$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/A4FC1E34519311EE85CE2811C4F9AE02.roa File: A4FC1E34519311EE85CE2811C4F9AE02.roa (raw, json) Hash identifier: FZUjzlxQzgZF6JDMRzeJhcRgNYq3dhICyuyYGYZj5hs= Subject key identifier: 0F:3B:F3:E6:03:03:66:12:1E:F1:01:C0:75:21:6E:9E:64:81:67:93 Certificate issuer: /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Certificate serial: 0189 Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/A4FC1E34519311EE85CE2811C4F9AE02.roa Signing time: Thu 09 Oct 2025 04:02:55 +0000 ROA not before: Thu 09 Oct 2025 04:02:55 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 151798 IP address blocks: 103.77.212.0/23 maxlen: 23 103.77.212.0/24 maxlen: 24 103.77.213.0/24 maxlen: 24 2001:df2:ea40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BE2, serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE Validity Not Before: Oct 9 04:02:55 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e733ee-8cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cf:55:b4:21:c5:ff:a5:b8:78:82:5e:58:8b: a7:7f:49:53:23:66:8f:47:51:d6:0a:42:8e:9f:a4: 6b:b0:e4:a6:4f:6d:6b:8e:3b:4f:0b:ac:77:f5:b8: 06:7d:b9:86:26:a9:75:95:ea:16:69:86:3f:70:dc: c7:75:77:aa:34:98:0a:a3:af:4c:c2:f7:77:1d:7e: 0e:71:97:86:4a:9f:48:ff:01:c7:4c:7d:de:5b:17: b2:ce:35:14:c5:fd:98:63:9b:8b:1b:42:f3:99:fd: ad:76:fd:5a:5c:62:13:ce:22:9e:2c:8e:c6:49:85: 23:8d:da:77:aa:a6:f8:b2:4e:29:a7:59:44:27:c6: bd:8f:64:f8:a6:2d:21:8c:46:a1:4a:66:d9:7f:16: 94:5e:38:0b:5d:be:70:1a:69:9b:e8:4d:36:30:e5: 7a:3e:71:de:8e:ab:29:73:c1:38:64:62:eb:35:07: 93:f1:ab:b8:45:38:2e:f4:0d:3c:1f:18:d1:05:71: d7:6d:20:85:72:9e:90:63:51:47:86:46:c1:80:9c: 70:3b:37:f4:b4:c3:97:fc:fb:55:a9:ea:aa:bc:7e: 10:50:5f:b2:8f:02:ba:24:bc:8a:41:df:9c:28:48: e7:44:0b:74:fe:3a:5c:4d:c1:a8:cd:2c:11:8a:76: 59:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3B:F3:E6:03:03:66:12:1E:F1:01:C0:75:21:6E:9E:64:81:67:93 X509v3 Authority Key Identifier: keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/A4FC1E34519311EE85CE2811C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.212.0/23 IPv6: 2001:df2:ea40::/48 Signature Algorithm: sha256WithRSAEncryption c3:bf:49:49:cb:e2:56:7b:e7:f0:7b:2c:66:e1:b3:c4:3a:df: 62:3f:41:26:55:f6:8d:51:06:5c:86:ef:47:61:af:d2:eb:42: 19:1e:2e:f5:b6:6e:66:3f:7b:a4:85:a7:25:c0:42:44:44:65: 1d:88:2d:9d:5b:2f:05:25:2c:ab:3b:1d:85:36:f1:20:0e:76: 54:b0:d7:8b:e7:93:30:c6:a7:c9:86:b0:04:da:91:df:f7:5c: 32:d2:e2:0f:cc:2b:80:31:19:d3:0b:27:2c:c6:d5:8f:58:c8: ac:25:27:e4:fd:24:ff:c1:eb:f5:8e:50:1a:11:41:76:52:9b: 4e:79:96:e4:bf:e2:93:59:88:ee:22:ee:26:87:8c:e5:e0:0e: 94:2e:06:ea:e3:c7:16:82:21:0f:2d:cf:58:c4:dd:d4:9d:36: 35:9b:77:d2:7f:7b:c5:b0:55:d6:2a:85:77:47:66:b1:d1:e7: d7:74:82:36:88:c3:e5:1a:57:23:db:ae:c0:58:72:a2:81:94: 55:57:9a:0b:d6:c6:e4:e1:6a:9b:d2:d4:c0:cd:79:e4:be:8d: db:a2:aa:71:7f:92:77:45:51:27:b0:56:c9:31:c3:6a:b6:f8: 36:64:44:e8:92:e8:7a:ff:bd:b7:eb:6b:10:3d:23:53:3f:d7: 38:3c:c4:91 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCRTIxMTAvBgNVBAUTKEQzOUExMEU2MUE4Q0E5NTA0RURCMTU0ODY5MzZCMzc3 NDNBMjREQ0UwHhcNMjUxMDA5MDQwMjU1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU3MzNlZS04Y2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1M9VtCHF/6W4eIJeWIunf0lTI2aPR1HWCkKOn6RrsOSmT21rjjtPC6x39bgG fbmGJql1leoWaYY/cNzHdXeqNJgKo69Mwvd3HX4OcZeGSp9I/wHHTH3eWxeyzjUU xf2YY5uLG0Lzmf2tdv1aXGITziKeLI7GSYUjjdp3qqb4sk4pp1lEJ8a9j2T4pi0h jEahSmbZfxaUXjgLXb5wGmmb6E02MOV6PnHejqspc8E4ZGLrNQeT8au4RTgu9A08 HxjRBXHXbSCFcp6QY1FHhkbBgJxwOzf0tMOX/PtVqeqqvH4QUF+yjwK6JLyKQd+c KEjnRAt0/jpcTcGozSwRinZZVwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFA878+YD A2YSHvEBwHUhbp5kgWeTMB8GA1UdIwQYMBaAFNOaEOYajKlQTtsVSGk2s3dDok3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJFMi82Q0I5QTk2NjUx OTIxMUVFQjkwQTMzMEJDNEY5QUUwMi8wNW9RNWhxTXFWQk8yeFZJYVRhemQwT2lU YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1b1E1aHFNcVZCTzJ4VklhVGF6ZDBPaVRjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBCRTIvNkNCOUE5NjY1MTkyMTFFRUI5MEEzMzBCQzRGOUFFMDIvQTRGQzFFMzQ1 MTkzMTFFRTg1Q0UyODExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnTdQwDwQCAAIwCQMHACABDfLqQDANBgkqhkiG9w0BAQsF AAOCAQEAw79JScviVnvn8HssZuGzxDrfYj9BJlX2jVEGXIbvR2Gv0utCGR4u9bZu Zj97pIWnJcBCRERlHYgtnVsvBSUsqzsdhTbxIA52VLDXi+eTMManyYawBNqR3/dc MtLiD8wrgDEZ0wsnLMbVj1jIrCUn5P0k/8Hr9Y5QGhFBdlKbTnmW5L/ik1mI7iLu JoeM5eAOlC4G6uPHFoIhDy3PWMTd1J02NZt30n97xbBV1iqFd0dmsdHn13SCNojD 5RpXI9uuwFhyooGUVVeaC9bG5OFqm9LUwM155L6N26KqcX+Sd0VRJ7BWyTHDarb4 NmRE6JLoev+9t+trED0jUz/XODzEkQ== -----END CERTIFICATE-----Generated at Mon Oct 20 17:13:08 2025 by rpki-client