$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A12DD18E2F1C11EDA3E29B09C4F9AE02.roa File: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (raw, json) Hash identifier: qDuXN79IYo1ayNnk4ZRYUkR9U2DK4zQbiGKyGGdoBrg= Subject key identifier: 8C:D4:7C:CA:A0:B3:51:0B:91:42:6C:0C:02:0E:92:B2:67:DE:4B:AC Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 08FC Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A12DD18E2F1C11EDA3E29B09C4F9AE02.roa Signing time: Sun 02 Nov 2025 20:39:40 +0000 ROA not before: Sun 02 Nov 2025 20:39:40 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 15412 IP address blocks: 43.248.216.0/22 maxlen: 22 103.15.116.0/22 maxlen: 22 103.144.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2300 (0x8fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Nov 2 20:39:40 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6907c18c-03c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:49:c1:27:53:c5:2d:48:2d:1c:c3:3d:16: 52:ef:6e:26:2c:6b:db:99:64:20:66:bd:a2:56:b7: 66:b7:3c:19:1d:b2:b5:5e:3e:35:3f:5e:52:b1:b9: 29:42:4c:3f:2b:b3:5a:93:cd:ad:76:a9:f4:ae:41: b2:47:d8:2a:5f:56:cb:ab:68:24:7f:d6:f8:db:ca: e6:d0:91:f1:1a:01:6a:80:2d:9c:a3:37:48:43:d0: 9e:7a:3a:75:7f:49:12:f9:ac:7c:a3:60:2c:8f:04: 8f:fd:3e:ad:27:c7:6c:08:f5:e1:cc:0b:4c:d6:4e: d6:dd:68:cc:37:d1:76:09:12:ef:47:fd:4b:a7:ac: 3b:78:05:6a:53:cb:0c:db:86:ee:fc:c0:9c:4d:37: 47:3f:9a:62:0e:45:98:0c:8e:13:93:1c:9a:44:bf: 0d:f3:c7:14:70:6e:67:c3:e3:ec:4c:02:59:76:37: c6:d5:e5:04:fc:b2:73:c1:b7:5b:83:74:e5:4f:1d: 0a:d3:80:7e:2f:45:6d:e6:cc:b9:5f:89:cc:4c:2d: e4:91:7e:69:0d:62:83:7c:37:a1:3b:b8:27:46:d8: a9:7a:21:69:97:bf:c8:17:32:01:14:fa:71:cf:d2: 4d:07:fa:c0:18:0c:4d:8c:14:b9:76:1a:56:c3:9f: 2a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D4:7C:CA:A0:B3:51:0B:91:42:6C:0C:02:0E:92:B2:67:DE:4B:AC X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A12DD18E2F1C11EDA3E29B09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.216.0/22 103.15.116.0/22 103.144.202.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:09:a9:b6:84:e0:8c:b4:83:b0:21:95:fe:aa:d5:5a:6c:b6: b2:4d:e6:2f:6d:61:60:5b:e6:f7:dd:c4:39:e5:a1:9d:a2:73: 3b:16:f0:d6:e7:7f:b2:b0:9b:e9:00:21:c4:0a:99:c7:83:57: d5:a5:83:ae:97:01:6b:3c:ab:88:d7:c0:31:67:dd:d9:1b:80: 09:51:a3:43:1b:b6:92:14:f5:cf:59:d0:13:16:6b:15:92:26: 19:16:e6:c4:07:84:e8:3b:1b:7b:10:ee:27:86:23:a6:97:5f: 99:9a:b9:6c:c6:e7:1e:8c:4c:68:8d:e2:29:57:f5:86:d4:d6: fe:af:82:e0:61:49:a1:34:c8:b1:81:30:cf:b3:1e:fb:46:83: 20:a6:2a:1b:69:1f:75:1b:0f:ce:78:27:7d:c4:be:bd:a1:cb: e2:d0:37:99:de:12:7a:e4:9b:14:3e:7b:7d:0f:81:48:40:52: 9a:c7:17:12:4b:17:9e:5e:71:72:9f:a3:79:f6:00:a3:9b:e7: 0c:63:e6:3d:94:ef:50:47:9f:39:f1:36:bc:2f:19:04:c2:94: df:81:e1:50:05:d5:6f:fe:ef:cf:b7:64:07:96:1c:3b:8e:f6: 50:16:3a:4c:e9:17:b7:d2:4c:9e:d7:3f:f8:99:5e:53:26:e2: a5:09:4b:b1 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUxMTAyMjAzOTQwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3YzE4Yy0wM2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ1JwSdTxS1ILRzDPRZS724mLGvbmWQgZr2iVrdmtzwZHbK1Xj41P15Ssbkp Qkw/K7Nak82tdqn0rkGyR9gqX1bLq2gkf9b428rm0JHxGgFqgC2cozdIQ9Ceejp1 f0kS+ax8o2AsjwSP/T6tJ8dsCPXhzAtM1k7W3WjMN9F2CRLvR/1Lp6w7eAVqU8sM 24bu/MCcTTdHP5piDkWYDI4TkxyaRL8N88cUcG5nw+PsTAJZdjfG1eUE/LJzwbdb g3TlTx0K04B+L0Vt5sy5X4nMTC3kkX5pDWKDfDehO7gnRtipeiFpl7/IFzIBFPpx z9JNB/rAGAxNjBS5dhpWw58q4QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIzUfMqg s1ELkUJsDAIOkrJn3kusMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUyRjcvN0NDNDVGQUVCQUFGMTFFQUE2REQxQTNEQzRGOUFFMDIvQTEyREQxOEUy RjFDMTFFREEzRTI5QjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr+NgDBAJnD3QDBAFnkMowDQYJKoZIhvcNAQELBQADggEB AF0JqbaE4Iy0g7Ahlf6q1VpstrJN5i9tYWBb5vfdxDnloZ2iczsW8Nbnf7Kwm+kA IcQKmceDV9Wlg66XAWs8q4jXwDFn3dkbgAlRo0MbtpIU9c9Z0BMWaxWSJhkW5sQH hOg7G3sQ7ieGI6aXX5mauWzG5x6MTGiN4ilX9YbU1v6vguBhSaE0yLGBMM+zHvtG gyCmKhtpH3UbD854J33Evr2hy+LQN5neEnrkmxQ+e30PgUhAUprHFxJLF55ecXKf o3n2AKOb5wxj5j2U71BHnznxNrwvGQTClN+B4VAF1W/+78+3ZAeWHDuO9lAWOkzp F7fSTJ7XP/iZXlMm4qUJS7E= -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:32 2025 by rpki-client