$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F47B2136202611F08C91C683C4F9AE02.roa File: F47B2136202611F08C91C683C4F9AE02.roa (raw, json) Hash identifier: McIIQJS116bi4A+eQiz0CorbxRZVxovY+3wZ/IF64OY= Subject key identifier: 40:B1:83:06:5E:2E:C7:CD:87:E0:16:53:5D:13:F7:B2:48:5B:D7:7C Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2888 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F47B2136202611F08C91C683C4F9AE02.roa Signing time: Sat 26 Jul 2025 15:54:08 +0000 ROA not before: Sat 26 Jul 2025 15:54:08 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 152918 IP address blocks: 27.100.39.0/24 maxlen: 24 103.196.21.0/24 maxlen: 24 103.196.23.0/24 maxlen: 24 103.217.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10376 (0x2888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:54:08 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884fa1f-2c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:ef:33:87:fb:2d:99:be:3a:82:89:8b:8f: c6:11:50:a6:f7:c1:42:fe:61:40:ee:d3:0d:e5:f6: 8f:51:fe:b6:c4:aa:6d:83:82:2d:21:61:08:ea:ea: 4e:7e:e0:5e:37:db:5f:f4:72:7f:e2:90:df:d9:7f: b0:29:a5:c2:39:bc:f1:71:77:d4:29:78:23:a1:5b: 31:f1:56:67:1a:76:69:b4:77:45:60:40:d8:85:ab: 13:c9:31:77:14:18:82:07:6a:74:ff:fd:df:42:87: a7:64:e5:93:77:fe:f8:af:cd:e5:33:62:1f:0c:08: af:43:1a:f4:2e:92:cf:4c:9a:c3:30:33:16:09:0b: 67:e8:31:20:94:a4:ed:b2:4a:2f:74:04:ab:8b:ed: 08:20:fb:02:2b:04:b5:3b:48:0b:12:82:54:59:77: a2:3f:83:68:eb:ca:11:94:45:34:49:b8:02:eb:42: 3f:4a:77:1e:d7:90:03:0b:0c:a7:e1:2f:1e:9d:f4: ae:58:2f:3b:e2:90:90:01:72:2a:bb:a0:55:5e:39: d6:42:81:81:0a:f0:56:d4:5f:a7:2e:d6:f5:8c:32: d0:12:17:19:65:91:72:a0:ed:89:6e:e1:fa:bc:72: 99:b1:df:52:ad:9f:fd:d5:da:40:3b:a1:d1:4b:6c: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B1:83:06:5E:2E:C7:CD:87:E0:16:53:5D:13:F7:B2:48:5B:D7:7C X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F47B2136202611F08C91C683C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.100.39.0/24 103.196.21.0/24 103.196.23.0/24 103.217.255.0/24 Signature Algorithm: sha256WithRSAEncryption 21:79:7a:7e:07:4c:a6:26:d4:d6:a3:1f:86:24:6a:a1:2a:13: f3:0c:16:5f:86:b4:1b:87:ba:11:56:c3:ae:f1:95:3c:79:1b: f3:52:b3:e2:fa:ff:68:27:4f:f6:87:9c:98:fd:42:be:1a:c8: 9b:c5:09:9a:00:8d:76:2c:d8:ee:0e:9d:af:77:50:dc:89:fe: 1d:ac:02:f2:f2:ee:d5:31:3c:64:80:60:c1:64:3f:fb:e7:58: b8:69:6f:92:57:21:33:28:2b:5f:31:78:32:c0:42:ed:10:70: 92:1a:0d:69:03:9e:dc:2a:43:70:0d:a5:88:b7:23:e5:e8:85: 00:2e:28:c3:2b:62:de:78:d1:0c:d7:8d:54:27:28:a6:81:99: 3f:bb:e1:75:fc:da:53:94:05:39:ac:78:43:a9:82:c2:a3:89: 2e:7f:d2:b3:5b:0b:51:d8:78:58:67:1a:30:5d:6e:a7:b9:bc: 57:80:dc:d2:7b:72:f4:c7:ec:0f:07:4e:67:00:04:ad:72:2b: b3:4c:e7:8c:fa:71:29:06:72:82:b5:c3:2d:66:52:13:f9:99: 4f:bf:d1:6a:d7:83:11:c2:aa:46:46:9c:b9:25:49:aa:6c:5c: ee:06:98:c1:56:a4:df:00:4e:5c:8a:c5:d9:a4:57:9b:7b:2d: 1b:76:f6:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICKIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1NDA4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZmExZi0yYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfrvM4f7LZm+OoKJi4/GEVCm98FC/mFA7tMN5faPUf62xKptg4ItIWEI6upO fuBeN9tf9HJ/4pDf2X+wKaXCObzxcXfUKXgjoVsx8VZnGnZptHdFYEDYhasTyTF3 FBiCB2p0//3fQoenZOWTd/74r83lM2IfDAivQxr0LpLPTJrDMDMWCQtn6DEglKTt skovdASri+0IIPsCKwS1O0gLEoJUWXeiP4No68oRlEU0SbgC60I/Snce15ADCwyn 4S8enfSuWC874pCQAXIqu6BVXjnWQoGBCvBW1F+nLtb1jDLQEhcZZZFyoO2JbuH6 vHKZsd9SrZ/91dpAO6HRS2z/owIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFECxgwZe LsfNh+AWU10T97JIW9d8MB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvRjQ3QjIxMzYy MDI2MTFGMDhDOTFDNjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAbZCcDBABnxBUDBABnxBcDBABn2f8wDQYJKoZIhvcNAQEL BQADggEBACF5en4HTKYm1NajH4YkaqEqE/MMFl+GtBuHuhFWw67xlTx5G/NSs+L6 /2gnT/aHnJj9Qr4ayJvFCZoAjXYs2O4Ona93UNyJ/h2sAvLy7tUxPGSAYMFkP/vn WLhpb5JXITMoK18xeDLAQu0QcJIaDWkDntwqQ3ANpYi3I+XohQAuKMMrYt540QzX jVQnKKaBmT+74XX82lOUBTmseEOpgsKjiS5/0rNbC1HYeFhnGjBdbqe5vFeA3NJ7 cvTH7A8HTmcABK1yK7NM54z6cSkGcoK1wy1mUhP5mU+/0WrXgxHCqkZGnLklSaps XO4GmMFWpN8ATlyKxdmkV5t7LRt29io= -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:12 2025 by rpki-client