$ rpki-client -vvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/7D211148F64911EEBE36B826C4F9AE02.roa File: 7D211148F64911EEBE36B826C4F9AE02.roa (raw, json) Hash identifier: 23z4JEUFNko8Hv77YRE2junsGcE7MgL4d2UYU11q19Y= Subject key identifier: 68:6D:6B:5F:64:ED:0A:F2:99:73:14:DE:25:02:BF:10:ED:80:D2:FD Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Certificate serial: 0124 Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/7D211148F64911EEBE36B826C4F9AE02.roa Signing time: Sat 11 Oct 2025 09:15:47 +0000 ROA not before: Sat 11 Oct 2025 09:15:47 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152685 IP address blocks: 103.98.76.0/23 maxlen: 23 103.98.76.0/24 maxlen: 24 103.98.77.0/24 maxlen: 24 2001:df3:a940::/48 maxlen: 48 2001:df3:a940::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B73C, serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Validity Not Before: Oct 11 09:15:47 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68ea2043-9cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:77:70:6e:b0:18:84:8a:d6:6e:b9:37:57: 59:79:8b:9d:5b:06:8f:4c:c2:a0:f2:ce:80:24:ee: 82:0e:14:54:f0:f4:cc:4a:02:ce:2f:ec:5b:50:ec: 29:99:32:51:ba:41:20:9b:33:98:b1:95:74:97:ea: 22:ed:77:be:4a:6f:6f:d4:c3:3a:29:af:71:c9:c3: c0:4e:1e:a3:ec:73:b4:0f:78:8a:c2:0c:b6:60:4a: b1:7f:25:df:df:ff:2a:55:0e:5f:aa:47:aa:68:c4: ab:2b:83:5a:52:b8:e0:aa:a7:de:6f:aa:0e:b4:d0: 6a:f3:2c:04:84:a3:85:20:ad:05:a3:09:91:1c:69: 85:a1:6e:2f:b7:78:02:5b:77:3a:94:ad:af:4c:8f: ff:d3:a6:44:22:03:5a:e3:a6:44:34:fa:1c:0e:e8: af:d6:1e:0a:b7:3e:01:a6:d8:06:fe:76:69:ca:69: e8:78:71:7d:4e:63:47:44:48:5f:ee:7a:a9:bb:c6: 55:8f:b6:b8:7c:25:3c:9f:f8:5d:ed:32:ce:41:c0: 11:77:93:d6:cd:6d:ea:1a:96:0d:f3:ea:1d:82:a3: 6e:5f:76:b8:6c:c5:81:de:0b:0d:c9:90:eb:94:93: 3e:88:02:8c:e3:25:5f:e4:01:f0:4d:4c:2d:b2:44: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6D:6B:5F:64:ED:0A:F2:99:73:14:DE:25:02:BF:10:ED:80:D2:FD X509v3 Authority Key Identifier: keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/7D211148F64911EEBE36B826C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.76.0/23 IPv6: 2001:df3:a940::/48 Signature Algorithm: sha256WithRSAEncryption 99:b3:d3:7f:f9:6e:27:cf:ed:02:95:91:0f:f0:85:66:61:67: 4c:90:bf:01:b4:32:eb:94:24:6a:1d:58:d8:52:ae:48:61:af: 14:61:1a:f7:40:bd:60:fc:bf:11:ff:7f:fe:a3:bb:15:26:0e: d9:63:1b:2f:77:0f:8c:01:bb:ea:97:17:34:ea:39:2c:8a:fd: a4:be:e5:ea:28:03:19:27:db:15:ca:3e:93:c6:ce:3e:4a:f9: 48:71:f1:df:2b:be:c8:15:37:3b:7c:fe:da:8a:9c:37:df:7e: 66:75:35:86:36:97:36:4d:99:ac:bf:65:82:de:c0:6a:23:b1: 43:cf:f9:89:49:c7:63:b4:3d:c2:c3:40:c4:e8:80:d5:2f:7c: 1a:f5:46:9e:9c:a0:dd:30:45:85:c6:d4:36:7d:d3:40:2b:e7: 8c:0d:94:1c:8f:0a:89:0f:4d:cb:3e:7e:04:2b:12:12:b1:3d: 8f:a7:44:0b:26:ab:a4:42:3d:51:d8:83:c2:d4:a7:59:28:dd: b9:9a:c2:98:64:6e:71:b7:5d:92:bd:7f:e6:e6:39:89:98:79: fa:c0:2e:78:68:97:4e:0a:5e:e6:2a:c1:30:26:c1:f1:fb:79: bb:37:a6:11:7b:12:94:a8:dc:6d:83:aa:83:19:d3:b5:ce:01: 52:29:79:b4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3M0MxMTAvBgNVBAUTKDEzQzcyREYxQzUxRTJDQTIxMUNBNTc2NjUxNjhDRjdD N0M3NDcyOTIwHhcNMjUxMDExMDkxNTQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVhMjA0My05Y2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRN3cG6wGISK1m65N1dZeYudWwaPTMKg8s6AJO6CDhRU8PTMSgLOL+xbUOwp mTJRukEgmzOYsZV0l+oi7Xe+Sm9v1MM6Ka9xycPATh6j7HO0D3iKwgy2YEqxfyXf 3/8qVQ5fqkeqaMSrK4NaUrjgqqfeb6oOtNBq8ywEhKOFIK0FowmRHGmFoW4vt3gC W3c6lK2vTI//06ZEIgNa46ZENPocDuiv1h4Ktz4BptgG/nZpymnoeHF9TmNHREhf 7nqpu8ZVj7a4fCU8n/hd7TLOQcARd5PWzW3qGpYN8+odgqNuX3a4bMWB3gsNyZDr lJM+iAKM4yVf5AHwTUwtskR6QQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGhta19k 7QrymXMU3iUCvxDtgNL9MB8GA1UdIwQYMBaAFBPHLfHFHiyiEcpXZlFoz3x8dHKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjczQy9DQkQ2MjExQ0Y2 NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxLSVJ5bGRtVVdqUGZIeDBj cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4Y3Q4Y1VlTEtJUnlsZG1VV2pQZkh4MGNwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI3M0MvQ0JENjIxMUNGNjQ4MTFFRUE0QTZGRTBFQzRGOUFFMDIvN0QyMTExNDhG NjQ5MTFFRUJFMzZCODI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnYkwwDwQCAAIwCQMHACABDfOpQDANBgkqhkiG9w0BAQsF AAOCAQEAmbPTf/luJ8/tApWRD/CFZmFnTJC/AbQy65Qkah1Y2FKuSGGvFGEa90C9 YPy/Ef9//qO7FSYO2WMbL3cPjAG76pcXNOo5LIr9pL7l6igDGSfbFco+k8bOPkr5 SHHx3yu+yBU3O3z+2oqcN99+ZnU1hjaXNk2ZrL9lgt7AaiOxQ8/5iUnHY7Q9wsNA xOiA1S98GvVGnpyg3TBFhcbUNn3TQCvnjA2UHI8KiQ9Nyz5+BCsSErE9j6dECyar pEI9UdiDwtSnWSjduZrCmGRucbddkr1/5uY5iZh5+sAueGiXTgpe5irBMCbB8ft5 uzemEXsSlKjcbYOqgxnTtc4BUil5tA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:40:55 2025 by rpki-client