$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/5CA352A49DAB11F0B1E32C64C4F9AE02.roa File: 5CA352A49DAB11F0B1E32C64C4F9AE02.roa (raw, json) Hash identifier: +QKL7YQeAFpSt5nMMIAz5oWErQmX2UUEoZKFT1MpXb4= Subject key identifier: A7:60:85:07:B8:00:6A:55:89:8A:73:13:B1:2F:0F:C8:1D:13:F0:57 Certificate issuer: /CN=A911AD1F/serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Certificate serial: 02 Authority key identifier: 62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/5CA352A49DAB11F0B1E32C64C4F9AE02.roa Signing time: Tue 30 Sep 2025 03:12:57 +0000 ROA not before: Tue 30 Sep 2025 03:12:57 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139279 IP address blocks: 103.140.172.0/23 maxlen: 24 2001:df0:cd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD1F, serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Validity Not Before: Sep 30 03:12:57 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68db4ab9-4982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:f5:19:b4:f5:bc:91:28:2a:37:fe:cc:3e: 39:6e:99:67:d0:18:bd:90:06:57:61:76:73:90:53: 18:40:99:d9:23:39:4e:2c:7a:c0:bf:2f:d0:32:0d: 7e:f9:e9:3e:df:d0:1c:dd:ee:55:6d:5d:0e:91:b6: 2c:0f:09:80:10:aa:bd:8e:8d:14:2c:c1:40:5b:0c: dd:cd:fa:8d:45:11:1b:29:a0:ae:6c:18:7f:96:69: 0c:6b:02:0c:d3:1b:23:0d:b8:c7:03:88:28:94:2f: 64:3b:cd:cd:55:67:6d:ce:50:08:f3:da:d3:e9:84: 79:be:2f:3f:07:41:dd:10:17:2a:a6:5e:28:65:cc: 26:aa:41:41:2f:cf:c9:4e:dc:9e:54:8a:c9:83:ee: 2a:7c:a8:d5:e2:61:8c:cc:08:d1:06:b2:16:c1:07: 14:cc:9b:c3:7f:91:b6:86:49:57:f1:b4:bc:37:50: 85:de:d5:c0:ef:fb:65:82:7c:76:f9:aa:24:a3:73: 6e:d3:82:a1:cf:d7:49:bf:0b:d8:cc:b6:9d:41:b9: 87:5a:f3:c3:e0:02:70:2f:2c:65:3d:ed:1b:ce:8a: f6:9e:37:53:18:7a:ac:8e:b9:45:13:1c:a7:e9:58: fa:08:be:60:08:18:59:4d:ea:30:e3:49:58:ac:bd: b6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:60:85:07:B8:00:6A:55:89:8A:73:13:B1:2F:0F:C8:1D:13:F0:57 X509v3 Authority Key Identifier: keyid:62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/5CA352A49DAB11F0B1E32C64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.172.0/23 IPv6: 2001:df0:cd80::/48 Signature Algorithm: sha256WithRSAEncryption ce:80:8f:f0:45:eb:fb:b3:dd:c5:dc:9e:0f:4d:d5:34:fa:80: 01:71:e0:b5:5d:b6:73:f9:87:8d:a4:27:5e:09:a7:bd:ba:f9: fc:b9:82:a6:bf:1a:e0:b2:f2:8a:b6:70:91:c9:3a:9a:4c:17: 94:93:b9:98:4d:65:aa:4a:33:94:63:4c:2d:fc:64:01:66:93: 5a:eb:46:fb:f2:78:da:33:dc:c4:94:24:a9:88:80:a8:22:3b: b1:3f:fb:77:64:8a:c1:ee:b8:47:e4:97:c6:72:53:73:be:66: 3d:78:4a:4f:31:ef:01:f3:f2:ca:d5:46:da:2a:f1:3d:6b:b8: 03:0a:aa:a2:a9:0a:20:1e:6f:5d:cb:83:cc:a1:be:9e:e3:47: b8:e0:db:5b:b0:5a:1c:48:be:b6:05:61:c6:1e:f0:2d:58:d2: 0a:ac:77:5f:f5:d0:1b:fe:21:27:39:59:ed:23:15:1a:db:d6: 13:db:20:7b:ce:af:29:b6:bd:84:06:f9:0e:69:b8:3c:41:1d: f6:06:be:5d:00:c6:08:57:33:c7:76:91:a1:40:de:a7:5a:34: 5c:91:04:5c:46:9e:1e:15:20:c0:3d:f8:16:aa:be:20:3d:ba: ae:08:5f:0c:60:28:6d:09:32:f9:a7:d7:bb:4d:76:56:95:d9: 06:87:01:6d -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQxRjExMC8GA1UEBRMoNjI0NjMyMERFQjM0MkQyQzNEQzFBRURCOTBGMTc2Nzcy QjdGQzc3RjAeFw0yNTA5MzAwMzEyNTdaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZGI0YWI5LTQ5ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEWfUZtPW8kSgqN/7MPjlumWfQGL2QBldhdnOQUxhAmdkjOU4sesC/L9AyDX75 6T7f0Bzd7lVtXQ6RtiwPCYAQqr2OjRQswUBbDN3N+o1FERspoK5sGH+WaQxrAgzT GyMNuMcDiCiUL2Q7zc1VZ23OUAjz2tPphHm+Lz8HQd0QFyqmXihlzCaqQUEvz8lO 3J5UismD7ip8qNXiYYzMCNEGshbBBxTMm8N/kbaGSVfxtLw3UIXe1cDv+2WCfHb5 qiSjc27TgqHP10m/C9jMtp1BuYda88PgAnAvLGU97RvOivaeN1MYeqyOuUUTHKfp WPoIvmAIGFlN6jDjSVisvba7AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUp2CFB7gA alWJinMTsS8PyB0T8FcwHwYDVR0jBBgwFoAUYkYyDes0LSw9wa7bkPF2dyt/x38w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDFGLzE0RDA5QzAyOURB QjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3OXdhN2JrUEYyZHl0X3gz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWtZeURlczBMU3c5d2E3YmtQRjJkeXRfeDM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQxRi8xNEQwOUMwMjlEQUIxMUYwQTFDNUIzNjNDNEY5QUUwMi81Q0EzNTJBNDlE QUIxMUYwQjFFMzJDNjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWeMrDAPBAIAAjAJAwcAIAEN8M2AMA0GCSqGSIb3DQEBCwUA A4IBAQDOgI/wRev7s93F3J4PTdU0+oABceC1XbZz+YeNpCdeCae9uvn8uYKmvxrg svKKtnCRyTqaTBeUk7mYTWWqSjOUY0wt/GQBZpNa60b78njaM9zElCSpiICoIjux P/t3ZIrB7rhH5JfGclNzvmY9eEpPMe8B8/LK1UbaKvE9a7gDCqqiqQogHm9dy4PM ob6e40e44NtbsFocSL62BWHGHvAtWNIKrHdf9dAb/iEnOVntIxUa29YT2yB7zq8p tr2EBvkOabg8QR32Br5dAMYIVzPHdpGhQN6nWjRckQRcRp4eFSDAPfgWqr4gPbqu CF8MYChtCTL5p9e7TXZWldkGhwFt -----END CERTIFICATE-----Generated at Mon Oct 20 08:32:52 2025 by rpki-client