$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/C21D3A065B7E11F0A8B76B2EC4F9AE02.roa File: C21D3A065B7E11F0A8B76B2EC4F9AE02.roa (raw, json) Hash identifier: 84DuWQA+97cDdeAiob2yXUJKVlhHSu21Cq4u1ZPXmWs= Subject key identifier: 7F:35:E4:A1:B2:D2:85:37:DF:83:4D:FE:80:95:7B:F4:E0:77:A7:C8 Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Certificate serial: 0C81 Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/C21D3A065B7E11F0A8B76B2EC4F9AE02.roa Signing time: Mon 07 Jul 2025 22:07:23 +0000 ROA not before: Mon 07 Jul 2025 22:07:23 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132898 IP address blocks: 103.27.216.0/22 maxlen: 24 2407:7f00::/32 maxlen: 32 2407:7f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E66, serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Validity Not Before: Jul 7 22:07:23 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686c451b-406e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:1d:16:8e:77:ff:92:df:94:b7:47:fa:df: 72:e9:02:43:ac:64:a6:cf:93:75:ae:b9:cb:ca:e7: 43:cf:e6:45:6e:3a:f2:cf:04:73:cf:61:7e:a8:56: 0e:c7:e0:bb:5b:04:9f:3f:a8:e0:c3:88:32:d7:30: fa:57:10:25:33:c4:a2:85:1a:17:af:da:bf:b2:c4: 22:a0:43:48:50:a0:71:1c:8b:e7:5c:4e:2e:ce:57: 8a:79:04:de:85:5b:71:46:1f:47:17:7b:19:24:ea: 99:37:cf:91:5e:08:97:c6:54:63:19:76:63:92:78: 02:86:b9:3e:bf:a5:28:5d:fe:7f:e7:e7:31:86:17: 3f:7d:5c:2b:51:e7:74:18:8e:d5:5d:7d:e3:46:8f: 1f:de:35:0f:d6:47:99:45:99:8f:eb:7e:27:0e:51: 4f:3c:35:aa:ca:05:f5:86:fb:d2:de:74:fc:ff:a9: 22:3c:89:74:bd:a6:a9:50:2c:36:79:e6:51:82:38: 5a:ad:65:2f:a9:4d:55:ea:4d:7f:5e:20:25:39:9f: cc:76:a4:8b:65:2e:9e:95:e8:2b:86:4f:7c:cd:fd: e3:81:dc:62:32:52:ae:11:8b:91:18:f8:9c:2d:68: 0a:f1:e3:78:fe:cc:d9:d8:4b:ed:e0:09:63:59:2d: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:35:E4:A1:B2:D2:85:37:DF:83:4D:FE:80:95:7B:F4:E0:77:A7:C8 X509v3 Authority Key Identifier: keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/C21D3A065B7E11F0A8B76B2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.27.216.0/22 IPv6: 2407:7f00::/32 Signature Algorithm: sha256WithRSAEncryption 29:c2:29:31:c4:e0:4a:9a:f1:76:fa:3c:5e:cf:54:ef:d0:60: 85:36:e5:a1:e1:0e:cc:d4:ff:91:aa:a9:6a:2c:f0:0e:f8:38: 3a:8d:12:37:b0:00:8b:95:2c:c3:5b:d4:25:c7:68:47:ac:23: bd:38:37:5d:86:d1:47:f7:51:cf:b9:a2:ff:c8:10:fc:42:87: cb:de:d0:d7:14:d8:66:25:99:24:69:8e:a4:3a:70:0c:99:a5: 81:6a:c0:37:d6:14:4f:3d:f3:16:d1:92:4f:f4:22:87:90:35: 64:83:db:03:13:75:be:29:fa:25:12:70:19:45:a2:16:79:5b: 3d:79:fa:f2:c6:74:a2:15:25:ef:a8:b3:3e:28:01:5a:3c:5f: c2:78:d9:f7:57:42:39:f3:2a:fb:ba:25:3f:27:d4:b6:ad:b4: 02:34:0c:95:6a:9e:0f:91:b8:c0:11:25:c3:78:f8:4b:bf:cd: e8:28:ad:91:21:7f:a9:34:82:2f:15:48:99:f5:91:81:42:5a: be:60:19:f1:56:a9:9b:eb:4c:e5:36:53:d3:c3:39:5d:23:af: ae:d3:74:34:74:a9:2e:a8:b6:31:05:e3:0e:49:d3:4b:82:14: 3d:8b:af:f3:cc:56:1f:40:ce:ce:36:60:a9:76:65:d3:73:26: 34:61:fc:5d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNjYxMTAvBgNVBAUTKERBNTQ3RUQ2OTI4QUFEMUVDRkI2ODQ3QTFCMDc0MzJC RDg3QjE5RUYwHhcNMjUwNzA3MjIwNzIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZjNDUxYi00MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1MdFo53/5LflLdH+t9y6QJDrGSmz5N1rrnLyudDz+ZFbjryzwRzz2F+qFYO x+C7WwSfP6jgw4gy1zD6VxAlM8SihRoXr9q/ssQioENIUKBxHIvnXE4uzleKeQTe hVtxRh9HF3sZJOqZN8+RXgiXxlRjGXZjkngChrk+v6UoXf5/5+cxhhc/fVwrUed0 GI7VXX3jRo8f3jUP1keZRZmP634nDlFPPDWqygX1hvvS3nT8/6kiPIl0vaapUCw2 eeZRgjharWUvqU1V6k1/XiAlOZ/MdqSLZS6elegrhk98zf3jgdxiMlKuEYuRGPic LWgK8eN4/szZ2Evt4AljWS2/4wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFH815KGy 0oU334NN/oCVe/Tgd6fIMB8GA1UdIwQYMBaAFNpUftaSiq0ez7aEehsHQyvYexnv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU2Ni83MDYzOUVGQ0ZG NkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JSN1B0b1I2R3dkREs5aDdH ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsUi0xcEtLclI3UHRvUjZHd2RESzloN0dlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDBFNjYvNzA2MzlFRkNGRjZFMTFFOTg1QTg4QzY3QzRGOUFFMDIvQzIxRDNBMDY1 QjdFMTFGMEE4Qjc2QjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnG9gwDQQCAAIwBwMFACQHfwAwDQYJKoZIhvcNAQELBQAD ggEBACnCKTHE4Eqa8Xb6PF7PVO/QYIU25aHhDszU/5GqqWos8A74ODqNEjewAIuV LMNb1CXHaEesI704N12G0Uf3Uc+5ov/IEPxCh8ve0NcU2GYlmSRpjqQ6cAyZpYFq wDfWFE898xbRkk/0IoeQNWSD2wMTdb4p+iUScBlFohZ5Wz15+vLGdKIVJe+osz4o AVo8X8J42fdXQjnzKvu6JT8n1LattAI0DJVqng+RuMARJcN4+Eu/zegorZEhf6k0 gi8VSJn1kYFCWr5gGfFWqZvrTOU2U9PDOV0jr67TdDR0qS6otjEF4w5J00uCFD2L r/PMVh9Azs42YKl2ZdNzJjRh/F0= -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:17 2025 by rpki-client