$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa File: A7982B82B88011F081A7B245C4F9AE02.roa (raw, json) Hash identifier: nckl+Acp7B7ApcHsl6K4bJl3rtQ4qeg5UR18Zt3JPwE= Subject key identifier: 0A:4B:44:8A:0D:4B:C1:85:6F:C2:3B:77:57:10:06:EE:4D:FE:9F:53 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0BA0 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa Signing time: Mon 03 Nov 2025 06:45:15 +0000 ROA not before: Mon 03 Nov 2025 06:45:15 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 138557 IP address blocks: 103.132.217.0/24 maxlen: 24 103.132.218.0/23 maxlen: 23 103.132.218.0/24 maxlen: 24 103.132.219.0/24 maxlen: 24 2404:4040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Nov 3 06:45:15 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69084f7b-b2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:84:50:d5:52:b9:4f:dd:31:cb:17:09:11: 36:1d:bd:c4:3e:b6:c2:0d:d7:50:56:46:33:bb:60: b6:7b:05:54:6d:81:86:c7:d2:91:19:25:d3:be:c4: 75:27:a7:53:c2:05:f6:f9:61:98:97:0d:08:a4:d3: 43:aa:25:27:ca:0c:ab:fc:46:eb:af:ad:d5:56:7a: da:3d:14:d5:35:2b:22:bb:1f:88:fc:f1:f0:41:c9: b0:89:8b:fc:a6:dc:44:4d:5c:4e:0e:fe:54:47:be: 8d:c4:ad:c2:5a:f9:4e:c2:5f:44:7c:14:a5:f4:b9: 64:ea:2c:18:78:81:f0:43:b2:7a:02:57:e7:ce:5f: 39:1e:3b:a9:15:24:4d:83:78:20:3e:34:42:c4:6d: 01:d5:db:a6:3c:a9:65:33:a5:a8:5e:c7:85:a8:21: ac:c6:0c:2c:57:c3:f0:7b:98:de:12:ab:02:cd:7d: 38:b6:a0:ea:aa:eb:84:9c:44:cc:a1:f8:ce:f5:97: 18:0d:99:97:12:07:34:7a:d4:28:1b:e9:66:43:10: 2e:38:be:c1:33:d3:6f:c1:d7:23:c6:1d:bb:1f:66: 9f:02:7b:55:c7:6c:7e:56:49:eb:12:8a:67:a9:36: bc:5b:7a:14:85:e7:79:fd:f6:2d:da:6d:a4:95:9f: 71:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4B:44:8A:0D:4B:C1:85:6F:C2:3B:77:57:10:06:EE:4D:FE:9F:53 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.217.0-103.132.219.255 IPv6: 2404:4040::/32 Signature Algorithm: sha256WithRSAEncryption bf:27:3c:b8:b1:02:0e:4c:fd:4a:4b:1c:90:fd:66:fc:23:82: 9c:50:20:82:89:cd:81:16:c1:9b:cb:4b:d1:50:b0:20:40:eb: 40:26:14:bd:4d:ee:c0:a3:ad:f1:b9:3c:c1:93:18:c1:c3:b4: 31:8a:f6:86:52:c6:8a:42:b6:bf:03:28:e3:a9:18:b7:28:21: b9:87:52:49:57:b2:54:10:10:04:7c:f4:81:ab:b6:1e:04:6e: 48:94:a3:61:6d:f7:3f:d6:d5:5b:7c:a0:fa:1d:00:7a:f9:f7: a1:71:d0:65:31:a4:25:7b:8d:74:a0:86:1c:ef:4c:4f:fd:d9: 55:81:0f:c5:c1:cd:aa:4a:38:ae:9c:2a:d9:3a:ce:d3:bf:25: ed:fc:42:18:73:d6:d0:52:e4:8c:42:25:71:31:10:a3:85:33: f0:bd:02:53:3b:33:4e:a4:cf:52:f7:b8:c1:23:a1:d0:62:8e: c0:15:0d:a6:8c:83:b5:39:fc:99:7f:c9:76:fa:b2:de:41:60: 96:11:ac:52:c5:8e:da:33:8e:9d:10:eb:80:55:69:2d:a5:7b: e6:ed:47:06:f9:d8:ee:16:fa:37:e5:76:4c:f0:81:d1:9d:2b: 46:b0:8b:7f:52:8a:0b:37:7d:8c:f5:19:f6:1b:f6:e0:23:5e: 4b:3f:cb:6b -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjUxMTAzMDY0NTE1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4NGY3Yi1iMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEqEUNVSuU/dMcsXCRE2Hb3EPrbCDddQVkYzu2C2ewVUbYGGx9KRGSXTvsR1 J6dTwgX2+WGYlw0IpNNDqiUnygyr/Ebrr63VVnraPRTVNSsiux+I/PHwQcmwiYv8 ptxETVxODv5UR76NxK3CWvlOwl9EfBSl9Llk6iwYeIHwQ7J6Alfnzl85HjupFSRN g3ggPjRCxG0B1dumPKllM6WoXseFqCGsxgwsV8Pwe5jeEqsCzX04tqDqquuEnETM ofjO9ZcYDZmXEgc0etQoG+lmQxAuOL7BM9Nvwdcjxh27H2afAntVx2x+VknrEopn qTa8W3oUhed5/fYt2m2klZ9x/wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFApLRIoN S8GFb8I7d1cQBu5N/p9TMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYyMkQvMkFBRkNDRUUzNjhFMTFFQTkyQTQ5RTdEQzRGOUFFMDIvQTc5ODJCODJC ODgwMTFGMDgxQTdCMjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAGeE2QMEAmeE2DANBAIAAjAHAwUAJARAQDANBgkqhkiG 9w0BAQsFAAOCAQEAvyc8uLECDkz9SksckP1m/COCnFAggonNgRbBm8tL0VCwIEDr QCYUvU3uwKOt8bk8wZMYwcO0MYr2hlLGikK2vwMo46kYtyghuYdSSVeyVBAQBHz0 gau2HgRuSJSjYW33P9bVW3yg+h0Aevn3oXHQZTGkJXuNdKCGHO9MT/3ZVYEPxcHN qko4rpwq2TrO078l7fxCGHPW0FLkjEIlcTEQo4Uz8L0CUzszTqTPUve4wSOh0GKO wBUNpoyDtTn8mX/Jdvqy3kFglhGsUsWO2jOOnRDrgFVpLaV75u1HBvnY7hb6N+V2 TPCB0Z0rRrCLf1KKCzd9jPUZ9hv24CNeSz/Law== -----END CERTIFICATE-----Generated at Wed Nov 5 09:57:34 2025 by rpki-client