$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/215FAD42B98611E9A053044FC4F9AE02.roa File: 215FAD42B98611E9A053044FC4F9AE02.roa (raw, json) Hash identifier: IvtzH6gyubUymkg5oBnMrp7NOgM18ej68eMn0LMb6vE= Subject key identifier: FF:42:56:1E:D3:43:2F:A3:B0:6A:9D:BF:44:10:D0:0F:B4:21:A7:06 Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Certificate serial: 0E47 Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/215FAD42B98611E9A053044FC4F9AE02.roa Signing time: Sun 28 Sep 2025 18:18:09 +0000 ROA not before: Sun 28 Sep 2025 18:18:09 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139293 IP address blocks: 103.140.238.0/24 maxlen: 24 103.140.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3655 (0xe47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530 Validity Not Before: Sep 28 18:18:09 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68d97be1-7333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:90:84:ce:41:45:08:b3:24:91:dc:4c:31: 5e:45:d9:cf:14:28:44:66:09:93:f8:06:06:f9:b8: 71:39:40:bb:f6:6c:a6:c9:6f:84:bf:3b:88:0b:36: e9:16:d8:6b:51:3e:92:43:32:23:46:0b:cf:ba:1d: 71:29:d9:39:d8:09:54:49:45:d8:ec:a9:a9:7d:e0: 4a:9e:38:6c:a8:13:61:a4:8a:0e:ac:d6:17:06:00: 88:ea:06:30:85:96:78:6c:e7:34:19:54:96:c9:16: 1d:0b:80:24:c0:23:c5:49:53:ad:00:c2:2b:d2:32: de:2f:f7:b7:0d:57:7e:00:27:1c:c6:8e:11:36:6b: 9c:f6:6d:6d:55:82:83:b2:3c:5a:02:6a:f5:ec:fb: ed:e9:ff:8f:e6:77:cc:ce:3b:d7:df:ca:8c:15:9f: b8:04:04:15:81:d1:66:b1:a0:41:ed:23:0b:d6:27: dc:da:9a:a8:b6:a6:e3:33:02:ac:e5:d0:0b:df:36: 5e:49:96:fc:f5:a6:d8:cd:01:1b:22:3b:6b:ff:e2: 64:76:ca:14:bb:98:41:1a:22:5e:5f:8e:d3:65:ac: f1:09:8e:77:0e:cd:fb:36:7c:9c:0a:a3:9a:c5:6a: 78:8b:7d:9a:5b:93:bf:18:e4:ea:52:6c:a4:56:64: 24:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:42:56:1E:D3:43:2F:A3:B0:6A:9D:BF:44:10:D0:0F:B4:21:A7:06 X509v3 Authority Key Identifier: keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/215FAD42B98611E9A053044FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.238.0/23 Signature Algorithm: sha256WithRSAEncryption a3:b3:9c:b5:05:3b:a2:9f:7b:8c:ad:6e:94:02:2a:bd:66:d4: 4a:45:32:8c:27:df:1d:0d:59:b2:2e:95:56:0f:a5:97:40:25: 32:3b:3b:34:f4:48:e9:f7:85:41:58:01:41:f4:8d:aa:e1:f0: e9:94:42:a2:dc:14:23:80:ab:3e:2e:ad:bc:78:70:65:8a:29: ac:bd:c6:ad:43:70:3d:03:37:8e:54:cc:52:9f:4d:1c:c4:6a: c1:19:d2:03:6a:bf:36:f5:1b:f5:9d:19:1b:02:98:38:7e:b7: 9a:74:73:13:c4:7a:13:db:b8:f9:53:90:a4:58:aa:fd:c5:6b: ee:0c:82:48:a0:38:33:ed:e5:e8:06:35:66:5f:be:06:d8:30: fc:1b:30:bf:88:59:88:97:80:67:06:1a:ff:35:2d:18:bb:68: d9:24:9c:81:65:33:f0:e4:43:7d:02:34:91:29:50:f0:ae:e9: aa:7d:48:20:e0:b4:e6:5e:c7:91:99:ff:29:25:3a:c0:1d:fa: 03:08:43:d8:3b:6c:d8:ab:99:5e:2f:e7:f5:ed:06:34:ff:18: b3:f4:08:88:82:4b:a2:98:19:d0:8f:3a:a7:09:be:8f:35:74: 4e:b0:44:3e:63:f1:c2:b6:2d:85:a5:16:df:b7:95:90:58:a6: 84:39:61:89 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxOEUxMTAvBgNVBAUTKERERjhBNEM5QkVDMDEwNEUxNkNDRTMyMUE5NjVBOTJD NjYxNDQ1MzAwHhcNMjUwOTI4MTgxODA5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ5N2JlMS03MzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbGQhM5BRQizJJHcTDFeRdnPFChEZgmT+AYG+bhxOUC79mymyW+EvzuICzbp FthrUT6SQzIjRgvPuh1xKdk52AlUSUXY7KmpfeBKnjhsqBNhpIoOrNYXBgCI6gYw hZZ4bOc0GVSWyRYdC4AkwCPFSVOtAMIr0jLeL/e3DVd+ACccxo4RNmuc9m1tVYKD sjxaAmr17Pvt6f+P5nfMzjvX38qMFZ+4BAQVgdFmsaBB7SML1ifc2pqotqbjMwKs 5dAL3zZeSZb89abYzQEbIjtr/+JkdsoUu5hBGiJeX47TZazxCY53Ds37NnycCqOa xWp4i32aW5O/GOTqUmykVmQk5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFP9CVh7T Qy+jsGqdv0QQ0A+0IacGMB8GA1UdIwQYMBaAFN34pMm+wBBOFszjIallqSxmFEUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE4RS9BNzk2RTkwQUFF MDIxMUU5QjM3RDg5NjdDNEY5QUUwMi8zZmlreWI3QUVFNFd6T01ocVdXcExHWVVS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNmaWt5YjdBRUU0V3pPTWhxV1dwTEdZVVJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTUxOEUvQTc5NkU5MEFBRTAyMTFFOUIzN0Q4OTY3QzRGOUFFMDIvMjE1RkFENDJC OTg2MTFFOUEwNTMwNDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjO4wDQYJKoZIhvcNAQELBQADggEBAKOznLUFO6Kfe4yt bpQCKr1m1EpFMown3x0NWbIulVYPpZdAJTI7OzT0SOn3hUFYAUH0jarh8OmUQqLc FCOAqz4urbx4cGWKKay9xq1DcD0DN45UzFKfTRzEasEZ0gNqvzb1G/WdGRsCmDh+ t5p0cxPEehPbuPlTkKRYqv3Fa+4MgkigODPt5egGNWZfvgbYMPwbML+IWYiXgGcG Gv81LRi7aNkknIFlM/DkQ30CNJEpUPCu6ap9SCDgtOZex5GZ/yklOsAd+gMIQ9g7 bNirmV4v5/XtBjT/GLP0CIiCS6KYGdCPOqcJvo81dE6wRD5j8cK2LYWlFt+3lZBY poQ5YYk= -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:42 2025 by rpki-client