$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/35274C3080AF11F0BAFC1E65C4F9AE02.roa File: 35274C3080AF11F0BAFC1E65C4F9AE02.roa (raw, json) Hash identifier: 7HONP22Ru+ZwbPqR0qZD9dpRS6n+36hJIPSSh9b77BI= Subject key identifier: F7:38:FF:39:71:9E:22:75:2D:E6:41:ED:F9:44:F6:B0:E6:AB:0F:60 Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Certificate serial: 010C Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/35274C3080AF11F0BAFC1E65C4F9AE02.roa Signing time: Thu 28 Aug 2025 17:07:11 +0000 ROA not before: Thu 28 Aug 2025 17:07:11 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152708 IP address blocks: 103.40.52.0/23 maxlen: 24 2001:df3:b7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Validity Not Before: Aug 28 17:07:11 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68b08cbf-b014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:dc:48:bd:da:19:3b:96:3d:ff:aa:cb:6b:c6: 84:c5:5f:c1:af:76:72:e5:05:f4:27:74:9c:9c:36: c6:96:05:51:13:e9:a9:c0:b3:eb:ed:c4:95:59:1e: 03:79:51:ac:1e:1f:11:26:e7:e2:fe:56:e0:fe:1f: 2c:f2:b2:9a:b0:33:3f:97:7a:d4:b6:a3:a9:d4:19: 1e:aa:84:18:20:30:e3:09:e2:01:a3:cb:65:9b:ee: 8f:80:f4:1e:98:92:23:a0:eb:2e:02:bd:df:e5:cc: 60:2f:35:8b:3b:28:4c:a0:9f:c1:d3:2a:d8:70:15: 58:eb:64:f0:61:ac:39:d6:2d:c0:56:05:40:21:87: 5b:b0:cc:79:13:03:bd:cf:54:be:be:e1:ca:df:95: 4a:93:51:40:57:6e:c0:71:9f:79:6a:5e:77:2b:fe: 06:92:35:55:17:b3:b8:ca:d2:58:34:29:c9:02:fe: 3b:6c:87:a0:6d:87:07:f1:ef:f5:8a:dd:c1:f6:75: 06:2c:f4:36:38:e7:1f:0b:c4:df:47:6c:d7:fc:d9: 55:fa:9d:e6:60:9f:07:ce:4a:95:6b:44:48:87:af: 9f:09:cc:d7:c2:1a:5e:23:79:d4:67:15:5a:a6:26: 98:da:dc:19:2e:c0:b9:a0:26:9a:9a:a7:eb:6e:c7: 79:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:38:FF:39:71:9E:22:75:2D:E6:41:ED:F9:44:F6:B0:E6:AB:0F:60 X509v3 Authority Key Identifier: keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/35274C3080AF11F0BAFC1E65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.52.0/23 IPv6: 2001:df3:b7c0::/48 Signature Algorithm: sha256WithRSAEncryption 5d:f9:68:8f:89:39:6f:7d:25:61:52:69:b2:8d:a7:e2:64:2e: 6d:7c:e2:18:cf:ac:2b:4e:36:ec:19:7d:87:29:fb:46:5c:d6: c5:5f:7d:bf:c5:50:6b:5e:fc:51:0d:d1:1b:88:f5:a9:0a:13: 28:b8:05:ac:4d:e4:3d:40:af:df:fd:d5:5a:f8:9d:a0:15:55: 6a:34:32:b1:f2:3b:b1:19:6e:22:0f:89:4f:0a:0b:ce:4b:89: cb:f2:77:18:d3:2c:b1:f5:94:cd:88:2a:ca:65:9c:d3:e1:58: 3a:0d:9c:ce:d2:e2:e1:fc:3a:a3:f4:51:bb:05:c7:45:45:40: 80:2a:80:bb:43:6d:a6:7f:22:c8:9c:62:aa:77:d0:10:49:a2: a9:92:4d:a2:0f:e8:a3:d7:24:53:42:4c:a2:01:4f:92:18:bb: 14:d7:06:81:6e:19:86:d3:e5:19:e3:96:d0:28:cb:b5:c9:bb: fc:86:a5:e0:c4:b8:bf:94:fc:c5:7b:11:61:72:0c:7b:d7:f2: bb:be:9f:1d:9d:21:fd:fc:0c:ee:45:72:54:03:e7:74:00:ce: 9b:e4:d3:06:5a:d4:1e:c2:12:48:9a:16:62:08:41:bc:b2:a4: 87:bb:69:5f:5f:86:70:11:79:59:54:38:b8:bc:fc:28:61:2c: 53:64:d1:d5 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNGQ0UxMTAvBgNVBAUTKDg2NkU3OEQxQTQ1RThGRDEyNjgwOEFGRjdDRUE0RkMw OEU3RDkyQTgwHhcNMjUwODI4MTcwNzExWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwOGNiZi1iMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dxIvdoZO5Y9/6rLa8aExV/Br3Zy5QX0J3ScnDbGlgVRE+mpwLPr7cSVWR4D eVGsHh8RJufi/lbg/h8s8rKasDM/l3rUtqOp1BkeqoQYIDDjCeIBo8tlm+6PgPQe mJIjoOsuAr3f5cxgLzWLOyhMoJ/B0yrYcBVY62TwYaw51i3AVgVAIYdbsMx5EwO9 z1S+vuHK35VKk1FAV27AcZ95al53K/4GkjVVF7O4ytJYNCnJAv47bIegbYcH8e/1 it3B9nUGLPQ2OOcfC8TfR2zX/NlV+p3mYJ8HzkqVa0RIh6+fCczXwhpeI3nUZxVa piaY2twZLsC5oCaamqfrbsd5FQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPc4/zlx niJ1LeZB7flE9rDmqw9gMB8GA1UdIwQYMBaAFIZueNGkXo/RJoCK/3zqT8COfZKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0ZDRS9FMEJFMzZBQzAy M0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5RW1nSXJfZk9wUHdJNTlr cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2htNTQwYVJlajlFbWdJcl9mT3BQd0k1OWtxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNGQ0UvRTBCRTM2QUMwMjNGMTFFRjhFNUMxRTU4QzRGOUFFMDIvMzUyNzRDMzA4 MEFGMTFGMEJBRkMxRTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnKDQwDwQCAAIwCQMHACABDfO3wDANBgkqhkiG9w0BAQsF AAOCAQEAXfloj4k5b30lYVJpso2n4mQubXziGM+sK0427Bl9hyn7RlzWxV99v8VQ a178UQ3RG4j1qQoTKLgFrE3kPUCv3/3VWvidoBVVajQysfI7sRluIg+JTwoLzkuJ y/J3GNMssfWUzYgqymWc0+FYOg2cztLi4fw6o/RRuwXHRUVAgCqAu0Ntpn8iyJxi qnfQEEmiqZJNog/oo9ckU0JMogFPkhi7FNcGgW4ZhtPlGeOW0CjLtcm7/Ial4MS4 v5T8xXsRYXIMe9fyu76fHZ0h/fwM7kVyVAPndADOm+TTBlrUHsISSJoWYghBvLKk h7tpX1+GcBF5WVQ4uLz8KGEsU2TR1Q== -----END CERTIFICATE-----Generated at Wed Nov 5 08:04:26 2025 by rpki-client