$ rpki-client -vvf rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/E7126E0AB08111F0B4456572C4F9AE02.roa File: E7126E0AB08111F0B4456572C4F9AE02.roa (raw, json) Hash identifier: KRwjwSWWBywAGAbXEKvDlNQZp8JppNvRq0fzU/i7zgU= Subject key identifier: 27:12:ED:5F:2A:6A:C7:27:9C:71:14:CD:7A:D5:F3:7C:35:3C:AE:02 Certificate issuer: /CN=A912418E/serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947 Certificate serial: 02 Authority key identifier: 5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/E7126E0AB08111F0B4456572C4F9AE02.roa Signing time: Fri 24 Oct 2025 02:34:02 +0000 ROA not before: Fri 24 Oct 2025 02:34:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135277 IP address blocks: 103.96.242.0/23 maxlen: 23 103.96.242.0/24 maxlen: 24 103.96.243.0/24 maxlen: 24 103.96.248.0/24 maxlen: 24 103.212.41.0/24 maxlen: 24 2001:df1:4200::/48 maxlen: 48 2401:aca0::/32 maxlen: 32 2401:aca0::/46 maxlen: 46 2401:aca0::/48 maxlen: 48 2401:aca0:1::/48 maxlen: 48 2401:aca0:2::/48 maxlen: 48 2401:aca0:3::/48 maxlen: 48 2401:aca0:4::/46 maxlen: 46 2401:aca0:4::/48 maxlen: 48 2401:aca0:5::/48 maxlen: 48 2401:aca0:6::/48 maxlen: 48 2401:aca0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912418E, serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947 Validity Not Before: Oct 24 02:34:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68fae59a-c3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4b:38:73:74:43:f3:5f:63:6c:cb:90:5a:ad: 12:74:2b:63:44:fa:2b:78:56:5f:e7:c5:6f:eb:50: 51:8e:f9:af:5b:ab:df:89:ea:13:2a:e6:bc:d6:ff: a1:aa:33:65:a3:b9:2b:a7:f4:ce:fa:ca:40:3d:f0: f9:cc:1b:6c:18:86:94:8c:ac:1b:68:1b:90:48:3a: c6:5e:e5:46:94:19:f7:b0:94:8f:8b:b9:9c:8c:c8: b0:6d:ac:f4:6c:a0:84:8b:7c:dd:66:37:dc:0a:70: cf:5b:c4:cd:2c:fd:b7:12:35:ca:87:19:62:27:b7: ef:e5:74:01:af:1d:31:5b:75:cc:2b:43:3e:52:40: 47:ec:ec:95:25:f4:cf:73:55:9f:2f:60:4d:f8:65: 4b:d8:00:4e:94:32:cb:f1:79:f0:95:f4:82:88:5b: f2:c4:9b:6a:61:05:e6:e9:0e:d8:cc:78:01:ab:8a: 08:a3:84:d8:a6:4a:40:d3:f1:78:93:9f:a7:f7:4a: 5a:6e:9a:10:b9:01:a4:aa:01:8a:f3:8d:ad:1f:c6: 77:75:55:06:a2:82:a1:ef:01:d3:22:37:4e:71:7e: bb:cd:69:4e:fb:58:2e:6e:67:2f:5f:ca:a1:1d:0d: 98:15:8f:99:ea:32:7b:e7:32:18:ea:54:ff:72:e9: cf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:12:ED:5F:2A:6A:C7:27:9C:71:14:CD:7A:D5:F3:7C:35:3C:AE:02 X509v3 Authority Key Identifier: keyid:5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/E7126E0AB08111F0B4456572C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.242.0/23 103.96.248.0/24 103.212.41.0/24 IPv6: 2001:df1:4200::/48 2401:aca0::/32 Signature Algorithm: sha256WithRSAEncryption 57:55:4e:b1:17:25:af:56:34:6f:d1:2a:91:92:cd:46:76:af: fc:25:c1:05:f7:48:34:4f:06:20:71:cd:2a:b4:69:08:18:7b: 72:da:8a:a8:eb:93:84:e3:74:67:f9:90:af:f5:0a:68:50:8e: 81:a5:01:2f:ad:dd:ca:50:d9:47:02:a2:c5:f9:4d:a6:b0:a2: f5:3c:d2:65:16:19:21:8f:6a:1b:29:f6:23:e2:b7:5e:bf:3a: 28:8d:d2:c7:53:97:5f:6c:b2:de:14:85:e3:78:b4:b6:75:81: b6:92:1c:ee:42:92:7e:ce:35:0e:f6:71:6f:dc:86:23:fe:ce: 95:1f:40:b9:67:10:0c:b5:d9:c3:27:bf:4f:6d:1e:cd:b2:0d: c4:a1:87:99:36:df:b6:5a:9e:64:f7:f2:53:d7:e6:77:b6:a6: 3a:31:da:56:bb:3a:79:f3:7e:e3:e9:91:65:7d:07:dd:57:39: c3:5a:f5:18:c4:ca:58:32:1f:f3:0e:21:c4:3b:c1:8e:de:fe: ee:15:64:f8:59:0c:bf:20:bb:e3:86:0a:18:1f:bb:3c:74:de: d3:b2:fd:a6:5a:60:92:b7:cb:72:d5:56:1d:85:2c:c5:d4:8a: 98:7c:33:93:99:cd:13:98:8c:6c:21:62:51:83:bb:f4:38:52: d2:11:f5:bf -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDE4RTExMC8GA1UEBRMoNUM1MjAzN0UwMkUwMjM3QUE0QTQ3ODZFOTA4QzE0MjZF QkI5QTk0NzAeFw0yNTEwMjQwMjM0MDJaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZmFlNTlhLWMzYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkSzhzdEPzX2Nsy5BarRJ0K2NE+it4Vl/nxW/rUFGO+a9bq9+J6hMq5rzW/6Gq M2WjuSun9M76ykA98PnMG2wYhpSMrBtoG5BIOsZe5UaUGfewlI+LuZyMyLBtrPRs oISLfN1mN9wKcM9bxM0s/bcSNcqHGWInt+/ldAGvHTFbdcwrQz5SQEfs7JUl9M9z VZ8vYE34ZUvYAE6UMsvxefCV9IKIW/LEm2phBebpDtjMeAGrigijhNimSkDT8XiT n6f3SlpumhC5AaSqAYrzja0fxnd1VQaigqHvAdMiN05xfrvNaU77WC5uZy9fyqEd DZgVj5nqMnvnMhjqVP9y6c+rAgMBAAGjggK5MIICtTAdBgNVHQ4EFgQUJxLtXypq xyeccRTNetXzfDU8rgIwHwYDVR0jBBgwFoAUXFIDfgLgI3qkpHhukIwUJuu5qUcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MThFL0U1Njc2QkVDQjA4 MDExRjA4QTk1MDM1MUM0RjlBRTAyL1hGSURmZ0xnSTNxa3BIaHVrSXdVSnV1NXFV Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEZJRGZnTGdJM3FrcEhodWtJd1VKdXU1cVVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDE4RS9FNTY3NkJFQ0IwODAxMUYwOEE5NTAzNTFDNEY5QUUwMi9FNzEyNkUwQUIw ODExMUYwQjQ0NTY1NzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBDBggrBgEFBQcBBwEB/wQ0 MDIwGAQCAAEwEgMEAWdg8gMEAGdg+AMEAGfUKTAWBAIAAjAQAwcAIAEN8UIAAwUA JAGsoDANBgkqhkiG9w0BAQsFAAOCAQEAV1VOsRclr1Y0b9EqkZLNRnav/CXBBfdI NE8GIHHNKrRpCBh7ctqKqOuThON0Z/mQr/UKaFCOgaUBL63dylDZRwKixflNprCi 9TzSZRYZIY9qGyn2I+K3Xr86KI3Sx1OXX2yy3hSF43i0tnWBtpIc7kKSfs41DvZx b9yGI/7OlR9AuWcQDLXZwye/T20ezbINxKGHmTbftlqeZPfyU9fmd7amOjHaVrs6 efN+4+mRZX0H3Vc5w1r1GMTKWDIf8w4hxDvBjt7+7hVk+FkMvyC744YKGB+7PHTe 07L9plpgkrfLctVWHYUsxdSKmHwzk5nNE5iMbCFiUYO79DhS0hH1vw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:35:48 2025 by rpki-client