$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/1994E0780B5B11EB80C8B15FC4F9AE02.roa File: 1994E0780B5B11EB80C8B15FC4F9AE02.roa (raw, json) Hash identifier: BcBBZ1IV+bokAtTZ3iUNiKgQOrGhBIBLoYEFwdHdcHQ= Subject key identifier: FC:3A:E4:24:7B:6F:29:9D:32:20:22:94:7E:AF:6F:12:D8:EB:CC:51 Certificate issuer: /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Certificate serial: 07AD Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/1994E0780B5B11EB80C8B15FC4F9AE02.roa Signing time: Wed 02 Jul 2025 22:01:38 +0000 ROA not before: Wed 02 Jul 2025 22:01:38 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55720 IP address blocks: 45.121.144.0/24 maxlen: 24 45.121.145.0/24 maxlen: 24 45.121.146.0/24 maxlen: 24 45.121.147.0/24 maxlen: 24 103.249.84.0/24 maxlen: 24 103.249.85.0/24 maxlen: 24 103.249.86.0/24 maxlen: 24 103.249.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EA7F, serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Validity Not Before: Jul 2 22:01:38 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6865ac42-d92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:35:8d:71:03:2d:2b:c9:68:50:b9:5b:42: 7e:16:94:1d:f2:8a:ab:b9:30:7e:2b:09:ba:a0:c9: 6a:6a:55:0c:c2:da:22:3d:2a:ee:25:69:0f:b8:06: 75:2f:83:68:a0:51:58:f1:e3:24:92:21:44:b2:09: 36:ef:8e:f4:22:80:53:8e:68:b2:fc:65:51:83:6b: 5b:3c:1a:e1:5c:ce:2a:c4:5d:ca:73:fb:fd:14:69: d9:90:e5:32:37:d0:28:b3:a2:52:fc:9e:11:8e:d9: 39:3d:8f:a8:01:0d:31:56:af:c7:dd:39:39:ab:7e: e3:d0:7a:30:72:9c:00:c9:99:42:ab:37:f6:40:b4: 7b:83:70:89:40:1b:f5:39:79:6a:65:65:22:6e:c0: 78:1a:cb:1e:40:24:8d:6f:7e:74:03:6d:55:01:4f: c8:27:14:70:06:bc:55:37:de:82:5a:ab:f0:f3:e6: f4:a4:2b:7f:41:72:af:c6:73:61:85:bc:43:fd:40: c5:ed:4f:a0:55:1e:fe:58:0e:7c:dd:9b:49:40:2c: 87:e4:98:bc:77:af:ad:e7:23:ad:61:44:ef:2a:7d: 48:5d:7c:2e:7f:d8:e7:97:a5:9c:79:85:2e:71:07: 96:11:56:2d:66:b0:bb:fb:64:1e:87:68:20:49:6e: cc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3A:E4:24:7B:6F:29:9D:32:20:22:94:7E:AF:6F:12:D8:EB:CC:51 X509v3 Authority Key Identifier: keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/1994E0780B5B11EB80C8B15FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.144.0/22 103.249.84.0/22 Signature Algorithm: sha256WithRSAEncryption 00:75:e7:87:7c:f6:63:53:47:b2:0a:29:57:18:2b:3c:04:d1: 6b:82:af:d5:93:2b:53:bb:14:29:08:39:55:98:bd:de:9e:57: 1d:44:2e:d7:a3:74:30:5e:01:b0:1c:5d:2a:bb:ee:0b:10:23: f1:03:af:72:83:08:23:d5:30:43:b4:2f:a3:88:31:a4:32:cd: 2e:36:f1:fc:fc:59:f0:0d:77:54:fe:57:a2:73:9f:e2:c5:bb: fd:df:fb:7d:ce:35:3b:b5:14:23:40:4c:6e:8e:41:15:d9:d8: 00:14:51:59:3f:0c:73:7d:0f:ce:a7:f1:13:77:f5:77:fb:77: 5b:26:98:ab:9b:f9:9b:96:06:2d:42:3a:ba:8e:48:f4:36:69: 1e:8a:6b:2c:7b:21:4a:42:81:58:95:bd:89:03:9c:b1:ae:ef: 70:d6:c9:82:2e:e9:21:aa:f4:bc:4b:47:d4:b6:f6:b8:a0:44: 99:17:67:b9:dd:8a:c2:80:81:95:10:f6:33:81:28:af:26:d9: 79:26:95:a8:3c:57:5a:32:19:09:2c:93:9a:f3:42:cd:2e:4e: 72:dd:df:31:4a:08:7a:b3:f6:bf:0b:a6:ec:75:9d:05:62:86: 09:0f:b3:cd:39:a5:69:62:ff:bc:8a:3b:db:39:5e:af:76:25: 76:09:9e:ed -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VBN0YxMTAvBgNVBAUTKDE4NDQyQTExNkMzMDEwMUJFQzhDODlGNDUwMTk3OEMw OTIwMzZCQjgwHhcNMjUwNzAyMjIwMTM4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1YWM0Mi1kOTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrc1jXEDLSvJaFC5W0J+FpQd8oqruTB+Kwm6oMlqalUMwtoiPSruJWkPuAZ1 L4NooFFY8eMkkiFEsgk27470IoBTjmiy/GVRg2tbPBrhXM4qxF3Kc/v9FGnZkOUy N9Aos6JS/J4Rjtk5PY+oAQ0xVq/H3Tk5q37j0HowcpwAyZlCqzf2QLR7g3CJQBv1 OXlqZWUibsB4GsseQCSNb350A21VAU/IJxRwBrxVN96CWqvw8+b0pCt/QXKvxnNh hbxD/UDF7U+gVR7+WA583ZtJQCyH5Ji8d6+t5yOtYUTvKn1IXXwuf9jnl6WceYUu cQeWEVYtZrC7+2Qeh2ggSW7MVwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPw65CR7 bymdMiAilH6vbxLY68xRMB8GA1UdIwQYMBaAFBhEKhFsMBAb7IyJ9FAZeMCSA2u4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUE3Ri9FOTY0QUY0QzBC NTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VCdnNqSW4wVUJsNHdKSURh N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dFUXFFV3d3RUJ2c2pJbjBVQmw0d0pJRGE3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VBN0YvRTk2NEFGNEMwQjU5MTFFQjkzNTkwQTVGQzRGOUFFMDIvMTk5NEUwNzgw QjVCMTFFQjgwQzhCMTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIteZADBAJn+VQwDQYJKoZIhvcNAQELBQADggEBAAB154d8 9mNTR7IKKVcYKzwE0WuCr9WTK1O7FCkIOVWYvd6eVx1ELtejdDBeAbAcXSq77gsQ I/EDr3KDCCPVMEO0L6OIMaQyzS428fz8WfANd1T+V6Jzn+LFu/3f+33ONTu1FCNA TG6OQRXZ2AAUUVk/DHN9D86n8RN39Xf7d1smmKub+ZuWBi1COrqOSPQ2aR6Kayx7 IUpCgViVvYkDnLGu73DWyYIu6SGq9LxLR9S29rigRJkXZ7ndisKAgZUQ9jOBKK8m 2Xkmlag8V1oyGQksk5rzQs0uTnLd3zFKCHqz9r8Lpux1nQVihgkPs805pWli/7yK O9s5Xq92JXYJnu0= -----END CERTIFICATE-----Generated at Wed Nov 5 21:28:08 2025 by rpki-client