$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A241FA98315611F0B557CE7CC4F9AE02.roa File: A241FA98315611F0B557CE7CC4F9AE02.roa (raw, json) Hash identifier: 5oh8MNtfAPalsvWnm2UF2Pkprrdqs/9ddR2VFTpaQiE= Subject key identifier: CC:3F:18:D0:EB:84:79:04:F0:78:92:5D:2C:E2:E3:88:22:D2:BD:39 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0855 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A241FA98315611F0B557CE7CC4F9AE02.roa Signing time: Wed 08 Oct 2025 22:54:19 +0000 ROA not before: Wed 08 Oct 2025 22:54:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 59371 IP address blocks: 103.209.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2133 (0x855) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:19 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e6eb9b-d51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:d6:a9:15:17:ee:97:e7:4e:13:1c:00:4a: e2:4f:a3:4d:ff:46:78:32:f1:c7:56:92:17:da:fb: d8:3d:25:38:31:03:f8:1c:8a:fb:e4:0f:a7:02:70: 73:f2:25:e7:ef:ba:4f:28:5c:1c:c0:01:82:64:19: 93:a0:ed:be:b0:2c:05:f2:b1:14:45:cf:0f:d3:c9: 60:54:0b:97:de:29:03:d0:b8:8f:dc:fe:50:b3:c7: 6f:46:35:a0:a3:a5:2d:18:45:84:5e:f1:e6:dc:75: b0:ac:49:e9:3d:a4:0e:61:a6:de:b0:c9:cd:6b:fb: 10:0f:5d:f6:b9:32:74:4f:5a:ce:96:d7:35:43:37: e6:a9:a4:6c:25:15:ea:13:71:57:4a:51:3f:cb:da: 85:00:de:d4:d9:0b:85:66:9c:c1:69:3d:77:de:46: ae:0f:b5:e8:ac:23:52:a6:76:6b:c5:70:14:1a:e5: 58:8a:77:0b:bc:08:cd:2b:10:bc:a7:7b:02:74:58: 70:0d:83:29:91:61:9e:6f:1e:ed:ab:a0:30:da:28: 98:46:7c:02:47:a7:77:b3:45:9d:02:f3:c1:f1:a7: 42:90:0d:f7:7c:52:bd:5f:9e:0f:a4:04:cd:eb:73: 0d:73:c2:e1:48:a7:e8:99:b2:4d:de:37:58:f7:83: c3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3F:18:D0:EB:84:79:04:F0:78:92:5D:2C:E2:E3:88:22:D2:BD:39 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A241FA98315611F0B557CE7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.235.0/24 Signature Algorithm: sha256WithRSAEncryption 71:e7:b9:4d:35:2e:f8:74:db:6a:fe:b3:e1:e4:85:51:84:8c: e1:c6:20:24:77:08:e8:4c:ca:47:e8:58:98:66:c5:c1:ea:28: 98:e9:b2:21:90:4d:0a:87:64:4c:81:40:82:b6:ce:26:32:cc: 83:d1:f3:87:73:47:7b:c3:90:56:18:2e:c1:ef:ec:81:37:5f: 1d:12:b8:d4:b4:84:d5:9a:0d:b0:da:0c:06:26:3c:d6:d1:59: 66:3d:d8:b6:12:98:4a:4d:64:71:63:c2:2c:07:ff:be:88:b8: 21:90:a2:8a:ea:31:c5:2e:3b:41:03:0f:eb:27:38:72:e3:53: 50:b4:ac:03:e0:e1:2e:e8:f7:aa:91:6b:2e:a1:01:34:0f:e0: 3f:a1:c5:5d:c9:42:97:24:9c:7c:a8:5d:c0:f7:0c:dc:30:a6: 8e:c7:5c:8e:54:8e:0b:ba:35:ee:7a:64:75:9c:29:75:86:ee: 3f:4f:c6:45:81:5c:f6:8f:e6:8b:2d:3e:fc:d4:0b:8b:ed:d8: f1:38:3d:42:4b:49:26:d1:58:86:69:c1:aa:52:43:c8:7b:ea: d1:49:27:c1:c1:93:77:ba:10:3b:74:5f:00:fc:f8:9f:39:72: 21:67:45:57:aa:44:a4:79:22:0e:77:e0:39:e1:23:5f:3f:87: 22:67:f2:44 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZWI5Yi1kNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9jWqRUX7pfnThMcAEriT6NN/0Z4MvHHVpIX2vvYPSU4MQP4HIr75A+nAnBz 8iXn77pPKFwcwAGCZBmToO2+sCwF8rEURc8P08lgVAuX3ikD0LiP3P5Qs8dvRjWg o6UtGEWEXvHm3HWwrEnpPaQOYabesMnNa/sQD132uTJ0T1rOltc1QzfmqaRsJRXq E3FXSlE/y9qFAN7U2QuFZpzBaT133kauD7XorCNSpnZrxXAUGuVYincLvAjNKxC8 p3sCdFhwDYMpkWGebx7tq6Aw2iiYRnwCR6d3s0WdAvPB8adCkA33fFK9X54PpATN 63MNc8LhSKfombJN3jdY94PDVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMw/GNDr hHkE8HiSXSzi44gi0r05MB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvQTI0MUZBOTgz MTU2MTFGMEI1NTdDRTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn0eswDQYJKoZIhvcNAQELBQADggEBAHHnuU01Lvh022r+ s+HkhVGEjOHGICR3COhMykfoWJhmxcHqKJjpsiGQTQqHZEyBQIK2ziYyzIPR84dz R3vDkFYYLsHv7IE3Xx0SuNS0hNWaDbDaDAYmPNbRWWY92LYSmEpNZHFjwiwH/76I uCGQoorqMcUuO0EDD+snOHLjU1C0rAPg4S7o96qRay6hATQP4D+hxV3JQpcknHyo XcD3DNwwpo7HXI5Ujgu6Ne56ZHWcKXWG7j9PxkWBXPaP5ostPvzUC4vt2PE4PUJL SSbRWIZpwapSQ8h76tFJJ8HBk3e6EDt0XwD8+J85ciFnRVeqRKR5Ig534DnhI18/ hyJn8kQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:38 2025 by rpki-client