$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/8FA95EF2E52811ED863E8C34C4F9AE02.roa File: 8FA95EF2E52811ED863E8C34C4F9AE02.roa (raw, json) Hash identifier: RH854KQ/5YN87OjqRkRCiFr2IhqYgncWKfVpFPV13y0= Subject key identifier: 02:A1:B3:BF:52:AF:DD:D4:91:5A:DE:83:92:82:36:F7:2F:B5:66:E4 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 074F Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/8FA95EF2E52811ED863E8C34C4F9AE02.roa Signing time: Tue 02 Sep 2025 23:44:20 +0000 ROA not before: Tue 02 Sep 2025 23:44:20 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 149448 IP address blocks: 103.24.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1871 (0x74f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 2 23:44:20 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b78154-e1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:b8:fe:76:fe:41:b7:96:0c:65:50:30:4d: 9b:e1:18:ed:08:2f:fa:e1:83:98:9a:a6:6d:f2:6e: d1:b2:4a:83:86:e0:a0:ae:de:c0:ad:57:3d:7b:b4: 85:4b:30:cb:74:0e:a5:2e:e6:a9:eb:d1:63:9c:aa: 94:0d:78:1d:f9:5d:51:6a:4b:76:40:d4:3a:6e:4d: 61:36:c4:f0:61:b6:a9:7a:02:0f:0a:33:f4:85:a6: c3:72:dd:d0:08:de:e4:ff:c1:9c:a3:79:bf:69:7e: 9e:f4:59:49:b7:4e:a4:e8:b4:b9:89:e7:ab:6e:5b: 0a:c8:59:84:4a:8d:f1:61:ff:1e:0b:f7:6c:61:d6: e8:b9:8a:9e:5c:9c:be:30:92:cf:5b:4e:5e:f0:ff: 45:9d:7a:0a:f8:e1:a8:f5:6a:56:74:76:b8:9f:2c: 02:d0:a0:d1:2e:a3:1e:6c:d8:cf:d7:3c:07:ac:63: d0:b1:df:59:aa:2f:15:32:b9:41:7a:1d:45:ad:80: d9:c6:20:2a:79:22:ed:e3:bd:af:da:23:cf:07:d9: 72:13:20:7b:43:c9:0a:51:05:35:1c:81:56:8b:10: ce:ae:68:44:24:10:ba:30:e3:f5:67:98:4b:1d:0f: 06:66:35:4c:9e:49:6e:1f:58:75:b5:fa:9f:91:1c: 62:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A1:B3:BF:52:AF:DD:D4:91:5A:DE:83:92:82:36:F7:2F:B5:66:E4 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/8FA95EF2E52811ED863E8C34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.218.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:1e:56:1b:73:6e:d3:1d:ae:ae:0b:af:aa:17:2a:6c:09:a7: 49:c3:68:63:66:47:50:c9:91:e8:aa:b8:e5:b2:c3:c1:71:79: ec:3b:18:20:69:be:39:f3:b7:5f:44:ca:f7:5d:13:37:d1:8a: 37:f9:ab:b2:a3:a4:62:d3:5a:51:96:ce:6a:d0:d7:72:86:46: 2f:b6:f5:d0:95:03:e9:f9:58:68:bf:1f:77:cf:93:04:fa:63: 9b:15:f7:02:0c:6b:2e:02:ab:02:a4:8c:df:b8:a6:69:12:69: 43:1c:66:b8:0d:60:b5:2a:6f:7b:5f:aa:51:12:94:44:fb:b4: ba:fb:09:66:08:24:12:c4:cc:19:09:ea:ce:67:b2:7e:74:dc: 77:e7:9d:16:0e:6d:1a:18:4e:04:d2:77:69:ac:e0:a3:7e:09: 54:c2:18:0f:2b:23:18:58:0a:1e:e0:9e:7b:75:ef:13:44:dc: 09:d7:8d:36:c5:62:96:9a:a3:49:d4:95:9c:ec:b1:0e:a2:82: bc:7a:d6:c3:ea:b9:ac:1d:e7:f1:d6:6f:70:62:6a:73:59:a8: 7e:f8:9e:63:40:d7:ae:c7:6b:66:f3:55:3c:a9:59:a0:e9:c5: 3b:6e:a6:bd:cb:e8:3c:2c:df:2a:a5:4e:70:41:cf:8c:76:24: 31:74:24:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjUwOTAyMjM0NDIwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3ODE1NC1lMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorW4/nb+QbeWDGVQME2b4RjtCC/64YOYmqZt8m7RskqDhuCgrt7ArVc9e7SF SzDLdA6lLuap69FjnKqUDXgd+V1Rakt2QNQ6bk1hNsTwYbapegIPCjP0habDct3Q CN7k/8Gco3m/aX6e9FlJt06k6LS5ieerblsKyFmESo3xYf8eC/dsYdbouYqeXJy+ MJLPW05e8P9FnXoK+OGo9WpWdHa4nywC0KDRLqMebNjP1zwHrGPQsd9Zqi8VMrlB eh1FrYDZxiAqeSLt472v2iPPB9lyEyB7Q8kKUQU1HIFWixDOrmhEJBC6MOP1Z5hL HQ8GZjVMnkluH1h1tfqfkRxieQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAKhs79S r93UkVreg5KCNvcvtWbkMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvOEZBOTVFRjJF NTI4MTFFRDg2M0U4QzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnGNowDQYJKoZIhvcNAQELBQADggEBAEseVhtzbtMdrq4L r6oXKmwJp0nDaGNmR1DJkeiquOWyw8Fxeew7GCBpvjnzt19EyvddEzfRijf5q7Kj pGLTWlGWzmrQ13KGRi+29dCVA+n5WGi/H3fPkwT6Y5sV9wIMay4CqwKkjN+4pmkS aUMcZrgNYLUqb3tfqlESlET7tLr7CWYIJBLEzBkJ6s5nsn503HfnnRYObRoYTgTS d2ms4KN+CVTCGA8rIxhYCh7gnnt17xNE3AnXjTbFYpaao0nUlZzssQ6igrx61sPq uawd5/HWb3BianNZqH74nmNA167Ha2bzVTypWaDpxTtupr3L6Dws3yqlTnBBz4x2 JDF0JB4= -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:08 2025 by rpki-client