$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/2D450BA8B58211F094C92178C4F9AE02.roa File: 2D450BA8B58211F094C92178C4F9AE02.roa (raw, json) Hash identifier: iIj9yJVCt0RNLEHDnqyR+A4ssEqyV6ayKCnQGatPpAI= Subject key identifier: AE:A8:D4:11:16:D2:79:54:56:E8:3F:46:19:CF:32:47:64:A5:C4:75 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 01EE Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/2D450BA8B58211F094C92178C4F9AE02.roa Signing time: Thu 30 Oct 2025 11:18:36 +0000 ROA not before: Thu 30 Oct 2025 11:18:36 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 401783 IP address blocks: 103.120.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Oct 30 11:18:36 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6903498c-b0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:33:48:33:af:03:c8:71:50:50:09:65:23: 41:33:bd:a7:8c:31:31:7d:0d:b0:2e:c6:9f:84:e9: 51:37:03:87:61:2b:10:4d:eb:04:d9:b7:5d:04:12: e1:5b:3c:7c:8b:7e:2a:ee:3b:1e:18:a7:58:f5:5f: 0a:8b:fe:84:30:d1:4e:9f:16:c1:b0:79:35:8f:33: c6:95:7a:bb:42:e3:cb:66:05:8b:65:3c:a5:28:21: 9f:8c:50:e5:f3:42:cc:e9:9b:be:36:f1:c1:cb:36: 6f:20:60:08:39:b9:dc:8e:75:30:a6:5f:78:19:ed: a9:35:44:6f:f3:84:0d:46:b3:94:e7:35:9f:49:7c: a2:e9:62:49:cd:f6:9d:59:96:29:67:ea:94:b9:dd: b3:e6:9a:ff:48:12:97:99:44:62:a7:66:53:26:a8: b1:25:53:99:01:87:ba:c9:4d:8f:18:ac:4d:bf:7a: aa:12:db:c7:cd:60:93:c9:32:da:ca:93:f7:b9:14: c7:bb:06:bc:ab:55:5e:32:e2:24:14:d8:5d:28:84: d8:d1:d9:da:93:09:a9:03:20:0d:c4:0e:31:dd:c3: 44:e7:77:7b:ed:4c:b0:ac:3a:53:04:ee:e7:28:8a: 02:f1:37:8e:bf:e2:e8:bb:13:7d:7d:9d:ba:57:f3: aa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A8:D4:11:16:D2:79:54:56:E8:3F:46:19:CF:32:47:64:A5:C4:75 X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/2D450BA8B58211F094C92178C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.13.0/24 Signature Algorithm: sha256WithRSAEncryption 68:0b:f2:87:3a:5b:9f:8b:6d:5e:c5:44:76:57:ef:1b:5e:de: d0:c6:0c:89:79:00:66:2d:f5:ef:19:e5:4f:45:e6:07:13:74: 20:b7:b6:31:ba:20:0b:5a:f4:bf:6f:91:06:f6:92:6d:66:4b: 13:3e:e5:87:1b:8d:54:bb:33:11:0d:27:3b:81:87:e1:84:bb: b5:40:ec:a1:f2:ef:61:67:f1:2b:c5:68:99:24:0a:04:73:ac: ef:4a:43:83:e8:ea:09:e2:56:cb:cf:9a:80:b4:d6:66:6d:29: 37:1c:52:9e:8a:a4:99:98:5b:26:21:6b:61:7a:2b:5e:77:7c: 74:0a:81:48:a4:3f:87:a4:39:83:98:0e:76:39:13:bb:4e:27: e9:49:4d:a8:f3:78:ac:97:be:b1:69:14:8b:8d:1b:e1:0d:1b: 78:ef:c5:fb:2e:52:7f:0e:ec:d6:c0:5c:6e:ba:32:30:6f:73: 34:2a:44:1d:04:ce:e4:6e:8a:32:84:ca:ca:e8:af:c6:f3:16: 74:4b:19:f9:a4:26:df:07:25:dc:30:1a:8f:6d:af:71:5a:53: 21:22:e1:1b:8e:6e:1d:bc:04:aa:da:02:de:1e:86:75:37:83: 84:02:5d:2c:14:4a:ab:20:fb:5b:42:83:b5:95:d1:e1:12:4c: fa:a7:32:43 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUxMDMwMTExODM2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzNDk4Yy1iMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzAzSDOvA8hxUFAJZSNBM72njDExfQ2wLsafhOlRNwOHYSsQTesE2bddBBLh Wzx8i34q7jseGKdY9V8Ki/6EMNFOnxbBsHk1jzPGlXq7QuPLZgWLZTylKCGfjFDl 80LM6Zu+NvHByzZvIGAIObncjnUwpl94Ge2pNURv84QNRrOU5zWfSXyi6WJJzfad WZYpZ+qUud2z5pr/SBKXmURip2ZTJqixJVOZAYe6yU2PGKxNv3qqEtvHzWCTyTLa ypP3uRTHuwa8q1VeMuIkFNhdKITY0dnakwmpAyANxA4x3cNE53d77UywrDpTBO7n KIoC8TeOv+LouxN9fZ26V/OqcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFK6o1BEW 0nlUVug/RhnPMkdkpcR1MB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFFNEQvNTdDMzdFMzgwQTU3MTFFRThDNjM1QTQ2QzRGOUFFMDIvMkQ0NTBCQThC NTgyMTFGMDk0QzkyMTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABneA0wDQYJKoZIhvcNAQELBQADggEBAGgL8oc6W5+LbV7F RHZX7xte3tDGDIl5AGYt9e8Z5U9F5gcTdCC3tjG6IAta9L9vkQb2km1mSxM+5Ycb jVS7MxENJzuBh+GEu7VA7KHy72Fn8SvFaJkkCgRzrO9KQ4Po6gniVsvPmoC01mZt KTccUp6KpJmYWyYha2F6K153fHQKgUikP4ekOYOYDnY5E7tOJ+lJTajzeKyXvrFp FIuNG+ENG3jvxfsuUn8O7NbAXG66MjBvczQqRB0EzuRuijKEysror8bzFnRLGfmk Jt8HJdwwGo9tr3FaUyEi4RuObh28BKraAt4ehnU3g4QCXSwUSqsg+1tCg7WV0eES TPqnMkM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:47:11 2025 by rpki-client