$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa File: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (raw, json) Hash identifier: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno= Subject key identifier: 2E:CF:08:8E:1C:0C:5D:84:5E:D7:8D:AB:A3:BE:2D:F7:CA:0B:52:41 Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0AAB Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa Signing time: Fri 28 Feb 2025 20:58:55 +0000 ROA not before: Fri 28 Feb 2025 20:58:55 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140091 IP address blocks: 103.5.120.0/23 maxlen: 23 103.5.120.0/24 maxlen: 24 103.5.121.0/24 maxlen: 24 103.148.104.0/24 maxlen: 24 103.153.202.0/24 maxlen: 24 2001:df2:ce80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Feb 28 20:58:55 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c2238f-5968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:58:dc:6f:4f:f5:80:ce:50:1d:68:32:62: c4:94:a4:ad:50:98:d1:e3:0d:b2:28:18:4f:7f:cd: a2:c7:72:80:59:dd:6b:24:f2:7e:db:c4:2d:c8:03: 92:b5:d3:c7:9f:6f:37:19:9a:c7:3d:3a:bc:47:70: 96:7b:1a:23:03:d8:4d:45:3b:e8:6d:92:5c:da:f1: 0d:29:b7:51:08:16:f8:86:79:f8:6e:d5:db:0d:ac: 13:3a:51:e6:ed:6d:d5:69:b4:ed:37:10:19:ef:cc: fd:b1:e1:64:5d:c7:34:9e:97:82:fd:9c:35:cf:8a: e2:32:7b:c6:6b:8c:0c:d1:92:7d:e1:08:eb:d3:49: 61:9f:2f:4e:76:e6:2f:36:11:8e:6e:1f:ff:ab:81: 23:b0:a1:69:ac:87:7c:c5:95:42:ef:bf:49:f3:aa: 87:a4:b6:c4:75:70:21:84:de:a1:4c:7f:40:ee:b4: 54:e1:ac:ee:db:fe:c3:5f:cb:20:bb:ef:ee:66:6a: b7:bd:a7:77:4e:ef:a1:c2:4a:c6:c3:b0:9d:a4:51: 12:26:2a:d4:f1:a6:df:8e:a1:ca:db:a7:5d:6e:4e: ad:08:ea:a4:23:a0:91:a3:75:8d:1b:32:42:5f:c8: 97:ed:01:52:33:2d:41:c6:78:30:49:c6:74:12:26: 9d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CF:08:8E:1C:0C:5D:84:5E:D7:8D:AB:A3:BE:2D:F7:CA:0B:52:41 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.120.0/23 103.148.104.0/24 103.153.202.0/24 IPv6: 2001:df2:ce80::/48 Signature Algorithm: sha256WithRSAEncryption b2:1b:5c:1f:56:31:69:ec:c2:66:e7:9f:b6:4e:59:0a:82:fa: 66:bb:ca:4f:94:56:34:21:6b:0d:ce:35:42:3e:22:12:e4:9f: f5:b0:e1:c6:14:89:a5:e4:13:e9:7f:b5:3a:ca:3e:80:cf:85: e1:31:6e:8b:2e:6c:1a:2c:7f:15:33:2e:e0:3a:64:07:ac:5f: 80:18:08:9a:f5:61:f6:ef:43:f9:ff:6a:a1:64:c2:da:8e:6d: 14:b8:6e:38:4b:61:a3:c2:ce:8d:6f:3e:90:d6:8b:ff:88:38: 99:55:fe:50:5d:84:4d:6c:03:85:0d:c7:1b:7b:80:82:90:ec: 35:a5:be:80:a9:95:ee:94:f3:ad:05:c6:9b:53:82:bc:0e:68: 58:d6:b2:ae:47:6d:91:fc:59:ea:de:48:dd:93:55:75:fe:4d: a7:b3:dc:f8:ac:8b:be:67:5b:a6:1a:b0:fa:26:5d:a8:71:63: d8:58:a0:5f:0d:1f:9b:d4:0c:1d:30:7d:9d:dd:d7:98:78:ba: 48:59:19:96:43:02:df:7a:0c:18:e0:0d:74:f1:96:2c:a4:1b: a9:eb:b7:7d:ca:cc:64:b6:0c:06:7b:1e:07:de:b3:96:cb:ad: 3a:0d:ac:c7:2a:25:3a:bc:25:2d:a1:57:e2:4c:23:8c:7d:5f: 62:9b:97:19 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUwMjI4MjA1ODU1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyMjM4Zi01OTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDRY3G9P9YDOUB1oMmLElKStUJjR4w2yKBhPf82ix3KAWd1rJPJ+28QtyAOS tdPHn283GZrHPTq8R3CWexojA9hNRTvobZJc2vENKbdRCBb4hnn4btXbDawTOlHm 7W3VabTtNxAZ78z9seFkXcc0npeC/Zw1z4riMnvGa4wM0ZJ94Qjr00lhny9OduYv NhGObh//q4EjsKFprId8xZVC779J86qHpLbEdXAhhN6hTH9A7rRU4azu2/7DX8sg u+/uZmq3vad3Tu+hwkrGw7CdpFESJirU8abfjqHK26ddbk6tCOqkI6CRo3WNGzJC X8iX7QFSMy1BxngwScZ0EiadVQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFC7PCI4c DF2EXteNq6O+LffKC1JBMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhGRTgvMTJGOTZGQjI0RUZCMTFFQThENjk0RDBEQzRGOUFFMDIvNEFFRTVEMTQ0 RUZDMTFFQTlEMDAzMTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAFnBXgDBABnlGgDBABnmcowDwQCAAIwCQMHACABDfLOgDAN BgkqhkiG9w0BAQsFAAOCAQEAshtcH1YxaezCZueftk5ZCoL6ZrvKT5RWNCFrDc41 Qj4iEuSf9bDhxhSJpeQT6X+1Oso+gM+F4TFuiy5sGix/FTMu4DpkB6xfgBgImvVh 9u9D+f9qoWTC2o5tFLhuOEtho8LOjW8+kNaL/4g4mVX+UF2ETWwDhQ3HG3uAgpDs NaW+gKmV7pTzrQXGm1OCvA5oWNayrkdtkfxZ6t5I3ZNVdf5Np7Pc+KyLvmdbphqw +iZdqHFj2FigXw0fm9QMHTB9nd3XmHi6SFkZlkMC33oMGOANdPGWLKQbqeu3fcrM ZLYMBnseB96zlsutOg2sxyolOrwlLaFX4kwjjH1fYpuXGQ== -----END CERTIFICATE-----Generated at Wed Nov 5 19:24:06 2025 by rpki-client