$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa File: 99551366132E11F0B588DB49C4F9AE02.roa (raw, json) Hash identifier: OTyt0H9z91P3bWTg6OaaUT+jY+dAsFXcfj0LUHtNJzE= Subject key identifier: BC:04:69:01:29:5F:D4:FE:C9:4F:C3:52:36:49:79:D4:B3:C5:C5:B7 Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Certificate serial: 07DF Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa Signing time: Thu 02 Oct 2025 21:51:25 +0000 ROA not before: Thu 02 Oct 2025 21:51:25 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 141234 IP address blocks: 103.156.244.0/24 maxlen: 24 103.156.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2015 (0x7df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Validity Not Before: Oct 2 21:51:25 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68def3dd-48db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:94:2a:38:df:97:fd:3a:1b:62:65:93:20: 28:c2:38:06:2e:c4:57:7a:f9:ab:e1:24:15:7b:43: 7b:e4:c8:9b:23:06:98:5b:21:d1:95:ae:15:ba:a3: cc:3e:e0:cb:f4:7c:89:2c:02:d6:d8:ff:49:1e:ed: 50:f8:2c:b9:6b:d6:4c:b1:bd:0f:db:a3:3d:5c:38: 6c:f8:83:b5:b2:04:05:eb:77:73:33:a6:bf:7b:e5: ce:74:4c:f9:c1:f4:de:3c:35:94:08:ea:1a:0f:bd: df:a6:13:7a:b0:3f:44:fb:28:29:6d:39:30:ed:03: 88:57:4d:2e:d3:7a:de:4b:7b:22:6d:e8:56:a5:a0: 6a:d3:08:ae:93:6b:97:f6:c2:ac:5c:3a:8f:96:d8: 80:64:37:87:7f:28:cc:fb:34:b5:2b:22:21:00:49: 6e:33:c0:30:9c:64:6c:5e:1e:d2:8f:26:e6:10:64: 04:e8:c5:12:6d:e3:f1:e4:65:75:2b:50:d3:74:bd: 8f:5b:fa:b5:70:9a:af:69:78:5e:67:b0:a5:16:a6: 1f:1f:c6:73:c8:93:f5:28:12:46:74:3a:a2:6f:36: c1:b0:f7:4d:8e:35:0a:80:2e:1b:f6:c8:c0:13:3e: 77:37:b1:ba:74:83:b3:ad:60:a9:16:2c:67:74:e9: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:04:69:01:29:5F:D4:FE:C9:4F:C3:52:36:49:79:D4:B3:C5:C5:B7 X509v3 Authority Key Identifier: keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/99551366132E11F0B588DB49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.244.0/23 Signature Algorithm: sha256WithRSAEncryption 60:ac:c5:45:ee:b2:3b:7f:69:8c:10:c8:05:c0:1e:8b:80:aa: c6:01:a9:06:86:d5:68:47:ec:7f:0d:35:e1:9e:91:87:d6:f6: a2:76:f6:59:9c:17:68:b1:d5:c1:17:17:73:5d:18:2f:b0:6f: 56:55:1b:31:ab:18:93:50:44:5a:b1:4b:9b:21:a7:93:54:cf: 07:4b:72:a1:39:cd:67:7c:18:d6:f4:db:d1:34:76:86:87:09: 5c:05:4b:44:9a:a2:e3:3f:9e:54:ad:cf:a2:97:a8:1a:8f:5f: 62:ce:0d:cb:4d:06:fa:b2:41:ce:4b:b6:ad:94:25:cc:85:41: 12:cd:85:de:6d:01:c9:4c:89:24:a2:37:b5:1b:46:42:7a:a7: 0e:d8:ab:7b:3e:80:5b:98:06:7c:a4:5c:1f:97:34:93:62:f1: f8:f3:aa:11:30:68:98:73:7e:ac:f2:99:98:bb:19:09:e3:01: f6:00:cc:f4:d6:ff:53:13:74:ad:bd:cf:3a:6b:2b:8c:7f:08: 11:63:9c:cb:92:97:ed:ad:3f:d1:5a:3b:6c:aa:20:36:5b:a0: a4:b5:2e:e7:26:35:6e:13:14:78:c1:4c:c8:e9:c6:a8:e7:52: 63:5b:77:45:73:ce:81:1c:7c:d3:44:f5:87:a9:08:36:4a:0b: 0b:6b:42:f7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC NzM1NzZFOEEwHhcNMjUxMDAyMjE1MTI1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlZjNkZC00OGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoeUKjjfl/06G2JlkyAowjgGLsRXevmr4SQVe0N75MibIwaYWyHRla4VuqPM PuDL9HyJLALW2P9JHu1Q+Cy5a9ZMsb0P26M9XDhs+IO1sgQF63dzM6a/e+XOdEz5 wfTePDWUCOoaD73fphN6sD9E+ygpbTkw7QOIV00u03reS3sibehWpaBq0wiuk2uX 9sKsXDqPltiAZDeHfyjM+zS1KyIhAEluM8AwnGRsXh7SjybmEGQE6MUSbePx5GV1 K1DTdL2PW/q1cJqvaXheZ7ClFqYfH8ZzyJP1KBJGdDqibzbBsPdNjjUKgC4b9sjA Ez53N7G6dIOzrWCpFixndOm9WQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLwEaQEp X9T+yU/DUjZJedSzxcW3MB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3 OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTgwN0UvQzRCNEUyQzYxNzkyMTFFQjkwQkZBMDg0QzRGOUFFMDIvOTk1NTEzNjYx MzJFMTFGMEI1ODhEQjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnPQwDQYJKoZIhvcNAQELBQADggEBAGCsxUXusjt/aYwQ yAXAHouAqsYBqQaG1WhH7H8NNeGekYfW9qJ29lmcF2ix1cEXF3NdGC+wb1ZVGzGr GJNQRFqxS5shp5NUzwdLcqE5zWd8GNb029E0doaHCVwFS0SaouM/nlStz6KXqBqP X2LODctNBvqyQc5Ltq2UJcyFQRLNhd5tAclMiSSiN7UbRkJ6pw7Yq3s+gFuYBnyk XB+XNJNi8fjzqhEwaJhzfqzymZi7GQnjAfYAzPTW/1MTdK29zzprK4x/CBFjnMuS l+2tP9FaO2yqIDZboKS1LucmNW4TFHjBTMjpxqjnUmNbd0VzzoEcfNNE9YepCDZK CwtrQvc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:03:27 2025 by rpki-client