$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/78D1DAC8E45E11E681F82341C4F9AE02.roa File: 78D1DAC8E45E11E681F82341C4F9AE02.roa (raw, json) Hash identifier: VSkeUxaSAuJFpGB7aelToeed4EztsVL3PeuQY5Xovws= Subject key identifier: 24:73:00:A3:7A:E8:E7:FA:EF:E1:C7:29:90:D7:02:64:83:1E:11:51 Certificate issuer: /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Certificate serial: 1C98 Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/78D1DAC8E45E11E681F82341C4F9AE02.roa Signing time: Wed 22 Oct 2025 16:34:05 +0000 ROA not before: Wed 22 Oct 2025 16:34:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132167 IP address blocks: 43.224.84.0/22 maxlen: 22 43.224.84.0/24 maxlen: 24 43.224.85.0/24 maxlen: 24 43.224.86.0/24 maxlen: 24 103.242.96.0/22 maxlen: 22 103.242.97.0/24 maxlen: 24 103.242.98.0/24 maxlen: 24 103.242.99.0/24 maxlen: 24 2407:f300::/32 maxlen: 32 2407:f300:100::/44 maxlen: 44 2407:f300:100::/48 maxlen: 48 2407:f300:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7320 (0x1c98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Validity Not Before: Oct 22 16:34:05 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f9077d-ae9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:b7:fb:df:ca:e2:3f:8a:27:38:95:83:91: 57:57:c2:17:9e:26:6b:63:5c:70:81:96:0b:2f:82: e1:54:a2:d7:61:aa:25:b4:12:46:e9:66:12:25:cf: 93:8b:f6:1a:a5:01:e5:55:e2:d5:e8:6c:50:02:0f: a6:12:f0:c6:87:76:dd:71:e5:0c:c8:f4:b7:81:ea: ae:cd:8c:40:ad:1e:c7:b0:52:bd:01:db:07:c1:c0: a3:c7:12:07:6d:45:f3:7e:f4:06:79:2d:10:cf:dd: 73:41:f7:3f:63:4c:c2:cf:17:4b:a3:f8:0c:dd:fe: 92:dc:0f:96:52:5f:2a:62:98:ab:e4:43:2a:da:b7: d3:1c:bc:80:42:99:54:a1:28:04:1e:c9:51:5d:82: ac:42:9d:9e:ff:f4:37:61:7c:67:6b:cf:10:62:74: 80:50:d6:31:78:a1:49:5d:4b:98:14:56:6f:76:96: 71:a1:47:f2:87:7e:90:2d:16:ca:c2:00:9c:f9:c2: 0d:b5:1d:f6:d0:39:60:a1:36:4d:de:9d:43:f9:17: 83:16:a7:a3:d7:94:ed:e0:64:dc:19:13:e6:29:8c: a7:ab:c0:6a:35:c7:f8:b6:00:61:c6:4c:3d:fe:8b: 53:c4:c7:c2:58:e5:5a:d9:2e:a4:8a:65:4f:d9:46: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:73:00:A3:7A:E8:E7:FA:EF:E1:C7:29:90:D7:02:64:83:1E:11:51 X509v3 Authority Key Identifier: keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/78D1DAC8E45E11E681F82341C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.84.0/22 103.242.96.0/22 IPv6: 2407:f300::/32 Signature Algorithm: sha256WithRSAEncryption 25:da:9c:08:da:e5:3d:ac:75:73:b9:04:96:db:85:20:90:3b: d3:38:71:64:46:ab:d0:0f:16:4d:1f:3e:e8:31:2a:bd:51:db: 5c:0a:0a:44:3d:36:e1:33:68:19:1c:82:3d:25:80:40:1d:d6: b9:f3:76:20:60:9e:48:3e:bb:06:86:87:65:73:ab:d1:32:1c: 42:43:63:0c:1e:f3:ea:90:b5:37:f3:68:aa:67:28:4b:1e:82: 0a:27:28:cf:99:38:ef:de:a5:8f:18:0f:ba:f1:b8:b8:fe:90: 5a:e3:af:e0:56:9b:fa:fb:86:49:19:5c:92:39:be:c5:83:b4: f0:7e:6a:05:92:56:0f:7d:58:50:5c:ab:64:7a:78:fc:18:df: 10:ee:a5:37:bb:29:e8:61:86:ef:7e:a1:e8:28:34:10:9f:2d: eb:d1:59:26:5f:27:67:7f:0b:3b:90:2a:ea:bf:83:88:01:6c: 87:83:86:07:11:17:c6:1e:47:c4:1f:5f:4c:f0:02:71:5a:83: 85:69:0e:77:5b:1a:03:bf:6f:6a:90:34:5b:1e:c1:40:60:3b: 5e:78:27:d7:64:dd:f5:51:b1:6b:e5:09:76:96:1b:33:58:4a: c6:bb:91:af:79:0f:78:8c:e6:ca:d7:f1:28:9f:16:1e:f9:ba: 54:d9:c8:29 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICHJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDdENkEzMzBGMEQwMTI0OTQyN0M3RkM5RERERENGNEE4 Mjg3NjBCMDYwHhcNMjUxMDIyMTYzNDA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5MDc3ZC1hZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKe3+9/K4j+KJziVg5FXV8IXniZrY1xwgZYLL4LhVKLXYaoltBJG6WYSJc+T i/YapQHlVeLV6GxQAg+mEvDGh3bdceUMyPS3gequzYxArR7HsFK9AdsHwcCjxxIH bUXzfvQGeS0Qz91zQfc/Y0zCzxdLo/gM3f6S3A+WUl8qYpir5EMq2rfTHLyAQplU oSgEHslRXYKsQp2e//Q3YXxna88QYnSAUNYxeKFJXUuYFFZvdpZxoUfyh36QLRbK wgCc+cINtR320DlgoTZN3p1D+ReDFqej15Tt4GTcGRPmKYynq8BqNcf4tgBhxkw9 /otTxMfCWOVa2S6kimVP2UbWzQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCRzAKN6 6Of67+HHKZDXAmSDHhFRMB8GA1UdIwQYMBaAFH1qMw8NASSUJ8f8nd3c9KgodgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BRDA4QUYyNkU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpKUW54X3lkM2R6MHFDaDJD d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXb3pEdzBCSkpRbnhfeWQzZHowcUNoMkN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU1MTkvQUQwOEFGMjZFNDVDMTFFNjhDRURGQTNFQzRGOUFFMDIvNzhEMURBQzhF NDVFMTFFNjgxRjgyMzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr4FQDBAJn8mAwDQQCAAIwBwMFACQH8wAwDQYJKoZIhvcN AQELBQADggEBACXanAja5T2sdXO5BJbbhSCQO9M4cWRGq9APFk0fPugxKr1R21wK CkQ9NuEzaBkcgj0lgEAd1rnzdiBgnkg+uwaGh2Vzq9EyHEJDYwwe8+qQtTfzaKpn KEseggonKM+ZOO/epY8YD7rxuLj+kFrjr+BWm/r7hkkZXJI5vsWDtPB+agWSVg99 WFBcq2R6ePwY3xDupTe7Kehhhu9+oegoNBCfLevRWSZfJ2d/CzuQKuq/g4gBbIeD hgcRF8YeR8QfX0zwAnFag4VpDndbGgO/b2qQNFsewUBgO154J9dk3fVRsWvlCXaW GzNYSsa7ka95D3iM5srX8SifFh75ulTZyCk= -----END CERTIFICATE-----Generated at Wed Nov 5 20:02:14 2025 by rpki-client