$ rpki-client -vvf rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/7F35DF3CB74E11F0B044DA80C4F9AE02.roa File: 7F35DF3CB74E11F0B044DA80C4F9AE02.roa (raw, json) Hash identifier: c359sIW4Z5sIwnmuCSGuu4Dc9VbeC09XzNfroSlImmE= Subject key identifier: D9:00:39:D2:7D:01:EA:D8:DC:F6:36:54:44:C6:03:E4:BB:A7:B8:D3 Certificate issuer: /CN=A919C563/serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Certificate serial: 115E Authority key identifier: 04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/7F35DF3CB74E11F0B044DA80C4F9AE02.roa Signing time: Sat 01 Nov 2025 18:13:42 +0000 ROA not before: Sat 01 Nov 2025 18:13:42 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135055 IP address blocks: 103.18.180.0/24 maxlen: 24 103.107.38.0/24 maxlen: 24 103.107.40.0/24 maxlen: 24 2406:eac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4446 (0x115e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C563, serialNumber=04A0275F5B2B5C180E7E0D1296EED60BC0CF6347 Validity Not Before: Nov 1 18:13:42 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69064dd6-082a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:53:88:14:62:48:d5:1c:a4:04:a5:8a:ca:76: 80:8c:1e:72:8e:8d:14:ea:04:05:a6:dc:3c:7c:5b: c0:ce:94:9f:8a:7d:d5:d2:89:b3:18:8f:6b:c2:82: f2:1a:e7:ab:58:b6:79:ff:df:a7:3f:d7:3b:9e:65: a8:33:42:d4:ee:2d:9c:fd:48:b0:1b:28:0b:1d:02: 69:57:d3:2e:ce:50:88:52:ab:49:f2:64:a7:31:eb: a8:58:2d:10:75:ec:82:ed:ab:72:a2:23:f6:c7:2e: e7:b8:f2:8b:46:58:70:a5:ad:43:ff:16:90:ac:6d: 8c:d0:4f:35:52:4a:ad:ff:31:f4:19:fb:38:06:54: f1:bd:ab:18:93:ae:2d:28:cd:f1:2a:d1:06:24:b6: 8c:55:af:51:1a:8a:23:c4:86:f3:b7:3c:32:4a:79: a2:eb:a3:ac:d5:b5:36:ed:f8:47:64:cd:4c:e5:e0: f4:d8:10:4e:ca:e0:74:1b:50:29:3f:c6:4d:45:0c: 97:49:dd:de:b1:42:44:cb:09:0a:a5:47:1e:d7:90: ca:0d:76:f1:9d:89:65:01:5a:e2:9f:3c:a5:b6:ce: 1f:fa:cb:1e:9b:28:b9:6b:d5:40:69:43:64:18:bf: 81:43:88:f4:3b:35:59:17:ff:f3:4f:da:59:2a:84: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:00:39:D2:7D:01:EA:D8:DC:F6:36:54:44:C6:03:E4:BB:A7:B8:D3 X509v3 Authority Key Identifier: keyid:04:A0:27:5F:5B:2B:5C:18:0E:7E:0D:12:96:EE:D6:0B:C0:CF:63:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/BKAnX1srXBgOfg0Slu7WC8DPY0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKAnX1srXBgOfg0Slu7WC8DPY0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C563/11B6336417C111E981080F6CC4F9AE02/7F35DF3CB74E11F0B044DA80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.18.180.0/24 103.107.38.0/24 103.107.40.0/24 IPv6: 2406:eac0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:5b:19:15:55:84:13:af:95:23:48:d5:d5:81:01:fa:de:7c: 59:f2:db:ec:0f:3f:43:bb:f6:c1:a5:ef:40:e0:27:0d:de:a9: 92:db:f4:3d:3e:be:2d:c9:f5:c1:48:1c:05:13:c8:68:57:d6: 50:6a:7d:64:af:01:e9:a7:53:cd:33:13:97:53:18:be:c4:69: e4:12:00:81:d8:c8:23:d0:52:1e:d7:65:83:e4:4b:ab:94:d5: fb:23:f1:64:f0:ec:83:c1:57:1e:32:8c:43:be:ae:ec:d2:a1: 92:e6:56:4a:80:c9:ac:f9:38:73:0c:19:05:9b:4b:1b:e5:bd: 3b:41:50:54:9d:b9:8d:a7:6f:0f:0c:cb:ee:15:50:ae:4e:fd: 4c:9a:5b:97:74:9d:0e:c0:e1:b9:c1:f7:17:41:7c:a8:13:0c: f7:02:8b:29:68:87:ba:05:62:28:ab:85:a5:fb:7f:50:d8:1b: f3:8a:58:c3:e4:df:31:82:c3:6a:88:21:f3:a0:e0:74:ba:ee: 5d:57:55:4c:7c:df:21:a0:01:01:2d:48:00:8a:7d:bc:8e:98: f1:c7:4f:2b:9f:9c:09:ca:26:23:6d:24:32:03:c6:56:d4:a3: 82:be:21:ed:2d:28:0d:55:4c:1d:9b:d1:07:f6:a5:2b:f3:29: 7c:cd:6e:58 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICEV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1NjMxMTAvBgNVBAUTKDA0QTAyNzVGNUIyQjVDMTgwRTdFMEQxMjk2RUVENjBC QzBDRjYzNDcwHhcNMjUxMTAxMTgxMzQyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA2NGRkNi0wODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lOIFGJI1RykBKWKynaAjB5yjo0U6gQFptw8fFvAzpSfin3V0omzGI9rwoLy GuerWLZ5/9+nP9c7nmWoM0LU7i2c/UiwGygLHQJpV9MuzlCIUqtJ8mSnMeuoWC0Q deyC7atyoiP2xy7nuPKLRlhwpa1D/xaQrG2M0E81Ukqt/zH0Gfs4BlTxvasYk64t KM3xKtEGJLaMVa9RGoojxIbztzwySnmi66Os1bU27fhHZM1M5eD02BBOyuB0G1Ap P8ZNRQyXSd3esUJEywkKpUce15DKDXbxnYllAVrinzylts4f+ssemyi5a9VAaUNk GL+BQ4j0OzVZF//zT9pZKoTpvQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNkAOdJ9 AerY3PY2VETGA+S7p7jTMB8GA1UdIwQYMBaAFASgJ19bK1wYDn4NEpbu1gvAz2NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzU2My8xMUI2MzM2NDE3 QzExMUU5ODEwODBGNkNDNEY5QUUwMi9CS0FuWDFzclhCZ09mZzBTbHU3V0M4RFBZ MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLQW5YMXNyWEJnT2ZnMFNsdTdXQzhEUFkwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM1NjMvMTFCNjMzNjQxN0MxMTFFOTgxMDgwRjZDQzRGOUFFMDIvN0YzNURGM0NC NzRFMTFGMEIwNDREQTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABnErQDBABnayYDBABnaygwDQQCAAIwBwMFACQG6sAwDQYJ KoZIhvcNAQELBQADggEBAApbGRVVhBOvlSNI1dWBAfrefFny2+wPP0O79sGl70Dg Jw3eqZLb9D0+vi3J9cFIHAUTyGhX1lBqfWSvAemnU80zE5dTGL7EaeQSAIHYyCPQ Uh7XZYPkS6uU1fsj8WTw7IPBVx4yjEO+ruzSoZLmVkqAyaz5OHMMGQWbSxvlvTtB UFSduY2nbw8My+4VUK5O/UyaW5d0nQ7A4bnB9xdBfKgTDPcCiyloh7oFYiirhaX7 f1DYG/OKWMPk3zGCw2qIIfOg4HS67l1XVUx83yGgAQEtSACKfbyOmPHHTyufnAnK JiNtJDIDxlbUo4K+Ie0tKA1VTB2b0Qf2pSvzKXzNblg= -----END CERTIFICATE-----Generated at Tue Nov 4 14:35:39 2025 by rpki-client