$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/A7E24C00ABF411F0A0B37937C4F9AE02.roa File: A7E24C00ABF411F0A0B37937C4F9AE02.roa (raw, json) Hash identifier: ClZn2xirzr+629EzY8UXOvPJeXz2ck5eF+NekF81TbI= Subject key identifier: 75:C1:0F:9C:FA:52:9F:26:42:4B:E9:20:20:0E:2F:83:02:00:1B:22 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: E6 Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/A7E24C00ABF411F0A0B37937C4F9AE02.roa Signing time: Sat 18 Oct 2025 07:32:53 +0000 ROA not before: Sat 18 Oct 2025 07:32:53 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 26658 IP address blocks: 103.12.48.0/22 maxlen: 24 103.72.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Oct 18 07:32:53 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f342a4-6945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:d3:e6:6c:1b:b7:11:15:c0:e7:35:51:e0: 88:99:a3:08:08:67:c7:64:62:a3:5a:db:e4:eb:e9: ef:3d:8a:5b:45:08:2e:ee:37:3c:d6:05:fd:03:a0: 8a:04:86:4d:e7:4d:47:a8:9f:e3:98:f1:c0:5e:9f: 91:f1:8d:f3:1f:7e:18:bf:7a:c7:21:c9:3a:72:ad: 3c:2b:76:04:50:41:84:18:4e:7c:8b:cb:35:5a:d2: 33:55:8b:eb:39:bc:d8:c6:aa:c5:78:11:40:16:7c: c0:46:e3:bd:e7:0b:ba:8b:10:5e:cb:12:ae:e7:5c: 86:a0:ed:62:06:11:02:59:13:c4:b9:f4:ee:4b:1e: 52:5e:b9:c0:fc:d6:61:df:fc:ab:98:29:8d:41:a2: be:7a:14:0b:a6:2b:13:1f:ff:91:69:ef:62:06:b2: a9:2d:ce:0e:6b:71:06:5e:ad:bc:62:c8:80:d4:86: 2d:70:38:a2:61:5c:a2:1e:a6:30:4d:8d:08:5b:c0: e8:dd:0a:cd:96:77:09:5d:82:47:e6:a8:8a:32:a6: ee:c5:4b:45:4b:eb:1c:fa:2a:11:f7:c6:1d:ec:a9: 06:aa:0e:0d:b8:4b:ce:59:75:5e:8b:f5:95:61:85: 21:33:a5:dc:22:39:2c:67:f7:97:88:1c:64:b6:73: 53:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C1:0F:9C:FA:52:9F:26:42:4B:E9:20:20:0E:2F:83:02:00:1B:22 X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/A7E24C00ABF411F0A0B37937C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.48.0/22 103.72.152.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:83:4e:bb:e0:34:73:2a:53:c4:08:d5:2f:73:aa:51:42:8b: dc:8e:8c:c6:77:b4:ec:3b:06:fb:bd:92:00:28:7b:e4:c4:3d: 4e:dc:f1:87:58:b5:c3:23:f2:47:9c:db:69:f6:c3:5a:f5:11: c8:aa:39:f1:b4:73:1b:1e:07:f3:23:3f:8d:f3:ae:af:0b:3a: 9c:cd:61:99:d1:d0:56:ec:d1:e1:97:a6:0f:9c:34:f9:bb:60: e9:a3:6e:de:d9:07:b2:3c:60:a1:a4:c3:4f:90:bf:b3:85:b4: 9b:cd:5d:fa:50:63:a1:15:af:d0:28:b8:f0:a7:4c:c3:0c:0d: 64:e4:c6:ec:76:93:70:19:62:83:e4:cc:3c:ac:5a:22:c7:bc: 69:4b:85:e8:5a:be:6a:ce:c8:23:f1:78:82:e3:9b:a9:f8:fb: 44:cd:ac:ba:69:3d:37:fd:18:e4:e8:1c:dc:9d:54:83:d3:0d: 96:40:49:cf:52:d3:c3:6a:9d:3b:b6:2b:5c:45:0f:68:77:cf: 97:78:2b:8e:f1:a1:14:a3:39:d2:81:d9:dd:e9:fb:16:aa:fe: df:40:e3:f0:4e:14:7f:0c:6a:66:1a:58:e4:c9:59:f8:5f:4b: 55:2e:95:7d:cc:0c:98:d7:c1:77:cd:74:fb:44:ba:4d:4a:07: 6c:b8:62:89 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUxMDE4MDczMjUzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYzNDJhNC02OTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcTT5mwbtxEVwOc1UeCImaMICGfHZGKjWtvk6+nvPYpbRQgu7jc81gX9A6CK BIZN501HqJ/jmPHAXp+R8Y3zH34Yv3rHIck6cq08K3YEUEGEGE58i8s1WtIzVYvr ObzYxqrFeBFAFnzARuO95wu6ixBeyxKu51yGoO1iBhECWRPEufTuSx5SXrnA/NZh 3/yrmCmNQaK+ehQLpisTH/+Rae9iBrKpLc4Oa3EGXq28YsiA1IYtcDiiYVyiHqYw TY0IW8Do3QrNlncJXYJH5qiKMqbuxUtFS+sc+ioR98Yd7KkGqg4NuEvOWXVei/WV YYUhM6XcIjksZ/eXiBxktnNTOwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHXBD5z6 Up8mQkvpICAOL4MCABsiMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI1M0IvMjAzMjNBODI1OUREMTFFRkJBRDRDMjg2QzRGOUFFMDIvQTdFMjRDMDBB QkY0MTFGMEEwQjM3OTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnDDADBAJnSJgwDQYJKoZIhvcNAQELBQADggEBAJ+DTrvg NHMqU8QI1S9zqlFCi9yOjMZ3tOw7Bvu9kgAoe+TEPU7c8YdYtcMj8kec22n2w1r1 EciqOfG0cxseB/MjP43zrq8LOpzNYZnR0Fbs0eGXpg+cNPm7YOmjbt7ZB7I8YKGk w0+Qv7OFtJvNXfpQY6EVr9AouPCnTMMMDWTkxux2k3AZYoPkzDysWiLHvGlLheha vmrOyCPxeILjm6n4+0TNrLppPTf9GOToHNydVIPTDZZASc9S08NqnTu2K1xFD2h3 z5d4K47xoRSjOdKB2d3p+xaq/t9A4/BOFH8MamYaWOTJWfhfS1UulX3MDJjXwXfN dPtEuk1KB2y4Yok= -----END CERTIFICATE-----Generated at Mon Oct 20 08:28:35 2025 by rpki-client