$ rpki-client -vvf rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/11685AAC4F0D11EAA161D143C4F9AE02.roa File: 11685AAC4F0D11EAA161D143C4F9AE02.roa (raw, json) Hash identifier: dlSOSQk2MniPlYlY5Ht7zlRaFaui9HZpjfs6c69fqdk= Subject key identifier: 8A:B3:45:A6:91:31:EB:36:57:C2:BF:E3:58:2E:EB:6F:4E:C1:D6:D5 Certificate issuer: /CN=A914B57F/serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE Certificate serial: 0B09 Authority key identifier: E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/11685AAC4F0D11EAA161D143C4F9AE02.roa Signing time: Thu 18 Sep 2025 19:59:46 +0000 ROA not before: Thu 18 Sep 2025 19:59:46 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136979 IP address blocks: 103.101.36.0/22 maxlen: 22 103.101.36.0/24 maxlen: 24 103.101.37.0/24 maxlen: 24 103.101.38.0/24 maxlen: 24 103.101.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2825 (0xb09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B57F, serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE Validity Not Before: Sep 18 19:59:46 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68cc64b2-93c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:c8:eb:b2:5f:f0:a1:13:5a:79:54:a7:57: de:27:17:7d:5d:7d:21:ae:22:d7:fb:93:6a:12:75: f0:90:06:79:e4:31:9f:57:ba:ec:0c:5b:d6:55:e5: 51:02:1a:80:86:a7:57:32:f8:f7:df:b2:a8:67:b7: 33:d5:83:5b:8e:06:04:11:b8:02:3a:bb:f1:07:c5: af:50:26:c4:81:c6:f0:1c:4d:cf:c6:aa:34:37:35: 7a:0b:8f:1b:ec:c6:6a:36:00:a1:97:ed:aa:11:ee: 64:4f:90:5e:c0:dc:1a:0c:fa:6d:83:d2:6d:1a:37: c4:63:df:a4:ce:0c:74:1d:47:88:81:19:cc:64:54: b6:ca:f4:30:58:35:64:83:37:1e:75:1f:cf:37:45: 0f:42:38:4a:a2:ec:c1:42:a0:12:00:c0:84:59:48: 58:2f:5d:33:87:5a:96:1c:12:a5:d4:1a:69:a1:17: 21:ee:93:3b:e6:30:a6:17:26:bb:b0:87:9d:16:ad: 89:27:28:be:63:06:4b:0b:2d:9f:15:e7:a8:96:9b: 3e:c6:81:7e:1a:87:58:c5:08:20:5f:b9:ed:4d:22: 68:c6:97:1d:bb:b0:78:b2:f1:09:de:62:dd:b7:e0: a3:29:05:d1:b3:1f:de:5c:b3:4d:f7:da:c0:61:32: d0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B3:45:A6:91:31:EB:36:57:C2:BF:E3:58:2E:EB:6F:4E:C1:D6:D5 X509v3 Authority Key Identifier: keyid:E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/11685AAC4F0D11EAA161D143C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.36.0/22 Signature Algorithm: sha256WithRSAEncryption 83:25:01:f9:36:60:fe:32:c2:6a:b6:92:66:22:4d:a7:a5:94: 8a:b4:45:e9:95:78:d5:d9:fb:95:b0:f4:87:f4:84:c5:d3:3f: 02:ec:26:72:e7:99:e2:d5:27:b4:8a:5c:06:c0:8b:b7:f1:28: 56:dd:b1:a2:a2:89:f8:73:2e:71:b1:d4:9f:d2:85:c1:ed:25: f2:91:2c:4a:cd:4f:d1:5f:f9:dc:b2:8e:db:a6:5f:23:a8:a1: 73:40:ec:fa:ce:77:01:ca:b4:86:db:f6:a8:6b:93:50:9d:93: 7e:19:34:29:f8:7d:d2:b4:d6:e5:dd:8f:63:5f:19:48:94:1e: 44:e8:d0:cf:65:ed:5e:a0:08:7d:79:f8:28:75:6e:3e:81:53: 98:4a:33:5f:00:56:0d:ba:c3:67:32:23:fb:6e:d3:52:b1:cc: ed:ca:16:bc:76:ff:ef:11:14:f6:3b:e8:b9:d3:89:4b:ad:a5: 8c:14:75:1b:24:be:71:d0:27:a0:a4:9c:20:5e:7f:e0:02:b7: 7b:d9:47:89:3c:01:07:c8:e1:e7:87:6e:b9:d7:03:de:6e:19: 3b:19:11:86:32:6f:9e:e9:06:11:3a:3e:76:fa:0b:5c:7b:4e: 92:ba:b3:2f:58:b1:44:42:f0:c2:49:bf:02:02:99:df:84:14: eb:e0:83:6c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI1N0YxMTAvBgNVBAUTKEUxMDY0QkI2MDFBMTMxMDg3NjFCNTQ1N0ExRjcxNTI0 QzRBNENCQ0UwHhcNMjUwOTE4MTk1OTQ2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNjNjRiMi05M2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bnI67Jf8KETWnlUp1feJxd9XX0hriLX+5NqEnXwkAZ55DGfV7rsDFvWVeVR AhqAhqdXMvj337KoZ7cz1YNbjgYEEbgCOrvxB8WvUCbEgcbwHE3Pxqo0NzV6C48b 7MZqNgChl+2qEe5kT5BewNwaDPptg9JtGjfEY9+kzgx0HUeIgRnMZFS2yvQwWDVk gzcedR/PN0UPQjhKouzBQqASAMCEWUhYL10zh1qWHBKl1BppoRch7pM75jCmFya7 sIedFq2JJyi+YwZLCy2fFeeolps+xoF+GodYxQggX7ntTSJoxpcdu7B4svEJ3mLd t+CjKQXRsx/eXLNN99rAYTLQ2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIqzRaaR Mes2V8K/41gu629OwdbVMB8GA1UdIwQYMBaAFOEGS7YBoTEIdhtUV6H3FSTEpMvO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjU3Ri9CMjQ1N0Q2QTRF NTkxMUVBOUVFOUUyMERDNEY5QUUwMi80UVpMdGdHaE1RaDJHMVJYb2ZjVkpNU2t5 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRWkx0Z0doTVFoMkcxUlhvZmNWSk1Ta3k4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI1N0YvQjI0NTdENkE0RTU5MTFFQTlFRTlFMjBEQzRGOUFFMDIvMTE2ODVBQUM0 RjBEMTFFQUExNjFEMTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnZSQwDQYJKoZIhvcNAQELBQADggEBAIMlAfk2YP4ywmq2 kmYiTaellIq0RemVeNXZ+5Ww9If0hMXTPwLsJnLnmeLVJ7SKXAbAi7fxKFbdsaKi ifhzLnGx1J/ShcHtJfKRLErNT9Ff+dyyjtumXyOooXNA7PrOdwHKtIbb9qhrk1Cd k34ZNCn4fdK01uXdj2NfGUiUHkTo0M9l7V6gCH15+Ch1bj6BU5hKM18AVg26w2cy I/tu01KxzO3KFrx2/+8RFPY76LnTiUutpYwUdRskvnHQJ6CknCBef+ACt3vZR4k8 AQfI4eeHbrnXA95uGTsZEYYyb57pBhE6Pnb6C1x7TpK6sy9YsURC8MJJvwICmd+E FOvgg2w= -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:28 2025 by rpki-client