$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/5F436F7E39A011EE923F683AC4F9AE02.roa File: 5F436F7E39A011EE923F683AC4F9AE02.roa (raw, json) Hash identifier: 7R/SjQUQ2hP0HbRnbYfsLnedhLehfUDAaOiYlklNqvo= Subject key identifier: 03:B1:8A:B8:78:28:4C:E8:DD:6E:B0:89:6E:B4:A2:FB:B4:2B:8D:3B Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 3523 Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/5F436F7E39A011EE923F683AC4F9AE02.roa Signing time: Fri 10 Oct 2025 04:47:10 +0000 ROA not before: Fri 10 Oct 2025 04:47:10 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136762 IP address blocks: 103.232.152.0/22 maxlen: 24 103.235.196.0/22 maxlen: 24 110.34.0.0/19 maxlen: 24 116.66.192.0/21 maxlen: 24 163.47.148.0/22 maxlen: 22 163.47.148.0/24 maxlen: 24 163.47.149.0/24 maxlen: 24 163.47.150.0/24 maxlen: 24 163.47.151.0/24 maxlen: 24 163.53.24.0/23 maxlen: 24 182.93.64.0/19 maxlen: 24 202.63.240.0/21 maxlen: 24 2403:3800::/32 maxlen: 36 2403:3800:1200::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13603 (0x3523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: Oct 10 04:47:10 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e88fce-27b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:73:ad:83:4a:51:38:24:10:cb:1c:db:2d: 71:a4:a2:b7:c1:93:ad:78:8d:30:49:88:ad:3c:5b: 9b:ad:fa:4d:a7:27:b0:59:d7:2e:93:88:21:82:10: 48:15:64:1e:a1:84:1b:e7:dd:1d:03:b3:39:08:c3: c3:ca:6e:5a:92:f9:74:ad:10:88:98:69:7b:d4:da: c7:a7:fc:61:50:73:65:90:de:2f:8b:c0:1b:8c:69: 36:d9:7b:dc:05:30:c8:3d:0c:0c:b9:ed:aa:53:a2: e1:5b:8b:b6:f2:51:cc:a7:0a:b2:69:30:79:69:9b: 01:8f:f3:a7:d3:74:a9:14:d8:1a:51:a7:11:17:bc: e0:e1:54:9e:29:66:a1:6b:61:d7:69:57:5f:13:85: ad:03:ad:c0:50:b8:8b:a1:85:92:1e:d5:3c:64:4c: ce:43:02:7f:ee:82:9b:9e:83:05:c7:76:d6:35:d7: 4c:9c:62:82:75:5f:13:54:56:13:ea:ef:01:e7:7a: 6a:1d:6a:b7:47:5c:8d:66:28:dc:b4:92:24:7a:89: 43:74:42:91:cc:50:08:49:a0:8e:ca:e7:94:33:a7: 36:af:04:e9:7f:49:f5:4b:d5:f7:84:0b:d3:9b:e4: e3:f6:42:4d:ef:6e:0d:31:49:48:e8:5a:94:a2:b4: 42:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B1:8A:B8:78:28:4C:E8:DD:6E:B0:89:6E:B4:A2:FB:B4:2B:8D:3B X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/5F436F7E39A011EE923F683AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.232.152.0/22 103.235.196.0/22 110.34.0.0/19 116.66.192.0/21 163.47.148.0/22 163.53.24.0/23 182.93.64.0/19 202.63.240.0/21 IPv6: 2403:3800::/32 Signature Algorithm: sha256WithRSAEncryption d0:99:ee:d2:ac:3f:17:9c:71:82:66:38:67:db:30:05:a8:d4: a9:4e:cc:95:f3:33:11:ab:c0:d4:6b:d0:ef:e7:af:65:5b:71: 8a:c4:4f:40:fa:31:b7:b1:31:fb:85:72:d0:76:ea:53:e7:9d: dd:50:de:ed:a8:35:ff:0d:eb:7e:2f:da:91:a1:3f:60:72:ce: d6:52:f4:7d:0e:21:6e:d6:04:b7:1c:e4:c2:5a:d2:a3:be:7b: 40:50:1a:d3:4e:78:63:34:8c:e0:84:36:88:9d:0a:80:9c:62: 9d:ad:e9:aa:99:b8:19:18:0e:46:89:81:e7:a2:1e:1c:c4:1d: 89:e7:dc:f4:c4:ae:ea:28:a3:94:25:3a:1c:e7:9e:8a:b7:29: fe:de:76:29:ae:a2:2e:f0:b1:1a:5e:a4:b1:62:df:cf:09:fe: 0c:fa:a8:b8:96:35:d0:42:67:80:e6:35:ee:3f:b9:00:ed:39: c3:db:3d:b5:db:15:2c:b5:1f:28:50:04:dc:ce:64:08:56:e9: 60:f5:17:ee:14:6d:59:ec:2b:24:c5:55:e6:8e:ee:88:21:7e: da:16:00:90:55:e3:bb:ac:c6:a6:8b:d6:84:94:8b:4b:d3:70: a2:e6:63:54:83:60:fd:36:ee:75:5e:42:1d:67:a3:17:5b:cf: 57:ed:5b:a2 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgICNSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjUxMDEwMDQ0NzEwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU4OGZjZS0yN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9VzrYNKUTgkEMsc2y1xpKK3wZOteI0wSYitPFubrfpNpyewWdcuk4ghghBI FWQeoYQb590dA7M5CMPDym5akvl0rRCImGl71NrHp/xhUHNlkN4vi8AbjGk22Xvc BTDIPQwMue2qU6LhW4u28lHMpwqyaTB5aZsBj/On03SpFNgaUacRF7zg4VSeKWah a2HXaVdfE4WtA63AULiLoYWSHtU8ZEzOQwJ/7oKbnoMFx3bWNddMnGKCdV8TVFYT 6u8B53pqHWq3R1yNZijctJIkeolDdEKRzFAISaCOyueUM6c2rwTpf0n1S9X3hAvT m+Tj9kJN724NMUlI6FqUorRCGQIDAQABo4ICzjCCAsowHQYDVR0OBBYEFAOxirh4 KEzo3W6wiW60ovu0K407MB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQ4MzQvREZCQTUwQjgxRDhEMTFFMjgyNERFREVCMDhCMDJDRDIvNUY0MzZGN0Uz OUEwMTFFRTkyM0Y2ODNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWAYIKwYBBQUHAQcBAf8E STBHMDYEAgABMDADBAJn6JgDBAJn68QDBAVuIgADBAN0QsADBAKjL5QDBAGjNRgD BAW2XUADBAPKP/AwDQQCAAIwBwMFACQDOAAwDQYJKoZIhvcNAQELBQADggEBANCZ 7tKsPxeccYJmOGfbMAWo1KlOzJXzMxGrwNRr0O/nr2VbcYrET0D6MbexMfuFctB2 6lPnnd1Q3u2oNf8N634v2pGhP2ByztZS9H0OIW7WBLcc5MJa0qO+e0BQGtNOeGM0 jOCENoidCoCcYp2t6aqZuBkYDkaJgeeiHhzEHYnn3PTEruooo5QlOhznnoq3Kf7e dimuoi7wsRpepLFi388J/gz6qLiWNdBCZ4DmNe4/uQDtOcPbPbXbFSy1HyhQBNzO ZAhW6WD1F+4UbVnsKyTFVeaO7oghftoWAJBV47usxqaL1oSUi0vTcKLmY1SDYP02 7nVeQh1noxdbz1ftW6I= -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:35 2025 by rpki-client