$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/753CE1E6814411F0AF823466C4F9AE02.roa File: 753CE1E6814411F0AF823466C4F9AE02.roa (raw, json) Hash identifier: hEey+djFvYlE1JXaWprdcTf+AvgTaP0qwoFIGuxytf8= Subject key identifier: 83:EC:E6:4A:B6:86:85:CB:30:96:84:1F:1A:10:12:DC:21:9F:16:69 Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Certificate serial: 06C6 Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/753CE1E6814411F0AF823466C4F9AE02.roa Signing time: Thu 30 Oct 2025 22:12:47 +0000 ROA not before: Thu 30 Oct 2025 22:12:47 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138572 IP address blocks: 103.133.96.0/22 maxlen: 22 103.133.99.0/24 maxlen: 24 2404:4ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7 Validity Not Before: Oct 30 22:12:47 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6903e2df-b97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:b6:cd:0b:c3:15:9d:c6:c7:d8:68:d6:d0: 10:6e:9d:5a:d6:31:14:58:7b:17:91:fe:22:3d:17: b0:e2:b3:9b:02:9f:f4:db:1d:1e:8c:2a:f5:6e:77: 94:fc:65:09:23:3b:be:fb:5d:e5:be:0c:97:c2:dc: 68:f9:d8:cc:24:fe:53:18:99:1b:b8:00:db:35:24: a2:fa:66:a8:1e:e6:65:ba:ce:ce:78:1b:53:1e:78: 76:ac:a3:23:7f:cb:e9:8a:40:d2:2f:64:7b:0d:ee: 41:11:60:44:66:6e:0e:37:5d:22:2d:53:59:0d:66: ed:81:44:47:d8:14:61:fc:75:da:3a:44:a1:9c:37: de:62:73:fa:b8:78:1f:0c:e4:e8:f4:66:97:c1:9e: 14:86:03:5f:7a:bc:4a:ed:ef:da:8d:7c:e7:c5:a6: ae:21:67:47:5c:16:86:fd:ee:61:05:9d:71:a0:2d: 3e:e1:99:c4:e3:b2:ff:5d:a0:3d:4d:d4:73:19:43: 04:56:ab:8e:92:7f:e6:bd:a5:1f:b6:ca:4f:ca:e0: ff:46:51:a5:bc:4f:dc:24:d3:a6:52:c4:a5:1c:4f: 5d:51:6b:40:3d:da:83:4f:ef:5f:ea:fd:85:f9:45: cf:dd:c2:5f:85:d8:a8:10:be:2e:d7:58:fe:6e:4b: fc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EC:E6:4A:B6:86:85:CB:30:96:84:1F:1A:10:12:DC:21:9F:16:69 X509v3 Authority Key Identifier: keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/753CE1E6814411F0AF823466C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.96.0/22 IPv6: 2404:4ac0::/32 Signature Algorithm: sha256WithRSAEncryption c4:31:54:91:b4:63:7d:aa:b9:90:c2:3e:a7:0d:2f:2d:3c:6c: ab:37:c0:17:f9:57:cd:e7:fd:2b:05:58:2f:a3:4a:a5:db:d2: e2:84:7b:4b:fa:eb:dd:0c:e2:c1:bc:60:fe:51:d2:13:bc:8e: 28:97:e6:9b:a8:76:49:81:13:57:c5:51:b1:77:56:3c:54:38: 8e:52:bc:33:9d:60:6f:ff:ee:08:6a:3e:89:bc:89:df:3c:60: 0e:fc:0f:e4:b4:ee:c2:e3:41:b2:99:97:61:1b:a2:f4:23:b9: 7f:ad:b7:49:a7:c9:0f:8e:51:85:6e:ac:88:28:a1:5b:8d:9f: f6:de:63:99:fe:81:81:83:92:48:a9:7e:b4:65:9b:08:78:c3: 52:7c:db:8c:a5:f1:83:57:fa:01:04:a3:31:f7:65:2a:fa:9f: 83:b7:f6:e8:32:a2:50:96:08:b6:ba:34:45:3c:d9:74:4b:b1: 97:d4:7a:ed:36:7f:7d:5d:47:7a:15:68:25:48:d3:39:14:81: 96:4b:40:ad:28:5e:42:dc:05:d5:a2:1b:79:38:9b:1d:dc:06: df:ff:19:e6:89:25:f7:b2:ff:64:8f:4f:4e:2a:a7:e4:9c:e2: da:b0:97:9e:2c:b1:77:a6:bd:7d:d9:ca:28:c4:7d:d7:43:90: f4:82:56:08 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDFBRUI5OTUxQjU4NEUxRTIxQkJGQzUyQ0NFODkwOTQx MTNDNkZDQTcwHhcNMjUxMDMwMjIxMjQ3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzZTJkZi1iOTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1u2zQvDFZ3Gx9ho1tAQbp1a1jEUWHsXkf4iPRew4rObAp/02x0ejCr1bneU /GUJIzu++13lvgyXwtxo+djMJP5TGJkbuADbNSSi+maoHuZlus7OeBtTHnh2rKMj f8vpikDSL2R7De5BEWBEZm4ON10iLVNZDWbtgURH2BRh/HXaOkShnDfeYnP6uHgf DOTo9GaXwZ4UhgNferxK7e/ajXznxaauIWdHXBaG/e5hBZ1xoC0+4ZnE47L/XaA9 TdRzGUMEVquOkn/mvaUftspPyuD/RlGlvE/cJNOmUsSlHE9dUWtAPdqDT+9f6v2F +UXP3cJfhdioEL4u11j+bkv88QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIPs5kq2 hoXLMJaEHxoQEtwhnxZpMB8GA1UdIwQYMBaAFBrrmVG1hOHiG7/FLM6JCUETxvyn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9GM0RGNTg4Qzgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9HdXVaVWJXRTRlSWJ2OFVzem9rSlFSUEdf S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dVpVYldFNGVJYnY4VXN6b2tKUVJQR19LYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNEQzUvRjNERjU4OEM4MEI2MTFFQkJFQ0JGMzc5QzRGOUFFMDIvNzUzQ0UxRTY4 MTQ0MTFGMEFGODIzNDY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhWAwDQQCAAIwBwMFACQESsAwDQYJKoZIhvcNAQELBQAD ggEBAMQxVJG0Y32quZDCPqcNLy08bKs3wBf5V83n/SsFWC+jSqXb0uKEe0v6690M 4sG8YP5R0hO8jiiX5puodkmBE1fFUbF3VjxUOI5SvDOdYG//7ghqPom8id88YA78 D+S07sLjQbKZl2EbovQjuX+tt0mnyQ+OUYVurIgooVuNn/beY5n+gYGDkkipfrRl mwh4w1J824yl8YNX+gEEozH3ZSr6n4O39ugyolCWCLa6NEU82XRLsZfUeu02f31d R3oVaCVI0zkUgZZLQK0oXkLcBdWiG3k4mx3cBt//GeaJJfey/2SPT04qp+Sc4tqw l54ssXemvX3ZyijEfddDkPSCVgg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:45:48 2025 by rpki-client