$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/31E63B1CA1C011F09810103AC4F9AE02.roa File: 31E63B1CA1C011F09810103AC4F9AE02.roa (raw, json) Hash identifier: RFN9XfhuOWaOWLmVZsn6IOgv5uTZS/Q7mdXLAZI6MYo= Subject key identifier: BB:F7:C5:5A:C5:88:19:67:3A:59:83:15:DC:0B:1A:6B:E1:D7:36:E8 Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 01B3 Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/31E63B1CA1C011F09810103AC4F9AE02.roa Signing time: Sun 05 Oct 2025 07:52:09 +0000 ROA not before: Sun 05 Oct 2025 07:52:09 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 150683 IP address blocks: 103.229.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Oct 5 07:52:09 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68e223a9-f6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d1:0b:78:10:b4:b6:5a:fe:ec:92:e3:b3:5a: 84:45:65:bb:ae:9b:af:61:3e:f6:16:86:7f:1b:9c: 93:50:e7:4a:75:99:71:12:97:5b:9f:29:4c:4b:3b: 0b:ce:35:ba:56:32:38:24:3f:a5:b1:74:fd:a2:3a: 89:59:bf:67:9c:65:13:ca:68:c3:f1:5e:58:64:3d: 93:06:0b:0b:96:c7:3e:cb:cd:1f:6f:d0:eb:12:57: 33:6f:5b:0f:17:31:b8:8b:b0:f1:27:21:20:70:34: 31:51:c0:90:53:8f:cf:4b:1f:35:a8:86:d8:ba:40: 0e:48:e0:d1:80:6f:32:c7:8b:83:0a:19:5e:db:6a: c5:c8:17:77:0d:65:7d:6f:67:70:cf:21:ef:ca:31: 8a:7f:7b:ba:8f:e3:6f:e3:5c:96:bc:a4:99:98:ad: aa:90:8c:ab:57:ea:83:8a:b3:94:9f:55:04:33:a8: e3:61:69:05:7b:32:e9:77:d2:6a:59:6f:c5:f5:25: a6:7e:70:92:68:74:19:f7:b0:f4:ff:af:fb:00:00: ca:cb:f7:b2:30:1e:1d:b6:23:86:1b:66:39:17:8f: a7:38:d8:ef:5c:54:c8:4a:f5:52:f9:38:e6:26:15: 5b:e1:30:48:9d:2e:87:8f:20:dc:55:c7:60:6e:44: 4b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F7:C5:5A:C5:88:19:67:3A:59:83:15:DC:0B:1A:6B:E1:D7:36:E8 X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/31E63B1CA1C011F09810103AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.252.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:75:27:7d:96:a5:a5:f2:63:3b:ff:0b:bd:9e:8d:eb:df:a6: 7e:a5:d7:b1:5b:6d:e0:e4:01:db:3f:29:8a:b5:c0:33:24:09: 66:c4:c2:f1:7f:4a:1d:4f:fb:d5:ac:1c:01:af:ce:df:c5:94: bf:82:2b:74:2e:0e:89:ac:78:80:28:b3:81:ce:d1:d7:5b:0d: ee:fc:64:a6:d8:10:c9:62:72:a9:46:ba:ad:41:6a:d4:8b:d7: 53:3e:2d:dd:67:3b:dc:b3:40:93:f8:fd:6a:68:dc:dc:05:62: fa:e0:ad:44:55:94:3c:b1:4a:5f:39:70:50:12:bf:92:8d:35: 54:5a:1c:57:70:07:d9:4d:d9:a4:c6:fc:d2:38:7b:02:4a:82: 53:86:fe:d0:da:30:3e:8b:5f:75:ca:e9:fa:8c:5f:11:3d:40: 40:a5:73:2d:83:f9:26:00:d8:b1:4c:89:70:3e:f0:66:6d:01: 8c:1f:b5:03:8d:db:07:8a:79:46:f8:9f:9e:fd:13:47:39:19: 6f:6f:d4:d0:e6:ce:49:d0:4a:da:51:6c:ec:f0:14:46:e6:9b: 09:55:49:21:77:83:34:8f:ce:d5:bc:26:d2:7f:2e:83:e4:5c: f1:d2:08:a4:98:41:ee:a5:6e:2f:1e:5e:2b:ca:10:b7:cc:e7: c7:f8:58:f2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjUxMDA1MDc1MjA5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUyMjNhOS1mNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tELeBC0tlr+7JLjs1qERWW7rpuvYT72FoZ/G5yTUOdKdZlxEpdbnylMSzsL zjW6VjI4JD+lsXT9ojqJWb9nnGUTymjD8V5YZD2TBgsLlsc+y80fb9DrElczb1sP FzG4i7DxJyEgcDQxUcCQU4/PSx81qIbYukAOSODRgG8yx4uDChle22rFyBd3DWV9 b2dwzyHvyjGKf3u6j+Nv41yWvKSZmK2qkIyrV+qDirOUn1UEM6jjYWkFezLpd9Jq WW/F9SWmfnCSaHQZ97D0/6/7AADKy/eyMB4dtiOGG2Y5F4+nONjvXFTISvVS+Tjm JhVb4TBInS6HjyDcVcdgbkRL5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLv3xVrF iBlnOlmDFdwLGmvh1zboMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNCN0QvQjJCM0Q3N0MxQjQ0MTFFRUEzNTc4RTI5QzRGOUFFMDIvMzFFNjNCMUNB MUMwMTFGMDk4MTAxMDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn5fwwDQYJKoZIhvcNAQELBQADggEBAIp1J32WpaXyYzv/ C72ejevfpn6l17FbbeDkAds/KYq1wDMkCWbEwvF/Sh1P+9WsHAGvzt/FlL+CK3Qu DomseIAos4HO0ddbDe78ZKbYEMlicqlGuq1BatSL11M+Ld1nO9yzQJP4/Wpo3NwF YvrgrURVlDyxSl85cFASv5KNNVRaHFdwB9lN2aTG/NI4ewJKglOG/tDaMD6LX3XK 6fqMXxE9QEClcy2D+SYA2LFMiXA+8GZtAYwftQON2weKeUb4n579E0c5GW9v1NDm zknQStpRbOzwFEbmmwlVSSF3gzSPztW8JtJ/LoPkXPHSCKSYQe6lbi8eXivKELfM 58f4WPI= -----END CERTIFICATE-----Generated at Mon Oct 20 19:51:09 2025 by rpki-client