2:5b: f6:4a:91:1c:da:87:4d:a1:93:86:64:69:5a:56:ee:c6:a3:38: 02:5b:1a:c3:53:41:80:aa:dd:cb:b9:6b:c4:06:15:04:50:1e: d2:cd:f4:14:c1:0c:e0:be:cc:83:37:9a:10:12:bb:7d:f4:1e: fd:c0:7e:e1:c3:16:58:8e:5c:16:00:97:9c:df:ae:a9:2e:5d: 4e:48:14:70:6b:a6:95:85:67:23:c4:ea:a4:5e:ab:6b:d2:db: ff:33:2e:2f -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0 OTg2RERGMDgwHhcNMjUxMDIzMDgzNzE2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5ZTkzYy0zNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRTvtDLifWz/+9topAoJBNVA0nwNF17rEfiYYr//GX1gfpT/ZtS7ZyxRrK/I nkxhcRZFRO1piI3DzKxMei06428bZ6mePpxRu8/4TOKZJp0wSq1DGFZ9ylq48ITR f4SlD9AwI60Vwp+sISTjgfZ9tgZvvah42GvLsx4lJWmYEZAZugTBKNkTqsf2h7z5 a33naZSYpEjd6VH/O5G+PGq1H9MdrRravTmejUowlPw7Sp6Rps48xVkM6yWdtpTJ fB89Hgkv32iTnN1kSDQc6KanXJjgd8nN6UqMYE4CgjYMI6T0cpjT74t27QursPzs l6ni8ZO6olPhmVnf7q0jwmESpwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFD3xR2hd 8+tZcq3wapJo97Xmc5G1MB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQzNUUvN0QzOTRDNkEwMTZEMTFFQjhERDJDMjU5QzRGOUFFMDIvN0FFMEIzMjJB RkVCMTFGMDg0NTg1MzZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEAGfzUQMEAmfzUAMEAHTOPAMEAXTOPjANBgkqhkiG9w0B AQsFAAOCAQEAIK2T1pAJkB/WywKWYMXylS504JdavoDKP7VUjkAMuh7zmGb4BFDM JMpHNfso3+AQkKFbpcv48tL7fHm20s7CbXQhPMMWyJZv5FOjIpNbxRRTjwqDopeb v6GzrRu0kSeyt1vs222r+XAF7twQUoQmFiZL3+TkdqDi/IHTfHcikgV0tl8qmsKe 1QRgvqNROMWSyuKMmO+7M12C/yqkaKhWx/Jb9kqRHNqHTaGThmRpWlbuxqM4Alsa w1NBgKrdy7lrxAYVBFAe0s30FMEM4L7MgzeaEBK7ffQe/cB+4cMWWI5cFgCXnN+u qS5dTkgUcGumlYVnI8TqpF6ra9Lb/zMuLw== -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:26 2025 by rpki-client