$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/25B81C40782911F0AFFBC961C4F9AE02.roa File: 25B81C40782911F0AFFBC961C4F9AE02.roa (raw, json) Hash identifier: UlCBqy7EysmW7H3xsPUTZVWMxusmrndQOFGpOBmw+LE= Subject key identifier: 6B:2C:A7:D9:0A:5F:27:55:37:4A:2A:AA:D5:7E:68:A6:09:66:7A:04 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 13D3 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/25B81C40782911F0AFFBC961C4F9AE02.roa Signing time: Wed 13 Aug 2025 09:37:37 +0000 ROA not before: Wed 13 Aug 2025 09:37:37 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135542 IP address blocks: 103.116.44.0/24 maxlen: 24 103.129.196.0/24 maxlen: 24 103.129.198.0/24 maxlen: 24 103.129.199.0/24 maxlen: 24 2402:f5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5075 (0x13d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Aug 13 09:37:37 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=689c5ce1-d5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:75:ee:be:91:1c:01:7a:9e:1b:18:7a:09: 24:d5:b3:1f:4c:50:46:d9:04:24:73:66:6e:63:48: 36:99:e5:ec:60:9e:00:d3:78:df:5b:0f:5d:0b:4a: 2f:5c:fc:d6:fb:d7:7b:bf:25:c4:d1:b7:00:9c:8e: c8:13:37:83:5f:b8:87:4f:b0:03:81:b8:84:9d:17: 0d:1b:4c:de:c2:dd:76:a6:a7:16:38:fc:50:8d:69: 06:7d:c7:4d:5e:aa:b4:5e:c3:79:ea:4b:15:93:29: 0d:9b:9f:25:a6:17:22:16:a4:d2:b2:17:a4:b6:34: 05:7a:01:9a:e5:91:3f:e3:cd:fb:57:86:35:99:8c: 70:f8:30:00:4c:17:3f:10:55:7f:e7:5a:e5:a5:7b: 9b:6f:78:1b:3b:b2:f7:48:0b:ce:7d:7b:35:52:96: 6e:51:c7:88:20:eb:56:f2:b4:d6:c2:aa:2e:74:4b: 5d:74:22:e7:af:5a:5b:19:78:3d:12:05:3f:16:39: ac:35:f7:0b:ce:98:f5:44:c7:8b:77:df:11:de:5b: ce:73:d9:69:3f:06:f2:fc:c4:43:ac:5b:26:b6:26: d4:50:48:3c:70:03:1b:7c:8d:72:eb:13:37:e4:61: bb:a9:cc:14:c7:fb:bb:1b:6a:16:5a:0b:40:be:2f: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:A7:D9:0A:5F:27:55:37:4A:2A:AA:D5:7E:68:A6:09:66:7A:04 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/25B81C40782911F0AFFBC961C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.44.0/24 103.129.196.0/24 103.129.198.0/23 IPv6: 2402:f5c0::/32 Signature Algorithm: sha256WithRSAEncryption 49:72:36:8f:96:8a:56:9c:c7:ef:8e:95:d6:8c:8e:9d:64:d4: e4:ee:28:bd:36:fc:c5:44:96:b9:6b:8c:94:8e:6c:20:f2:3a: 21:1d:75:2e:16:63:fa:87:85:2a:f1:c0:dd:bb:36:2e:3a:dc: 70:a3:8f:50:cb:20:d1:f9:9e:28:28:6b:d3:40:a1:56:38:94: 07:8b:41:a8:c7:ac:45:dd:ae:a5:77:c6:fc:7c:1d:58:f6:67: bd:30:24:6b:b5:2f:61:90:b1:e1:53:0e:bf:82:9d:d8:1d:22: 6b:b8:7a:ef:63:73:7f:f1:e9:9a:d2:2f:2d:8f:78:7c:85:95: 40:29:a5:10:13:b0:b0:15:3e:dc:cb:7e:43:f5:02:82:b4:36: 19:34:e9:40:0a:ad:fb:09:e0:89:85:e4:6a:4b:a4:d0:9e:24: a2:22:d4:f5:18:c3:80:0b:46:60:fd:9c:06:05:b6:77:e8:3f: a7:5f:50:6e:04:cf:a0:ef:46:0c:10:42:75:12:9d:dd:42:2c: 1c:51:5a:6d:d1:7f:80:db:b4:f5:51:9a:c0:90:56:3d:6c:86: 0b:41:ff:1e:78:e5:b3:65:93:3e:c9:26:3f:24:0e:0a:d4:1b: dd:48:4a:51:6c:ed:4f:27:03:b7:1f:7b:b1:3d:11:28:87:9b: f0:24:fa:4a -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICE9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUwODEzMDkzNzM3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODljNWNlMS1kNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAl17r6RHAF6nhsYegkk1bMfTFBG2QQkc2ZuY0g2meXsYJ4A03jfWw9dC0ov XPzW+9d7vyXE0bcAnI7IEzeDX7iHT7ADgbiEnRcNG0zewt12pqcWOPxQjWkGfcdN Xqq0XsN56ksVkykNm58lphciFqTSshektjQFegGa5ZE/4837V4Y1mYxw+DAATBc/ EFV/51rlpXubb3gbO7L3SAvOfXs1UpZuUceIIOtW8rTWwqoudEtddCLnr1pbGXg9 EgU/FjmsNfcLzpj1RMeLd98R3lvOc9lpPwby/MRDrFsmtibUUEg8cAMbfI1y6xM3 5GG7qcwUx/u7G2oWWgtAvi8COQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGssp9kK XydVN0oqqtV+aKYJZnoEMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBGMEQvMDhFQzJCMENBMzZFMTFFOEI4OTY2NjJCQzRGOUFFMDIvMjVCODFDNDA3 ODI5MTFGMEFGRkJDOTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABndCwDBABngcQDBAFngcYwDQQCAAIwBwMFACQC9cAwDQYJ KoZIhvcNAQELBQADggEBAElyNo+Wilacx++OldaMjp1k1OTuKL02/MVElrlrjJSO bCDyOiEddS4WY/qHhSrxwN27Ni463HCjj1DLINH5nigoa9NAoVY4lAeLQajHrEXd rqV3xvx8HVj2Z70wJGu1L2GQseFTDr+CndgdImu4eu9jc3/x6ZrSLy2PeHyFlUAp pRATsLAVPtzLfkP1AoK0Nhk06UAKrfsJ4ImF5GpLpNCeJKIi1PUYw4ALRmD9nAYF tnfoP6dfUG4Ez6DvRgwQQnUSnd1CLBxRWm3Rf4DbtPVRmsCQVj1shgtB/x545bNl kz7JJj8kDgrUG91ISlFs7U8nA7cfe7E9ESiHm/Ak+ko= -----END CERTIFICATE-----Generated at Mon Oct 20 21:42:32 2025 by rpki-client