$ rpki-client -vvf rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/AA12544E5AAF11EF86AAA442C4F9AE02.roa File: AA12544E5AAF11EF86AAA442C4F9AE02.roa (raw, json) Hash identifier: JysCwCJJxEUrqo1TsnL+HZ8PxWYOSwYy6QcS3aO9jis= Subject key identifier: B6:3E:31:49:C0:AA:33:3C:29:5E:99:29:E9:1C:A5:59:52:60:76:28 Certificate issuer: /CN=A913B31D/serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Certificate serial: 01F6 Authority key identifier: 2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/AA12544E5AAF11EF86AAA442C4F9AE02.roa Signing time: Sat 01 Nov 2025 03:17:45 +0000 ROA not before: Sat 01 Nov 2025 03:17:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136000 IP address blocks: 103.21.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B31D, serialNumber=2E9C11C6D2945D52F95F24C39DD1F4187A3417E5 Validity Not Before: Nov 1 03:17:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69057bd8-4289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3a:c1:94:d0:a5:40:32:df:af:68:54:33:a7: c4:cf:33:d8:27:dd:c7:3c:65:11:22:84:aa:d7:2a: 39:33:6e:05:a7:6c:1e:09:f4:37:b4:10:b2:8d:d8: 96:56:cd:8c:66:2f:41:0e:2f:4c:c1:89:ac:61:20: 40:9d:85:ad:db:87:71:e8:72:9e:87:5a:14:5b:9b: d3:45:b7:07:84:ed:2c:30:b4:13:b0:9b:5a:b6:ce: 18:af:8a:17:88:07:b2:8e:1f:f4:5b:34:fb:e8:b0: 22:78:c1:fc:1d:91:8e:7b:d2:4f:c0:24:ed:ee:01: f1:e2:7c:0e:ab:07:9f:e7:15:d6:35:c0:e4:1b:0c: 56:22:99:9f:c2:bd:5c:d8:63:4e:9c:88:69:b8:c8: 97:03:3f:28:28:92:32:2b:74:d4:75:ae:93:18:ca: a8:f3:18:50:a3:3a:f0:79:bf:78:51:38:92:3c:ad: bf:c2:6f:20:61:ba:9a:ba:1a:70:7e:f0:d2:83:49: 19:24:44:af:b3:9a:48:5f:0f:17:95:b9:2b:ef:7a: c1:49:5a:a3:f6:ff:15:5c:fe:00:40:2d:f9:ee:ee: b2:b2:be:91:4b:1b:b1:17:f6:e7:ad:fb:84:bd:f3: 89:43:14:3f:c0:41:cf:52:82:c1:cb:d8:1c:03:fe: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3E:31:49:C0:AA:33:3C:29:5E:99:29:E9:1C:A5:59:52:60:76:28 X509v3 Authority Key Identifier: keyid:2E:9C:11:C6:D2:94:5D:52:F9:5F:24:C3:9D:D1:F4:18:7A:34:17:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/LpwRxtKUXVL5XyTDndH0GHo0F-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpwRxtKUXVL5XyTDndH0GHo0F-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B31D/E7E7EC50BD6911ED9B55226EC4F9AE02/AA12544E5AAF11EF86AAA442C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.21.4.0/23 Signature Algorithm: sha256WithRSAEncryption a3:3a:5f:cd:df:3f:3d:f8:92:04:7d:0c:0f:8f:3b:ca:9e:34: 1b:5a:66:99:a8:df:25:7e:f3:a8:d5:00:66:b3:22:4c:0e:6c: 89:f6:9d:c5:16:29:22:7e:95:fa:94:cd:5a:c8:18:85:dd:71: d4:a4:6e:18:16:1c:90:17:47:bf:3d:a7:98:fa:8d:11:bb:23: fe:a5:9d:82:d1:96:db:1e:17:1f:28:ab:0a:5b:31:9f:36:64: 87:07:3e:88:1b:e7:62:43:4e:88:1e:bf:eb:c4:15:93:7b:66: 47:c8:7a:db:96:d9:1e:e7:c0:ec:b7:85:7d:f6:26:39:13:89: 89:90:eb:46:d9:89:12:a9:d3:a7:65:fc:32:34:33:7a:01:6e: 19:65:04:e4:1a:cb:ea:70:d9:83:1c:6a:f7:af:51:e0:b6:4e: 5d:d1:ae:b6:65:58:33:d1:34:0c:f1:08:c7:b3:01:79:12:05: 77:49:dd:4c:12:64:47:82:82:6e:87:ed:12:10:0d:e4:ab:dd: f6:41:65:c5:c4:1a:cc:cc:e1:2e:ea:8b:00:2d:99:dc:d2:b4: 05:08:de:b4:6d:47:54:a5:21:95:23:72:2d:92:5a:09:73:42: 5f:e5:3d:7d:95:9b:f3:45:df:26:32:a6:d0:af:47:69:d3:40: 46:2d:05:47 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzMUQxMTAvBgNVBAUTKDJFOUMxMUM2RDI5NDVENTJGOTVGMjRDMzlERDFGNDE4 N0EzNDE3RTUwHhcNMjUxMTAxMDMxNzQ1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1N2JkOC00Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jrBlNClQDLfr2hUM6fEzzPYJ93HPGURIoSq1yo5M24Fp2weCfQ3tBCyjdiW Vs2MZi9BDi9MwYmsYSBAnYWt24dx6HKeh1oUW5vTRbcHhO0sMLQTsJtats4Yr4oX iAeyjh/0WzT76LAieMH8HZGOe9JPwCTt7gHx4nwOqwef5xXWNcDkGwxWIpmfwr1c 2GNOnIhpuMiXAz8oKJIyK3TUda6TGMqo8xhQozrweb94UTiSPK2/wm8gYbqauhpw fvDSg0kZJESvs5pIXw8Xlbkr73rBSVqj9v8VXP4AQC357u6ysr6RSxuxF/bnrfuE vfOJQxQ/wEHPUoLBy9gcA/4HiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLY+MUnA qjM8KV6ZKekcpVlSYHYoMB8GA1UdIwQYMBaAFC6cEcbSlF1S+V8kw53R9Bh6NBfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjMxRC9FN0U3RUM1MEJE NjkxMUVEOUI1NTIyNkVDNEY5QUUwMi9McHdSeHRLVVhWTDVYeVREbmRIMEdIbzBG LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xwd1J4dEtVWFZMNVh5VERuZEgwR0hvMEYtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0IzMUQvRTdFN0VDNTBCRDY5MTFFRDlCNTUyMjZFQzRGOUFFMDIvQUExMjU0NEU1 QUFGMTFFRjg2QUFBNDQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnFQQwDQYJKoZIhvcNAQELBQADggEBAKM6X83fPz34kgR9 DA+PO8qeNBtaZpmo3yV+86jVAGazIkwObIn2ncUWKSJ+lfqUzVrIGIXdcdSkbhgW HJAXR789p5j6jRG7I/6lnYLRltseFx8oqwpbMZ82ZIcHPogb52JDTogev+vEFZN7 ZkfIetuW2R7nwOy3hX32JjkTiYmQ60bZiRKp06dl/DI0M3oBbhllBOQay+pw2YMc avevUeC2Tl3RrrZlWDPRNAzxCMezAXkSBXdJ3UwSZEeCgm6H7RIQDeSr3fZBZcXE GszM4S7qiwAtmdzStAUI3rRtR1SlIZUjci2SWglzQl/lPX2Vm/NF3yYyptCvR2nT QEYtBUc= -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:47 2025 by rpki-client