$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/FC589960568411EDAE93DA7FC4F9AE02.roa File: FC589960568411EDAE93DA7FC4F9AE02.roa (raw, json) Hash identifier: M3OQL+158orw0Ue/EcQvvn7VUfwHswtbs9jlmebyIsA= Subject key identifier: C6:F8:B6:D2:B2:E0:38:53:EC:6A:29:C5:17:17:D6:D8:C4:CC:47:29 Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Certificate serial: 022B Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/FC589960568411EDAE93DA7FC4F9AE02.roa Signing time: Fri 03 Oct 2025 02:28:01 +0000 ROA not before: Fri 03 Oct 2025 02:28:01 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 135574 IP address blocks: 103.66.170.0/24 maxlen: 30 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7 Validity Not Before: Oct 3 02:28:01 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68df34b0-1c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:58:96:3c:e0:5b:9a:0d:41:87:58:e7:74:fa: e2:e6:02:b5:f1:26:8a:7a:47:7e:85:46:85:3d:ec: af:2b:0f:51:18:77:7e:73:03:57:d8:91:1f:03:ed: 5f:76:e2:ee:5f:02:41:57:71:1c:76:16:4b:77:b3: 22:20:b4:d0:7a:d1:43:4a:45:e5:92:7e:b9:57:30: 98:b8:73:6a:ac:78:8c:2f:64:36:40:dd:72:c3:67: 2d:f5:d3:84:cd:cf:1e:01:7b:0b:c9:1a:96:7e:86: 8e:75:70:8c:fd:fd:1a:f1:53:9c:76:40:4b:84:d5: d1:45:38:0b:78:77:c2:f1:3a:6e:7e:72:d3:7a:e8: 35:e8:ff:78:3b:e6:a6:0c:7d:2a:d0:30:70:0f:86: cd:76:ff:6d:2a:80:1e:94:40:1e:62:5b:01:e1:fa: 10:1c:d6:d0:b5:3b:4c:45:a8:4a:cf:a2:b6:1b:40: 0f:4d:3a:5d:a6:06:9f:f7:03:82:fe:83:de:45:df: 8b:d9:fb:ab:82:e2:71:97:5f:55:c1:66:1b:63:e8: 6d:90:50:d9:01:a9:26:61:84:44:9d:3c:4d:a6:3c: 14:c9:e7:02:1a:25:70:49:b2:38:4a:d1:40:8e:70: 50:0c:35:01:5f:ca:a5:b8:57:a7:bd:c0:ce:1d:b4: 1f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F8:B6:D2:B2:E0:38:53:EC:6A:29:C5:17:17:D6:D8:C4:CC:47:29 X509v3 Authority Key Identifier: keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/FC589960568411EDAE93DA7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.170.0/24 Signature Algorithm: sha256WithRSAEncryption a8:c3:8a:e1:e1:7e:e6:22:68:87:08:bc:3e:de:a8:09:91:47: f0:ee:a3:11:75:d0:b1:fc:98:93:78:03:32:46:51:7a:ed:ec: 8c:e3:57:a7:ef:b0:fc:07:62:ff:c3:f4:70:cb:8a:69:41:91: 46:95:36:61:65:ea:0a:f6:85:71:c3:84:08:22:f7:46:93:14: 5e:a3:7d:be:59:08:bf:a9:da:ba:d4:00:99:c8:2e:5a:2c:46: 61:88:6c:7b:48:28:87:1c:b1:78:d7:6f:2c:ed:af:01:4f:42: 27:29:48:2a:4f:60:30:b2:2e:d7:ce:d0:4d:e4:eb:75:0a:64: 90:03:b2:22:b1:65:8b:0c:ed:ba:9b:99:59:5d:92:30:a7:0a: 97:ca:90:f3:5d:61:50:32:e7:52:ec:2d:79:b6:68:ab:54:03: 3b:7c:9e:79:2a:7b:1e:74:62:e6:fe:63:8b:58:98:a5:9e:fd: 8a:b2:18:07:89:bf:c7:7a:8f:2f:82:24:22:e5:42:a8:ba:c9: 0d:1c:14:dd:c8:35:48:08:47:a8:d4:4c:79:05:c0:e3:a6:d9: 99:82:23:ea:e2:15:d6:5c:d7:c3:44:e5:b0:ce:b3:7b:17:0d: e8:34:bc:61:0a:6a:f0:ac:e2:f6:2b:2f:29:08:dd:38:12:66: e7:dc:68:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE Q0YyMzdDRDcwHhcNMjUxMDAzMDIyODAxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRmMzRiMC0xYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlliWPOBbmg1Bh1jndPri5gK18SaKekd+hUaFPeyvKw9RGHd+cwNX2JEfA+1f duLuXwJBV3EcdhZLd7MiILTQetFDSkXlkn65VzCYuHNqrHiML2Q2QN1yw2ct9dOE zc8eAXsLyRqWfoaOdXCM/f0a8VOcdkBLhNXRRTgLeHfC8TpufnLTeug16P94O+am DH0q0DBwD4bNdv9tKoAelEAeYlsB4foQHNbQtTtMRahKz6K2G0APTTpdpgaf9wOC /oPeRd+L2furguJxl19VwWYbY+htkFDZAakmYYREnTxNpjwUyecCGiVwSbI4StFA jnBQDDUBX8qluFenvcDOHbQfdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMb4ttKy 4DhT7GopxRcX1tjEzEcpMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2 N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVDRDcvRkQ5MTg1OTA1NjdFMTFFRDk4M0E5QzYxQzRGOUFFMDIvRkM1ODk5NjA1 Njg0MTFFREFFOTNEQTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnQqowDQYJKoZIhvcNAQELBQADggEBAKjDiuHhfuYiaIcI vD7eqAmRR/DuoxF10LH8mJN4AzJGUXrt7IzjV6fvsPwHYv/D9HDLimlBkUaVNmFl 6gr2hXHDhAgi90aTFF6jfb5ZCL+p2rrUAJnILlosRmGIbHtIKIccsXjXbyztrwFP QicpSCpPYDCyLtfO0E3k63UKZJADsiKxZYsM7bqbmVldkjCnCpfKkPNdYVAy51Ls LXm2aKtUAzt8nnkqex50Yub+Y4tYmKWe/YqyGAeJv8d6jy+CJCLlQqi6yQ0cFN3I NUgIR6jUTHkFwOOm2ZmCI+riFdZc18NE5bDOs3sXDeg0vGEKavCs4vYrLykI3TgS ZufcaK4= -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:22 2025 by rpki-client