$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/345F7BDCF80C11EF831DA737C4F9AE02.roa File: 345F7BDCF80C11EF831DA737C4F9AE02.roa (raw, json) Hash identifier: OH16X8GEk+h/u670xpKDKmtIszx6M9DvNarlNlVqoko= Subject key identifier: CA:DC:59:8C:7C:F7:F6:1F:83:60:90:33:9C:93:F2:A9:F0:10:B9:C4 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: B2 Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/345F7BDCF80C11EF831DA737C4F9AE02.roa Signing time: Mon 03 Nov 2025 06:22:12 +0000 ROA not before: Mon 03 Nov 2025 06:22:12 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55720 IP address blocks: 103.20.240.0/24 maxlen: 24 103.20.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Validity Not Before: Nov 3 06:22:12 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69084a14-3010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:40:e9:f8:8b:7e:03:4d:c3:a8:2c:f6:43: 2e:27:c0:89:3b:ae:7a:3a:a8:38:f1:9e:c4:7c:e4: 75:55:71:37:80:ee:33:85:a9:ee:b1:0d:0a:f7:d4: bb:b9:15:f2:5c:fa:a4:0b:48:4a:8c:a2:1d:8c:70: 9d:7f:01:76:11:20:19:37:e5:88:c5:f5:25:a2:65: 99:64:c1:02:e5:79:34:cc:7c:e2:f3:98:dd:b7:f2: 67:75:6d:94:03:91:30:36:1f:f8:d4:a5:05:73:d3: f3:47:7f:72:de:e8:d7:7e:59:e0:d8:8c:0a:cf:65: e6:9a:79:a6:2e:a8:bb:e2:60:c4:34:39:0e:bf:21: bd:dd:c3:3a:49:23:7a:47:05:c6:f8:bb:5f:b8:19: 2e:18:02:0e:46:57:fc:28:ba:d3:06:31:35:c0:20: c0:97:68:1d:c5:51:f7:dc:4a:9b:5b:65:9a:f4:cf: e2:6b:47:42:cf:d0:e0:25:0c:4a:cf:9a:90:ea:ec: 8e:a3:c5:bb:d3:a8:6c:e2:17:4b:6c:bc:29:b6:6a: 2c:50:91:65:c0:dc:de:01:19:fc:7d:a1:e6:ed:a4: f9:65:13:1b:51:19:0e:97:8e:68:9d:00:47:a6:3e: 78:c7:11:53:0a:03:53:78:c2:52:9f:1a:27:cb:f4: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DC:59:8C:7C:F7:F6:1F:83:60:90:33:9C:93:F2:A9:F0:10:B9:C4 X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/345F7BDCF80C11EF831DA737C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.240.0/23 Signature Algorithm: sha256WithRSAEncryption c2:47:fb:92:44:5e:c7:09:a6:9e:0e:65:c4:f3:de:2d:bd:1b: 0b:70:bb:ef:2a:b2:d9:7e:c2:b1:c5:6e:13:0e:7e:d6:8f:86: 3b:19:e5:bb:c7:af:23:3f:f3:03:bb:d0:16:e1:09:92:7d:87: 03:7f:02:86:2e:67:06:02:18:58:8c:47:f0:79:6f:ea:2e:e7: 61:1f:6d:72:62:a4:c0:7b:33:ef:06:cd:6f:c0:3e:64:d6:99: a1:e0:d9:7d:7b:9a:d8:d3:95:94:43:75:b7:67:f0:c8:12:23: 7a:cf:1b:dd:ba:ea:72:2a:a5:72:8b:af:f6:76:d6:76:33:d1: 3a:b1:84:ce:d2:55:dd:91:53:05:6d:15:a8:90:19:fa:4f:8c: ef:ea:69:aa:04:8e:19:57:a0:07:01:39:1d:5d:04:0c:d9:60: d5:6b:8d:5b:91:0a:c9:7e:a1:55:97:b0:18:8d:10:51:b7:39: b7:fb:4e:12:28:26:75:ba:c9:e4:0b:0c:19:e2:80:8b:22:12: 97:26:5c:75:e5:d5:0c:5d:30:ee:6b:e5:6b:64:54:7e:38:51: a4:70:fa:ed:47:fa:0a:a3:f1:fb:f5:ec:01:26:be:f8:42:6c: ca:4d:aa:21:85:4a:09:7c:91:cf:da:c8:44:84:1a:26:74:3a: b3:ec:51:57 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MTgxMTAvBgNVBAUTKDc5QzdGQzVEMUE1RUVGMEIyOThFMDA3MjMyNkFCNzM2 ODZCREZFNzgwHhcNMjUxMTAzMDYyMjEyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4NGExNC0zMDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOlA6fiLfgNNw6gs9kMuJ8CJO656Oqg48Z7EfOR1VXE3gO4zhanusQ0K99S7 uRXyXPqkC0hKjKIdjHCdfwF2ESAZN+WIxfUlomWZZMEC5Xk0zHzi85jdt/JndW2U A5EwNh/41KUFc9PzR39y3ujXflng2IwKz2XmmnmmLqi74mDENDkOvyG93cM6SSN6 RwXG+LtfuBkuGAIORlf8KLrTBjE1wCDAl2gdxVH33EqbW2Wa9M/ia0dCz9DgJQxK z5qQ6uyOo8W706hs4hdLbLwptmosUJFlwNzeARn8faHm7aT5ZRMbURkOl45onQBH pj54xxFTCgNTeMJSnxony/RLpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMrcWYx8 9/Yfg2CQM5yT8qnwELnEMB8GA1UdIwQYMBaAFHnH/F0aXu8LKY4AcjJqtzaGvf54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxOC84RUU3MTQ4NkI2 QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3c3BqZ0J5TW1xM05vYTlf bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9uZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjM5MTgvOEVFNzE0ODZCNkM0MTFFRkIxMEVERTU4QzRGOUFFMDIvMzQ1RjdCRENG ODBDMTFFRjgzMURBNzM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnFPAwDQYJKoZIhvcNAQELBQADggEBAMJH+5JEXscJpp4O ZcTz3i29Gwtwu+8qstl+wrHFbhMOftaPhjsZ5bvHryM/8wO70BbhCZJ9hwN/AoYu ZwYCGFiMR/B5b+ou52EfbXJipMB7M+8GzW/APmTWmaHg2X17mtjTlZRDdbdn8MgS I3rPG9266nIqpXKLr/Z21nYz0TqxhM7SVd2RUwVtFaiQGfpPjO/qaaoEjhlXoAcB OR1dBAzZYNVrjVuRCsl+oVWXsBiNEFG3Obf7ThIoJnW6yeQLDBnigIsiEpcmXHXl 1QxdMO5r5WtkVH44UaRw+u1H+gqj8fv17AEmvvhCbMpNqiGFSgl8kc/ayESEGiZ0 OrPsUVc= -----END CERTIFICATE-----Generated at Tue Nov 4 16:37:29 2025 by rpki-client