$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/4A30B41CC09F11EEB2E48256C4F9AE02.roa File: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (raw, json) Hash identifier: d2K+InZzs4yuUY7A0gQ/z4AXxA9If9lELXrXKBGG5jc= Subject key identifier: 5B:89:E0:20:B3:B2:90:8C:4E:F8:96:E3:AD:E9:BD:D6:7D:3D:96:23 Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Certificate serial: 0133 Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/4A30B41CC09F11EEB2E48256C4F9AE02.roa Signing time: Mon 15 Sep 2025 05:13:07 +0000 ROA not before: Mon 15 Sep 2025 05:13:07 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 151678 IP address blocks: 103.23.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF Validity Not Before: Sep 15 05:13:07 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c7a063-6fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:39:de:0d:b0:89:2e:5e:96:aa:6b:35:26: d5:91:5b:3e:60:0d:a8:66:28:4f:0c:ca:09:91:74: a0:b1:8c:71:16:14:ce:58:b3:4d:52:9d:7b:e7:bf: 40:2e:b5:64:b6:db:de:fa:d3:77:8a:c6:9e:98:51: 58:9e:3a:35:be:4c:39:f8:0a:a0:77:d4:78:be:be: 71:33:7d:fa:ec:e1:b5:5f:a4:34:de:98:73:a0:3a: 29:be:d5:5f:bb:16:f5:b9:e5:e7:79:c3:eb:96:46: 8a:06:9c:02:b6:63:0f:b6:67:b1:aa:44:b8:44:39: 35:bd:a7:e9:81:4e:d8:1b:bf:fd:32:e2:ca:5f:71: 4f:a3:f1:f9:04:8f:60:5c:9c:94:ea:d3:36:4d:07: cc:01:4e:d6:46:87:82:41:e6:2a:48:0d:87:18:60: 99:9f:64:c5:20:13:40:bf:8b:c8:42:bd:1b:4c:0c: 0f:92:d3:75:fd:c8:13:c2:e7:c5:5f:2e:cc:aa:cd: 1d:98:f1:ea:a3:fc:b0:bc:b5:9b:67:e6:99:b9:ab: cc:cc:b1:a3:fa:af:cd:34:9e:d1:d7:23:99:43:b4: 30:77:e1:97:d8:be:52:72:82:f6:de:81:6d:c0:29: 7d:95:e8:35:47:8f:b1:1e:be:56:91:12:90:d6:c0: f8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:89:E0:20:B3:B2:90:8C:4E:F8:96:E3:AD:E9:BD:D6:7D:3D:96:23 X509v3 Authority Key Identifier: keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/4A30B41CC09F11EEB2E48256C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.94.0/24 Signature Algorithm: sha256WithRSAEncryption 62:ab:37:44:e9:5d:8b:7d:81:5f:e4:e2:46:14:66:7f:90:51: cf:87:ec:08:b0:a3:4c:90:f0:31:84:c6:78:8d:20:37:e9:5a: 03:bd:77:1b:68:80:e1:74:01:d4:c5:90:50:9e:cc:45:92:ae: b0:5f:8e:0a:98:2c:15:52:2b:02:90:8a:86:e1:a5:e4:07:c4: ce:b9:5f:c7:08:d0:4f:fd:87:e0:4f:13:54:ad:91:4d:c3:01: f8:c0:d7:92:5f:aa:7b:1f:75:a4:50:3b:d2:a8:10:50:cb:75: a0:1f:f4:cd:d9:dc:79:a3:e6:21:e5:80:35:00:02:86:bd:2f: 6d:c4:1a:2b:f0:2f:83:c9:f4:c3:01:f5:6d:e8:3c:2a:91:23: db:ea:80:b8:c8:0a:9a:24:24:45:e8:d3:41:3f:fe:47:d9:f5: 77:d8:97:cc:43:12:f3:b5:51:0e:68:24:c0:3d:19:68:c4:5b: 57:96:2b:29:a3:df:87:25:4f:a3:1a:73:b2:31:d1:cf:72:ba: b8:88:13:0b:45:f5:c7:6d:7a:79:cd:39:64:df:00:13:be:f7: 6c:e4:b5:e8:b1:dd:45:74:87:f2:38:25:04:bf:6b:5b:3a:bf: ec:23:a0:00:ed:2b:b0:30:09:c3:18:ae:eb:75:88:c2:e2:3a: 28:66:8e:e0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQzExMTAvBgNVBAUTKEEzMTU0RUM3MUFGRjBDRUMzNjhDNzk2RDI1N0MzQTlD MDU4OUEzRkYwHhcNMjUwOTE1MDUxMzA3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM3YTA2My02ZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SU53g2wiS5elqprNSbVkVs+YA2oZihPDMoJkXSgsYxxFhTOWLNNUp17579A LrVkttve+tN3isaemFFYnjo1vkw5+Aqgd9R4vr5xM3367OG1X6Q03phzoDopvtVf uxb1ueXnecPrlkaKBpwCtmMPtmexqkS4RDk1vafpgU7YG7/9MuLKX3FPo/H5BI9g XJyU6tM2TQfMAU7WRoeCQeYqSA2HGGCZn2TFIBNAv4vIQr0bTAwPktN1/cgTwufF Xy7Mqs0dmPHqo/ywvLWbZ+aZuavMzLGj+q/NNJ7R1yOZQ7Qwd+GX2L5ScoL23oFt wCl9leg1R4+xHr5WkRKQ1sD4IQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFuJ4CCz spCMTviW463pvdZ9PZYjMB8GA1UdIwQYMBaAFKMVTsca/wzsNox5bSV8OpwFiaP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDMS83RkZERkI2NEMw OUUxMUVFQUQzQjg1NTRDNEY5QUUwMi9veFZPeHhyX0RPdzJqSGx0Slh3Nm5BV0pv XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL294Vk94eHJfRE93MmpIbHRKWHc2bkFXSm9fOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEEyQzEvN0ZGREZCNjRDMDlFMTFFRUFEM0I4NTU0QzRGOUFFMDIvNEEzMEI0MUND MDlGMTFFRUIyRTQ4MjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnF14wDQYJKoZIhvcNAQELBQADggEBAGKrN0TpXYt9gV/k 4kYUZn+QUc+H7Aiwo0yQ8DGExniNIDfpWgO9dxtogOF0AdTFkFCezEWSrrBfjgqY LBVSKwKQiobhpeQHxM65X8cI0E/9h+BPE1StkU3DAfjA15JfqnsfdaRQO9KoEFDL daAf9M3Z3Hmj5iHlgDUAAoa9L23EGivwL4PJ9MMB9W3oPCqRI9vqgLjICpokJEXo 00E//kfZ9XfYl8xDEvO1UQ5oJMA9GWjEW1eWKymj34clT6Mac7Ix0c9yuriIEwtF 9cdtennNOWTfABO+92zkteix3UV0h/I4JQS/a1s6v+wjoADtK7AwCcMYrut1iMLi OihmjuA= -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:11 2025 by rpki-client