$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/85EAFFD806F911EC9558C827C4F9AE02.roa File: 85EAFFD806F911EC9558C827C4F9AE02.roa (raw, json) Hash identifier: nbAwbUJb6JF/EVgcBuo6b8RRtXcpwDWvIQu43r6H87s= Subject key identifier: 68:48:9B:83:A7:11:7F:52:D4:38:67:A6:1A:98:82:B1:B8:2A:46:69 Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Certificate serial: 0564 Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/85EAFFD806F911EC9558C827C4F9AE02.roa Signing time: Wed 08 Oct 2025 23:28:00 +0000 ROA not before: Wed 08 Oct 2025 23:28:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 146988 IP address blocks: 103.172.112.0/24 maxlen: 24 103.172.113.0/24 maxlen: 24 2001:df7:6f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1380 (0x564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144266, serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Validity Not Before: Oct 8 23:28:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e6f380-de85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:50:19:dc:c4:53:4a:a3:54:e2:72:10:20: 37:0b:4f:c9:a9:10:ab:a2:ba:be:58:a8:8b:a4:49: ad:e0:53:6e:6d:2c:b4:b6:49:a7:22:4a:da:45:41: 19:d5:09:99:f8:a8:9b:08:96:b1:bb:35:62:31:7c: ee:44:da:1d:45:a8:f0:bd:5e:c0:ad:ec:82:52:76: 0e:6c:f5:e5:2c:f8:ca:45:8e:e7:b4:2f:66:62:db: 23:11:57:8d:9d:87:03:4f:ee:16:c4:7b:77:e4:15: 8b:3d:38:2a:ed:60:68:39:15:40:65:78:be:88:12: c5:e4:ae:d7:f6:f2:ab:d2:7b:25:a9:4c:43:0b:b3: 9d:ae:52:29:b7:70:b1:28:b3:1c:cb:b6:3d:50:58: ff:20:65:ee:3e:55:01:95:59:b3:a5:e7:25:dc:93: ad:5e:9e:74:08:7c:48:48:dd:4e:7f:65:01:a4:aa: cd:01:12:85:b1:fa:e6:5e:df:de:b3:17:db:3d:67: d7:2e:c6:1d:d6:9f:72:18:1c:19:0b:be:e1:c0:bf: 06:3f:d7:04:f8:80:2b:a1:53:1c:b3:f7:96:98:22: e7:59:b7:b0:21:e3:5a:44:fc:9a:a0:87:3c:20:e9: 83:be:7e:cd:36:42:0b:12:ec:b8:6b:31:39:8a:81: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:48:9B:83:A7:11:7F:52:D4:38:67:A6:1A:98:82:B1:B8:2A:46:69 X509v3 Authority Key Identifier: keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/85EAFFD806F911EC9558C827C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.112.0/23 IPv6: 2001:df7:6f80::/48 Signature Algorithm: sha256WithRSAEncryption 19:35:f4:d9:9a:de:a5:d6:44:58:03:76:bb:96:5a:62:ff:ab: 8b:f4:77:b8:f0:89:8b:55:15:01:49:37:66:0e:4c:65:97:48: 2c:b4:20:75:ab:dc:fb:7a:4b:1f:b3:f1:f7:7c:a4:32:ea:f0: 82:79:8d:ca:6e:d4:e0:21:3a:10:e5:7f:b2:cf:d2:88:b1:6b: 31:81:b3:e3:9d:39:00:f0:95:b2:55:61:86:e5:b7:06:15:88: 66:c0:ff:ff:17:65:ee:73:26:38:b5:55:89:49:dc:6a:af:20: 3c:e8:84:29:f3:d7:e1:82:5c:ac:ac:76:69:3b:98:0e:d2:13: 0b:c3:2c:a7:36:33:5a:30:58:e8:b4:39:94:72:35:f3:85:26: f6:ba:b7:23:6e:97:f7:6b:53:ce:77:30:80:a4:e4:06:b6:bd: c4:2b:cd:1a:e0:5d:e7:9e:2b:ed:4a:da:b4:f6:26:38:e5:7f: 03:2b:cb:49:e3:a6:a3:13:3c:dc:5c:76:b6:36:6f:81:5c:30: a9:8b:de:29:c7:1d:4c:07:e9:a9:8f:3e:72:46:9e:96:c1:a4: 85:58:6b:7a:c8:35:49:d2:43:8a:a9:a7:7a:b3:82:44:c4:df: b3:13:0c:47:ea:bf:2c:b7:a6:60:df:39:3e:5e:46:c1:51:71: 24:b2:10:75 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5 MjBBQjFCMUQwHhcNMjUxMDA4MjMyODAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZjM4MC1kZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLNQGdzEU0qjVOJyECA3C0/JqRCrorq+WKiLpEmt4FNubSy0tkmnIkraRUEZ 1QmZ+KibCJaxuzViMXzuRNodRajwvV7AreyCUnYObPXlLPjKRY7ntC9mYtsjEVeN nYcDT+4WxHt35BWLPTgq7WBoORVAZXi+iBLF5K7X9vKr0nslqUxDC7OdrlIpt3Cx KLMcy7Y9UFj/IGXuPlUBlVmzpecl3JOtXp50CHxISN1Of2UBpKrNARKFsfrmXt/e sxfbPWfXLsYd1p9yGBwZC77hwL8GP9cE+IAroVMcs/eWmCLnWbewIeNaRPyaoIc8 IOmDvn7NNkILEuy4azE5ioGnmwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGhIm4On EX9S1DhnphqYgrG4KkZpMB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2 Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDQyNjYvMEU4NThFMjgwNkNCMTFFQzk5QjBFQTNCQzRGOUFFMDIvODVFQUZGRDgw NkY5MTFFQzk1NThDODI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrHAwDwQCAAIwCQMHACABDfdvgDANBgkqhkiG9w0BAQsF AAOCAQEAGTX02ZrepdZEWAN2u5ZaYv+ri/R3uPCJi1UVAUk3Zg5MZZdILLQgdavc +3pLH7Px93ykMurwgnmNym7U4CE6EOV/ss/SiLFrMYGz4505APCVslVhhuW3BhWI ZsD//xdl7nMmOLVViUncaq8gPOiEKfPX4YJcrKx2aTuYDtITC8MspzYzWjBY6LQ5 lHI184Um9rq3I26X92tTzncwgKTkBra9xCvNGuBd554r7UratPYmOOV/AyvLSeOm oxM83Fx2tjZvgVwwqYveKccdTAfpqY8+ckaelsGkhVhresg1SdJDiqmnerOCRMTf sxMMR+q/LLemYN85Pl5GwVFxJLIQdQ== -----END CERTIFICATE-----Generated at Wed Nov 5 16:45:50 2025 by rpki-client