
$ rpki-client -vvf rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/4D2299ECF7C611EF92C34E4AC4F9AE02.roa
File:                     4D2299ECF7C611EF92C34E4AC4F9AE02.roa (raw, json)
Hash identifier:          UPxtnvqn+XnWITXkdADWZf+oTAAZ7ogJ1IFuU/0UKTI=
Subject key identifier:   BC:64:1B:25:DF:89:E8:09:53:66:B9:77:0F:00:C0:21:06:50:14:48
Certificate issuer:       /CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
Certificate serial:       08F9
Authority key identifier: 15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/4D2299ECF7C611EF92C34E4AC4F9AE02.roa
Signing time:             Fri 24 Oct 2025 21:10:04 +0000
ROA not before:           Fri 24 Oct 2025 21:10:04 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139685
IP address blocks:        103.102.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl
                          rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:16:56 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2297 (0x8f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919887F, serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
        Validity
            Not Before: Oct 24 21:10:04 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68fbeb2c-69ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:81:96:07:e3:69:c3:8a:77:93:d2:63:94:06:
                    bc:63:98:15:59:79:07:0d:39:09:71:d7:26:3c:42:
                    00:37:28:d2:ab:d1:71:27:8a:b7:1d:9b:d6:41:54:
                    81:0c:ed:ce:b8:8c:79:28:84:bd:fc:7a:b5:ad:5e:
                    dd:10:16:d5:0f:30:f1:94:df:f9:c9:02:60:d3:0f:
                    f4:d4:06:2c:9f:be:15:51:0d:25:aa:9d:37:3b:25:
                    ef:e6:58:ca:49:87:2b:0b:ac:f0:86:96:d4:fb:61:
                    cd:2a:19:b7:05:7e:30:a0:fd:5c:5a:49:2b:00:82:
                    95:7b:8e:90:fb:85:6a:15:0f:6b:0c:04:be:26:2c:
                    bb:b7:bc:2f:01:b8:33:0d:be:be:16:a2:da:5c:b9:
                    ae:db:ff:b9:2b:d0:3d:ec:63:2c:39:f1:72:73:af:
                    f5:8a:5c:5c:66:da:d0:a1:bb:4d:97:43:99:f4:4e:
                    f5:02:eb:bf:3e:70:fe:25:8f:b0:24:25:3f:53:c5:
                    90:af:35:b8:ec:ad:fd:92:37:45:b4:4f:0e:cd:16:
                    f4:e9:60:e4:6c:2d:44:1a:8e:a7:29:a5:7c:4c:02:
                    ee:35:63:ef:ab:b1:f6:9f:71:04:2f:75:ad:67:cf:
                    0a:e1:a8:3f:bb:6b:c5:c6:59:54:46:f9:41:c5:a2:
                    81:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:64:1B:25:DF:89:E8:09:53:66:B9:77:0F:00:C0:21:06:50:14:48
            X509v3 Authority Key Identifier:
                keyid:15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/4D2299ECF7C611EF92C34E4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.165.0/24
    Signature Algorithm: sha256WithRSAEncryption
         c6:f4:42:bb:ee:e7:38:9d:fa:6f:1a:66:9c:46:41:9b:fc:25:
         47:1f:5c:37:36:d8:aa:ec:23:75:74:d2:1a:2b:60:3d:a1:4c:
         94:4d:4e:c7:62:ad:6c:c8:cb:95:b1:3d:ae:19:62:da:45:0d:
         2f:d3:1c:ec:ec:79:5d:67:19:8a:38:26:7c:15:8f:6d:0a:1c:
         47:35:63:30:80:63:23:e8:92:cb:45:a2:8d:d4:94:0e:73:17:
         84:63:4c:0d:3f:89:11:5c:a4:85:92:e8:f1:c0:bf:51:f3:a3:
         fe:00:22:b9:56:b1:a6:85:21:b6:f7:ae:0d:07:d5:01:3d:e0:
         05:8d:60:e1:32:5e:31:0b:7b:39:ee:5d:38:16:ce:83:0c:4a:
         04:7f:e1:4a:58:e2:ac:c1:37:db:6a:35:ed:0c:61:70:bc:53:
         5e:5a:f0:1e:53:28:0d:51:f9:02:b9:56:eb:05:86:56:d4:0b:
         d2:ce:b3:f4:d0:b9:71:dc:10:d1:29:3a:af:1f:a2:b3:9e:1e:
         4e:8c:46:72:ab:1a:56:4b:44:a9:76:f7:d8:28:83:f4:6c:82:
         82:d0:b5:6c:57:da:89:bd:7d:8e:d1:7a:e4:c2:bd:ab:12:a2:
         85:c1:9a:4d:5a:f6:63:b8:78:3d:f6:80:23:f1:37:9a:03:fb:
         18:a8:10:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:05:22 2025 by rpki-client