$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/977ED926B7AD11ECA2E94A7EC4F9AE02.roa File: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (raw, json) Hash identifier: l9YGphPLih+4p0TDLk8PQxvCJvvtiquaBZzq1Oot6Xw= Subject key identifier: 7A:FE:54:95:38:8B:84:6F:F9:87:03:C3:B6:27:80:15:1B:04:83:E5 Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Certificate serial: 039D Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/977ED926B7AD11ECA2E94A7EC4F9AE02.roa Signing time: Sun 05 Oct 2025 00:57:17 +0000 ROA not before: Sun 05 Oct 2025 00:57:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.195.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Validity Not Before: Oct 5 00:57:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e1c26d-80a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:df:ec:ec:ec:e1:c1:0c:f9:20:83:1c:8b: 6b:54:88:84:03:1d:c3:4b:78:86:fc:98:cb:fb:70: 7c:87:f0:f8:9c:fe:51:0c:10:53:ad:2d:6e:ed:9a: c5:42:39:9e:a7:e3:cb:3f:21:95:1c:69:a4:5f:67: fd:60:cd:fe:76:e1:50:1e:70:c3:89:bd:6f:3e:1b: d6:37:a6:c3:00:66:39:c7:0b:54:96:9d:77:55:97: 9c:cc:2d:1b:df:98:a6:df:bc:12:64:92:88:79:f0: 7e:7a:1d:f5:d0:06:c9:31:ac:c1:19:4c:8b:a3:a8: 74:64:34:a1:47:aa:38:1b:ee:13:75:45:14:86:a4: 76:e9:5e:03:fd:08:72:1e:ed:59:cb:ef:ee:21:20: 07:4c:3a:f4:a6:3c:47:43:46:ca:ef:99:0c:84:9e: dc:49:c8:2f:a6:a1:29:c6:eb:d5:9e:44:07:ff:e2: 33:95:23:29:11:31:da:ad:c5:33:42:63:a4:b1:57: 74:9f:3a:79:03:49:fe:0d:a3:4e:7b:da:16:92:89: e3:96:af:bd:ea:87:8f:df:be:52:83:25:11:a2:0c: 03:2d:09:ea:bb:93:ce:d7:dd:4b:5d:a5:94:42:87: 54:4d:52:28:cf:df:0e:1d:d1:ef:d3:12:df:d8:af: 42:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FE:54:95:38:8B:84:6F:F9:87:03:C3:B6:27:80:15:1B:04:83:E5 X509v3 Authority Key Identifier: keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/977ED926B7AD11ECA2E94A7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.195.60.0/22 Signature Algorithm: sha256WithRSAEncryption 98:af:42:cc:0a:f7:e4:b2:6e:ad:4f:10:b5:3c:83:5e:5f:22: 45:17:42:a2:2f:d1:98:0f:0c:45:10:eb:70:76:2d:48:d0:1f: 97:de:a9:0e:47:d1:b1:5d:ab:35:57:04:e3:c0:ad:64:56:03: 9a:cf:1f:48:2b:06:83:64:a2:e2:9a:73:85:5c:16:b9:5b:85: c4:d8:11:3f:d9:c2:12:d1:05:6c:a9:92:5b:0c:c1:ac:ae:2d: f5:e9:7d:c7:9e:ae:15:93:1c:e2:2b:59:44:03:ff:87:51:38: 77:0b:a5:f6:33:a5:9d:df:29:1e:2d:3d:2a:d5:03:c4:f2:68: 40:84:db:4c:81:d8:50:41:57:d6:79:80:65:62:c0:0a:a0:69: 22:b8:38:48:68:89:78:68:46:9e:30:d7:ee:fe:be:dc:bd:de: 8f:f8:7b:1c:d5:7a:38:f0:45:ff:5c:a7:af:29:42:54:ae:05: c7:13:43:31:d4:78:6d:c5:f5:14:ea:ac:20:f5:62:bf:e7:47: a7:a7:fe:44:89:45:b0:80:6f:b4:cc:9c:c9:6b:3c:04:a8:6b: a9:14:b1:26:64:c7:28:e0:55:95:53:fa:c6:a9:5d:e1:2e:9a: d8:c4:0b:3f:2c:94:57:b9:7d:34:fb:9f:cd:aa:77:f8:96:c8: 50:fc:a2:dc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1NUQxMTAvBgNVBAUTKDFBMjM5ODY4NDM1NjVERkZDODAwRjgwRkYyOTZCQUIx QUQzNzE0RUMwHhcNMjUxMDA1MDA1NzE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxYzI2ZC04MGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqK3f7Ozs4cEM+SCDHItrVIiEAx3DS3iG/JjL+3B8h/D4nP5RDBBTrS1u7ZrF Qjmep+PLPyGVHGmkX2f9YM3+duFQHnDDib1vPhvWN6bDAGY5xwtUlp13VZeczC0b 35im37wSZJKIefB+eh310AbJMazBGUyLo6h0ZDShR6o4G+4TdUUUhqR26V4D/Qhy Hu1Zy+/uISAHTDr0pjxHQ0bK75kMhJ7cScgvpqEpxuvVnkQH/+IzlSMpETHarcUz QmOksVd0nzp5A0n+DaNOe9oWkonjlq+96oeP375SgyURogwDLQnqu5PO191LXaWU QodUTVIoz98OHdHv0xLf2K9C6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHr+VJU4 i4Rv+YcDw7YngBUbBIPlMB8GA1UdIwQYMBaAFBojmGhDVl3/yAD4D/KWurGtNxTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjU1RC80MEU0M0I4MEI3 QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hmX0lBUGdQOHBhNnNhMDNG T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dpT1lhRU5XWGZfSUFQZ1A4cGE2c2EwM0ZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUY1NUQvNDBFNDNCODBCN0FCMTFFQzlFNTUzMTdEQzRGOUFFMDIvOTc3RUQ5MjZC N0FEMTFFQ0EyRTk0QTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnwzwwDQYJKoZIhvcNAQELBQADggEBAJivQswK9+Sybq1P ELU8g15fIkUXQqIv0ZgPDEUQ63B2LUjQH5feqQ5H0bFdqzVXBOPArWRWA5rPH0gr BoNkouKac4VcFrlbhcTYET/ZwhLRBWypklsMwayuLfXpfceerhWTHOIrWUQD/4dR OHcLpfYzpZ3fKR4tPSrVA8TyaECE20yB2FBBV9Z5gGViwAqgaSK4OEhoiXhoRp4w 1+7+vty93o/4exzVejjwRf9cp68pQlSuBccTQzHUeG3F9RTqrCD1Yr/nR6en/kSJ RbCAb7TMnMlrPASoa6kUsSZkxyjgVZVT+sapXeEumtjECz8slFe5fTT7n82qd/iW yFD8otw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:15 2025 by rpki-client