$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/08B3B40EB14311E58FF2C717C4F9AE02.roa File: 08B3B40EB14311E58FF2C717C4F9AE02.roa (raw, json) Hash identifier: Qmsz/kc6vCM5AVnwbPEOkvoDKpojajE1SGhMXZiiAis= Subject key identifier: FF:99:45:9C:CB:79:01:B2:6B:0B:CE:DE:21:25:4A:51:95:E0:52:4E Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 25B9 Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/08B3B40EB14311E58FF2C717C4F9AE02.roa Signing time: Sat 26 Jul 2025 15:53:14 +0000 ROA not before: Sat 26 Jul 2025 15:53:14 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133623 IP address blocks: 103.36.16.0/22 maxlen: 22 103.36.16.0/24 maxlen: 24 103.36.17.0/24 maxlen: 24 103.36.18.0/24 maxlen: 24 103.36.19.0/24 maxlen: 24 103.252.32.0/22 maxlen: 22 103.252.32.0/24 maxlen: 24 103.252.33.0/24 maxlen: 24 103.252.34.0/24 maxlen: 24 103.252.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9657 (0x25b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: Jul 26 15:53:14 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884f9ea-eb19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:75:60:73:52:3f:17:59:93:d9:db:de:9d: b8:09:b9:a5:9f:e3:52:e7:bd:3b:fa:8e:e3:af:ac: ef:c6:25:ec:5c:73:87:ae:e0:b3:64:d4:69:cf:0e: dd:41:16:2c:38:65:3a:b0:04:0e:45:d9:c9:33:56: 57:30:47:35:b3:ac:38:e7:e4:25:76:57:5e:3f:29: b1:d7:dc:ba:a6:a5:6b:30:dd:cf:9b:d8:9b:ab:0e: f7:fb:88:f4:7a:80:20:a0:1c:e5:dc:6d:f1:2b:46: c4:8b:b8:ac:ea:55:fd:e6:20:cd:43:8f:66:fe:c0: 78:2a:5d:1b:16:cf:80:03:d0:66:78:5e:39:7d:92: e0:5f:8b:eb:55:0b:d8:c1:74:b8:dd:df:49:70:f1: 60:8a:2d:47:80:96:2e:6e:05:d8:1c:dd:86:6a:fd: 46:78:c5:39:27:7f:cc:0b:a4:0e:7c:47:6c:c4:fa: 48:0b:ea:47:8d:b6:a3:17:33:78:40:6f:6c:41:bd: 57:94:15:68:9c:24:c2:bd:f2:c6:69:98:5f:ad:3d: a4:9c:dc:8b:b5:2f:74:2a:bf:c8:7f:12:b0:e4:7f: b5:e3:55:fc:5d:8f:1f:5e:91:4d:f4:7a:02:d1:40: 91:e3:59:22:4e:67:a9:c5:82:46:27:fe:db:70:5b: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:99:45:9C:CB:79:01:B2:6B:0B:CE:DE:21:25:4A:51:95:E0:52:4E X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/08B3B40EB14311E58FF2C717C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.36.16.0/22 103.252.32.0/22 Signature Algorithm: sha256WithRSAEncryption b5:42:0a:ad:9c:29:b3:00:f6:b9:dc:12:95:5a:8e:9e:0e:07: 7a:75:1d:e5:e0:e7:cf:3b:aa:e7:26:ef:5c:5c:28:ec:38:d7: ee:1f:b9:3c:78:a5:88:ac:a5:39:91:20:dd:62:6b:9e:0e:1a: 3c:c3:11:2c:ea:ea:51:17:d1:9a:a8:9e:7b:09:59:be:65:b2: d9:8a:18:1b:46:e5:57:76:89:e1:6a:19:b1:8f:18:d6:9f:ae: a7:7f:3e:21:bd:51:5f:53:94:93:07:f0:57:ed:61:b5:e1:01: 0d:02:d5:b8:47:c8:60:85:a7:6c:71:18:eb:02:50:ff:f9:1d: 41:43:81:96:da:7d:77:b2:b2:17:ac:26:c1:4f:36:2c:1d:b9: 01:40:65:42:c8:bd:b8:82:94:d9:8b:c7:1d:ad:3c:de:ae:fe: d8:ce:9c:70:a8:17:76:0a:c6:4c:28:37:15:87:93:e5:ff:0f: a6:de:38:61:92:90:1d:37:d2:24:46:9a:d6:b9:05:56:6f:9d: 91:8f:56:d9:a9:da:3b:c6:0a:0e:e9:e0:11:a1:85:52:23:04: 55:54:da:c5:0a:1d:a5:be:8d:16:4b:d4:4a:f1:93:31:d0:4e: 2d:32:5a:28:28:52:a3:76:c9:c8:a3:b9:30:37:76:e4:7f:8c: 31:74:0e:cb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjUwNzI2MTU1MzE0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZjllYS1lYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqg11YHNSPxdZk9nb3p24Cbmln+NS5707+o7jr6zvxiXsXHOHruCzZNRpzw7d QRYsOGU6sAQORdnJM1ZXMEc1s6w45+QldldePymx19y6pqVrMN3Pm9ibqw73+4j0 eoAgoBzl3G3xK0bEi7is6lX95iDNQ49m/sB4Kl0bFs+AA9BmeF45fZLgX4vrVQvY wXS43d9JcPFgii1HgJYubgXYHN2Gav1GeMU5J3/MC6QOfEdsxPpIC+pHjbajFzN4 QG9sQb1XlBVonCTCvfLGaZhfrT2knNyLtS90Kr/IfxKw5H+141X8XY8fXpFN9HoC 0UCR41kiTmepxYJGJ/7bcFvDdQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP+ZRZzL eQGyawvO3iElSlGV4FJOMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkxOEUvOTU1MDczODQxMzMyMTFFNTlCQzBEMzc5QzRGOUFFMDIvMDhCM0I0MEVC MTQzMTFFNThGRjJDNzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnJBADBAJn/CAwDQYJKoZIhvcNAQELBQADggEBALVCCq2c KbMA9rncEpVajp4OB3p1HeXg5887qucm71xcKOw41+4fuTx4pYispTmRIN1ia54O GjzDESzq6lEX0ZqonnsJWb5lstmKGBtG5Vd2ieFqGbGPGNafrqd/PiG9UV9TlJMH 8FftYbXhAQ0C1bhHyGCFp2xxGOsCUP/5HUFDgZbafXeyshesJsFPNiwduQFAZULI vbiClNmLxx2tPN6u/tjOnHCoF3YKxkwoNxWHk+X/D6beOGGSkB030iRGmta5BVZv nZGPVtmp2jvGCg7p4BGhhVIjBFVU2sUKHaW+jRZL1ErxkzHQTi0yWigoUqN2ycij uTA3duR/jDF0Dss= -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:49 2025 by rpki-client