$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/59212E58955D11EC97EC0461C4F9AE02.roa File: 59212E58955D11EC97EC0461C4F9AE02.roa (raw, json) Hash identifier: /LvExGUs3Vr9wpRYY+a9ZS6EORFrCyhwbLTTuNvKjdk= Subject key identifier: 04:78:45:16:83:2A:4E:DE:88:A3:FE:5B:8F:A8:9D:59:AF:BF:AF:26 Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Certificate serial: 03EF Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/59212E58955D11EC97EC0461C4F9AE02.roa Signing time: Fri 03 Oct 2025 00:55:54 +0000 ROA not before: Fri 03 Oct 2025 00:55:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 135334 IP address blocks: 103.172.214.0/23 maxlen: 23 103.172.214.0/24 maxlen: 24 103.172.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1007 (0x3ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4A1, serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Validity Not Before: Oct 3 00:55:54 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68df1f1a-cf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:d7:08:fc:ff:6b:0a:6e:28:a4:3d:74:db: 32:33:64:3e:d4:66:0a:dc:34:5b:98:e4:a7:a6:cb: c7:20:73:b2:84:10:1b:80:a8:6e:e7:01:7c:db:3d: 7f:26:bd:70:f9:60:47:fd:2b:14:36:5f:0d:72:c4: 4c:ae:84:d2:65:be:8c:02:4c:d4:c9:76:c1:b0:ca: 50:49:de:9b:e8:6e:cb:de:52:43:3b:8b:6e:8f:cd: d6:db:4a:cf:b8:0a:a6:03:6e:8c:76:e4:e5:56:5d: 78:5d:27:1f:b1:10:d9:54:84:77:3d:b1:54:05:c9: 86:a3:96:f8:b0:b6:a5:07:5d:4a:02:f3:40:3b:d9: 8f:84:93:74:00:bc:a3:d3:b2:6f:66:63:9c:12:2a: 89:c7:d2:73:30:44:5d:62:39:62:ac:c2:12:26:60: 9c:76:a4:d8:1d:cf:c4:48:ed:18:66:f6:20:3a:ca: 43:b5:52:33:30:f0:7e:07:c0:bc:d3:b0:a4:ad:70: 54:8c:f6:71:5d:09:d4:30:ff:1b:4a:c0:7d:1b:dd: af:70:1d:28:15:35:8d:6a:5e:64:29:d2:c3:03:04: 65:6e:40:5d:6d:53:44:b3:cf:9b:59:13:d1:21:a1: 69:ff:35:5c:c6:3c:36:8c:73:54:3e:29:7a:99:00: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:78:45:16:83:2A:4E:DE:88:A3:FE:5B:8F:A8:9D:59:AF:BF:AF:26 X509v3 Authority Key Identifier: keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/59212E58955D11EC97EC0461C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.214.0/23 Signature Algorithm: sha256WithRSAEncryption c6:df:6d:6f:18:14:5b:3c:d8:17:43:40:5b:1c:4a:1f:c9:1f: 6c:b6:08:80:c5:be:a0:35:8b:08:1d:97:78:c0:e5:70:5a:f1: ae:8e:91:67:f1:a6:b2:f5:1a:aa:90:d0:9e:f2:ba:58:06:e8: 38:e7:d6:77:0c:21:fe:28:b5:f8:dc:f6:79:84:2c:3d:ca:42: 8d:08:b2:e5:f0:7d:ba:12:88:b9:65:74:39:88:c8:10:a8:fe: f8:be:d5:6e:4f:e5:6e:63:f3:7a:e8:d3:45:e6:e5:d2:bb:de: fe:0f:63:f6:0c:2e:80:0c:47:15:d4:89:f9:10:43:e3:5c:2f: 57:83:f1:ee:16:b3:37:1d:f1:b7:bc:7a:d6:8b:49:3a:32:e6: f8:09:11:b8:ed:b5:e5:7a:8d:47:82:81:4e:71:c0:27:a9:24: 73:67:5e:49:59:33:95:a8:96:43:d4:74:93:41:3b:81:15:7e: e5:3f:e2:32:77:c2:6c:fa:bf:a6:81:21:65:f0:e5:e9:dc:30: fe:b1:95:39:6e:ea:16:c5:b8:3d:7c:03:63:8f:80:54:5a:8b: 43:fa:7b:b6:04:8e:ff:bf:e3:dc:34:dc:79:2c:a6:3b:65:41: 42:6f:c1:da:6b:97:57:32:57:ed:24:51:bc:c1:c1:62:03:0a: 28:c9:6f:3b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0QTExMTAvBgNVBAUTKEEzRDczQTRFOUYxMDQzREUzQUJGNEY1RUQxMDg2OEFG NkQzMzVCRjQwHhcNMjUxMDAzMDA1NTU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRmMWYxYS1jZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvfXCPz/awpuKKQ9dNsyM2Q+1GYK3DRbmOSnpsvHIHOyhBAbgKhu5wF82z1/ Jr1w+WBH/SsUNl8NcsRMroTSZb6MAkzUyXbBsMpQSd6b6G7L3lJDO4tuj83W20rP uAqmA26MduTlVl14XScfsRDZVIR3PbFUBcmGo5b4sLalB11KAvNAO9mPhJN0ALyj 07JvZmOcEiqJx9JzMERdYjlirMISJmCcdqTYHc/ESO0YZvYgOspDtVIzMPB+B8C8 07CkrXBUjPZxXQnUMP8bSsB9G92vcB0oFTWNal5kKdLDAwRlbkBdbVNEs8+bWRPR IaFp/zVcxjw2jHNUPil6mQCEFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAR4RRaD Kk7eiKP+W4+onVmvv68mMB8GA1UdIwQYMBaAFKPXOk6fEEPeOr9PXtEIaK9tM1v0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRBMS82OENFQzA5NDk1 NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5NDZ2MDllMFFob3IyMHpX X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285YzZUcDhRUTk0NnYwOWUwUWhvcjIweldfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEE0QTEvNjhDRUMwOTQ5NTU5MTFFQzg0NzI4NzM2QzRGOUFFMDIvNTkyMTJFNTg5 NTVEMTFFQzk3RUMwNDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrNYwDQYJKoZIhvcNAQELBQADggEBAMbfbW8YFFs82BdD QFscSh/JH2y2CIDFvqA1iwgdl3jA5XBa8a6OkWfxprL1GqqQ0J7yulgG6Djn1ncM If4otfjc9nmELD3KQo0IsuXwfboSiLlldDmIyBCo/vi+1W5P5W5j83ro00Xm5dK7 3v4PY/YMLoAMRxXUifkQQ+NcL1eD8e4Wszcd8be8etaLSToy5vgJEbjtteV6jUeC gU5xwCepJHNnXklZM5WolkPUdJNBO4EVfuU/4jJ3wmz6v6aBIWXw5encMP6xlTlu 6hbFuD18A2OPgFRai0P6e7YEjv+/49w03HkspjtlQUJvwdprl1cyV+0kUbzBwWID CijJbzs= -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:26 2025 by rpki-client