$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa File: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: daMU3ImqJzsIleot5aS0XfHVIYpdh2rNrlvSYi4RSDw= Subject key identifier: AC:89:D2:5B:5D:D7:40:D4:4E:1B:31:C7:AE:76:F8:0B:E2:79:89:E9 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 037B Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa Signing time: Sat 11 Oct 2025 03:27:28 +0000 ROA not before: Sat 11 Oct 2025 03:27:28 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132742 IP address blocks: 43.243.208.0/22 maxlen: 24 103.39.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: Oct 11 03:27:28 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e9ce9f-57dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e4:63:19:b8:f4:a3:67:6c:11:dc:1f:aa:00: 15:f0:06:28:fa:9e:74:d8:6b:98:5c:08:29:63:4b: 2e:30:85:7e:f7:fe:df:2b:e6:fd:2d:65:cd:d9:b3: b7:af:be:de:48:18:49:dc:d6:71:a9:df:35:03:9f: 68:b9:56:78:5e:bc:7b:95:bf:01:b9:04:51:a7:30: d0:fc:ba:14:7f:79:7d:7e:56:42:de:04:17:1e:b1: 70:10:b4:55:69:fd:bf:52:b2:45:f6:b6:d9:f1:27: 20:b1:40:6b:32:1a:52:54:48:a5:bb:c1:98:62:00: 08:16:59:c9:49:87:1e:28:c6:c0:1f:df:36:4f:88: ab:63:e9:d4:f7:12:39:6c:6d:62:02:b0:69:91:7d: ad:7d:51:a1:46:a4:db:0a:45:f6:c0:e3:b3:97:f0: 86:d1:36:df:7e:d1:36:3b:2b:94:c6:56:60:dd:c7: b1:c8:87:b4:ff:b6:4d:47:5f:d4:60:31:47:cf:dc: a1:88:58:d9:ad:2b:78:ed:32:9f:85:89:b6:d1:20: 48:d3:93:19:86:b8:83:0b:cf:73:7d:c8:42:d7:e7: c2:4c:3a:21:eb:69:12:3e:86:44:c3:6d:29:fe:29: 8d:bd:67:77:45:2b:86:5c:45:49:b5:ab:a7:2e:18: 36:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:89:D2:5B:5D:D7:40:D4:4E:1B:31:C7:AE:76:F8:0B:E2:79:89:E9 X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.208.0/22 103.39.24.0/22 Signature Algorithm: sha256WithRSAEncryption c6:a8:4d:a1:b0:9f:69:b4:b1:c2:94:23:83:c2:17:19:f2:43: 1a:3c:94:37:7a:a8:2a:9c:9f:23:05:b3:e8:d4:e8:50:b2:69: 0c:7b:0d:56:93:56:9b:a8:c9:ee:b1:1f:e1:de:a7:de:ac:45: 90:53:95:35:6f:f8:e4:7c:af:44:55:08:a9:36:16:a7:ca:c6: fa:97:64:7c:48:f2:90:33:39:84:73:9d:a2:8f:36:c5:b1:ad: 4c:69:d2:0c:cc:9c:ed:82:0a:c1:d9:6f:2e:5b:eb:cc:1a:7a: d2:9f:0a:01:ac:11:f5:b6:aa:fb:5a:b5:a2:17:a2:18:52:3d: 56:86:cf:54:bf:1d:50:7e:c6:3a:43:ad:e9:30:a6:ae:4d:00: a5:e2:1b:43:4c:35:d2:ba:31:25:c8:cb:e5:70:0f:94:ac:f0: 30:6a:a9:aa:88:24:d5:7e:0a:45:4f:01:ab:49:de:4c:4b:46: 0a:99:91:3b:d5:7e:a2:41:fe:0d:5e:00:5f:bf:65:97:cd:15: 19:ec:34:1a:c7:1c:f0:25:f1:c1:7f:bd:10:b5:c7:49:d0:37: 8f:64:9c:51:f4:b3:1f:f5:9a:ae:c3:b3:37:97:03:94:7e:67: 40:a6:5a:01:ca:5f:f5:01:ba:6a:2d:f9:fc:bd:4f:25:67:d5: 73:8c:ae:21 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjUxMDExMDMyNzI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU5Y2U5Zi01N2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuRjGbj0o2dsEdwfqgAV8AYo+p502GuYXAgpY0suMIV+9/7fK+b9LWXN2bO3 r77eSBhJ3NZxqd81A59ouVZ4Xrx7lb8BuQRRpzDQ/LoUf3l9flZC3gQXHrFwELRV af2/UrJF9rbZ8ScgsUBrMhpSVEilu8GYYgAIFlnJSYceKMbAH982T4irY+nU9xI5 bG1iArBpkX2tfVGhRqTbCkX2wOOzl/CG0TbfftE2OyuUxlZg3cexyIe0/7ZNR1/U YDFHz9yhiFjZrSt47TKfhYm20SBI05MZhriDC89zfchC1+fCTDoh62kSPoZEw20p /imNvWd3RSuGXEVJtaunLhg2uQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKyJ0ltd 10DUThsxx652+AvieYnpMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUEzNUUvRkE5Mjc3ODJDNjAwMTFFQzlEQTc0MDBGQzRGOUFFMDIvM0RDQzg5RkFD NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr89ADBAJnJxgwDQYJKoZIhvcNAQELBQADggEBAMaoTaGw n2m0scKUI4PCFxnyQxo8lDd6qCqcnyMFs+jU6FCyaQx7DVaTVpuoye6xH+Hep96s RZBTlTVv+OR8r0RVCKk2FqfKxvqXZHxI8pAzOYRznaKPNsWxrUxp0gzMnO2CCsHZ by5b68waetKfCgGsEfW2qvtataIXohhSPVaGz1S/HVB+xjpDrekwpq5NAKXiG0NM NdK6MSXIy+VwD5Ss8DBqqaqIJNV+CkVPAatJ3kxLRgqZkTvVfqJB/g1eAF+/ZZfN FRnsNBrHHPAl8cF/vRC1x0nQN49knFH0sx/1mq7DszeXA5R+Z0CmWgHKX/UBumot +fy9TyVn1XOMriE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:16 2025 by rpki-client