$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/FE02E774CFFD11EC8CFDFF68C4F9AE02.roa File: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (raw, json) Hash identifier: 433DCsbHOeQOFPBNJfYwdTpevwJm9hk5VYfRWCXU3fI= Subject key identifier: 14:BA:D0:66:D1:DC:53:4C:C6:BF:77:9C:6D:2F:70:FA:D3:C1:BB:9D Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Certificate serial: 0816 Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/FE02E774CFFD11EC8CFDFF68C4F9AE02.roa Signing time: Thu 28 Aug 2025 21:43:52 +0000 ROA not before: Thu 28 Aug 2025 21:43:52 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140892 IP address blocks: 103.153.8.0/23 maxlen: 23 203.34.11.0/24 maxlen: 24 2401:3020::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Validity Not Before: Aug 28 21:43:52 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b0cd97-9301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:63:13:40:b9:6c:05:77:02:6d:49:f6:c2: ce:b2:40:8c:4f:69:00:fe:13:61:8a:50:a0:a2:2c: 56:f0:8e:d9:5b:bb:d0:a9:7f:b8:b4:bc:80:53:56: d5:6b:51:3f:92:1a:ad:57:a5:c5:ab:d7:b4:b8:b8: 56:56:28:7d:12:f8:fe:eb:1c:fd:2a:ce:a9:d9:6f: 40:98:ef:25:6b:51:5c:41:68:f1:af:1d:48:9f:94: 42:c1:67:f6:9c:38:79:be:44:ea:e4:6e:d1:2d:4b: 14:12:73:d4:f6:ff:17:f2:26:86:b8:3e:56:03:e2: 1d:6d:e9:82:0a:02:4d:b5:34:20:56:35:c2:8f:5d: 56:0c:2d:58:1b:65:6d:61:63:b2:3f:83:41:71:41: 1b:56:fe:6b:df:77:63:f6:1a:a9:ce:53:57:d9:11: a8:e0:3f:dd:fe:d2:df:f9:b7:21:37:20:fe:4e:40: 9f:cc:89:65:12:67:0e:e3:81:52:12:6a:b8:c0:a9: c3:35:10:8d:9e:f3:db:8e:ef:7f:53:40:a4:2f:36: 19:4a:cf:71:bf:20:dd:86:a9:6e:41:ca:98:a1:c2: 7a:92:6d:40:3c:d3:c9:62:11:e5:f8:64:ef:54:b7: f3:65:02:25:79:69:4e:eb:bc:af:cc:06:cc:a9:37: 98:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BA:D0:66:D1:DC:53:4C:C6:BF:77:9C:6D:2F:70:FA:D3:C1:BB:9D X509v3 Authority Key Identifier: keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/FE02E774CFFD11EC8CFDFF68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.8.0/23 203.34.11.0/24 IPv6: 2401:3020::/32 Signature Algorithm: sha256WithRSAEncryption 86:8c:bd:6f:8a:ef:6c:7b:cc:32:4f:fa:87:bd:f6:b2:aa:88: f4:15:2e:c2:6a:23:c0:74:05:08:2c:10:5f:38:59:3f:8f:40: cc:78:64:ca:4b:ff:64:22:3c:6e:72:56:8a:78:65:7a:d9:1b: 47:66:3e:4d:60:46:65:c8:05:9f:a2:43:13:0a:6d:8a:df:9a: a9:11:6c:f0:7f:e0:dc:34:25:aa:9a:6f:84:ce:e0:5d:e2:81: 00:03:cb:65:01:ba:9e:b5:5f:55:60:ea:27:0e:79:7d:69:91: b3:58:8e:99:81:d7:9d:d0:c8:d0:84:f8:11:f3:8a:ee:f4:f8: a1:71:7b:90:62:9e:e8:53:a3:28:80:a4:65:92:ad:88:ac:79: 85:7b:96:f3:de:e3:73:19:4a:93:6c:26:75:85:88:2c:78:92: 99:60:cf:e8:fc:be:3e:db:c2:70:72:0b:ab:6f:2f:23:42:99: f7:4c:97:01:73:d1:70:cc:1f:c9:56:e0:c1:8a:c1:f1:86:84: e8:f7:a3:df:76:5a:ee:35:d6:83:1b:3b:5a:03:13:a2:7c:eb: 84:60:13:db:79:ed:fb:d3:05:e6:a1:36:1b:1e:2b:98:35:fc: 6c:13:a1:5a:28:fe:a4:ef:47:d9:93:d6:85:71:67:0a:4a:b6: 91:77:61:2b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz M0NEMDU0MzUwHhcNMjUwODI4MjE0MzUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwY2Q5Ny05MzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu29jE0C5bAV3Am1J9sLOskCMT2kA/hNhilCgoixW8I7ZW7vQqX+4tLyAU1bV a1E/khqtV6XFq9e0uLhWVih9Evj+6xz9Ks6p2W9AmO8la1FcQWjxrx1In5RCwWf2 nDh5vkTq5G7RLUsUEnPU9v8X8iaGuD5WA+IdbemCCgJNtTQgVjXCj11WDC1YG2Vt YWOyP4NBcUEbVv5r33dj9hqpzlNX2RGo4D/d/tLf+bchNyD+TkCfzIllEmcO44FS Emq4wKnDNRCNnvPbju9/U0CkLzYZSs9xvyDdhqluQcqYocJ6km1APNPJYhHl+GTv VLfzZQIleWlO67yvzAbMqTeY6QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBS60GbR 3FNMxr93nG0vcPrTwbudMB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4 QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU0MDMvQTFDQ0VDRkVGOEJCMTFFQTg3QjFERTZCQzRGOUFFMDIvRkUwMkU3NzRD RkZEMTFFQzhDRkRGRjY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnmQgDBADLIgswDQQCAAIwBwMFACQBMCAwDQYJKoZIhvcN AQELBQADggEBAIaMvW+K72x7zDJP+oe99rKqiPQVLsJqI8B0BQgsEF84WT+PQMx4 ZMpL/2QiPG5yVop4ZXrZG0dmPk1gRmXIBZ+iQxMKbYrfmqkRbPB/4Nw0Jaqab4TO 4F3igQADy2UBup61X1Vg6icOeX1pkbNYjpmB153QyNCE+BHziu70+KFxe5BinuhT oyiApGWSrYiseYV7lvPe43MZSpNsJnWFiCx4kplgz+j8vj7bwnByC6tvLyNCmfdM lwFz0XDMH8lW4MGKwfGGhOj3o992Wu411oMbO1oDE6J864RgE9t57fvTBeahNhse K5g1/GwToVoo/qTvR9mT1oVxZwpKtpF3YSs= -----END CERTIFICATE-----Generated at Mon Oct 20 11:28:45 2025 by rpki-client