$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/38E02CDC04EE11EE89900876C4F9AE02.roa File: 38E02CDC04EE11EE89900876C4F9AE02.roa (raw, json) Hash identifier: +0GRxYO2GKHW0qvFUQkbtc7koZkiCwiB0U5TojZcsvM= Subject key identifier: 96:AD:D8:20:54:77:FF:2D:16:F1:70:33:55:DB:06:45:72:1D:A5:86 Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Certificate serial: 024B Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/38E02CDC04EE11EE89900876C4F9AE02.roa Signing time: Fri 31 Oct 2025 02:16:26 +0000 ROA not before: Fri 31 Oct 2025 02:16:26 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 55850 IP address blocks: 103.172.232.0/24 maxlen: 24 103.172.233.0/24 maxlen: 24 223.165.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Validity Not Before: Oct 31 02:16:26 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69041bfa-4075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:19:e0:b9:8d:98:55:f8:20:b2:4e:2d:aa: 74:96:e6:7b:4a:79:80:22:51:75:7d:30:39:c6:8c: 20:05:af:a7:cd:16:f9:4f:73:62:aa:2e:4a:c2:28: cf:76:3b:4e:cb:d2:c3:8f:6f:c1:e1:7f:e4:10:4a: 16:1d:a3:f4:49:54:b5:76:d5:0c:19:d0:df:03:b7: 62:22:bc:f5:82:88:06:e4:cd:a7:97:11:5a:76:1c: 8f:a3:6e:d5:44:bf:08:ea:d1:df:81:2b:f0:89:e5: 9e:85:25:5b:2b:35:4e:5a:04:c9:8e:3c:97:06:25: 32:b5:ca:6b:20:25:9a:2c:85:6c:4e:97:28:3d:a9: 70:47:27:64:4d:3f:4e:9c:6e:c5:08:20:00:06:af: 76:44:05:a6:6f:dc:d3:ce:f0:ab:dc:fd:c5:45:23: 5c:ac:22:b9:e7:88:80:97:73:5f:34:11:99:f4:06: 8b:ad:7b:91:c9:74:df:c5:66:f3:46:1b:71:49:64: 3f:ed:fa:4c:63:23:06:89:8a:2d:4e:7b:bb:1e:fe: 1a:e9:44:cb:c5:ae:b9:44:9e:a4:e3:36:ce:6b:85: 7e:68:1d:85:da:aa:05:f7:8e:63:84:ab:5b:ed:0b: e1:e0:4f:b1:4b:c3:9e:a1:69:82:62:f1:f0:a0:f3: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AD:D8:20:54:77:FF:2D:16:F1:70:33:55:DB:06:45:72:1D:A5:86 X509v3 Authority Key Identifier: keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/38E02CDC04EE11EE89900876C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.232.0/23 223.165.16.0/24 Signature Algorithm: sha256WithRSAEncryption 57:f5:65:37:ae:be:9a:ff:c3:b0:22:23:4f:41:43:5b:dc:68: fb:55:d3:26:e2:a7:4f:7d:ad:94:72:03:c3:53:68:1f:d7:0b: 82:c9:7d:93:5a:86:f2:42:db:aa:08:45:2e:74:23:70:7b:2f: f1:03:9f:34:66:3d:47:5c:14:5a:07:cc:2e:e3:81:d0:1c:ab: 16:bf:2a:1d:51:66:4b:bc:eb:3e:2d:dc:3f:b6:25:77:6c:c8: 92:bb:bd:d8:43:f1:7e:9b:aa:fe:f9:d8:c1:50:3c:9d:6b:db: 1d:92:8d:b7:de:d0:bd:73:d6:55:f6:67:a2:2e:6f:37:c3:d5: bf:af:c8:28:4e:6e:ef:4d:c2:56:5d:aa:df:01:3c:41:a0:53: 79:6e:0b:d2:6d:82:51:ef:11:78:5e:ad:f9:cb:6c:a4:a2:70: 9b:8d:23:bc:84:81:49:91:ae:6e:4a:31:d6:74:19:37:bf:26: b1:72:e4:65:08:b6:71:21:a1:2d:0d:72:89:7c:52:13:76:41: 9f:f4:d0:df:87:aa:1b:1d:46:d6:2a:08:af:e4:03:9f:7c:eb: c6:6b:d4:73:2a:16:66:b8:44:6f:09:be:61:5c:82:5a:d2:61: 20:1d:d6:86:a2:34:3e:a6:31:ac:f9:d6:29:15:30:e9:70:61: d4:cf:ea:e4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4NUMxMTAvBgNVBAUTKEFDOTEyQ0VGQTc1OEExMTk5QzFCRURFMDZCMTRBOUVB Mzk4OTc1RjcwHhcNMjUxMDMxMDIxNjI2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0MWJmYS00MDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhkZ4LmNmFX4ILJOLap0luZ7SnmAIlF1fTA5xowgBa+nzRb5T3Niqi5KwijP djtOy9LDj2/B4X/kEEoWHaP0SVS1dtUMGdDfA7diIrz1gogG5M2nlxFadhyPo27V RL8I6tHfgSvwieWehSVbKzVOWgTJjjyXBiUytcprICWaLIVsTpcoPalwRydkTT9O nG7FCCAABq92RAWmb9zTzvCr3P3FRSNcrCK554iAl3NfNBGZ9AaLrXuRyXTfxWbz RhtxSWQ/7fpMYyMGiYotTnu7Hv4a6UTLxa65RJ6k4zbOa4V+aB2F2qoF945jhKtb 7Qvh4E+xS8OeoWmCYvHwoPOLoQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJat2CBU d/8tFvFwM1XbBkVyHaWGMB8GA1UdIwQYMBaAFKyRLO+nWKEZnBvt4GsUqeo5iXX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjg1Qy8wQTY4QjExODYw OEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9SbWNHLTNnYXhTcDZqbUpk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKRXM3NmRZb1JtY0ctM2dheFNwNmptSmRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI4NUMvMEE2OEIxMTg2MDhEMTFFREFGMkM2NTY3QzRGOUFFMDIvMzhFMDJDREMw NEVFMTFFRTg5OTAwODc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnrOgDBADfpRAwDQYJKoZIhvcNAQELBQADggEBAFf1ZTeu vpr/w7AiI09BQ1vcaPtV0ybip099rZRyA8NTaB/XC4LJfZNahvJC26oIRS50I3B7 L/EDnzRmPUdcFFoHzC7jgdAcqxa/Kh1RZku86z4t3D+2JXdsyJK7vdhD8X6bqv75 2MFQPJ1r2x2Sjbfe0L1z1lX2Z6IubzfD1b+vyChObu9NwlZdqt8BPEGgU3luC9Jt glHvEXherfnLbKSicJuNI7yEgUmRrm5KMdZ0GTe/JrFy5GUItnEhoS0Ncol8UhN2 QZ/00N+HqhsdRtYqCK/kA59868Zr1HMqFma4RG8JvmFcglrSYSAd1oaiND6mMaz5 1ikVMOlwYdTP6uQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:48:23 2025 by rpki-client