$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/BEDFF33EAD8F11F0B669681EC4F9AE02.roa File: BEDFF33EAD8F11F0B669681EC4F9AE02.roa (raw, json) Hash identifier: HFZ1U3Hayot6K/d5fdreylXj8bI1jWQkV192cnbQd+w= Subject key identifier: 9F:3A:68:F2:30:E7:6C:21:7E:13:C0:71:2A:9B:92:34:47:EC:CA:51 Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737 Certificate serial: 024F Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/BEDFF33EAD8F11F0B669681EC4F9AE02.roa Signing time: Mon 20 Oct 2025 08:35:34 +0000 ROA not before: Mon 20 Oct 2025 08:35:34 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153385 IP address blocks: 103.12.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 13:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737 Validity Not Before: Oct 20 08:35:34 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68f5f456-bfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:01:b7:55:61:83:c1:a9:a9:c8:6a:dc:85: 83:c3:cc:89:ff:3a:85:58:de:fd:ae:68:08:df:5c: 5f:13:0d:cd:56:d0:35:ca:8d:83:e6:4a:04:24:64: 6c:50:91:b9:3a:d9:50:f3:f4:71:b5:1e:12:9c:0c: 0b:1e:d4:d5:f6:3a:6e:fe:17:9e:77:21:7b:15:f5: 19:f3:bc:b0:e1:b7:a8:05:80:10:32:46:16:c0:78: 81:eb:4c:a4:1e:35:6d:5b:ab:af:21:0b:d4:b5:34: 13:21:61:19:f4:5b:39:72:98:e8:4a:3d:29:48:d3: 4f:b4:42:79:93:7d:4a:28:cd:b4:c6:8c:de:32:ed: 26:6a:ab:36:3b:d0:17:4f:d0:7e:e1:89:ef:54:a8: 61:de:01:bd:d3:62:c4:71:d3:ad:6c:9e:81:0b:14: 95:32:d7:09:1e:41:2b:26:18:f0:e6:fb:ac:2b:89: f2:4b:d6:6d:3d:63:ed:c9:27:4e:74:db:85:26:54: 9a:78:89:f4:9b:f0:19:f6:b4:98:21:b1:d5:db:cf: da:3e:dd:f7:a2:0b:88:1f:93:44:f2:ac:6c:41:d3: 81:89:b5:a9:f2:08:b9:d9:c0:e1:83:2d:ab:24:b9: 7d:de:d7:d5:9a:9a:2b:41:b3:af:2a:2e:2f:dd:0a: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3A:68:F2:30:E7:6C:21:7E:13:C0:71:2A:9B:92:34:47:EC:CA:51 X509v3 Authority Key Identifier: keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/BEDFF33EAD8F11F0B669681EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.205.0/24 Signature Algorithm: sha256WithRSAEncryption 14:11:77:ca:2c:fd:c8:15:4c:f9:07:d4:b3:c9:97:f6:97:4e: 79:69:0f:91:fc:b3:fe:a2:f5:cd:cd:2b:f9:1b:30:34:84:64: 84:1c:31:e1:21:ca:63:c4:02:24:67:3a:1f:92:36:62:d7:c8: 02:8f:23:6f:0b:8e:56:a2:49:19:48:36:70:37:74:47:d1:e8: 3e:12:8f:60:3d:b6:06:d5:42:3c:7c:b1:dc:2a:c8:a9:86:54: 54:41:ba:2b:52:15:21:6d:40:2e:aa:74:aa:e7:ea:d8:a5:6e: 68:8f:68:45:cd:be:0f:8e:d5:76:90:db:4f:b8:e5:3f:06:be: 09:2a:42:c0:43:a3:1a:f2:9a:30:f2:ae:a9:e9:21:08:31:36: ca:0b:0c:63:57:61:6a:91:29:79:6a:c2:07:65:5a:cc:1d:c9: c5:1b:44:dc:16:1d:aa:9a:ba:71:ad:50:b4:c3:6a:a9:75:be: 30:1d:5a:58:4c:6f:34:d5:54:41:b0:ac:ba:ca:43:6e:ef:07: 52:80:2c:c0:a3:a9:e3:e1:46:4c:c0:b9:06:de:51:2f:c2:e3: 2d:32:c2:03:bc:fe:6c:aa:35:76:34:02:30:86:16:00:c7:aa: 37:75:1b:57:66:72:78:8b:9e:f9:cf:b0:b1:37:21:8b:b5:83: 7f:24:2e:07 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwNDIxMTAvBgNVBAUTKDAyN0YwNTUyNTE0RjI0NEE5NEVFM0YwNjU3MkE0QUY3 MzM1NjU3MzcwHhcNMjUxMDIwMDgzNTM0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY1ZjQ1Ni1iZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGMBt1Vhg8Gpqchq3IWDw8yJ/zqFWN79rmgI31xfEw3NVtA1yo2D5koEJGRs UJG5OtlQ8/RxtR4SnAwLHtTV9jpu/heedyF7FfUZ87yw4beoBYAQMkYWwHiB60yk HjVtW6uvIQvUtTQTIWEZ9Fs5cpjoSj0pSNNPtEJ5k31KKM20xozeMu0maqs2O9AX T9B+4YnvVKhh3gG902LEcdOtbJ6BCxSVMtcJHkErJhjw5vusK4nyS9ZtPWPtySdO dNuFJlSaeIn0m/AZ9rSYIbHV28/aPt33oguIH5NE8qxsQdOBibWp8gi52cDhgy2r JLl93tfVmporQbOvKi4v3QqDfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ86aPIw 52whfhPAcSqbkjRH7MpRMB8GA1UdIwQYMBaAFAJ/BVJRTyRKlO4/BlcqSvczVlc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA0Mi9BRTlCMUI2RTNF NEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpFcVU3ajhHVnlwSzl6TldW emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FuOEZVbEZQSkVxVTdqOEdWeXBLOXpOV1Z6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0UwNDIvQUU5QjFCNkUzRTRBMTFFREJDMDY1MzdEQzRGOUFFMDIvQkVERkYzM0VB RDhGMTFGMEI2Njk2ODFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnDM0wDQYJKoZIhvcNAQELBQADggEBABQRd8os/cgVTPkH 1LPJl/aXTnlpD5H8s/6i9c3NK/kbMDSEZIQcMeEhymPEAiRnOh+SNmLXyAKPI28L jlaiSRlINnA3dEfR6D4Sj2A9tgbVQjx8sdwqyKmGVFRBuitSFSFtQC6qdKrn6til bmiPaEXNvg+O1XaQ20+45T8GvgkqQsBDoxrymjDyrqnpIQgxNsoLDGNXYWqRKXlq wgdlWswdycUbRNwWHaqaunGtULTDaql1vjAdWlhMbzTVVEGwrLrKQ27vB1KALMCj qePhRkzAuQbeUS/C4y0ywgO8/myqNXY0AjCGFgDHqjd1G1dmcniLnvnPsLE3IYu1 g38kLgc= -----END CERTIFICATE-----Generated at Tue Oct 21 01:57:17 2025 by rpki-client