$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F83786F4030011F0984B974FC4F9AE02.roa File: F83786F4030011F0984B974FC4F9AE02.roa (raw, json) Hash identifier: dZbjlWTe8fWMRR6qgpL+ZoRL9VFsmU1Nz8661bmlCro= Subject key identifier: 45:2F:C4:70:F2:C5:C3:EA:46:2D:B2:66:C1:04:5B:2D:62:8C:44:6E Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 03E9 Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F83786F4030011F0984B974FC4F9AE02.roa Signing time: Wed 23 Apr 2025 06:27:06 +0000 ROA not before: Wed 23 Apr 2025 06:27:06 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 62610 IP address blocks: 43.230.8.0/23 maxlen: 23 43.255.116.0/24 maxlen: 24 43.255.117.0/24 maxlen: 24 103.49.62.0/23 maxlen: 23 103.103.246.0/24 maxlen: 24 103.103.247.0/24 maxlen: 24 103.235.19.0/24 maxlen: 24 103.239.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1001 (0x3e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Validity Not Before: Apr 23 06:27:06 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6808883a-801e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:b4:7b:8e:e5:80:4d:00:b2:c1:38:ef:ab: fa:15:4f:c9:3e:a2:7a:17:7f:06:66:2b:26:ad:98: 3f:fd:06:92:26:58:71:4b:90:6b:81:56:75:c1:28: 04:16:fe:17:f7:db:b4:48:47:19:57:46:31:fc:9b: 32:a0:d2:4c:51:a1:bf:a7:bc:3d:b7:03:d1:0a:24: 93:0d:b5:38:37:b3:2e:26:6f:a6:cc:ef:45:43:0b: 92:0c:9f:b8:1b:31:1a:6a:87:16:94:19:ad:b3:06: 89:1e:4a:ce:b6:92:aa:93:ab:22:a2:45:65:1d:a3: df:5a:4e:1a:79:c3:af:64:35:0a:07:df:44:b3:8b: 21:5f:e1:a1:04:19:c1:48:94:01:68:a9:e6:11:97: 57:6e:40:54:ba:38:c5:07:89:55:84:77:f9:f9:f5: 01:1e:2b:ed:d8:f1:94:35:d7:5d:02:9c:dc:bf:e9: 38:6c:30:6e:fb:9f:98:39:8d:b5:a1:be:77:1e:63: 11:18:98:9f:eb:a7:a4:fa:80:05:86:8c:54:63:2f: 70:e1:54:98:a2:af:97:a7:97:e1:2b:5b:99:92:7d: 42:44:03:40:e2:70:90:b7:65:46:3c:bd:a9:c8:82: b6:92:9e:49:a2:10:54:ef:5a:bd:0b:68:3d:57:ba: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2F:C4:70:F2:C5:C3:EA:46:2D:B2:66:C1:04:5B:2D:62:8C:44:6E X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F83786F4030011F0984B974FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.8.0/23 43.255.116.0/23 103.49.62.0/23 103.103.246.0/23 103.235.19.0/24 103.239.103.0/24 Signature Algorithm: sha256WithRSAEncryption 71:26:18:26:f1:e4:14:86:76:5d:f3:f5:a4:70:7a:5d:d5:ae: e2:35:97:39:64:7f:76:6d:cb:68:49:09:a9:54:b9:c2:38:a4: 0d:e1:28:08:f3:9a:95:b4:e9:ac:9f:66:9a:11:74:80:f0:55: 31:c8:d2:82:4c:7f:78:77:c2:18:7a:46:54:fa:85:c7:5d:fb: 0d:e7:00:4c:6b:b4:ca:71:61:5a:03:fb:d8:b0:d5:9a:43:e8: 80:26:ad:ff:69:b3:9e:0f:1d:97:85:75:b7:44:46:7b:ba:4f: ba:ad:b6:2d:31:6b:a6:d5:cf:d7:8d:d0:d9:95:f0:01:6b:f1: 77:6c:20:b5:23:7f:9d:0d:02:26:1f:81:c9:14:53:88:3d:94: 30:22:97:0c:4c:b7:d1:a8:a1:c6:69:87:88:96:18:63:b1:fe: 99:05:65:2b:71:09:a4:db:a9:1a:85:3a:fe:a2:c1:09:43:29: 71:1a:5a:06:55:a6:f2:82:15:13:2b:69:79:da:cb:bf:8d:36: 10:6d:cc:d6:3e:24:72:df:75:57:3d:3f:5b:d0:68:ce:c8:40: 91:45:11:fc:eb:fa:16:af:a0:95:37:0e:f2:fa:1a:53:6e:22: 7b:1d:f7:69:63:6c:4a:18:04:7b:9e:59:03:fb:d2:a0:47:bd: d4:da:44:64 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICA+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjUwNDIzMDYyNzA2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA4ODgzYS04MDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPq0e47lgE0AssE476v6FU/JPqJ6F38GZismrZg//QaSJlhxS5BrgVZ1wSgE Fv4X99u0SEcZV0Yx/JsyoNJMUaG/p7w9twPRCiSTDbU4N7MuJm+mzO9FQwuSDJ+4 GzEaaocWlBmtswaJHkrOtpKqk6siokVlHaPfWk4aecOvZDUKB99Es4shX+GhBBnB SJQBaKnmEZdXbkBUujjFB4lVhHf5+fUBHivt2PGUNdddApzcv+k4bDBu+5+YOY21 ob53HmMRGJif66ek+oAFhoxUYy9w4VSYoq+Xp5fhK1uZkn1CRANA4nCQt2VGPL2p yIK2kp5JohBU71q9C2g9V7qv0QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFEUvxHDy xcPqRi2yZsEEWy1ijERuMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvRjgzNzg2RjQw MzAwMTFGMDk4NEI5NzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAEr5ggDBAEr/3QDBAFnMT4DBAFnZ/YDBABn6xMDBABn72cw DQYJKoZIhvcNAQELBQADggEBAHEmGCbx5BSGdl3z9aRwel3VruI1lzlkf3Zty2hJ CalUucI4pA3hKAjzmpW06ayfZpoRdIDwVTHI0oJMf3h3whh6RlT6hcdd+w3nAExr tMpxYVoD+9iw1ZpD6IAmrf9ps54PHZeFdbdERnu6T7qtti0xa6bVz9eN0NmV8AFr 8XdsILUjf50NAiYfgckUU4g9lDAilwxMt9GoocZph4iWGGOx/pkFZStxCaTbqRqF Ov6iwQlDKXEaWgZVpvKCFRMraXnay7+NNhBtzNY+JHLfdVc9P1vQaM7IQJFFEfzr +havoJU3DvL6GlNuInsd92ljbEoYBHueWQP70qBHvdTaRGQ= -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:43 2025 by rpki-client