$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2BB36B4E0F7F11F0B174675DC4F9AE02.roa File: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (raw, json) Hash identifier: a7vmKZvCu8S/erkjZsq11zTLNIuhXy/S24utD8S9yHk= Subject key identifier: 82:55:59:9D:CB:18:3F:B9:0A:65:F5:F4:D2:7B:F4:A2:5E:7B:99:FD Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0848 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2BB36B4E0F7F11F0B174675DC4F9AE02.roa Signing time: Wed 08 Oct 2025 22:54:08 +0000 ROA not before: Wed 08 Oct 2025 22:54:08 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 149014 IP address blocks: 103.20.220.0/23 maxlen: 23 103.20.220.0/24 maxlen: 24 103.20.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:08 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e6eb90-b35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:59:25:10:97:96:00:ae:13:9a:a3:77:70: f2:a7:fd:05:2e:a2:84:62:17:02:54:48:42:47:eb: 4b:72:95:49:3a:b0:dd:b5:d9:9c:16:ab:52:48:96: 15:29:36:6e:a2:54:42:d1:74:9e:23:3b:86:4e:50: 2c:77:49:14:2b:e2:ed:7b:84:9d:de:ce:8c:77:34: 59:a9:cc:13:f6:4e:1b:cd:9f:5c:b9:7f:ef:b2:58: 21:58:1c:79:79:49:8c:14:c1:78:4a:e6:55:fd:98: f1:5e:9d:d8:9f:2f:23:b5:4d:34:e8:91:b3:eb:a1: e6:bb:4d:87:3f:b5:13:19:45:57:70:04:d5:da:8c: 9a:44:b8:30:ef:67:e9:a5:5f:50:70:c6:11:c6:f5: a7:56:f4:a0:27:07:e8:e3:3a:53:58:b6:77:e8:11: c5:1e:fd:e4:4f:29:46:79:e8:a5:e1:9b:39:2a:1f: 26:24:31:3b:ad:34:83:79:dc:b2:50:0b:6c:5d:fe: 4a:36:35:ee:ec:f3:56:2a:42:c2:4d:d5:f9:bd:07: 82:af:bb:56:97:38:a1:c9:ac:9d:c7:48:4c:8d:72: 78:93:b7:d5:c7:77:58:8a:89:46:e9:25:da:05:3f: 53:83:dd:67:81:8a:39:0b:36:24:db:5d:dc:8e:94: e1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:55:59:9D:CB:18:3F:B9:0A:65:F5:F4:D2:7B:F4:A2:5E:7B:99:FD X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2BB36B4E0F7F11F0B174675DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.220.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:c1:b2:9f:3e:70:b8:62:98:79:aa:90:a3:2e:24:4c:5c:74: cd:e7:e6:d6:67:9c:82:6a:38:7e:26:97:21:39:44:ca:de:02: 9b:ab:ca:0b:cd:f7:51:59:d1:14:c4:96:d2:1d:09:3b:35:a9: 5c:cd:21:c9:5d:71:84:d3:5b:12:63:74:aa:03:b8:31:ec:5e: e3:74:fd:5e:14:91:ca:47:05:cc:eb:ed:24:92:2e:28:76:8c: 2a:cb:a6:42:82:2e:2e:91:e7:72:8f:a6:ef:f6:e3:22:d9:63: b0:db:88:8c:6f:55:41:b2:9a:f9:db:e5:36:7f:85:80:6f:55: 06:82:de:e5:32:ec:55:47:7f:6f:58:7d:4b:0c:99:5f:50:76: 6b:d0:8d:cf:14:8f:62:3a:2a:35:65:ce:ed:d2:6e:4f:19:74: 7c:39:39:bf:de:c0:54:2a:30:a9:63:0b:3a:2f:43:9b:e1:cc: 00:55:39:60:de:a1:a5:07:fc:de:45:d1:97:35:69:2b:54:a9: bb:9b:ce:75:18:4b:57:c2:7b:48:2e:9a:b9:87:2c:6c:04:69: 82:e0:78:8c:ba:4b:43:38:45:c5:eb:fa:c8:f2:04:e6:1c:e8: 8d:3c:37:4c:01:f5:5d:54:ed:27:85:9e:b8:e7:00:5c:59:36: cf:8b:32:9a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDA4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZWI5MC1iMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwORZJRCXlgCuE5qjd3Dyp/0FLqKEYhcCVEhCR+tLcpVJOrDdtdmcFqtSSJYV KTZuolRC0XSeIzuGTlAsd0kUK+Lte4Sd3s6MdzRZqcwT9k4bzZ9cuX/vslghWBx5 eUmMFMF4SuZV/ZjxXp3Yny8jtU006JGz66Hmu02HP7UTGUVXcATV2oyaRLgw72fp pV9QcMYRxvWnVvSgJwfo4zpTWLZ36BHFHv3kTylGeeil4Zs5Kh8mJDE7rTSDedyy UAtsXf5KNjXu7PNWKkLCTdX5vQeCr7tWlzihyaydx0hMjXJ4k7fVx3dYiolG6SXa BT9Tg91ngYo5CzYk213cjpThxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIJVWZ3L GD+5CmX19NJ79KJee5n9MB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvMkJCMzZCNEUw RjdGMTFGMEIxNzQ2NzVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnFNwwDQYJKoZIhvcNAQELBQADggEBAG7Bsp8+cLhimHmq kKMuJExcdM3n5tZnnIJqOH4mlyE5RMreApurygvN91FZ0RTEltIdCTs1qVzNIcld cYTTWxJjdKoDuDHsXuN0/V4UkcpHBczr7SSSLih2jCrLpkKCLi6R53KPpu/24yLZ Y7DbiIxvVUGymvnb5TZ/hYBvVQaC3uUy7FVHf29YfUsMmV9QdmvQjc8Uj2I6KjVl zu3Sbk8ZdHw5Ob/ewFQqMKljCzovQ5vhzABVOWDeoaUH/N5F0Zc1aStUqbubznUY S1fCe0gumrmHLGwEaYLgeIy6S0M4RcXr+sjyBOYc6I08N0wB9V1U7SeFnrjnAFxZ Ns+LMpo= -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:00 2025 by rpki-client