$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/4D47DE5A127E11EB91021F3AC4F9AE02.roa File: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (raw, json) Hash identifier: VXJnWLTlfJE7hcFdY+uRPYEzZpm7z+xQureyi9VYPn4= Subject key identifier: 61:89:CE:3F:C9:4F:57:C6:C7:47:B8:93:91:F5:0A:15:C7:D4:63:6A Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 07EF Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/4D47DE5A127E11EB91021F3AC4F9AE02.roa Signing time: Tue 30 Sep 2025 21:53:55 +0000 ROA not before: Tue 30 Sep 2025 21:53:55 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45215 IP address blocks: 43.239.180.0/22 maxlen: 22 43.239.180.0/23 maxlen: 23 43.239.182.0/23 maxlen: 23 103.58.213.0/24 maxlen: 24 103.58.214.0/23 maxlen: 24 103.241.88.0/23 maxlen: 24 103.241.90.0/24 maxlen: 24 103.241.91.0/24 maxlen: 24 202.36.68.0/23 maxlen: 24 2403:40c0::/48 maxlen: 48 2403:40c0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Validity Not Before: Sep 30 21:53:55 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dc5172-f5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:27:80:45:f0:29:2e:d5:66:70:ea:08:7b: 4f:88:f0:19:5d:c0:7a:d9:b0:f7:45:39:2f:db:b1: cb:16:c9:e0:d4:96:2a:d9:48:6e:76:51:2d:18:cc: b6:2c:d2:85:59:d6:83:52:47:3f:03:62:b3:ce:11: ab:1b:37:44:4c:7e:08:82:53:1a:cd:37:d6:12:de: 55:2b:88:c6:5c:33:0e:06:61:7e:27:13:8b:c5:44: 34:9e:3e:18:3c:49:66:54:ee:21:7c:e0:a8:63:c9: 10:0a:67:83:61:27:60:a9:4b:b9:ea:47:11:5a:cb: c9:e1:d3:8d:e6:3c:ed:18:9b:c9:b6:5c:72:14:66: 06:75:e0:21:0b:1b:d0:97:37:21:4d:6b:55:2c:09: 4c:3a:c2:7d:c3:9e:64:4f:53:15:44:25:c5:1d:14: 3a:c8:63:03:41:a2:b8:45:e4:90:66:3e:1b:41:de: c2:cc:e5:ca:a6:f5:7c:e5:26:c5:8e:eb:a5:52:02: 11:ed:a7:3e:06:82:76:de:d8:33:a8:44:56:0b:b5: 6d:23:f3:56:21:f5:3d:62:9c:1b:a4:1e:ff:12:41: 34:d1:13:2e:51:13:51:ec:5b:8a:4b:fb:5a:64:b2: 03:5d:05:4a:e4:cb:c1:e0:34:76:93:ea:54:f7:cb: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:CE:3F:C9:4F:57:C6:C7:47:B8:93:91:F5:0A:15:C7:D4:63:6A X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/4D47DE5A127E11EB91021F3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.180.0/22 103.58.213.0-103.58.215.255 103.241.88.0/22 202.36.68.0/23 IPv6: 2403:40c0::/48 2403:40c0:4::/48 Signature Algorithm: sha256WithRSAEncryption 3b:51:89:14:c2:2f:86:f7:d1:36:56:06:b5:43:d7:ba:8a:b5: af:83:4b:d7:0f:ea:0d:da:07:50:5a:42:8a:c1:1f:96:97:a5: 7f:8c:19:29:47:5e:af:56:fd:19:34:0f:47:29:2d:f2:b7:41: 54:07:90:ca:71:53:7b:ce:69:8f:75:54:3d:53:3a:4a:23:5d: e6:00:00:9a:13:61:a6:f5:bb:ab:0d:3f:b3:af:4d:16:7d:ed: 8f:3b:15:69:4b:90:f4:b6:07:4e:03:b1:21:37:ae:53:a1:e9: 5e:b4:d0:80:35:5f:7e:7e:b2:2b:33:f9:ea:74:d3:a1:8e:75: 77:be:85:0b:b9:bb:fc:bd:0b:c5:e4:9d:23:5c:73:a2:72:20: c8:1d:bd:c5:58:7a:21:80:0f:da:61:e6:8f:25:6c:82:4f:2d: 85:b2:f9:b8:f8:90:df:bd:14:11:eb:ae:54:39:94:78:d1:7a: 95:ea:f2:e1:b4:f5:90:7b:3f:cd:c3:9f:0f:07:13:90:fd:1d: f3:c4:7b:70:89:47:a7:be:b1:77:13:38:2c:cf:ec:a1:af:57: 6d:2f:7b:fb:cb:5b:eb:5d:8a:e2:cf:88:19:c2:b7:28:c4:e4: cf:46:bd:6a:00:31:72:78:52:31:1b:e0:ea:2f:2f:97:b3:45: a3:b9:bc:36 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjUwOTMwMjE1MzU1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjNTE3Mi1mNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/ongEXwKS7VZnDqCHtPiPAZXcB62bD3RTkv27HLFsng1JYq2UhudlEtGMy2 LNKFWdaDUkc/A2KzzhGrGzdETH4IglMazTfWEt5VK4jGXDMOBmF+JxOLxUQ0nj4Y PElmVO4hfOCoY8kQCmeDYSdgqUu56kcRWsvJ4dON5jztGJvJtlxyFGYGdeAhCxvQ lzchTWtVLAlMOsJ9w55kT1MVRCXFHRQ6yGMDQaK4ReSQZj4bQd7CzOXKpvV85SbF juulUgIR7ac+BoJ23tgzqERWC7VtI/NWIfU9YpwbpB7/EkE00RMuURNR7FuKS/ta ZLIDXQVK5MvB4DR2k+pU98v1CwIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFGGJzj/J T1fGx0e4k5H1ChXH1GNqMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM3OEYvQTVBOUM0QTgxMjcxMTFFQjg4RDRCRDgwQzRGOUFFMDIvNEQ0N0RFNUEx MjdFMTFFQjkxMDIxRjNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUwYIKwYBBQUHAQcBAf8E RDBCMCYEAgABMCADBAIr77QwDAMEAGc61QMEA2c60AMEAmfxWAMEAcokRDAYBAIA AjASAwcAJANAwAAAAwcAJANAwAAEMA0GCSqGSIb3DQEBCwUAA4IBAQA7UYkUwi+G 99E2Vga1Q9e6irWvg0vXD+oN2gdQWkKKwR+Wl6V/jBkpR16vVv0ZNA9HKS3yt0FU B5DKcVN7zmmPdVQ9UzpKI13mAACaE2Gm9burDT+zr00Wfe2POxVpS5D0tgdOA7Eh N65ToeletNCANV9+frIrM/nqdNOhjnV3voULubv8vQvF5J0jXHOiciDIHb3FWHoh gA/aYeaPJWyCTy2Fsvm4+JDfvRQR665UOZR40XqV6vLhtPWQez/Nw58PBxOQ/R3z xHtwiUenvrF3Ezgsz+yhr1dtL3v7y1vrXYriz4gZwrcoxOTPRr1qADFyeFIxG+Dq Ly+Xs0Wjubw2 -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:18 2025 by rpki-client