$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/D93EF164ABF311F0BBF66516C4F9AE02.roa File: D93EF164ABF311F0BBF66516C4F9AE02.roa (raw, json) Hash identifier: NGI5hrHduSRPEthUQK06fSfxELn6PeFYPGY/eePELJg= Subject key identifier: 68:FC:72:83:41:16:8F:2F:9E:D3:93:2B:72:08:B2:82:47:8C:00:77 Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Certificate serial: DF Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/D93EF164ABF311F0BBF66516C4F9AE02.roa Signing time: Sat 18 Oct 2025 07:27:06 +0000 ROA not before: Sat 18 Oct 2025 07:27:06 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 26658 IP address blocks: 45.120.204.0/22 maxlen: 24 103.61.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Validity Not Before: Oct 18 07:27:06 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68f3414a-1634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:f7:db:a6:9f:ec:a5:dc:0e:2a:e4:c4:df: 7f:de:8f:58:88:7c:63:96:67:fc:6b:9a:d2:42:e6: ad:3e:ca:80:78:bb:d4:9d:63:fd:f4:4d:0c:63:8b: 7a:59:fd:68:37:9c:1c:c5:2a:12:d8:02:ad:e0:ea: 22:e6:cf:bd:20:59:b1:25:88:22:a2:55:c0:fb:9b: be:28:09:97:34:3b:6a:68:18:d4:7c:5e:f2:38:86: 0c:7f:5f:7f:be:e0:c4:6c:dd:e4:1e:73:fb:e1:ed: e5:e8:ee:29:f2:24:d1:d9:3d:40:6b:5a:a7:8c:cc: 65:f5:8a:b0:a1:32:4a:61:3c:e9:57:de:bb:17:a7: cc:b1:6f:48:92:03:89:e3:ac:8f:62:20:bc:f5:bf: cc:4d:1e:4a:bb:1b:40:cb:11:aa:8b:ba:e1:14:cb: 1c:45:2a:25:61:a5:7f:2f:9b:b0:15:e3:42:f7:46: 0f:ee:34:e7:02:49:c7:df:80:3b:4c:47:00:5a:4a: 34:6a:cc:6c:de:14:5c:0d:a7:95:17:b5:c6:e3:1d: 87:2b:fb:74:18:b8:7b:56:b9:53:42:5e:c7:46:55: d0:30:c2:45:c0:72:5e:ef:02:49:23:74:ae:12:5c: 42:dd:35:44:9c:0b:f5:71:fb:e9:95:59:df:ae:c2: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FC:72:83:41:16:8F:2F:9E:D3:93:2B:72:08:B2:82:47:8C:00:77 X509v3 Authority Key Identifier: keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/D93EF164ABF311F0BBF66516C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.204.0/22 103.61.20.0/22 Signature Algorithm: sha256WithRSAEncryption 69:09:1d:6b:d8:d1:f3:4f:8a:ae:86:90:bf:1d:30:a0:40:13: 98:1a:7b:d6:4e:30:5c:c0:45:25:9e:61:1f:a6:a1:cf:5e:76: 55:c3:60:a3:04:96:19:ef:fd:9f:f0:4d:68:87:1d:65:97:b0: a7:0c:14:80:3c:04:59:51:a1:cd:df:d8:7f:84:a6:66:5d:21: 1e:44:a1:e7:3e:67:7e:85:04:55:b9:7f:cf:9a:98:33:8b:b8: 87:2f:ce:b6:7f:19:39:a7:23:59:19:be:5d:9d:51:05:9b:44: 70:a0:4b:ea:49:3a:18:e3:9d:94:12:ef:81:fc:9c:e8:97:6f: 6c:00:55:6c:da:5f:34:42:81:c8:81:2d:17:4c:e0:93:d7:66: d3:0e:1c:34:b1:88:ed:99:6c:00:29:52:f1:e9:60:66:69:43: 08:fe:70:0e:20:fa:54:82:6c:94:82:b1:25:4d:a2:32:7e:c2: 4d:a3:b0:3e:c5:58:00:fb:c7:ba:fc:dc:fd:20:fd:b6:03:68: d0:fd:dd:14:eb:37:06:ee:41:7d:7a:f1:6d:96:d2:9b:a9:1d: c1:d2:45:c3:81:08:6b:c3:0b:e9:e8:92:53:9b:3e:4b:c3:e7: 41:18:62:4d:cd:d3:6c:cd:5f:fc:cc:29:81:de:f4:7a:a8:b2: b2:d6:4e:83 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM2RTcxMTAvBgNVBAUTKDcxMTYxNzAwMkQ5RjBDOUVCNjVCNEVERDYxRjdBMUM5 MUZDREI4M0UwHhcNMjUxMDE4MDcyNzA2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYzNDE0YS0xNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCX326af7KXcDirkxN9/3o9YiHxjlmf8a5rSQuatPsqAeLvUnWP99E0MY4t6 Wf1oN5wcxSoS2AKt4Ooi5s+9IFmxJYgiolXA+5u+KAmXNDtqaBjUfF7yOIYMf19/ vuDEbN3kHnP74e3l6O4p8iTR2T1Aa1qnjMxl9YqwoTJKYTzpV967F6fMsW9IkgOJ 46yPYiC89b/MTR5KuxtAyxGqi7rhFMscRSolYaV/L5uwFeNC90YP7jTnAknH34A7 TEcAWko0asxs3hRcDaeVF7XG4x2HK/t0GLh7VrlTQl7HRlXQMMJFwHJe7wJJI3Su ElxC3TVEnAv1cfvplVnfrsLffwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGj8coNB Fo8vntOTK3IIsoJHjAB3MB8GA1UdIwQYMBaAFHEWFwAtnwyetltO3WH3ockfzbg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzZFNy9FNEEwQ0NBRTVE REQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRKNjJXMDdkWWZlaHlSX051 RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSWVhBQzJmREo2MlcwN2RZZmVoeVJfTnVENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM2RTcvRTRBMENDQUU1REREMTFFRjgzMERGNTYxQzRGOUFFMDIvRDkzRUYxNjRB QkYzMTFGMEJCRjY2NTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIteMwDBAJnPRQwDQYJKoZIhvcNAQELBQADggEBAGkJHWvY 0fNPiq6GkL8dMKBAE5gae9ZOMFzARSWeYR+moc9edlXDYKMElhnv/Z/wTWiHHWWX sKcMFIA8BFlRoc3f2H+EpmZdIR5Eoec+Z36FBFW5f8+amDOLuIcvzrZ/GTmnI1kZ vl2dUQWbRHCgS+pJOhjjnZQS74H8nOiXb2wAVWzaXzRCgciBLRdM4JPXZtMOHDSx iO2ZbAApUvHpYGZpQwj+cA4g+lSCbJSCsSVNojJ+wk2jsD7FWAD7x7r83P0g/bYD aND93RTrNwbuQX168W2W0pupHcHSRcOBCGvDC+noklObPkvD50EYYk3N02zNX/zM KYHe9HqosrLWToM= -----END CERTIFICATE-----Generated at Tue Oct 28 06:43:37 2025 by rpki-client