$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/398211B2DE1C11ED8935D41DC4F9AE02.roa File: 398211B2DE1C11ED8935D41DC4F9AE02.roa (raw, json) Hash identifier: wopEO75v9BjYl9vOdVT+gxRW501TRBhH4f19N/SIRYk= Subject key identifier: BF:D7:92:CD:A0:29:01:8C:13:4F:FF:0A:CD:D4:E6:E4:F6:74:22:5F Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Certificate serial: 01DF Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/398211B2DE1C11ED8935D41DC4F9AE02.roa Signing time: Wed 29 Oct 2025 02:46:56 +0000 ROA not before: Wed 29 Oct 2025 02:46:56 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 3320 IP address blocks: 103.12.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Validity Not Before: Oct 29 02:46:56 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6901801f-62e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:78:db:ef:3d:5e:75:37:80:48:82:32:13: 5b:da:01:e4:6a:21:ff:54:8e:86:a1:23:37:04:e0: 66:43:3f:c6:17:90:16:a1:9a:72:82:7a:78:e1:a7: 6e:40:67:2f:07:09:9a:03:4f:09:40:a1:c8:10:53: 80:2f:52:78:2f:1e:68:e0:4c:63:11:a0:78:f3:47: a7:95:dd:f2:bb:6d:a8:38:02:dc:be:51:3f:e6:cc: 74:3e:ef:2f:86:de:b0:c0:86:42:35:80:fd:da:15: 0c:b7:68:6c:1e:b9:e9:8c:e6:c8:cf:b3:8a:91:0f: b4:47:5f:ee:bd:b0:b8:a6:40:4f:a1:db:15:77:76: 66:0b:7b:e2:a8:55:db:14:83:05:61:22:0b:b6:0d: d9:50:bf:b0:87:1f:5c:5a:71:87:42:1f:9a:46:55: 34:b5:a9:08:a2:a8:31:2f:8b:e8:e8:58:27:dc:03: 14:a3:8f:a3:13:65:e3:03:df:ba:24:61:11:04:d8: 9a:19:60:00:be:e3:27:8b:b3:80:9c:f2:93:ec:41: a2:6c:93:84:61:00:d3:e1:08:64:02:ab:1e:6d:be: 0e:6e:86:98:6d:34:a9:88:f0:b2:38:f0:e5:ab:52: 12:22:53:07:88:13:68:ce:99:23:28:03:e0:4f:aa: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D7:92:CD:A0:29:01:8C:13:4F:FF:0A:CD:D4:E6:E4:F6:74:22:5F X509v3 Authority Key Identifier: keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/398211B2DE1C11ED8935D41DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.180.0/23 Signature Algorithm: sha256WithRSAEncryption 97:c1:67:d3:e0:91:02:bd:9b:a4:05:99:1d:7d:3f:59:8d:25: 6d:24:22:b7:c3:b6:58:4a:4b:e7:c6:b9:65:eb:8a:6e:a1:4a: 71:b9:c6:12:ae:65:b4:ef:e9:26:0a:4a:c0:c6:ab:3a:9c:23: c0:eb:c7:43:86:da:2e:5b:a1:1a:57:9d:01:28:04:60:67:b2: af:c1:92:26:aa:ce:be:83:93:f0:97:c2:5c:05:ce:2c:30:00: 25:80:06:6f:cd:28:4c:2d:96:a8:d1:ac:07:bb:16:9d:43:e4: ff:54:9d:9b:3f:11:37:92:2f:54:63:c7:f6:d0:77:78:3a:c9: c4:c4:10:db:e0:48:48:05:36:72:fd:d9:4f:f3:aa:11:4b:c0: 2d:be:a8:f3:18:7f:5b:e1:2b:65:16:13:fc:8a:19:03:61:3f: 56:73:c0:fa:4f:f8:58:d7:5b:f2:c3:89:1d:7e:51:6b:03:40: 61:ca:99:6b:63:da:a4:26:4d:9c:a3:9c:d6:36:ac:d1:b4:90: cf:55:28:cb:28:f7:d8:75:01:b3:e5:3c:ec:89:02:8c:4d:91: 0c:77:20:02:b0:06:fe:d7:87:ec:03:30:66:20:39:0d:5b:38: 21:64:ac:8e:6a:cb:39:de:92:70:4b:ac:4d:a8:44:81:d8:00: a8:7a:fa:2b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz REQ2MDczMEIwHhcNMjUxMDI5MDI0NjU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAxODAxZi02MmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFV42+89XnU3gEiCMhNb2gHkaiH/VI6GoSM3BOBmQz/GF5AWoZpygnp44adu QGcvBwmaA08JQKHIEFOAL1J4Lx5o4ExjEaB480enld3yu22oOALcvlE/5sx0Pu8v ht6wwIZCNYD92hUMt2hsHrnpjObIz7OKkQ+0R1/uvbC4pkBPodsVd3ZmC3viqFXb FIMFYSILtg3ZUL+whx9cWnGHQh+aRlU0takIoqgxL4vo6Fgn3AMUo4+jE2XjA9+6 JGERBNiaGWAAvuMni7OAnPKT7EGibJOEYQDT4QhkAqsebb4OboaYbTSpiPCyOPDl q1ISIlMHiBNozpkjKAPgT6rb4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFL/Xks2g KQGME0//Cs3U5uT2dCJfMB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJDMkEvRUQ5RjhEQkFERTExMTFFRDg1RUMwQTQ5QzRGOUFFMDIvMzk4MjExQjJE RTFDMTFFRDg5MzVENDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnDLQwDQYJKoZIhvcNAQELBQADggEBAJfBZ9PgkQK9m6QF mR19P1mNJW0kIrfDtlhKS+fGuWXrim6hSnG5xhKuZbTv6SYKSsDGqzqcI8Drx0OG 2i5boRpXnQEoBGBnsq/Bkiaqzr6Dk/CXwlwFziwwACWABm/NKEwtlqjRrAe7Fp1D 5P9UnZs/ETeSL1Rjx/bQd3g6ycTEENvgSEgFNnL92U/zqhFLwC2+qPMYf1vhK2UW E/yKGQNhP1ZzwPpP+FjXW/LDiR1+UWsDQGHKmWtj2qQmTZyjnNY2rNG0kM9VKMso 99h1AbPlPOyJAoxNkQx3IAKwBv7Xh+wDMGYgOQ1bOCFkrI5qyzneknBLrE2oRIHY AKh6+is= -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:41 2025 by rpki-client