$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/3489528EC84511ED90A61540C4F9AE02.roa File: 3489528EC84511ED90A61540C4F9AE02.roa (raw, json) Hash identifier: Xp+CN4LqcT/0Y+vEkAwmxb+Nkk14BBORVU2fsmUOWF4= Subject key identifier: 96:04:A9:E5:46:6D:E7:01:C1:A1:60:1C:B1:31:B3:BC:48:4C:09:AC Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 12C1 Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/3489528EC84511ED90A61540C4F9AE02.roa Signing time: Tue 28 Oct 2025 17:05:32 +0000 ROA not before: Tue 28 Oct 2025 17:05:32 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 135516 IP address blocks: 103.130.8.0/23 maxlen: 24 103.132.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4801 (0x12c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Oct 28 17:05:32 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6900f7dc-f7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:e1:cf:2f:7a:f1:c1:01:f3:e6:de:75:bc: de:99:66:b5:76:18:e7:cb:3e:bf:10:42:58:5c:94: c7:22:f9:db:90:cc:da:d4:cc:7f:27:9a:e2:e6:28: 31:8b:5b:2d:c9:34:1e:e7:2a:3a:85:74:ce:ff:9e: 67:b1:3e:45:27:9b:8b:24:73:45:5b:7b:06:97:42: 56:cb:d4:97:08:3f:f5:d0:83:9a:79:a7:2d:e6:90: 52:31:78:74:c9:67:ec:7f:5e:31:02:e9:a9:04:b8: 17:e4:fa:3d:7a:da:c2:99:4c:06:42:a6:0c:f6:10: ef:e4:a0:12:ca:7d:35:07:4a:69:74:8e:7b:df:26: f6:49:af:06:4f:eb:72:38:e5:ea:de:6b:29:8e:57: 01:29:95:03:49:c1:70:68:97:43:0a:c8:d7:8b:12: a3:97:18:ed:7d:1d:73:cc:93:e3:b1:a7:25:1d:a1: 7b:f3:b7:7b:45:1c:f5:e4:60:f1:8b:ce:28:ef:05: 32:45:e0:2a:93:73:a7:39:8f:1f:25:e3:d4:2f:2d: bf:99:25:e0:eb:dd:fa:d4:f6:a1:15:b1:3b:c4:92: fe:54:60:6f:07:4c:38:7f:67:a2:c6:99:2d:db:fa: 08:ae:8a:a3:31:13:f7:ee:ca:5a:21:9e:50:df:60: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:A9:E5:46:6D:E7:01:C1:A1:60:1C:B1:31:B3:BC:48:4C:09:AC X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/3489528EC84511ED90A61540C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.130.8.0/23 103.132.126.0/23 Signature Algorithm: sha256WithRSAEncryption 10:32:dd:11:66:df:64:cb:87:84:8a:7e:9b:d4:34:d8:bd:7f: 89:48:b6:ac:5b:c6:c1:74:17:cf:fb:f1:c6:6b:e7:4e:b8:e5: ab:c1:ee:8c:67:23:e4:a2:aa:98:bd:54:d8:26:bf:c7:5c:37: f8:d2:4c:fc:f4:14:87:99:2e:4c:81:1f:8c:80:ed:9b:77:f0: 3c:a5:72:cc:93:c1:83:3f:8d:81:d8:49:ba:a1:9b:f3:43:b4: 45:25:ec:c8:41:2a:04:f8:a3:67:97:86:8b:28:62:e4:f3:54: 52:21:ec:b0:a1:31:1a:5a:12:1b:fd:d5:77:6c:37:af:c1:22: bc:cd:e0:e1:24:d8:7b:18:8a:73:c2:59:59:51:11:97:3c:ea: fa:64:a6:50:ff:db:5f:03:ac:84:69:1c:2b:48:6a:95:53:1c: 7a:3b:17:18:3f:87:69:c1:30:8f:93:98:20:06:12:0d:ff:a5: 9d:d4:22:65:28:4b:20:cb:fc:eb:58:c0:fa:9e:44:86:38:d0: e4:95:99:9e:47:20:91:07:0c:43:6f:33:0e:8c:a3:34:cf:e3: 75:17:82:df:74:94:8a:71:4e:49:d2:dc:d5:82:32:ba:53:c9: 77:69:94:da:8a:a4:98:de:d5:35:04:02:98:3c:53:98:ae:fe: 53:27:fb:3a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICEsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUxMDI4MTcwNTMyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAwZjdkYy1mN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRnhzy968cEB8+bedbzemWa1dhjnyz6/EEJYXJTHIvnbkMza1Mx/J5ri5igx i1styTQe5yo6hXTO/55nsT5FJ5uLJHNFW3sGl0JWy9SXCD/10IOaeact5pBSMXh0 yWfsf14xAumpBLgX5Po9etrCmUwGQqYM9hDv5KASyn01B0ppdI573yb2Sa8GT+ty OOXq3mspjlcBKZUDScFwaJdDCsjXixKjlxjtfR1zzJPjsaclHaF787d7RRz15GDx i84o7wUyReAqk3OnOY8fJePULy2/mSXg69361PahFbE7xJL+VGBvB0w4f2eixpkt 2/oIroqjMRP37spaIZ5Q32D4NwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJYEqeVG becBwaFgHLExs7xITAmsMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU4RUIvRDAzOUY4RDZEMUJGMTFFOEIyNjRGNjVBQzRGOUFFMDIvMzQ4OTUyOEVD ODQ1MTFFRDkwQTYxNTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFngggDBAFnhH4wDQYJKoZIhvcNAQELBQADggEBABAy3RFm 32TLh4SKfpvUNNi9f4lItqxbxsF0F8/78cZr50645avB7oxnI+Siqpi9VNgmv8dc N/jSTPz0FIeZLkyBH4yA7Zt38DylcsyTwYM/jYHYSbqhm/NDtEUl7MhBKgT4o2eX hosoYuTzVFIh7LChMRpaEhv91XdsN6/BIrzN4OEk2HsYinPCWVlREZc86vpkplD/ 218DrIRpHCtIapVTHHo7Fxg/h2nBMI+TmCAGEg3/pZ3UImUoSyDL/OtYwPqeRIY4 0OSVmZ5HIJEHDENvMw6MozTP43UXgt90lIpxTknS3NWCMrpTyXdplNqKpJje1TUE Apg8U5iu/lMn+zo= -----END CERTIFICATE-----Generated at Wed Nov 5 21:42:39 2025 by rpki-client