$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9BCC2FB0B3CB11F0A084D480C4F9AE02.roa File: 9BCC2FB0B3CB11F0A084D480C4F9AE02.roa (raw, json) Hash identifier: oBgzedyVQRed+He1xEj1MMwnzZqQIFejD7Liye4m3MM= Subject key identifier: 3C:DF:BE:45:1A:02:DC:7E:04:69:CD:40:DC:75:18:8A:CF:FA:34:CF Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0862 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9BCC2FB0B3CB11F0A084D480C4F9AE02.roa Signing time: Tue 28 Oct 2025 06:59:12 +0000 ROA not before: Tue 28 Oct 2025 06:59:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 147002 IP address blocks: 43.229.154.0/24 maxlen: 24 103.20.222.0/24 maxlen: 24 103.48.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2146 (0x862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 28 06:59:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690069c0-2148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:4f:5c:12:e3:4b:9f:26:f2:3f:9a:b5:96: 59:6e:ee:3d:23:9f:90:ae:30:3f:38:d8:79:5d:10: 1e:f6:ab:46:f4:f9:5f:5c:72:9a:f7:6d:61:fc:5a: bf:73:ec:fd:91:bf:03:13:23:09:28:6c:41:e1:cd: 74:3a:c0:fe:22:0b:83:2c:d0:a7:d0:3a:75:0f:8c: 48:77:64:98:93:29:ef:f7:4f:6f:c1:a0:ec:5b:0a: 54:5c:5c:40:4c:0d:4a:d8:60:94:60:54:06:a6:99: 24:cc:70:8e:c6:3c:39:9e:ac:2a:d3:26:28:d0:0f: cc:21:bc:66:00:24:c9:f3:81:87:22:98:45:75:7d: ab:e6:dd:01:43:21:ab:38:6e:9c:4d:56:3e:86:39: dd:87:07:4f:b5:eb:e2:d0:10:b7:17:af:3f:48:60: 82:99:e4:2e:1f:5f:dd:9d:7b:30:50:9d:bc:d7:4e: 3a:41:53:26:9d:76:74:30:ad:7a:99:c8:c1:a4:2c: ac:c3:a8:f9:d3:8b:0a:fe:10:5b:66:62:82:b1:61: 6d:eb:8c:cd:82:a2:51:50:50:c0:63:c0:58:79:f4: ee:f3:a6:76:c3:62:73:ac:e7:f1:74:70:10:c1:21: 73:77:e4:e9:01:ed:3d:8e:93:6a:90:0c:fd:aa:5b: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DF:BE:45:1A:02:DC:7E:04:69:CD:40:DC:75:18:8A:CF:FA:34:CF X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9BCC2FB0B3CB11F0A084D480C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.154.0/24 103.20.222.0/24 103.48.169.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:1a:42:03:41:5e:9e:ff:05:d5:89:b9:4a:f3:ac:bc:a8:2b: d9:1b:af:e5:6f:22:4e:e1:68:07:d9:4b:d5:15:97:f1:5f:b2: f4:29:af:b2:b9:b6:de:ef:68:2f:d9:e0:72:9c:2b:39:64:51: 7a:60:b2:a2:d2:43:dd:c8:1c:52:86:1c:76:2e:72:83:8c:7e: c6:db:bf:d0:72:92:5d:ad:94:a9:d2:41:8b:01:c1:da:27:24: 04:0b:f9:0b:fc:72:0a:c3:04:b1:5d:3c:07:8e:89:52:84:5a: 8c:46:ba:c9:70:c5:64:bd:40:3a:f3:17:4b:79:3a:13:35:80: d9:4b:02:68:74:92:64:2c:ea:d4:c6:c8:7f:bb:0f:3c:60:4c: 22:17:6f:fa:14:98:50:83:20:99:0d:b6:92:5f:39:7e:50:39: 08:e5:d3:90:cc:88:01:78:cc:7f:0f:15:25:2b:c4:f7:fc:71: dd:1f:89:11:45:2b:e8:23:8b:a9:2f:73:a1:6c:22:15:78:c1: fa:0a:2e:2b:6f:e6:e8:a6:89:77:1b:a2:f3:52:12:fe:82:ae: 83:a0:78:08:f2:79:5e:8e:07:97:5d:4f:ff:f2:fd:02:f2:c9: 55:d4:07:05:ac:3d:34:74:83:09:d6:c4:c8:f2:d6:5e:40:4a: d7:be:2f:a4 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDI4MDY1OTEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAwNjljMC0yMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArr9PXBLjS58m8j+atZZZbu49I5+QrjA/ONh5XRAe9qtG9PlfXHKa921h/Fq/ c+z9kb8DEyMJKGxB4c10OsD+IguDLNCn0Dp1D4xId2SYkynv909vwaDsWwpUXFxA TA1K2GCUYFQGppkkzHCOxjw5nqwq0yYo0A/MIbxmACTJ84GHIphFdX2r5t0BQyGr OG6cTVY+hjndhwdPtevi0BC3F68/SGCCmeQuH1/dnXswUJ281046QVMmnXZ0MK16 mcjBpCysw6j504sK/hBbZmKCsWFt64zNgqJRUFDAY8BYefTu86Z2w2JzrOfxdHAQ wSFzd+TpAe09jpNqkAz9qluMvQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDzfvkUa Atx+BGnNQNx1GIrP+jTPMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvOUJDQzJGQjBC M0NCMTFGMEEwODRENDgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAr5ZoDBABnFN4DBABnMKkwDQYJKoZIhvcNAQELBQADggEB AJsaQgNBXp7/BdWJuUrzrLyoK9kbr+VvIk7haAfZS9UVl/FfsvQpr7K5tt7vaC/Z 4HKcKzlkUXpgsqLSQ93IHFKGHHYucoOMfsbbv9Bykl2tlKnSQYsBwdonJAQL+Qv8 cgrDBLFdPAeOiVKEWoxGuslwxWS9QDrzF0t5OhM1gNlLAmh0kmQs6tTGyH+7Dzxg TCIXb/oUmFCDIJkNtpJfOX5QOQjl05DMiAF4zH8PFSUrxPf8cd0fiRFFK+gji6kv c6FsIhV4wfoKLitv5uimiXcbovNSEv6CroOgeAjyeV6OB5ddT//y/QLyyVXUBwWs PTR0gwnWxMjy1l5ASte+L6Q= -----END CERTIFICATE-----Generated at Tue Nov 4 17:13:01 2025 by rpki-client