$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/4D962E8AE65111ED90E5833EC4F9AE02.roa File: 4D962E8AE65111ED90E5833EC4F9AE02.roa (raw, json) Hash identifier: 3SQV1F9slNIO5M7UqEAQZkXcxMO9bvgWNAs/r+smThc= Subject key identifier: 3A:F7:F1:BB:FF:00:33:5B:35:08:8D:EA:79:05:99:46:0F:7E:4C:25 Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Certificate serial: 0174 Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/4D962E8AE65111ED90E5833EC4F9AE02.roa Signing time: Fri 11 Apr 2025 03:08:30 +0000 ROA not before: Fri 11 Apr 2025 03:08:30 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 151204 IP address blocks: 103.69.94.0/23 maxlen: 24 2001:df2:57c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Validity Not Before: Apr 11 03:08:30 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=67f887ae-b5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:59:93:4a:5c:01:1e:1e:8c:d0:fa:b0:85: d8:7f:22:65:44:36:e4:fa:7d:a5:67:f5:6e:0a:f7: 9a:02:7a:0c:fe:bc:57:6a:d0:ff:ed:02:52:14:56: 82:34:27:93:42:60:97:50:fa:b4:26:e9:db:c8:23: 82:3d:c6:74:0b:47:0c:32:df:95:5c:a4:b3:b6:ce: 67:8f:93:32:2a:c5:29:e0:64:da:b1:ce:10:00:2e: 57:55:3a:29:ff:11:da:92:72:f7:cc:28:5c:14:79: 4c:74:38:e0:48:5f:87:1b:a3:f5:68:b3:43:2c:ef: 37:25:7f:8f:50:4c:c9:62:c0:7d:16:f5:2e:10:48: d8:b1:36:a2:27:7f:69:8a:87:fa:fe:18:00:46:09: 48:0f:dd:05:b7:0c:f8:8b:c2:75:9e:ee:b0:54:c5: 91:6e:31:f4:de:3c:8a:85:84:f0:25:22:6f:d5:80: 92:5c:2d:7c:0d:d5:4d:e3:ac:bb:9d:6b:b0:be:42: 26:c9:04:86:ff:1a:81:13:0b:f8:fc:f7:9b:77:9d: 70:4c:e5:d1:65:7c:3e:2f:77:cf:ca:e7:d0:83:30: d2:d4:68:02:c6:ab:02:19:53:20:21:92:9a:41:73: 68:f9:6e:81:06:b5:62:08:07:3b:d5:f5:0e:98:1a: 93:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F7:F1:BB:FF:00:33:5B:35:08:8D:EA:79:05:99:46:0F:7E:4C:25 X509v3 Authority Key Identifier: keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/4D962E8AE65111ED90E5833EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.69.94.0/23 IPv6: 2001:df2:57c0::/48 Signature Algorithm: sha256WithRSAEncryption a7:a7:a3:e4:13:dd:82:80:3c:be:2a:98:37:af:28:04:0c:90: 33:58:02:ea:09:6a:8f:22:62:e4:b3:31:b9:b7:6b:10:59:7b: 6b:c8:9d:cf:a9:47:02:61:5f:5b:a9:26:82:e9:0d:61:5c:f9: da:42:11:76:bd:7c:cb:60:30:d8:39:f6:6a:df:4f:61:9e:4a: f8:44:f3:ac:24:7e:8d:59:e6:3c:af:33:37:27:8b:73:bf:4b: a4:d9:fc:68:90:eb:46:89:4c:d4:15:e8:ea:19:5b:7d:a2:8c: 22:ea:da:dd:3f:0a:9f:39:52:2c:49:37:f5:88:9b:31:04:0d: 82:53:fa:7a:99:77:1d:b5:77:99:10:ae:ad:24:cd:0e:87:75: 8c:80:99:63:af:4c:84:c7:66:5b:28:b0:59:8b:88:94:e6:88: 9d:27:d5:d9:58:bc:a6:ed:9b:e0:62:d5:b6:dc:32:28:85:c1: b5:48:a9:4a:b5:43:1b:74:1a:00:9b:cb:8e:d9:22:f4:6f:87: 97:f3:be:73:33:ec:a9:37:cb:f9:a4:89:cc:9f:da:fb:95:82: a8:39:ab:ac:1f:e5:34:fc:54:c8:98:73:58:e9:8e:01:4e:6b: d3:22:15:9d:9a:86:b4:78:3a:fa:b3:11:ac:72:55:7b:c5:ba: ab:68:49:68 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4QkMxMTAvBgNVBAUTKEQ1QzM1RkE3NzlCMjIxOTk2MDlDM0VBMEE1MzFDNUEw RDMzMkFEMDEwHhcNMjUwNDExMDMwODMwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4ODdhZS1iNWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFpZk0pcAR4ejND6sIXYfyJlRDbk+n2lZ/VuCveaAnoM/rxXatD/7QJSFFaC NCeTQmCXUPq0JunbyCOCPcZ0C0cMMt+VXKSzts5nj5MyKsUp4GTasc4QAC5XVTop /xHaknL3zChcFHlMdDjgSF+HG6P1aLNDLO83JX+PUEzJYsB9FvUuEEjYsTaiJ39p iof6/hgARglID90Ftwz4i8J1nu6wVMWRbjH03jyKhYTwJSJv1YCSXC18DdVN46y7 nWuwvkImyQSG/xqBEwv4/Pebd51wTOXRZXw+L3fPyufQgzDS1GgCxqsCGVMgIZKa QXNo+W6BBrViCAc71fUOmBqT4wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDr38bv/ ADNbNQiN6nkFmUYPfkwlMB8GA1UdIwQYMBaAFNXDX6d5siGZYJw+oKUxxaDTMq0B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQThCQy8wNTRBNEM1MEU2 NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUlabGduRDZncFRIRm9OTXly UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjTmZwM215SVpsZ25ENmdwVEhGb05NeXJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkE4QkMvMDU0QTRDNTBFNjREMTFFREIzRjgxNzM3QzRGOUFFMDIvNEQ5NjJFOEFF NjUxMTFFRDkwRTU4MzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnRV4wDwQCAAIwCQMHACABDfJXwDANBgkqhkiG9w0BAQsF AAOCAQEAp6ej5BPdgoA8viqYN68oBAyQM1gC6glqjyJi5LMxubdrEFl7a8idz6lH AmFfW6kmgukNYVz52kIRdr18y2Aw2Dn2at9PYZ5K+ETzrCR+jVnmPK8zNyeLc79L pNn8aJDrRolM1BXo6hlbfaKMIura3T8KnzlSLEk39YibMQQNglP6epl3HbV3mRCu rSTNDod1jICZY69MhMdmWyiwWYuIlOaInSfV2Vi8pu2b4GLVttwyKIXBtUipSrVD G3QaAJvLjtki9G+Hl/O+czPsqTfL+aSJzJ/a+5WCqDmrrB/lNPxUyJhzWOmOAU5r 0yIVnZqGtHg6+rMRrHJVe8W6q2hJaA== -----END CERTIFICATE-----Generated at Wed Nov 5 19:49:34 2025 by rpki-client