$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7145DE8C69CE11EF9C04450AC4F9AE02.roa File: 7145DE8C69CE11EF9C04450AC4F9AE02.roa (raw, json) Hash identifier: jopse2PAdT2KsRIZTX7WGSO8yhTOHa6Z+JETb4zl670= Subject key identifier: 38:FE:D4:BE:78:1C:EE:DC:D5:A4:AA:67:53:D1:71:D4:84:3F:23:97 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0853 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7145DE8C69CE11EF9C04450AC4F9AE02.roa Signing time: Wed 08 Oct 2025 22:54:18 +0000 ROA not before: Wed 08 Oct 2025 22:54:18 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 40065 IP address blocks: 43.229.154.0/24 maxlen: 24 103.20.222.0/24 maxlen: 24 103.20.223.0/24 maxlen: 24 103.48.169.0/24 maxlen: 24 103.225.199.0/24 maxlen: 24 150.129.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:18 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e6eb99-0fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:97:e1:f8:ef:49:3f:75:7d:bb:3a:cd:6b: 09:10:c1:e5:95:d8:36:02:52:b0:fb:da:5a:d3:54: a5:26:87:56:47:26:30:f1:ea:f9:41:e2:94:92:ed: 65:8c:c5:49:5a:95:8a:ff:0b:90:84:a6:75:83:3e: ce:3a:12:c6:94:1c:40:32:74:8b:fe:bc:27:05:b4: 92:66:3e:8d:f6:2e:96:05:f8:32:ed:b9:75:f0:7b: 45:6c:85:49:1b:48:2a:ac:5c:60:98:88:d7:23:96: f3:ea:d0:29:d2:1a:fe:4d:11:b5:f8:a1:e2:8d:ba: 3d:91:73:ec:c7:88:19:5a:dc:69:02:d3:ea:bd:9b: 75:62:c0:b9:e7:e2:24:62:66:b3:0b:58:9d:f5:4f: d6:1a:f5:6d:93:71:0b:ae:d9:87:35:73:42:86:2a: c8:11:a2:86:a1:19:b1:45:71:af:3f:79:27:76:9e: 69:08:95:50:08:e0:5c:21:6a:2e:73:eb:cd:e9:96: e1:f9:32:f2:6b:e4:c0:80:9b:4a:89:b6:2d:b7:82: 79:cb:66:b2:f6:0b:70:4e:43:e8:14:f0:d6:16:c5: c7:49:4d:66:37:45:f2:4a:19:9c:00:29:4f:1b:9b: 88:72:de:47:94:f9:91:a6:4e:ed:d9:39:35:ea:67: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FE:D4:BE:78:1C:EE:DC:D5:A4:AA:67:53:D1:71:D4:84:3F:23:97 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7145DE8C69CE11EF9C04450AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.154.0/24 103.20.222.0/23 103.48.169.0/24 103.225.199.0/24 150.129.41.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:f1:8f:45:9e:40:5e:8b:95:27:c6:3c:cc:cd:8c:31:91:4c: e2:f6:d1:e2:9c:02:cd:8d:0d:85:b9:45:93:e2:7b:1a:67:bd: 9a:71:85:e4:8a:64:51:63:ed:26:49:e0:d5:03:7e:59:d6:f4: 8d:78:aa:fe:0d:ce:48:c0:2e:a6:31:9f:68:25:02:22:56:bd: 2b:6c:af:0f:f6:cd:b0:d2:bc:da:b0:c9:cc:88:f0:dd:c5:37: 21:81:bb:72:01:87:32:60:52:52:be:f6:33:b5:98:42:29:87: 5c:6e:ee:31:29:4a:ce:57:e3:f5:1e:fb:42:bc:15:69:62:93: 6d:ee:d5:bf:8f:23:c6:b8:2c:ee:e8:e0:f4:eb:50:25:e0:3d: 62:e5:23:70:40:57:2b:54:28:85:2d:f8:3f:2b:8e:61:4b:da: ec:6f:1a:74:9f:d8:33:3e:34:e3:1e:de:4a:1e:41:dd:a6:78: 8d:76:d8:81:35:22:c4:0f:60:8f:5d:86:55:44:07:9a:4a:82: 6e:18:93:59:78:3f:25:93:ef:d0:73:98:40:1a:91:b0:e0:94: 66:07:2e:8c:c7:ce:46:41:27:a1:46:00:f0:07:46:87:d3:7e: 2d:f5:f0:a3:db:70:f5:11:57:47:61:4f:37:76:db:1c:2b:48: da:23:1a:e5 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDE4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZWI5OS0wZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsiX4fjvST91fbs6zWsJEMHlldg2AlKw+9pa01SlJodWRyYw8er5QeKUku1l jMVJWpWK/wuQhKZ1gz7OOhLGlBxAMnSL/rwnBbSSZj6N9i6WBfgy7bl18HtFbIVJ G0gqrFxgmIjXI5bz6tAp0hr+TRG1+KHijbo9kXPsx4gZWtxpAtPqvZt1YsC55+Ik YmazC1id9U/WGvVtk3ELrtmHNXNChirIEaKGoRmxRXGvP3kndp5pCJVQCOBcIWou c+vN6Zbh+TLya+TAgJtKibYtt4J5y2ay9gtwTkPoFPDWFsXHSU1mN0XyShmcAClP G5uIct5HlPmRpk7t2Tk16mfOawIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDj+1L54 HO7c1aSqZ1PRcdSEPyOXMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNzE0NURFOEM2 OUNFMTFFRjlDMDQ0NTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAAr5ZoDBAFnFN4DBABnMKkDBABn4ccDBACWgSkwDQYJKoZI hvcNAQELBQADggEBAE/xj0WeQF6LlSfGPMzNjDGRTOL20eKcAs2NDYW5RZPiexpn vZpxheSKZFFj7SZJ4NUDflnW9I14qv4NzkjALqYxn2glAiJWvStsrw/2zbDSvNqw ycyI8N3FNyGBu3IBhzJgUlK+9jO1mEIph1xu7jEpSs5X4/Ue+0K8FWlik23u1b+P I8a4LO7o4PTrUCXgPWLlI3BAVytUKIUt+D8rjmFL2uxvGnSf2DM+NOMe3koeQd2m eI122IE1IsQPYI9dhlVEB5pKgm4Yk1l4PyWT79BzmEAakbDglGYHLozHzkZBJ6FG APAHRofTfi318KPbcPURV0dhTzd22xwrSNojGuU= -----END CERTIFICATE-----Generated at Mon Oct 20 05:47:11 2025 by rpki-client