$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/0E01F66437F511EEA737AD17C4F9AE02.roa File: 0E01F66437F511EEA737AD17C4F9AE02.roa (raw, json) Hash identifier: HJKSo2JvF2WwHfZYBFWF2p1igz7CdPY+ZiqJnnIgpg4= Subject key identifier: 00:81:42:71:51:44:1D:83:2D:7B:0D:DC:EF:8B:4D:77:52:1C:33:9C Certificate issuer: /CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Certificate serial: 19A6 Authority key identifier: C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/0E01F66437F511EEA737AD17C4F9AE02.roa Signing time: Tue 14 Oct 2025 17:14:51 +0000 ROA not before: Tue 14 Oct 2025 17:14:51 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136902 IP address blocks: 103.98.85.0/24 maxlen: 24 103.119.208.0/24 maxlen: 24 103.119.209.0/24 maxlen: 24 2401:24a0::/34 maxlen: 34 2401:24a0:4000::/34 maxlen: 34 2401:24a0:8000::/34 maxlen: 34 2401:24a0:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6566 (0x19a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912ACC3, serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Validity Not Before: Oct 14 17:14:51 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68ee850a-b98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:f8:85:69:8f:83:3e:85:2b:f1:45:10:9a: f6:75:a7:ee:06:9d:27:da:80:c1:f6:1f:54:e3:39: 34:99:28:d5:93:1c:37:60:1b:1d:43:c9:34:c9:0c: 2a:e6:b0:80:17:ad:28:9a:86:1f:80:78:c1:ad:03: 06:5b:ac:48:2e:8e:03:48:2c:c7:bd:54:90:98:1b: d8:69:9b:99:7d:a6:e1:43:ad:fa:a0:dd:fb:0d:7e: c5:1b:9c:85:9d:7f:6a:78:de:d3:cd:b5:b8:04:ed: 8b:62:bb:8e:ab:99:ab:fd:1b:1e:cd:bd:72:a6:ab: 69:ee:57:f7:2f:8f:f7:62:00:20:3a:b5:23:e0:0b: dd:11:dc:0a:ee:29:a0:f1:43:6a:b7:09:57:ba:bf: 15:cb:be:87:fe:b5:6c:e5:4c:2c:fd:5d:50:13:09: fd:da:4a:e2:0c:f6:ac:29:7b:53:53:9e:a6:20:95: ad:ce:ec:49:c3:4b:fb:a8:e0:ab:d5:d6:e3:66:c0: a8:41:b9:b2:44:d7:89:da:df:0f:9d:08:1b:28:74: c8:cd:00:8d:23:69:e2:75:39:17:43:88:c9:44:9a: 6f:6a:32:eb:8d:cf:eb:8f:c3:e9:ce:10:52:01:58: 6d:ee:5d:9e:54:6a:1e:71:9e:f2:ff:a8:bc:9f:12: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:81:42:71:51:44:1D:83:2D:7B:0D:DC:EF:8B:4D:77:52:1C:33:9C X509v3 Authority Key Identifier: keyid:C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/0E01F66437F511EEA737AD17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.85.0/24 103.119.208.0/23 IPv6: 2401:24a0::/32 Signature Algorithm: sha256WithRSAEncryption 76:c7:92:3d:56:ca:74:b8:bd:b3:ab:12:02:a4:5f:9e:53:16: 04:be:b0:7a:56:1b:28:68:60:f9:05:93:2d:87:9a:96:69:17: f1:06:cb:e5:40:d1:1b:6f:6c:2e:19:a6:ec:0a:ac:d9:c4:20: e5:b2:bc:0a:58:46:c2:3c:02:47:f8:5a:01:b0:82:7c:39:f5: da:aa:c2:4a:fd:95:22:08:49:b3:c9:aa:e4:ae:d4:31:08:67: d8:a8:12:11:6b:dc:d4:8d:d8:34:4a:82:57:7c:8a:d1:10:7a: 0d:da:56:6b:30:2e:11:ef:86:eb:29:34:f6:97:8b:ae:3d:a8: df:73:4e:4b:12:a7:19:a5:4f:41:af:e8:ef:9b:ba:31:8e:35: 47:38:27:32:6d:d2:82:b3:07:1d:ab:da:e8:6c:7e:2c:c8:77: 51:ec:e4:3e:10:f9:6e:f4:b5:24:79:d9:59:30:87:ff:9b:79: b4:f1:c3:b0:8e:99:82:62:8b:f2:98:33:55:c4:e1:32:b8:21: 18:80:43:a4:dc:2b:1c:1b:7a:24:59:ca:ac:37:a3:d4:1c:18: a1:9f:98:6c:6e:cb:7c:bf:99:3e:bc:ea:35:31:09:a4:11:be: b1:c4:bb:47:55:cf:b5:f3:0e:4c:9a:13:9c:6f:f5:45:46:5f: 56:3f:42:57 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICGaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDQzMxMTAvBgNVBAUTKEMxQUE1Q0U1MkUxMTUzM0I2NDFFM0I2ODVBQjMyM0M0 Njk3NkE0MDEwHhcNMjUxMDE0MTcxNDUxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVlODUwYS1iOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvur4hWmPgz6FK/FFEJr2dafuBp0n2oDB9h9U4zk0mSjVkxw3YBsdQ8k0yQwq 5rCAF60omoYfgHjBrQMGW6xILo4DSCzHvVSQmBvYaZuZfabhQ636oN37DX7FG5yF nX9qeN7TzbW4BO2LYruOq5mr/Rsezb1ypqtp7lf3L4/3YgAgOrUj4AvdEdwK7img 8UNqtwlXur8Vy76H/rVs5Uws/V1QEwn92kriDPasKXtTU56mIJWtzuxJw0v7qOCr 1dbjZsCoQbmyRNeJ2t8PnQgbKHTIzQCNI2nidTkXQ4jJRJpvajLrjc/rj8PpzhBS AVht7l2eVGoecZ7y/6i8nxLUbQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFACBQnFR RB2DLXsN3O+LTXdSHDOcMB8GA1UdIwQYMBaAFMGqXOUuEVM7ZB47aFqzI8RpdqQB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUNDMy9ENEY0QjQ4ODc3 RjcxMUU3QjJEMzMyNjRDNEY5QUUwMi93YXBjNVM0UlV6dGtIanRvV3JNanhHbDJw QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhcGM1UzRSVXp0a0hqdG9Xck1qeEdsMnBBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFDQzMvRDRGNEI0ODg3N0Y3MTFFN0IyRDMzMjY0QzRGOUFFMDIvMEUwMUY2NjQz N0Y1MTFFRUE3MzdBRDE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnYlUDBAFnd9AwDQQCAAIwBwMFACQBJKAwDQYJKoZIhvcN AQELBQADggEBAHbHkj1WynS4vbOrEgKkX55TFgS+sHpWGyhoYPkFky2HmpZpF/EG y+VA0RtvbC4ZpuwKrNnEIOWyvApYRsI8Akf4WgGwgnw59dqqwkr9lSIISbPJquSu 1DEIZ9ioEhFr3NSN2DRKgld8itEQeg3aVmswLhHvhuspNPaXi649qN9zTksSpxml T0Gv6O+bujGONUc4JzJt0oKzBx2r2uhsfizId1Hs5D4Q+W70tSR52Vkwh/+bebTx w7COmYJii/KYM1XE4TK4IRiAQ6TcKxwbeiRZyqw3o9QcGKGfmGxuy3y/mT686jUx CaQRvrHEu0dVz7XzDkyaE5xv9UVGX1Y/Qlc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:26:10 2025 by rpki-client