$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/440FD944C56F11EE8FF5FF2FC4F9AE02.roa File: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (raw, json) Hash identifier: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM= Subject key identifier: BC:05:90:E0:01:78:82:3E:03:51:8F:C4:E1:D2:80:4A:9C:29:EF:2F Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: E1 Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/440FD944C56F11EE8FF5FF2FC4F9AE02.roa Signing time: Fri 11 Apr 2025 05:10:58 +0000 ROA not before: Fri 11 Apr 2025 05:10:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4826 IP address blocks: 103.136.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: Apr 11 05:10:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f8a462-388d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:f1:c6:b7:b4:29:e8:10:bd:9b:b4:a9:6f: 86:7e:74:03:5d:72:c6:78:51:5e:5c:84:51:62:54: c5:fd:77:21:36:23:de:60:e8:18:5d:4e:cf:2c:08: 42:d6:52:2e:2c:8c:7f:05:fb:4a:98:f2:b8:ae:35: e5:bc:82:5c:0b:94:b0:03:fa:e6:37:54:9a:2c:9b: b3:84:f2:8b:03:64:81:9a:f2:06:78:01:e4:31:7b: 7b:de:7d:25:a6:4f:38:00:57:e2:32:34:87:ee:f4: ff:04:22:d8:6a:4a:6b:83:98:e3:92:8e:a8:b7:84: ab:a2:86:67:7a:eb:b5:09:04:c8:6c:3c:9c:09:d7: 15:e7:9b:d6:51:e0:7e:c3:21:44:74:49:9a:38:a2: e2:eb:51:48:4d:78:0d:cc:1b:3f:ec:ad:3a:d6:de: d4:59:2b:f1:5a:8c:5e:ef:c2:8a:2c:22:64:2b:88: f2:43:9a:7d:59:15:33:01:38:e7:2e:64:cf:2b:43: 00:52:cc:48:9d:01:ec:f0:78:71:2c:25:ba:ab:87: 06:29:09:71:db:10:b8:6b:6f:12:b3:cf:2f:90:10: fe:da:80:b4:c5:45:aa:ff:47:44:e8:13:e8:d3:e6: 18:c8:67:58:63:63:42:fb:4a:8d:95:8f:02:ff:be: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:05:90:E0:01:78:82:3E:03:51:8F:C4:E1:D2:80:4A:9C:29:EF:2F X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/440FD944C56F11EE8FF5FF2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.120.0/24 Signature Algorithm: sha256WithRSAEncryption 28:0d:73:e9:1f:31:52:7c:d8:c5:3d:bc:d0:4b:c0:6b:e4:a4: 5a:8e:46:86:3f:80:bf:e6:05:fc:57:ca:27:ff:29:b2:fa:b7: ce:fb:f6:bb:5d:f8:de:71:72:dd:d6:e2:f4:83:cd:5b:58:ef: 11:bc:51:53:6a:c3:ba:7a:7e:14:37:c8:05:8c:12:6d:a5:3f: ac:0f:b7:30:34:94:df:fb:d4:b0:4a:c3:3c:a1:96:44:d2:ed: dd:e7:7d:ae:5b:c9:c2:a0:46:97:dc:ff:5d:2a:80:43:d3:8b: e6:84:23:8e:97:6f:1d:17:19:e0:4a:21:51:b7:bd:e7:5c:59: 05:27:a6:a7:05:74:4e:fc:9a:fb:87:11:3d:15:cd:9c:8f:39: 46:3c:4e:dc:39:3f:41:b3:f0:14:29:96:44:07:73:cc:e0:76: 05:dc:70:47:7a:0d:0a:89:09:3e:38:9e:04:52:8f:c2:a0:73: d7:18:24:b2:66:04:2e:0a:f8:72:66:0a:65:21:11:38:ed:a5: 66:17:53:9f:fb:a1:7e:cc:eb:6f:ba:42:11:d0:01:e1:4d:35: 2b:a1:46:47:d7:58:24:3b:19:72:f5:80:ee:05:4b:73:06:de: 3d:41:41:ec:2b:b5:a4:c7:a5:83:0a:6c:55:9b:c6:a0:7e:39: 96:49:da:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5 MjNBQTc1QzcwHhcNMjUwNDExMDUxMDU4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4YTQ2Mi0zODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIjxxre0KegQvZu0qW+GfnQDXXLGeFFeXIRRYlTF/XchNiPeYOgYXU7PLAhC 1lIuLIx/BftKmPK4rjXlvIJcC5SwA/rmN1SaLJuzhPKLA2SBmvIGeAHkMXt73n0l pk84AFfiMjSH7vT/BCLYakprg5jjko6ot4SrooZneuu1CQTIbDycCdcV55vWUeB+ wyFEdEmaOKLi61FITXgNzBs/7K061t7UWSvxWoxe78KKLCJkK4jyQ5p9WRUzATjn LmTPK0MAUsxInQHs8HhxLCW6q4cGKQlx2xC4a28Ss88vkBD+2oC0xUWq/0dE6BPo 0+YYyGdYY2NC+0qNlY8C/74Y6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLwFkOAB eII+A1GPxOHSgEqcKe8vMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1 NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzhBOUYvODJDNjdFQTZDNTZEMTFFRUIyNzg1MzRBQzRGOUFFMDIvNDQwRkQ5NDRD NTZGMTFFRThGRjVGRjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniHgwDQYJKoZIhvcNAQELBQADggEBACgNc+kfMVJ82MU9 vNBLwGvkpFqORoY/gL/mBfxXyif/KbL6t8779rtd+N5xct3W4vSDzVtY7xG8UVNq w7p6fhQ3yAWMEm2lP6wPtzA0lN/71LBKwzyhlkTS7d3nfa5bycKgRpfc/10qgEPT i+aEI46Xbx0XGeBKIVG3vedcWQUnpqcFdE78mvuHET0VzZyPOUY8Ttw5P0Gz8BQp lkQHc8zgdgXccEd6DQqJCT44ngRSj8Kgc9cYJLJmBC4K+HJmCmUhETjtpWYXU5/7 oX7M62+6QhHQAeFNNSuhRkfXWCQ7GXL1gO4FS3MG3j1BQewrtaTHpYMKbFWbxqB+ OZZJ2p4= -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:43 2025 by rpki-client