$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/CC70CB68724B11EDA156B97BC4F9AE02.roa File: CC70CB68724B11EDA156B97BC4F9AE02.roa (raw, json) Hash identifier: LBGA7uPNm5y2jKoMvMcCypIR4652t0Rg8FNArTxs7js= Subject key identifier: DC:56:F8:EC:3D:9B:6F:FB:BB:81:D0:C9:6D:E6:B4:75:35:84:9D:35 Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 021D Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/CC70CB68724B11EDA156B97BC4F9AE02.roa Signing time: Thu 09 Oct 2025 02:29:16 +0000 ROA not before: Thu 09 Oct 2025 02:29:16 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150347 IP address blocks: 103.68.139.0/24 maxlen: 24 2400:b4a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: Oct 9 02:29:16 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e71dfc-912f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:40:63:45:36:e6:68:2d:b6:a4:60:96:d7: 0a:f0:cb:e6:5f:c0:e0:c8:97:a7:85:d4:ef:42:90: f9:69:51:90:35:d7:48:d9:2b:d6:73:ad:f3:52:8e: 1d:67:a8:9c:4b:ad:44:16:6d:67:fa:7d:2d:04:c7: bb:b3:74:a5:68:fd:7c:86:eb:b5:5b:32:b5:4b:a3: f7:a8:91:2a:aa:fb:b3:f3:dd:24:67:ee:37:73:a2: aa:4d:55:5c:9a:b6:33:c4:b2:58:8c:da:a9:75:3f: 5c:71:e1:87:d2:68:35:88:9d:34:b3:dd:70:d5:55: cb:1a:e9:3d:d6:39:2b:8a:25:a3:ab:59:07:0f:0a: 52:f7:c8:9c:89:3e:9e:02:7a:bc:1c:77:74:09:46: 47:cd:0a:22:b5:f3:d2:05:83:1b:2d:fb:5e:18:e1: 13:8f:86:55:18:fa:84:64:f8:55:86:ab:fd:1e:d5: 84:c2:66:25:94:41:a7:f8:e9:96:e9:2e:f0:99:41: a8:31:e4:14:e8:c8:7c:4c:67:da:87:3e:cb:38:71: b6:2b:61:d1:92:89:92:b7:e4:ac:1c:c2:60:da:2b: 9c:1f:ee:86:8d:cb:7a:3c:99:26:1f:1d:fb:f4:b5: f7:cf:0c:c3:0c:15:92:4d:2a:28:ab:c0:e3:9b:68: 66:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:56:F8:EC:3D:9B:6F:FB:BB:81:D0:C9:6D:E6:B4:75:35:84:9D:35 X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/CC70CB68724B11EDA156B97BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.139.0/24 IPv6: 2400:b4a0::/32 Signature Algorithm: sha256WithRSAEncryption 56:88:3c:d1:02:8d:94:63:11:99:86:6a:f6:33:d6:5b:37:fe: b3:0f:c0:13:10:96:b0:4f:02:8f:91:8e:88:ab:3b:37:f4:da: 67:c8:fb:f9:09:c4:72:bd:c9:ef:dd:d7:0c:c3:18:88:48:8e: 0b:b7:01:ff:49:df:7f:5f:4c:89:25:fe:1c:df:ac:b5:0d:cb: 9b:e1:1a:54:a3:09:18:99:f9:f0:20:61:e2:03:cb:36:04:44: dd:af:40:f9:c2:df:98:d7:46:57:eb:44:7c:1a:9d:30:a7:b6: 69:0a:01:f5:0b:37:9b:35:03:3a:6b:db:84:98:a3:03:55:5a: 8e:fe:9c:8d:a5:0e:7c:e0:be:95:59:d5:9d:12:dc:03:d1:9a: cb:e7:1d:e8:d3:50:76:7e:94:b4:92:94:16:d9:76:87:dc:6d: eb:2a:4e:b0:3d:5c:10:40:4c:20:d3:c6:13:dc:30:58:ca:e9: 46:20:e9:e2:95:88:79:74:17:03:3a:a7:44:c6:b2:fd:ce:cd: 9b:5e:24:9c:37:bd:91:ce:be:56:28:2c:48:6f:00:87:f3:d6: 7b:69:18:c3:e7:9c:27:de:51:ec:0d:e7:91:02:79:6c:a0:9c: c1:c0:88:cc:87:b3:02:e5:90:83:86:06:49:d5:80:12:4b:c8: 87:d5:a4:86 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjUxMDA5MDIyOTE2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU3MWRmYy05MTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul5AY0U25mgttqRgltcK8MvmX8DgyJenhdTvQpD5aVGQNddI2SvWc63zUo4d Z6icS61EFm1n+n0tBMe7s3SlaP18huu1WzK1S6P3qJEqqvuz890kZ+43c6KqTVVc mrYzxLJYjNqpdT9cceGH0mg1iJ00s91w1VXLGuk91jkriiWjq1kHDwpS98iciT6e Anq8HHd0CUZHzQoitfPSBYMbLfteGOETj4ZVGPqEZPhVhqv9HtWEwmYllEGn+OmW 6S7wmUGoMeQU6Mh8TGfahz7LOHG2K2HRkomSt+SsHMJg2iucH+6Gjct6PJkmHx37 9LX3zwzDDBWSTSooq8Djm2hmTwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNxW+Ow9 m2/7u4HQyW3mtHU1hJ01MB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUNGRjUvM0ZFNUNBOEU3MjQ4MTFFRDlCQzJCQTc2QzRGOUFFMDIvQ0M3MENCNjg3 MjRCMTFFREExNTZCOTdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnRIswDQQCAAIwBwMFACQAtKAwDQYJKoZIhvcNAQELBQAD ggEBAFaIPNECjZRjEZmGavYz1ls3/rMPwBMQlrBPAo+RjoirOzf02mfI+/kJxHK9 ye/d1wzDGIhIjgu3Af9J339fTIkl/hzfrLUNy5vhGlSjCRiZ+fAgYeIDyzYERN2v QPnC35jXRlfrRHwanTCntmkKAfULN5s1Azpr24SYowNVWo7+nI2lDnzgvpVZ1Z0S 3APRmsvnHejTUHZ+lLSSlBbZdofcbesqTrA9XBBATCDTxhPcMFjK6UYg6eKViHl0 FwM6p0TGsv3OzZteJJw3vZHOvlYoLEhvAIfz1ntpGMPnnCfeUewN55ECeWygnMHA iMyHswLlkIOGBknVgBJLyIfVpIY= -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:10 2025 by rpki-client