$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/E521C8BE8DB011EBBA0A3723C4F9AE02.roa File: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (raw, json) Hash identifier: kyXa2/fOky6ixQEZzJ/YTQjRwQzmiBb1i8hW42gK6jE= Subject key identifier: 52:43:12:26:6D:10:54:59:77:52:A1:C3:D7:EA:2A:13:10:FD:47:07 Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Certificate serial: 0690 Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/E521C8BE8DB011EBBA0A3723C4F9AE02.roa Signing time: Wed 08 Oct 2025 22:24:57 +0000 ROA not before: Wed 08 Oct 2025 22:24:57 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 55561 IP address blocks: 103.242.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Validity Not Before: Oct 8 22:24:57 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e6e4b8-4c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:b5:69:2d:df:c0:54:ed:f0:d5:8a:8e:2c: 2a:b8:6d:fb:3c:75:d3:ff:86:28:74:74:87:70:0b: 1b:9f:93:dc:5e:0b:05:d0:70:d2:92:de:59:5f:0e: 88:d1:e8:cd:90:77:62:f4:9d:49:b0:18:fb:51:d8: a3:fe:09:7f:46:19:40:69:0e:a8:e6:ee:29:fa:b6: 6b:74:a3:7f:37:92:2e:03:bf:1b:aa:ae:3a:75:71: 59:2d:a9:ef:2e:e4:38:89:75:49:a3:6c:3e:d2:57: 32:3d:a0:b7:57:f9:5b:0e:d1:c3:1b:84:da:8e:35: 1e:d8:01:58:3f:8a:f1:52:de:5f:8b:17:ca:8e:43: 98:c4:46:a6:5e:58:89:9c:41:c3:aa:95:99:86:54: 73:0d:97:f9:53:90:75:9c:e9:38:a4:f9:78:d6:32: 1a:be:a1:79:fe:f4:5b:73:87:8d:98:48:c7:51:f0: 31:e6:ea:c3:a4:54:bb:02:75:e5:66:2a:79:4b:4d: 7a:a6:cb:bc:c9:5c:ee:8d:eb:62:84:a8:72:d0:be: 38:1c:19:4b:8c:90:74:74:28:2e:d1:f8:00:fa:48: f4:1c:35:fc:9a:57:5d:06:22:c1:85:c3:31:25:62: f7:bb:da:75:cf:d8:8e:19:c0:1d:34:cb:42:97:08: c2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:43:12:26:6D:10:54:59:77:52:A1:C3:D7:EA:2A:13:10:FD:47:07 X509v3 Authority Key Identifier: keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/E521C8BE8DB011EBBA0A3723C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.242.24.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:5a:aa:ab:da:2a:f1:72:ad:20:f9:17:53:e2:c5:14:c5:f5: 23:35:d0:84:b8:65:61:43:5e:2f:49:5e:e6:3f:a2:40:fe:cf: ff:e7:7a:88:b4:2e:98:c7:c9:9c:9b:37:11:14:b9:45:c5:14: fe:6d:26:55:fe:d7:61:f9:69:0d:1e:c5:20:45:c3:4c:a9:61: 91:a2:77:a9:0c:68:b1:09:d9:49:8b:e3:bb:92:cd:99:49:6e: dd:26:59:32:e0:57:ce:43:de:05:d2:95:e1:28:ec:3f:5a:19: b4:7b:9a:ac:b2:36:e2:2d:a9:ca:d2:a2:99:9d:3e:93:ed:88: e5:c9:36:35:83:0b:96:05:d7:b1:4a:5c:82:78:df:b1:ec:b1: c3:34:40:a6:13:05:f8:7b:8e:31:2c:40:b2:91:28:a1:96:7c: a0:c8:25:22:a9:e3:a8:ee:08:6e:e0:26:b3:b4:fc:e9:67:9b: e3:77:02:ed:a5:4d:d1:4a:60:62:9c:cf:38:f5:7b:e2:a6:a5: 8c:fd:d5:de:1b:3b:96:43:e4:26:7f:e1:20:77:da:d0:ec:8c: ec:20:a5:4a:50:7f:d5:e4:44:ef:4c:60:1d:4e:ff:94:a7:94: e9:7c:d0:5f:51:a2:f1:4b:2d:7b:7f:76:b0:fb:75:63:95:f8: 70:eb:7e:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2OUQxMTAvBgNVBAUTKDkxMTI2RTg2RjE4QzYwOTQwNEQxOTBGMjk4QzMyQ0Q2 MDlGQ0ZBNzkwHhcNMjUxMDA4MjIyNDU3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZTRiOC00YzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdS1aS3fwFTt8NWKjiwquG37PHXT/4YodHSHcAsbn5PcXgsF0HDSkt5ZXw6I 0ejNkHdi9J1JsBj7Udij/gl/RhlAaQ6o5u4p+rZrdKN/N5IuA78bqq46dXFZLanv LuQ4iXVJo2w+0lcyPaC3V/lbDtHDG4TajjUe2AFYP4rxUt5fixfKjkOYxEamXliJ nEHDqpWZhlRzDZf5U5B1nOk4pPl41jIavqF5/vRbc4eNmEjHUfAx5urDpFS7AnXl Zip5S016psu8yVzujetihKhy0L44HBlLjJB0dCgu0fgA+kj0HDX8mlddBiLBhcMx JWL3u9p1z9iOGcAdNMtClwjC7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFJDEiZt EFRZd1Khw9fqKhMQ/UcHMB8GA1UdIwQYMBaAFJESbobxjGCUBNGQ8pjDLNYJ/Pp5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjY5RC9CRjZFMjBBNjhE QUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlKUUUwWkR5bU1NczFnbjgt bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSSnVodkdNWUpRRTBaRHltTU1zMWduOC1uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDY2OUQvQkY2RTIwQTY4REFFMTFFQkIyOThCNTFGQzRGOUFFMDIvRTUyMUM4QkU4 REIwMTFFQkJBMEEzNzIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn8hgwDQYJKoZIhvcNAQELBQADggEBAJtaqqvaKvFyrSD5 F1PixRTF9SM10IS4ZWFDXi9JXuY/okD+z//neoi0LpjHyZybNxEUuUXFFP5tJlX+ 12H5aQ0exSBFw0ypYZGid6kMaLEJ2UmL47uSzZlJbt0mWTLgV85D3gXSleEo7D9a GbR7mqyyNuItqcrSopmdPpPtiOXJNjWDC5YF17FKXIJ437HsscM0QKYTBfh7jjEs QLKRKKGWfKDIJSKp46juCG7gJrO0/Olnm+N3Au2lTdFKYGKczzj1e+KmpYz91d4b O5ZD5CZ/4SB32tDsjOwgpUpQf9XkRO9MYB1O/5SnlOl80F9RovFLLXt/drD7dWOV +HDrfuw= -----END CERTIFICATE-----Generated at Tue Oct 21 03:09:44 2025 by rpki-client