$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa File: 60377A8C695311EEB599BD23C4F9AE02.roa (raw, json) Hash identifier: QINk3E1nw1E0SQ1IAaOysVdywjs2/haOG/J5DYDItzc= Subject key identifier: 1A:85:04:91:83:91:AA:C6:CD:A0:90:1C:31:4F:2B:11:4B:C8:0E:FB Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Certificate serial: 01D7 Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa Signing time: Fri 29 Aug 2025 03:51:42 +0000 ROA not before: Fri 29 Aug 2025 03:51:42 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55850 IP address blocks: 103.96.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Validity Not Before: Aug 29 03:51:42 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b123cd-fdad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:c4:86:99:fe:42:91:64:dd:c6:e4:5f:15: 15:ce:e0:90:c0:b3:4d:ed:5b:07:05:05:b0:54:d9: d1:c5:68:c1:9a:dd:64:0f:1c:53:30:95:30:5c:5b: 62:63:b9:eb:72:38:b2:76:30:94:82:89:d8:46:17: 73:f3:3b:bf:6a:a6:8b:22:ad:09:30:13:c3:06:96: a0:60:64:44:16:a4:ef:b3:51:bd:c0:c4:2e:a1:09: 24:b7:9a:9d:7c:89:e4:a4:fe:a6:19:34:84:bd:26: fe:f3:51:07:2f:5e:e1:f4:cc:ae:30:aa:27:7b:d7: 39:41:de:59:cd:8d:04:79:a3:45:a8:15:fb:07:f6: 48:1d:fb:ba:5f:f9:f1:34:f6:fe:e0:b1:d2:71:e1: 47:cc:7c:7d:9c:5c:9b:3c:d5:84:5a:70:96:e1:a5: 89:17:ef:99:ba:b0:3e:b4:6f:e8:56:33:45:11:4b: 30:89:da:eb:55:69:b8:14:e8:e8:5f:bb:cd:af:bb: 7a:ae:54:df:12:11:02:bd:fa:96:aa:71:0e:53:fa: a3:09:c3:35:08:fb:8b:4e:18:1f:5e:af:17:2e:e4: 05:ff:08:d2:68:87:08:45:82:09:42:b1:58:22:64: 96:20:c5:4b:b9:c7:c5:5d:08:3c:d6:35:21:41:0a: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:85:04:91:83:91:AA:C6:CD:A0:90:1C:31:4F:2B:11:4B:C8:0E:FB X509v3 Authority Key Identifier: keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/60377A8C695311EEB599BD23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.84.0/24 Signature Algorithm: sha256WithRSAEncryption 47:09:79:c1:75:30:5c:8a:39:4c:34:6c:a3:59:14:e1:d8:b6: 7a:47:f8:ed:fa:88:d8:19:00:3d:f0:a2:f2:09:1a:04:7a:6c: 89:4f:88:db:65:fb:3b:61:a0:e3:80:76:86:61:cb:ba:a9:9c: df:da:ec:74:65:29:bb:63:dc:bb:8c:42:f1:9e:87:a0:a9:52: 30:99:65:83:3f:1b:ad:50:f6:65:f5:f2:a2:f9:77:b3:ab:7b: 21:d1:b4:bd:32:9a:02:22:46:7e:f9:81:2e:83:a3:1f:3b:3b: 7a:80:95:f3:2a:4d:79:16:e4:7d:d6:22:ba:b7:d7:78:4f:a3: 7c:38:39:f3:b4:d6:4b:0b:e0:1f:e3:5d:a3:76:33:d0:6a:d2: 0d:2d:32:79:6a:e0:7d:a6:65:b6:24:ab:89:40:cd:ce:94:de: c7:fa:7d:ba:fe:b5:ea:cf:ba:b8:9e:02:3b:96:74:fe:ac:91: 0d:b1:fd:4e:70:32:62:03:c2:32:c2:24:c9:b0:ae:35:f8:39: 0c:f2:57:b4:27:da:64:de:74:e3:a7:08:9e:94:84:f6:79:ab: 7b:62:c6:81:ab:ed:3c:ce:f2:df:19:55:55:65:7c:82:df:38: b1:67:72:dc:d5:fe:e4:bd:97:ef:fc:f5:52:20:44:fa:9b:d9: 51:a9:83:02 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDMUQxMTAvBgNVBAUTKEZCMDE5N0Q4MDJBNjYxODZFODQwQkQ2MkU4OEVFNDBF RDk1RTk1MjkwHhcNMjUwODI5MDM1MTQyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIxMjNjZC1mZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulzEhpn+QpFk3cbkXxUVzuCQwLNN7VsHBQWwVNnRxWjBmt1kDxxTMJUwXFti Y7nrcjiydjCUgonYRhdz8zu/aqaLIq0JMBPDBpagYGREFqTvs1G9wMQuoQkkt5qd fInkpP6mGTSEvSb+81EHL17h9MyuMKone9c5Qd5ZzY0EeaNFqBX7B/ZIHfu6X/nx NPb+4LHSceFHzHx9nFybPNWEWnCW4aWJF++ZurA+tG/oVjNFEUswidrrVWm4FOjo X7vNr7t6rlTfEhECvfqWqnEOU/qjCcM1CPuLThgfXq8XLuQF/wjSaIcIRYIJQrFY ImSWIMVLucfFXQg81jUhQQqUxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBqFBJGD karGzaCQHDFPKxFLyA77MB8GA1UdIwQYMBaAFPsBl9gCpmGG6EC9YuiO5A7ZXpUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0MxRC84Q0ZFMUQ5QUQx RTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZYm9RTDFpNkk3a0R0bGVs U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13R1gyQUttWVlib1FMMWk2STdrRHRsZWxTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNDMUQvOENGRTFEOUFEMUUyMTFFRDkyM0M2MTFGQzRGOUFFMDIvNjAzNzdBOEM2 OTUzMTFFRUI1OTlCRDIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnYFQwDQYJKoZIhvcNAQELBQADggEBAEcJecF1MFyKOUw0 bKNZFOHYtnpH+O36iNgZAD3wovIJGgR6bIlPiNtl+zthoOOAdoZhy7qpnN/a7HRl Kbtj3LuMQvGeh6CpUjCZZYM/G61Q9mX18qL5d7OreyHRtL0ymgIiRn75gS6Dox87 O3qAlfMqTXkW5H3WIrq313hPo3w4OfO01ksL4B/jXaN2M9Bq0g0tMnlq4H2mZbYk q4lAzc6U3sf6fbr+terPurieAjuWdP6skQ2x/U5wMmIDwjLCJMmwrjX4OQzyV7Qn 2mTedOOnCJ6UhPZ5q3tixoGr7TzO8t8ZVVVlfILfOLFnctzV/uS9l+/89VIgRPqb 2VGpgwI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:24 2025 by rpki-client