$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa File: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (raw, json) Hash identifier: JW1dKstiHv1728tfD/7nx2W9fc+YXOuPr0l8dOY2HWI= Subject key identifier: 87:17:CE:D9:4F:99:F2:DC:A7:9B:6D:6D:5A:09:D8:71:5A:FC:FA:A8 Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Certificate serial: 01DF Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa Signing time: Wed 29 Oct 2025 02:47:01 +0000 ROA not before: Wed 29 Oct 2025 02:47:01 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 3320 IP address blocks: 103.140.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Validity Not Before: Oct 29 02:47:01 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69018025-7db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:e2:f5:96:ca:f2:e0:69:5f:81:75:14:4c: 99:0e:47:18:df:e0:49:9f:c4:89:45:3f:46:18:1b: 5b:e3:59:fc:ad:61:56:02:e1:88:77:a4:77:b7:40: 8b:06:07:02:f0:49:59:67:c1:49:bb:42:a5:e8:8b: 6f:c4:dc:81:ac:66:bb:5d:28:91:7c:b3:50:7e:04: 27:c4:ce:88:23:60:c7:33:db:35:d4:13:a7:34:77: 89:33:3c:3b:84:27:fc:5d:f1:b6:d5:86:8e:d9:f5: c2:29:4f:6d:8d:40:73:15:df:fd:7e:b7:46:2f:43: 49:bf:11:cc:76:df:9f:49:20:d3:19:fc:b7:5e:c1: 3c:b3:b1:d2:4b:99:3d:f9:12:49:b0:eb:cc:f9:22: 1a:7e:27:0a:53:2c:dc:cd:cd:36:0b:b4:f2:4e:b7: 19:df:90:c5:d0:ee:73:3f:4b:83:93:25:73:83:76: 9a:9f:e3:54:11:ac:68:10:61:d2:11:d0:3d:f1:23: 7b:45:91:1f:e3:65:67:c2:b3:24:c1:49:4e:84:d8: 24:86:d7:00:31:71:60:8f:59:c8:80:e8:e9:a5:1f: 83:e1:85:3f:f4:e1:97:f8:e2:2e:69:c4:e8:de:d1: 83:0d:1e:23:1b:05:3d:26:67:f6:4d:e2:2c:d4:df: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:17:CE:D9:4F:99:F2:DC:A7:9B:6D:6D:5A:09:D8:71:5A:FC:FA:A8 X509v3 Authority Key Identifier: keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.114.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:26:e2:2c:8e:d9:60:2b:11:48:a2:05:f9:7b:17:3d:28:c2: 41:88:f8:33:16:74:a2:c8:0a:14:0d:ab:8a:c5:f0:a3:73:f4: ae:cf:05:d9:c8:37:a9:fb:eb:b4:a0:5a:27:35:81:67:d2:a0: 2d:1e:b1:ff:ac:83:ad:a1:c5:d8:d1:29:4d:08:ab:2c:79:a3: 67:f4:ba:93:f9:dc:5c:03:5e:8d:31:d4:86:b2:c7:6d:f4:13: a4:0b:20:f4:cc:7c:f5:6b:1d:c5:a9:d4:35:99:e3:ac:20:4e: 73:a8:5b:7f:74:af:84:1f:26:d1:95:d8:35:8a:5c:5a:63:51: a5:ba:29:ce:f8:37:ab:ad:ba:7a:a9:8a:7e:64:1b:06:cf:03: 9d:3d:78:eb:ad:67:6e:f9:03:61:74:4c:0b:94:e8:ed:e1:bb: 09:30:b1:ef:e1:2b:2c:0f:fa:51:2f:4b:67:1e:20:1a:8f:0b: f2:3f:5e:1c:0a:9c:41:cb:d3:6c:c2:32:00:b4:b4:f6:6f:ac: 6e:df:fd:37:1e:49:b1:ce:4e:e9:10:9b:91:d4:52:a0:e9:61: 97:98:88:4f:77:44:58:30:13:86:00:95:4c:5c:f5:16:b5:5b: 5e:42:29:79:c7:ab:24:55:0e:be:ff:09:b9:8c:38:55:0a:47: c8:5e:95:e9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZCN0MxMTAvBgNVBAUTKDA0RjA3NEEwQkE4NzgwNUM1MEZDNzk5M0Q0MDQxMEI4 NEExMUQyRjYwHhcNMjUxMDI5MDI0NzAxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAxODAyNS03ZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07Xi9ZbK8uBpX4F1FEyZDkcY3+BJn8SJRT9GGBtb41n8rWFWAuGId6R3t0CL BgcC8ElZZ8FJu0Kl6ItvxNyBrGa7XSiRfLNQfgQnxM6II2DHM9s11BOnNHeJMzw7 hCf8XfG21YaO2fXCKU9tjUBzFd/9frdGL0NJvxHMdt+fSSDTGfy3XsE8s7HSS5k9 +RJJsOvM+SIaficKUyzczc02C7TyTrcZ35DF0O5zP0uDkyVzg3aan+NUEaxoEGHS EdA98SN7RZEf42VnwrMkwUlOhNgkhtcAMXFgj1nIgOjppR+D4YU/9OGX+OIuacTo 3tGDDR4jGwU9Jmf2TeIs1N9aRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIcXztlP mfLcp5ttbVoJ2HFa/PqoMB8GA1UdIwQYMBaAFATwdKC6h4BcUPx5k9QEELhKEdL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkI3Qy81MUE5NDQ1QURG ODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdGeFFfSG1UMUFRUXVFb1Iw dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQQjBvTHFIZ0Z4UV9IbVQxQVFRdUVvUjB2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjZCN0MvNTFBOTQ0NUFERjg4MTFFREFGQkYyQjdGQzRGOUFFMDIvRjU3Q0I4RjZE RjhDMTFFRDlFQUU1ODg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjHIwDQYJKoZIhvcNAQELBQADggEBACwm4iyO2WArEUii Bfl7Fz0owkGI+DMWdKLIChQNq4rF8KNz9K7PBdnIN6n767SgWic1gWfSoC0esf+s g62hxdjRKU0Iqyx5o2f0upP53FwDXo0x1Iayx230E6QLIPTMfPVrHcWp1DWZ46wg TnOoW390r4QfJtGV2DWKXFpjUaW6Kc74N6utunqpin5kGwbPA509eOutZ275A2F0 TAuU6O3huwkwse/hKywP+lEvS2ceIBqPC/I/XhwKnEHL02zCMgC0tPZvrG7f/Tce SbHOTukQm5HUUqDpYZeYiE93RFgwE4YAlUxc9Ra1W15CKXnHqyRVDr7/CbmMOFUK R8helek= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:04 2025 by rpki-client