$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/A033FFB4F7F511ECADEAB528C4F9AE02.roa File: A033FFB4F7F511ECADEAB528C4F9AE02.roa (raw, json) Hash identifier: S2C+VMQaXNDpZ4wrKaK1oLzxt+RZ0aWeTadlNJ8ZR5Q= Subject key identifier: 8C:57:47:9D:F5:9C:DC:A9:E7:A4:87:75:9C:43:F9:B8:A9:BB:0B:2B Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Certificate serial: 02D8 Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/A033FFB4F7F511ECADEAB528C4F9AE02.roa Signing time: Mon 07 Jul 2025 02:07:38 +0000 ROA not before: Mon 07 Jul 2025 02:07:38 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149820 IP address blocks: 103.187.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Validity Not Before: Jul 7 02:07:38 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686b2bea-8666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:d5:21:44:42:d2:5e:b4:18:99:f7:b3:0f: b8:5e:cf:14:3c:6f:e2:10:ec:cc:ce:87:00:b7:8f: bd:e0:5d:03:ca:d8:a9:ff:67:8a:a2:e9:55:2e:93: a1:5a:a6:fb:20:48:94:33:79:a9:30:64:3a:1d:4b: 60:ea:fa:6b:14:e5:81:e4:c7:70:f9:19:be:33:9e: b5:da:aa:71:b3:f6:cb:f9:45:fb:6c:0d:df:9b:99: 08:d9:d9:93:43:d5:cd:7d:c2:09:0c:09:34:d9:32: d4:92:c6:b8:0d:8a:df:b7:fe:a2:7f:8e:6d:db:bf: 7c:d4:a2:d5:f0:e6:3a:3c:ec:6c:62:3a:74:05:25: 98:78:87:8a:ac:fa:b0:80:80:da:4b:1e:b7:5f:e2: 3d:29:92:c4:3b:e2:0e:fe:64:96:eb:3c:91:4b:ba: c7:d3:4c:ba:15:a9:99:4a:6e:13:b4:ab:04:8f:d7: 58:7b:29:4e:b2:ce:e8:46:7c:ce:99:67:04:96:17: cb:9f:4c:fe:6f:9b:0d:48:7f:d3:18:23:46:08:c0: 30:d4:0d:55:db:3e:c3:9a:2c:0d:ac:77:38:a8:06: f4:8c:66:5c:e3:ed:40:83:80:ef:f5:b3:7d:e2:eb: b2:dd:98:3c:48:2c:f0:8e:eb:d1:d1:da:13:5c:59: 61:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:57:47:9D:F5:9C:DC:A9:E7:A4:87:75:9C:43:F9:B8:A9:BB:0B:2B X509v3 Authority Key Identifier: keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/A033FFB4F7F511ECADEAB528C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.32.0/23 Signature Algorithm: sha256WithRSAEncryption 87:b9:d0:e3:d2:7d:cc:31:90:cc:bc:dd:53:d8:d5:c9:23:06: 06:16:d5:78:0c:a2:db:84:0d:86:03:aa:73:a3:1d:a0:55:33: 64:92:b4:55:ad:2c:6a:0f:77:11:b9:73:c0:ab:e6:45:3c:9d: 30:5a:53:fd:a8:50:37:ed:b6:dd:ed:92:a6:ca:0d:71:ff:c9: 87:75:c9:d1:46:cc:66:ea:e3:01:80:c7:d0:be:70:56:3b:5d: 9b:b9:70:74:48:dc:d2:3e:5a:c9:36:22:f1:8c:1f:6b:db:04: c1:13:2a:a5:de:5b:56:49:a3:38:bb:27:2b:b5:64:01:2f:46: f4:ff:db:13:e6:40:8b:10:e9:ed:f8:16:7f:97:74:b9:25:90: 53:0a:62:2c:30:49:00:8d:bb:ac:35:30:d8:8d:43:90:12:43: 12:b8:63:07:bb:8d:e5:85:3c:37:2b:78:20:1b:0f:be:9a:be: 1d:58:6e:4d:8a:c9:63:83:9f:8a:d2:69:3a:27:64:e6:4c:73: 17:d9:b2:05:f4:41:28:f0:85:46:89:f6:51:6f:5a:10:20:98: 12:09:9f:54:32:7e:35:74:0f:ee:04:ec:a8:23:de:bf:4e:e4: c6:c3:bd:69:7f:8f:67:f8:61:1a:5d:86:fc:a0:7a:1b:8d:c8: 43:51:eb:88 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3 NjdDNzBEMzgwHhcNMjUwNzA3MDIwNzM4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZiMmJlYS04NjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxnVIURC0l60GJn3sw+4Xs8UPG/iEOzMzocAt4+94F0Dytip/2eKoulVLpOh Wqb7IEiUM3mpMGQ6HUtg6vprFOWB5Mdw+Rm+M5612qpxs/bL+UX7bA3fm5kI2dmT Q9XNfcIJDAk02TLUksa4DYrft/6if45t27981KLV8OY6POxsYjp0BSWYeIeKrPqw gIDaSx63X+I9KZLEO+IO/mSW6zyRS7rH00y6FamZSm4TtKsEj9dYeylOss7oRnzO mWcElhfLn0z+b5sNSH/TGCNGCMAw1A1V2z7DmiwNrHc4qAb0jGZc4+1Ag4Dv9bN9 4uuy3Zg8SCzwjuvR0doTXFlh2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIxXR531 nNyp56SHdZxD+bipuwsrMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNFMjEvQ0U0OEU3QzhGMTlFMTFFQ0E5RUU5QjNEQzRGOUFFMDIvQTAzM0ZGQjRG N0Y1MTFFQ0FERUFCNTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnuyAwDQYJKoZIhvcNAQELBQADggEBAIe50OPSfcwxkMy8 3VPY1ckjBgYW1XgMotuEDYYDqnOjHaBVM2SStFWtLGoPdxG5c8Cr5kU8nTBaU/2o UDfttt3tkqbKDXH/yYd1ydFGzGbq4wGAx9C+cFY7XZu5cHRI3NI+Wsk2IvGMH2vb BMETKqXeW1ZJozi7Jyu1ZAEvRvT/2xPmQIsQ6e34Fn+XdLklkFMKYiwwSQCNu6w1 MNiNQ5ASQxK4Ywe7jeWFPDcreCAbD76avh1Ybk2KyWODn4rSaTonZOZMcxfZsgX0 QSjwhUaJ9lFvWhAgmBIJn1QyfjV0D+4E7Kgj3r9O5MbDvWl/j2f4YRpdhvygehuN yENR64g= -----END CERTIFICATE-----Generated at Wed Nov 5 03:54:18 2025 by rpki-client