$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/700C6B5CB26C11F090EFFC69C4F9AE02.roa File: 700C6B5CB26C11F090EFFC69C4F9AE02.roa (raw, json) Hash identifier: JvuZWhBPO64mUK65lgsciVa96c1rAJu0pjA+AFyIAC8= Subject key identifier: 43:9F:9D:4A:6A:98:24:F0:07:3B:04:65:AD:EE:F5:4A:E1:CB:D6:31 Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A Certificate serial: 05D9 Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/700C6B5CB26C11F090EFFC69C4F9AE02.roa Signing time: Sun 26 Oct 2025 13:05:26 +0000 ROA not before: Sun 26 Oct 2025 13:05:26 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137550 IP address blocks: 103.112.236.0/24 maxlen: 24 103.112.238.0/24 maxlen: 24 103.112.239.0/24 maxlen: 24 2406:d1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1497 (0x5d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A Validity Not Before: Oct 26 13:05:26 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68fe1c95-3d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:c3:35:03:00:ea:3c:e5:06:e1:cc:48:30: 01:c6:19:32:33:3b:a6:c0:51:00:85:86:b8:b0:e9: 1d:88:7d:9d:26:b2:6a:aa:ea:26:8e:66:28:df:72: d9:c9:bc:0d:2d:95:db:6c:f5:a3:34:c6:1d:dc:41: 6d:11:75:3d:dd:61:b1:93:b7:fe:30:1a:9e:4d:ea: 08:74:42:67:b4:06:53:42:73:01:aa:46:fe:bd:c4: a4:1b:35:0e:b5:58:94:2c:45:d4:95:98:62:e1:2e: 11:51:10:0b:50:15:19:ae:1d:1c:7d:57:d1:0b:d5: 76:a9:81:c1:00:d5:a6:01:d9:18:05:d5:18:9f:24: a7:59:03:ff:d3:b8:eb:c3:9f:b6:73:b4:64:4a:68: 5b:ae:95:aa:d1:9b:c1:6f:00:95:9f:78:c7:8f:43: 1c:69:cd:52:03:9b:d1:a2:21:e3:3f:0b:b3:c2:49: 57:c7:18:10:d9:e6:4b:6d:7e:aa:fc:c9:ae:98:0e: 39:e1:aa:ea:a0:dd:21:4f:98:d4:6a:9b:69:c5:39: a5:e9:01:05:80:c5:25:82:ea:f5:f4:6f:b9:26:13: e2:9e:9f:cc:2c:72:7c:cb:65:18:1a:e0:32:01:59: c4:f5:38:30:b0:fe:95:89:aa:74:eb:1d:fd:22:9a: c4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9F:9D:4A:6A:98:24:F0:07:3B:04:65:AD:EE:F5:4A:E1:CB:D6:31 X509v3 Authority Key Identifier: keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/700C6B5CB26C11F090EFFC69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.236.0/24 103.112.238.0/23 IPv6: 2406:d1c0::/32 Signature Algorithm: sha256WithRSAEncryption 1d:fa:19:d0:e7:7f:73:23:77:98:e0:91:24:7f:f1:77:3b:42: 83:9e:bd:fa:8a:81:a4:29:30:16:b9:66:f9:1c:cd:14:9d:24: 56:b2:df:b3:7e:6d:7c:e2:69:bd:50:dc:fc:0b:56:a1:37:db: fa:86:6d:69:7b:d7:ab:80:e1:df:47:30:82:31:29:1b:dd:6a: b1:34:4f:1b:20:36:5f:ce:88:1b:75:2a:b3:a1:b4:04:47:53: 98:0b:0e:f6:59:3d:c4:5f:67:6e:53:88:7b:ac:83:a5:e0:67: 4f:2d:80:65:ff:31:80:0c:90:27:70:0f:8d:5a:e4:d5:40:db: a4:a3:0c:50:06:48:65:0a:0f:3c:55:85:d0:3e:9b:cc:8a:4e: 02:e2:6c:71:c0:04:77:e7:92:0a:74:c8:af:e6:95:15:b4:32: ff:5d:98:41:93:8f:80:aa:f7:13:3c:c7:6a:0b:56:96:76:c5: 84:57:3e:58:2a:9d:40:ef:fa:d7:10:ba:38:4f:ed:e9:cc:5a: b7:e5:dd:f8:cd:43:42:9e:60:69:a7:51:34:99:dc:3f:0a:c2: a4:d6:c8:f9:aa:d6:95:46:0c:24:84:3a:b0:3f:0e:69:f3:46: a0:88:06:89:d7:62:5e:21:24:92:47:0e:ce:2b:6c:06:f0:d4: 45:c5:c5:66 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQxOEQxMTAvBgNVBAUTKDBFMDNEM0MyRThGMkM1MzU4MkJFRDFDMjE0QzFGRDNB QUVBNUFFNUEwHhcNMjUxMDI2MTMwNTI2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGZlMWM5NS0zZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuG7DNQMA6jzlBuHMSDABxhkyMzumwFEAhYa4sOkdiH2dJrJqquomjmYo33LZ ybwNLZXbbPWjNMYd3EFtEXU93WGxk7f+MBqeTeoIdEJntAZTQnMBqkb+vcSkGzUO tViULEXUlZhi4S4RURALUBUZrh0cfVfRC9V2qYHBANWmAdkYBdUYnySnWQP/07jr w5+2c7RkSmhbrpWq0ZvBbwCVn3jHj0Mcac1SA5vRoiHjPwuzwklXxxgQ2eZLbX6q /MmumA454arqoN0hT5jUaptpxTml6QEFgMUlgur19G+5JhPinp/MLHJ8y2UYGuAy AVnE9TgwsP6Viap06x39IprEHwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFEOfnUpq mCTwBzsEZa3u9Urhy9YxMB8GA1UdIwQYMBaAFA4D08Lo8sU1gr7RwhTB/Tqupa5a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDE4RC9BM0Y2QUNBRUUw NzMxMUVCOEVGMkJBNzNDNEY5QUUwMi9EZ1BUd3VqeXhUV0N2dEhDRk1IOU9xNmxy bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RnUFR3dWp5eFRXQ3Z0SENGTUg5T3E2bHJsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQxOEQvQTNGNkFDQUVFMDczMTFFQjhFRjJCQTczQzRGOUFFMDIvNzAwQzZCNUNC MjZDMTFGMDkwRUZGQzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABncOwDBAFncO4wDQQCAAIwBwMFACQG0cAwDQYJKoZIhvcN AQELBQADggEBAB36GdDnf3Mjd5jgkSR/8Xc7QoOevfqKgaQpMBa5ZvkczRSdJFay 37N+bXziab1Q3PwLVqE32/qGbWl716uA4d9HMIIxKRvdarE0TxsgNl/OiBt1KrOh tARHU5gLDvZZPcRfZ25TiHusg6XgZ08tgGX/MYAMkCdwD41a5NVA26SjDFAGSGUK DzxVhdA+m8yKTgLibHHABHfnkgp0yK/mlRW0Mv9dmEGTj4Cq9xM8x2oLVpZ2xYRX PlgqnUDv+tcQujhP7enMWrfl3fjNQ0KeYGmnUTSZ3D8KwqTWyPmq1pVGDCSEOrA/ DmnzRqCIBonXYl4hJJJHDs4rbAbw1EXFxWY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:01:58 2025 by rpki-client