$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/42C28C36A80711F0A622350DC4F9AE02.roa File: 42C28C36A80711F0A622350DC4F9AE02.roa (raw, json) Hash identifier: 7yzpPSeDBKG0ILP0wLSPkWToi/S3lPqOvxrezWtdGKQ= Subject key identifier: 5D:A8:DA:A0:1A:2C:BB:7E:F5:2A:35:B8:91:72:83:A2:42:25:0A:F7 Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 0234 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/42C28C36A80711F0A622350DC4F9AE02.roa Signing time: Mon 13 Oct 2025 07:36:35 +0000 ROA not before: Mon 13 Oct 2025 07:36:35 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150697 IP address blocks: 103.59.216.0/24 maxlen: 24 103.59.217.0/24 maxlen: 24 2001:df1:bac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Oct 13 07:36:35 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68ecac03-82b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:d9:9f:3e:2e:49:91:27:3b:21:af:20:ca: 69:0f:d9:9c:a3:4e:0b:dc:e3:55:e0:31:d4:98:0b: 03:22:31:49:08:a7:6f:e9:a4:af:15:17:f8:2f:a6: a0:ac:75:b8:da:d7:e5:29:8c:fd:8a:fc:53:6d:9e: 6b:33:df:fb:13:91:35:0b:c6:3b:b3:e8:85:de:39: 30:c1:2d:69:bb:c6:59:c1:d1:42:5a:53:1d:45:16: 1d:20:38:d9:c9:7b:2a:ac:3a:60:20:ee:03:ea:8d: 94:c0:11:e9:93:1c:af:9d:6b:6b:e5:b2:b2:11:82: 92:41:c6:e2:35:10:92:de:d7:59:ef:fd:b5:9b:67: 7b:39:0e:bc:61:45:0f:ec:db:e9:83:2e:a2:ed:e4: 0c:ff:8e:00:95:4f:b2:f7:ae:e1:ed:d8:97:08:1e: 4b:be:e6:55:73:15:7a:64:fa:1c:a9:d0:f3:01:2b: 9c:38:a7:ab:66:3a:92:b1:77:cb:73:f6:31:94:c9: 6d:59:f1:0f:fb:c2:85:93:27:40:45:2d:d3:04:a3: d7:4c:21:75:28:16:cb:20:34:22:48:96:2e:dc:8a: 16:cb:35:fb:53:fc:e8:5f:b8:68:63:5d:1a:57:37: d6:fa:72:85:d4:5c:6c:2b:d8:42:e2:0d:06:ff:f0: 4b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A8:DA:A0:1A:2C:BB:7E:F5:2A:35:B8:91:72:83:A2:42:25:0A:F7 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/42C28C36A80711F0A622350DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.59.216.0/23 IPv6: 2001:df1:bac0::/48 Signature Algorithm: sha256WithRSAEncryption 0d:b2:42:da:40:50:26:57:30:d2:77:88:f9:a7:6f:c0:e4:81: e2:36:2d:ae:17:e7:e8:f7:22:66:91:f8:1e:07:2b:91:34:44: 91:56:4a:bc:26:b6:52:14:6a:5f:49:1f:12:b5:49:27:5f:57: c4:eb:6b:74:4e:c0:b4:1c:b2:58:e9:4f:9c:66:f1:6e:00:07: 57:aa:6a:e6:f5:4e:e9:63:df:78:51:0c:a3:8b:f6:7b:01:d7: ce:cf:99:f2:f0:f1:e7:04:97:d4:34:10:f5:63:49:a9:54:3a: 36:40:ad:b6:03:0b:a4:37:a6:d4:42:b8:d7:0d:0b:88:47:02: 31:53:07:b3:82:70:87:de:6a:4a:dd:89:08:81:e6:22:c1:4b: a5:52:3b:cd:04:7d:ff:9c:e0:a8:b5:e7:5f:74:d3:02:88:e9: 6a:3d:54:cd:4a:6b:2c:5d:18:30:d8:2c:86:03:b5:d4:cd:e3: 2b:16:d1:99:6c:7e:0d:49:63:9a:2a:bd:d3:85:52:87:fb:eb: ff:5f:cc:e2:97:e9:84:03:71:3a:b4:84:47:2c:e3:8d:a7:9e: e2:f5:f1:a5:02:7f:a6:9c:13:81:0d:bf:f6:c2:ef:64:66:6e: e4:a9:4d:36:aa:5f:c0:a5:6d:7a:ae:f0:49:05:c7:98:18:c9: 81:60:e9:50 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjUxMDEzMDczNjM1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVjYWMwMy04MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyLZnz4uSZEnOyGvIMppD9mco04L3ONV4DHUmAsDIjFJCKdv6aSvFRf4L6ag rHW42tflKYz9ivxTbZ5rM9/7E5E1C8Y7s+iF3jkwwS1pu8ZZwdFCWlMdRRYdIDjZ yXsqrDpgIO4D6o2UwBHpkxyvnWtr5bKyEYKSQcbiNRCS3tdZ7/21m2d7OQ68YUUP 7Nvpgy6i7eQM/44AlU+y967h7diXCB5LvuZVcxV6ZPocqdDzASucOKerZjqSsXfL c/YxlMltWfEP+8KFkydARS3TBKPXTCF1KBbLIDQiSJYu3IoWyzX7U/zoX7hoY10a VzfW+nKF1FxsK9hC4g0G//BLdQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFF2o2qAa LLt+9So1uJFyg6JCJQr3MB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjEwNzEvMkYwRjdBNDg4NkI2MTFFREFBM0IyQjMzQzRGOUFFMDIvNDJDMjhDMzZB ODA3MTFGMEE2MjIzNTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnO9gwDwQCAAIwCQMHACABDfG6wDANBgkqhkiG9w0BAQsF AAOCAQEADbJC2kBQJlcw0neI+advwOSB4jYtrhfn6PciZpH4HgcrkTREkVZKvCa2 UhRqX0kfErVJJ19XxOtrdE7AtByyWOlPnGbxbgAHV6pq5vVO6WPfeFEMo4v2ewHX zs+Z8vDx5wSX1DQQ9WNJqVQ6NkCttgMLpDem1EK41w0LiEcCMVMHs4Jwh95qSt2J CIHmIsFLpVI7zQR9/5zgqLXnX3TTAojpaj1UzUprLF0YMNgshgO11M3jKxbRmWx+ DUljmiq904VSh/vr/1/M4pfphANxOrSERyzjjaee4vXxpQJ/ppwTgQ2/9sLvZGZu 5KlNNqpfwKVteq7wSQXHmBjJgWDpUA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:24:41 2025 by rpki-client