$ rpki-client -vvf rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/F126F04A11A911EBB5A4DD83C4F9AE02.roa File: F126F04A11A911EBB5A4DD83C4F9AE02.roa (raw, json) Hash identifier: 7u9lFldLGtHyxwH20hTfSxqKwvd+3v0Fn/UDNDaczHk= Subject key identifier: A5:8A:4F:77:D1:BC:7C:51:1B:BC:FE:96:3B:F4:40:9D:25:E4:48:AE Certificate issuer: /CN=A917DA4A/serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0 Certificate serial: 07B8 Authority key identifier: 08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/F126F04A11A911EBB5A4DD83C4F9AE02.roa Signing time: Mon 18 Aug 2025 22:02:51 +0000 ROA not before: Mon 18 Aug 2025 22:02:51 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131188 IP address blocks: 103.1.12.0/24 maxlen: 24 103.1.13.0/24 maxlen: 24 103.1.14.0/24 maxlen: 24 103.1.15.0/24 maxlen: 24 111.91.236.0/24 maxlen: 24 111.91.237.0/24 maxlen: 24 111.91.238.0/24 maxlen: 24 111.91.239.0/24 maxlen: 24 2403:4900:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1976 (0x7b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DA4A, serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0 Validity Not Before: Aug 18 22:02:51 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a3a30b-3aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:ad:39:39:c6:0c:94:5f:12:28:cb:70:51: ab:27:a4:50:a6:33:d5:25:f1:fe:88:6f:89:ed:ae: fd:b6:77:83:d5:aa:cc:f1:1a:14:60:e6:04:06:c5: b7:2d:7f:9d:e1:41:37:18:ba:21:d6:df:a4:92:63: c0:5c:49:96:80:31:ab:4b:b9:2e:ed:96:8c:75:3b: 15:5e:41:74:c8:b5:6f:32:b4:4e:2d:6a:8e:30:b0: db:b2:77:e4:77:57:0b:40:e9:ff:46:79:c4:fd:93: 8f:9b:1e:9c:4a:3c:55:ef:fe:38:59:71:f9:47:6e: b0:1b:ee:2b:57:95:98:d9:54:db:aa:d3:70:e3:ce: 8e:06:c2:6e:79:25:a6:b7:3a:b8:95:50:a2:4c:74: 33:fe:8b:b1:6f:8e:f6:b5:06:ae:ea:59:04:3d:bd: b4:d1:e9:6d:ae:d1:44:b6:4d:93:75:5f:92:54:e6: 44:c9:9f:50:14:e4:2c:49:74:97:33:b1:12:16:0e: 49:ad:08:19:aa:5b:9b:9c:67:19:f5:98:4b:5c:5e: b8:e8:5e:72:10:5c:a1:c3:c0:23:f6:55:17:fc:e7: 80:c7:73:13:e7:e9:fe:8e:e6:97:73:ec:25:5e:14: cd:63:b6:c9:7b:07:1c:b8:ec:1f:42:ca:8f:65:40: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8A:4F:77:D1:BC:7C:51:1B:BC:FE:96:3B:F4:40:9D:25:E4:48:AE X509v3 Authority Key Identifier: keyid:08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/F126F04A11A911EBB5A4DD83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.12.0/22 111.91.236.0/22 IPv6: 2403:4900:1::/48 Signature Algorithm: sha256WithRSAEncryption 69:fd:11:21:89:f1:e2:03:c8:6f:2e:bb:13:69:e1:33:6a:4d: 20:c1:02:2e:00:1c:93:33:8c:38:7a:20:0b:98:16:8e:ac:5b: 49:ca:ac:8e:cf:b3:91:ef:da:18:d5:ba:01:9d:5e:c0:82:fc: 4d:23:32:54:29:81:a9:25:02:a5:c6:d9:65:04:a7:40:44:84: 2c:ad:2d:1f:ef:27:28:98:45:25:53:df:29:e9:94:d0:12:e2: b0:7b:06:9b:4d:02:9f:5d:7e:20:cc:39:85:56:d5:b6:43:99: 12:c0:1e:d3:b8:51:13:06:7d:8e:16:0e:74:4d:41:c7:4d:f3: ea:ab:bf:6e:18:43:35:ff:57:d3:de:f0:14:ac:20:7c:f4:11: a4:95:92:9d:3c:76:07:c3:37:ef:8d:0f:c3:d9:c9:13:0b:47: 08:10:b1:7f:00:9e:39:81:b2:d7:73:98:34:5d:27:0b:35:8b: 5d:52:3b:e8:a8:ea:e3:24:26:60:9a:95:0a:ba:88:a3:08:7d: 40:47:90:ce:24:17:27:8f:72:92:bc:b9:99:dc:38:4f:6e:8f: 5c:eb:05:c6:00:68:e4:ed:af:f0:b6:06:72:eb:99:2e:c8:4c: 59:0c:89:23:4b:b9:ca:4e:97:9c:9a:ed:26:c8:b4:8b:b9:99: 4c:0e:d4:0e -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RBNEExMTAvBgNVBAUTKDA4ODY5MUYxRjc4QkQ5Q0VGRUQ4MEQzNkQ2NTBENjc3 NjdBNkJEQjAwHhcNMjUwODE4MjIwMjUxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzYTMwYi0zYWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cytOTnGDJRfEijLcFGrJ6RQpjPVJfH+iG+J7a79tneD1arM8RoUYOYEBsW3 LX+d4UE3GLoh1t+kkmPAXEmWgDGrS7ku7ZaMdTsVXkF0yLVvMrROLWqOMLDbsnfk d1cLQOn/RnnE/ZOPmx6cSjxV7/44WXH5R26wG+4rV5WY2VTbqtNw486OBsJueSWm tzq4lVCiTHQz/ouxb472tQau6lkEPb200eltrtFEtk2TdV+SVOZEyZ9QFOQsSXSX M7ESFg5JrQgZqlubnGcZ9ZhLXF646F5yEFyhw8Aj9lUX/OeAx3MT5+n+juaXc+wl XhTNY7bJewccuOwfQsqPZUAmDwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFKWKT3fR vHxRG7z+ljv0QJ0l5EiuMB8GA1UdIwQYMBaAFAiGkfH3i9nO/tgNNtZQ1ndnpr2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REE0QS8wNTFEQUY1QTBE QzUxMUVCOUM2QkJEMUNDNEY5QUUwMi9DSWFSOGZlTDJjNy0yQTAyMWxEV2QyZW12 YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NJYVI4ZmVMMmM3LTJBMDIxbERXZDJlbXZiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0RBNEEvMDUxREFGNUEwREM1MTFFQjlDNkJCRDFDQzRGOUFFMDIvRjEyNkYwNEEx MUE5MTFFQkI1QTRERDgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJnAQwDBAJvW+wwDwQCAAIwCQMHACQDSQAAATANBgkqhkiG 9w0BAQsFAAOCAQEAaf0RIYnx4gPIby67E2nhM2pNIMECLgAckzOMOHogC5gWjqxb Scqsjs+zke/aGNW6AZ1ewIL8TSMyVCmBqSUCpcbZZQSnQESELK0tH+8nKJhFJVPf KemU0BLisHsGm00Cn11+IMw5hVbVtkOZEsAe07hREwZ9jhYOdE1Bx03z6qu/bhhD Nf9X097wFKwgfPQRpJWSnTx2B8M3740Pw9nJEwtHCBCxfwCeOYGy13OYNF0nCzWL XVI76Kjq4yQmYJqVCrqIowh9QEeQziQXJ49ykry5mdw4T26PXOsFxgBo5O2v8LYG cuuZLshMWQyJI0u5yk6XnJrtJsi0i7mZTA7UDg== -----END CERTIFICATE-----Generated at Sat Aug 23 18:52:26 2025 by rpki-client