$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa File: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (raw, json) Hash identifier: AenHLZ8tFLrfLlf8LlZoDLQVepIJzcT6WIJ3CgJXjkM= Subject key identifier: 26:EC:E7:B5:58:1A:C2:5B:04:E6:E5:90:47:6D:E7:68:16:3C:11:2A Certificate issuer: /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4 Certificate serial: 08C9 Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa Signing time: Sat 20 Sep 2025 20:41:33 +0000 ROA not before: Sat 20 Sep 2025 20:41:33 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138168 IP address blocks: 103.121.228.0/22 maxlen: 22 103.121.228.0/24 maxlen: 24 103.121.229.0/24 maxlen: 24 103.121.230.0/24 maxlen: 24 103.121.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2249 (0x8c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A13F, serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4 Validity Not Before: Sep 20 20:41:33 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68cf117d-4c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5a:86:5b:c2:1f:12:d3:50:7a:f5:4a:a6:4a: a1:0b:e2:4d:6f:38:24:93:a0:b1:ae:fa:cb:5a:17: 8e:09:9f:00:48:6d:80:d5:66:39:46:82:9d:4b:e9: 82:e0:25:6d:4b:42:9d:7f:cd:bc:cd:40:ec:56:bb: 96:9f:90:bd:0a:44:55:57:98:e8:30:2a:8c:3d:a5: cd:e1:96:70:21:44:7e:2e:af:3c:65:82:ce:40:93: 55:f3:c9:8f:ea:48:08:3d:b7:e4:d0:41:1b:9c:e3: 2b:1b:72:f6:86:6b:9d:3a:ef:1b:0e:11:72:99:33: 7b:50:41:4e:e2:8a:76:2e:2d:63:c8:78:a1:26:17: 80:f3:4d:a8:b0:ec:af:3d:dd:53:5b:19:eb:04:ea: 40:f5:12:ef:82:6d:f5:0e:51:6f:62:10:fb:d7:c9: 93:3f:b4:79:28:3a:a9:67:c6:df:ee:3c:c0:bb:67: 4e:7e:f7:c7:b9:8d:71:dc:7d:ee:16:03:84:d3:e5: e1:f3:c6:71:7e:ec:b3:a4:b1:77:87:2e:5a:8a:a5: 0f:b6:44:1a:63:d9:41:75:f5:7f:db:0f:a7:77:01: 49:f2:58:f3:b5:88:3e:75:99:a9:b5:5d:c2:31:70: e0:1f:28:e4:d5:79:df:09:07:76:a5:7c:95:7b:4a: f1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EC:E7:B5:58:1A:C2:5B:04:E6:E5:90:47:6D:E7:68:16:3C:11:2A X509v3 Authority Key Identifier: keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.228.0/22 Signature Algorithm: sha256WithRSAEncryption 56:77:ee:74:bb:26:47:9e:f5:50:62:fb:af:31:ef:b2:a5:e8: 91:a6:13:30:95:45:ff:67:b7:65:fe:35:d1:99:81:25:c3:45: 1e:0a:fa:42:f5:48:d2:aa:c2:57:c2:75:90:ad:d4:b0:d9:ae: 1e:d5:9d:08:b2:b0:6c:15:1a:11:69:9f:e0:16:67:dd:0e:e3: 89:67:f9:ef:1c:b0:98:18:67:22:ee:b8:51:dc:a6:6e:d8:37: c7:25:5f:8b:e0:29:b7:b8:e1:a2:ab:00:7c:26:6e:e6:fc:25: db:f6:b5:09:c5:12:5f:13:04:83:85:55:9f:21:de:cd:39:48: 48:4a:cd:e2:80:f0:94:45:c6:bd:d6:ec:a3:69:c1:fc:13:7c: b7:fd:0f:c4:00:eb:4a:98:16:70:bb:2f:19:e7:41:96:ab:2c: f3:19:4a:fc:68:05:77:db:07:17:85:88:67:4b:0d:d9:a4:8b: 42:b1:df:ae:d9:82:83:30:1b:3a:99:30:14:d8:16:d5:e7:ca: 47:e4:20:fc:7e:15:4f:f5:38:5f:c8:71:dc:9a:79:82:d2:a2: bf:c1:60:f6:9c:f6:37:9a:6f:cd:bc:84:c6:bf:7a:90:fa:c3: 25:b4:32:ba:93:96:a1:41:c9:f9:c4:3a:ac:31:11:aa:8d:0c: f1:ca:6f:2e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExM0YxMTAvBgNVBAUTKEFCMTYyN0I3QTg1MTQzOTJFMUM2NzhCN0IwNzg4NTVB NDQ1NTY2RTQwHhcNMjUwOTIwMjA0MTMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNmMTE3ZC00YzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FqGW8IfEtNQevVKpkqhC+JNbzgkk6CxrvrLWheOCZ8ASG2A1WY5RoKdS+mC 4CVtS0Kdf828zUDsVruWn5C9CkRVV5joMCqMPaXN4ZZwIUR+Lq88ZYLOQJNV88mP 6kgIPbfk0EEbnOMrG3L2hmudOu8bDhFymTN7UEFO4op2Li1jyHihJheA802osOyv Pd1TWxnrBOpA9RLvgm31DlFvYhD718mTP7R5KDqpZ8bf7jzAu2dOfvfHuY1x3H3u FgOE0+Xh88ZxfuyzpLF3hy5aiqUPtkQaY9lBdfV/2w+ndwFJ8ljztYg+dZmptV3C MXDgHyjk1XnfCQd2pXyVe0rxfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCbs57VY GsJbBOblkEdt52gWPBEqMB8GA1UdIwQYMBaAFKsWJ7eoUUOS4cZ4t7B4hVpEVWbk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEzRi9BNjcyRTNCNkJG NkUxMUVBQjY1NkJGMkZDNEY5QUUwMi9xeFludDZoUlE1TGh4bmkzc0hpRldrUlZa dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4WW50NmhSUTVMaHhuaTNzSGlGV2tSVlp1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkExM0YvQTY3MkUzQjZCRjZFMTFFQUI2NTZCRjJGQzRGOUFFMDIvMzRFMURGRThC RjcwMTFFQUI3NDVCRTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneeQwDQYJKoZIhvcNAQELBQADggEBAFZ37nS7Jkee9VBi +68x77Kl6JGmEzCVRf9nt2X+NdGZgSXDRR4K+kL1SNKqwlfCdZCt1LDZrh7VnQiy sGwVGhFpn+AWZ90O44ln+e8csJgYZyLuuFHcpm7YN8clX4vgKbe44aKrAHwmbub8 Jdv2tQnFEl8TBIOFVZ8h3s05SEhKzeKA8JRFxr3W7KNpwfwTfLf9D8QA60qYFnC7 LxnnQZarLPMZSvxoBXfbBxeFiGdLDdmki0Kx367ZgoMwGzqZMBTYFtXnykfkIPx+ FU/1OF/IcdyaeYLSor/BYPac9jeab828hMa/epD6wyW0MrqTlqFByfnEOqwxEaqN DPHKby4= -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:11 2025 by rpki-client