$ rpki-client -vvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/05449490E17B11EC93AB7473C4F9AE02.roa File: 05449490E17B11EC93AB7473C4F9AE02.roa (raw, json) Hash identifier: TQO7DA2C+52oraPsdnjGz3A009856ZzetwGGv8/CUtg= Subject key identifier: 4E:96:C2:B6:28:7D:F8:95:8F:11:4E:43:B7:34:CF:A5:92:37:A4:DF Certificate issuer: /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Certificate serial: 0F78 Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/05449490E17B11EC93AB7473C4F9AE02.roa Signing time: Fri 30 May 2025 18:30:00 +0000 ROA not before: Fri 30 May 2025 18:30:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139924 IP address blocks: 103.138.158.0/23 maxlen: 23 103.138.158.0/24 maxlen: 24 103.138.159.0/24 maxlen: 24 2407:98c0::/32 maxlen: 32 2407:98c0::/48 maxlen: 48 2407:98c0:1::/48 maxlen: 48 2407:98c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3960 (0xf78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82 Validity Not Before: May 30 18:30:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6839f927-dc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:50:4e:b6:63:95:35:e7:c6:28:8c:fe:82:87: b0:af:21:e5:4c:f4:61:44:9c:64:06:28:19:82:db: 84:11:5d:0a:91:d2:31:d2:d1:82:0a:24:79:ae:d2: b7:65:a5:b1:84:8f:ae:67:86:3e:28:36:9a:18:72: a2:21:c7:a5:d4:5e:bd:f3:64:2d:1d:1f:6b:d2:19: 18:e0:b8:97:08:55:bc:5b:44:33:81:ae:ed:12:2e: 29:f3:66:5a:71:13:05:47:99:15:cd:fc:a5:da:7e: 2a:68:45:c3:89:5f:c6:fa:c9:44:99:03:1e:5d:6d: 9a:35:b7:b9:73:36:14:1f:81:06:a5:4a:2c:9a:06: 15:ef:50:8a:ac:e4:a7:e1:ae:c6:13:a2:83:80:9a: 14:40:ca:37:79:4c:9f:ea:2d:66:ae:32:e2:e9:f3: 4e:60:69:91:a8:30:f3:5c:7d:29:18:f2:f2:3a:5e: d6:35:14:94:35:96:e5:58:4b:1e:48:22:03:3c:fd: 36:79:99:6d:d0:a3:7f:5a:5b:b6:55:3a:98:5d:42: a4:4e:d2:47:fd:46:94:62:76:02:09:da:5c:39:bd: 21:26:f4:7b:86:c7:7f:d5:44:b6:df:e3:8b:bc:f1: b8:44:6b:b0:03:ce:f8:69:5d:90:16:ad:6b:6b:f1: fb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:96:C2:B6:28:7D:F8:95:8F:11:4E:43:B7:34:CF:A5:92:37:A4:DF X509v3 Authority Key Identifier: keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/05449490E17B11EC93AB7473C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.158.0/23 IPv6: 2407:98c0::/32 Signature Algorithm: sha256WithRSAEncryption 66:36:87:85:be:7e:49:90:3e:2b:11:cf:3e:62:ed:85:cf:28: bf:72:82:d7:a0:7b:ab:b8:fa:17:c1:1e:06:27:b3:88:a6:57: 70:09:2b:56:ca:1d:6f:e7:41:21:26:1d:9b:c7:18:7d:0d:23: f7:c3:bb:6a:de:ee:06:92:21:8e:f2:57:fe:c2:a0:6f:9e:8e: eb:42:94:30:34:c0:c8:07:59:f1:b2:03:ac:d9:dc:91:01:fc: 87:9d:19:a4:da:e3:55:0a:fb:6a:35:24:de:e7:a7:ce:49:fb: 8e:b0:d2:53:35:60:f3:e7:e1:70:18:0f:65:c6:ca:a1:a5:79: 45:43:09:b7:fe:ae:3e:c7:2d:b0:b4:71:d3:5b:04:45:3d:e3: 8d:b0:fc:e0:9d:1f:33:0f:a2:58:73:7a:19:88:d4:56:73:a9: fd:eb:07:a9:52:5b:d4:ef:dd:90:b9:26:18:16:01:15:bf:09: 7a:1b:53:9e:0b:b2:52:fe:eb:0d:19:8b:27:66:89:69:22:3e: 3d:0a:9c:20:f2:b4:66:8e:2d:1f:ed:1f:ed:aa:38:b4:bc:1f: 5a:ad:e3:f0:70:a3:21:ee:92:fc:74:d0:39:43:7f:18:a1:8a: 84:b1:ad:1d:a4:c9:fa:91:8c:ef:5d:45:b9:44:fb:13:c5:53: ca:73:42:59 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICD3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyRUUxMTAvBgNVBAUTKEM4MjQzNDc0MjVCQUM4QUY1OUI0RTE5NjZCQzEwREJG QThCREFCODIwHhcNMjUwNTMwMTgzMDAwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM5ZjkyNy1kYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01BOtmOVNefGKIz+goewryHlTPRhRJxkBigZgtuEEV0KkdIx0tGCCiR5rtK3 ZaWxhI+uZ4Y+KDaaGHKiIcel1F6982QtHR9r0hkY4LiXCFW8W0Qzga7tEi4p82Za cRMFR5kVzfyl2n4qaEXDiV/G+slEmQMeXW2aNbe5czYUH4EGpUosmgYV71CKrOSn 4a7GE6KDgJoUQMo3eUyf6i1mrjLi6fNOYGmRqDDzXH0pGPLyOl7WNRSUNZblWEse SCIDPP02eZlt0KN/Wlu2VTqYXUKkTtJH/UaUYnYCCdpcOb0hJvR7hsd/1US23+OL vPG4RGuwA874aV2QFq1ra/H7hwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFE6WwrYo ffiVjxFOQ7c0z6WSN6TfMB8GA1UdIwQYMBaAFMgkNHQlusivWbThlmvBDb+ovauC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjJFRS8xRjQxMUY1ODZD MjExMUU5Qjc2RkE5MDlDNEY5QUUwMi95Q1EwZENXNnlLOVp0T0dXYThFTnY2aTlx NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lDUTBkQ1c2eUs5WnRPR1dhOEVOdjZpOXE0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIyRUUvMUY0MTFGNTg2QzIxMTFFOUI3NkZBOTA5QzRGOUFFMDIvMDU0NDk0OTBF MTdCMTFFQzkzQUI3NDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnip4wDQQCAAIwBwMFACQHmMAwDQYJKoZIhvcNAQELBQAD ggEBAGY2h4W+fkmQPisRzz5i7YXPKL9ygtege6u4+hfBHgYns4imV3AJK1bKHW/n QSEmHZvHGH0NI/fDu2re7gaSIY7yV/7CoG+ejutClDA0wMgHWfGyA6zZ3JEB/Ied GaTa41UK+2o1JN7np85J+46w0lM1YPPn4XAYD2XGyqGleUVDCbf+rj7HLbC0cdNb BEU9442w/OCdHzMPolhzehmI1FZzqf3rB6lSW9Tv3ZC5JhgWARW/CXobU54LslL+ 6w0ZiydmiWkiPj0KnCDytGaOLR/tH+2qOLS8H1qt4/BwoyHukvx00DlDfxihioSx rR2kyfqRjO9dRblE+xPFU8pzQlk= -----END CERTIFICATE-----Generated at Wed Nov 5 14:36:11 2025 by rpki-client