$ rpki-client -vvf rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/74EAEAC41ED211EFA618AB5EC4F9AE02.roa File: 74EAEAC41ED211EFA618AB5EC4F9AE02.roa (raw, json) Hash identifier: bZZXWh+x6zyd1WkvfmUOQBDbu8rzUDtizJ6UDEgwLU0= Subject key identifier: 8E:53:32:40:31:77:42:41:14:3B:4C:35:18:F0:3E:06:F7:2E:8F:31 Certificate issuer: /CN=A916879A/serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Certificate serial: 0105 Authority key identifier: 39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/74EAEAC41ED211EFA618AB5EC4F9AE02.roa Signing time: Wed 24 Sep 2025 01:33:57 +0000 ROA not before: Wed 24 Sep 2025 01:33:57 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 148968 IP address blocks: 103.118.161.0/24 maxlen: 24 203.25.98.0/24 maxlen: 24 2001:df5:d500::/48 maxlen: 48 2001:df5:d501::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916879A, serialNumber=399A5E17D9CA43B6C33AC330206DCBDD935E7871 Validity Not Before: Sep 24 01:33:57 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68d34a85-244a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:e5:06:35:b0:6d:d6:98:55:fe:4b:5e:bb: f1:a4:a9:1d:d7:14:8b:9c:14:41:4d:44:d7:50:02: 71:3e:be:3e:0d:ec:40:cb:e0:ee:97:68:80:55:70: 69:9d:12:8c:4d:2c:63:92:13:33:70:66:db:be:84: 8b:f4:28:a4:8b:34:e4:9a:08:d5:cc:fc:48:43:c9: e2:3f:8d:35:6b:81:a6:29:ed:d7:0c:89:5e:4f:f9: 93:5c:64:ae:06:df:b4:85:e9:65:b9:43:d9:fe:71: 2c:10:79:03:35:da:38:b9:3c:c3:c7:03:30:9f:21: 5f:0a:73:2c:9e:43:49:ce:80:7c:53:8a:90:43:28: 0c:d8:b8:82:69:a9:a4:bf:06:69:34:25:28:65:74: 89:52:2b:9a:6e:e4:02:f3:47:37:53:8b:19:d6:55: 59:ba:f2:a5:75:fd:d4:88:f5:ba:11:39:ed:65:22: 92:22:9e:4c:d3:83:3c:90:cf:dd:8e:cb:94:72:cf: 57:d0:0f:af:47:96:0f:3e:4a:89:18:81:d8:8d:f8: 27:c9:61:ed:d9:72:fa:1a:a9:b5:14:09:c2:7f:6a: 34:d4:3c:50:eb:3e:d3:be:34:e5:ce:14:b5:9c:c3: de:de:aa:ee:88:06:b7:8c:64:e3:d4:60:d9:d6:71: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:53:32:40:31:77:42:41:14:3B:4C:35:18:F0:3E:06:F7:2E:8F:31 X509v3 Authority Key Identifier: keyid:39:9A:5E:17:D9:CA:43:B6:C3:3A:C3:30:20:6D:CB:DD:93:5E:78:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OZpeF9nKQ7bDOsMwIG3L3ZNeeHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916879A/B670173C1C9B11EF8F45CC7DC4F9AE02/74EAEAC41ED211EFA618AB5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.161.0/24 203.25.98.0/24 IPv6: 2001:df5:d500::/47 Signature Algorithm: sha256WithRSAEncryption 21:c3:56:d8:57:d6:be:0b:fe:16:04:9e:78:c8:7b:21:e6:26: 8e:e8:5c:97:18:e8:15:1b:00:d5:8f:df:87:00:7b:d3:e6:bf: d1:f4:b3:2c:68:e1:1a:86:8a:b3:2e:2f:da:d2:f5:1e:c7:fa: 42:d6:b1:a9:8a:0e:6b:b5:7a:64:44:d2:4a:fc:27:62:d8:02: 35:7a:24:9d:e8:b0:ec:7e:09:39:9b:37:03:56:a6:8a:ca:0e: d4:cc:d6:cb:0f:cf:d6:d6:4b:d4:70:f7:f2:9f:44:c8:31:c2: c6:0f:89:88:7f:3c:52:78:97:b0:34:d9:0a:35:56:2a:cd:06: 00:c5:b3:15:f0:0f:3b:87:6d:4f:3f:8d:9d:c6:45:6d:70:9e: 68:87:f4:b0:b8:da:ec:c7:39:8d:dc:b7:fa:93:79:d7:7f:d8: a8:c3:fb:00:c3:bc:05:ba:e8:9d:d9:83:c4:be:33:87:f9:a3: f9:62:fe:59:54:d4:2f:2d:29:78:dc:f7:c1:34:b6:c6:8e:8e: 7b:5d:a5:53:20:07:e9:2d:bc:26:b3:c8:45:51:34:1a:46:55: 1a:66:79:7d:b5:3d:0b:6e:e9:24:a1:0e:55:f9:a9:84:fe:9c: 20:c7:ae:36:2f:6e:97:ac:43:7d:ff:80:06:f4:bd:cc:cc:cb: ca:fd:01:7d -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg3OUExMTAvBgNVBAUTKDM5OUE1RTE3RDlDQTQzQjZDMzNBQzMzMDIwNkRDQkRE OTM1RTc4NzEwHhcNMjUwOTI0MDEzMzU3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQzNGE4NS0yNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0jlBjWwbdaYVf5LXrvxpKkd1xSLnBRBTUTXUAJxPr4+DexAy+Dul2iAVXBp nRKMTSxjkhMzcGbbvoSL9CikizTkmgjVzPxIQ8niP401a4GmKe3XDIleT/mTXGSu Bt+0helluUPZ/nEsEHkDNdo4uTzDxwMwnyFfCnMsnkNJzoB8U4qQQygM2LiCaamk vwZpNCUoZXSJUiuabuQC80c3U4sZ1lVZuvKldf3UiPW6ETntZSKSIp5M04M8kM/d jsuUcs9X0A+vR5YPPkqJGIHYjfgnyWHt2XL6Gqm1FAnCf2o01DxQ6z7TvjTlzhS1 nMPe3qruiAa3jGTj1GDZ1nHr8wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFI5TMkAx d0JBFDtMNRjwPgb3Lo8xMB8GA1UdIwQYMBaAFDmaXhfZykO2wzrDMCBty92TXnhx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODc5QS9CNjcwMTczQzFD OUIxMUVGOEY0NUNDN0RDNEY5QUUwMi9PWnBlRjluS1E3YkRPc013SUczTDNaTmVl SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09acGVGOW5LUTdiRE9zTXdJRzNMM1pOZWVIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg3OUEvQjY3MDE3M0MxQzlCMTFFRjhGNDVDQzdEQzRGOUFFMDIvNzRFQUVBQzQx RUQyMTFFRkE2MThBQjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABndqEDBADLGWIwDwQCAAIwCQMHASABDfXVADANBgkqhkiG 9w0BAQsFAAOCAQEAIcNW2FfWvgv+FgSeeMh7IeYmjuhclxjoFRsA1Y/fhwB70+a/ 0fSzLGjhGoaKsy4v2tL1Hsf6QtaxqYoOa7V6ZETSSvwnYtgCNXokneiw7H4JOZs3 A1amisoO1MzWyw/P1tZL1HD38p9EyDHCxg+JiH88UniXsDTZCjVWKs0GAMWzFfAP O4dtTz+NncZFbXCeaIf0sLja7Mc5jdy3+pN513/YqMP7AMO8BbrondmDxL4zh/mj +WL+WVTULy0peNz3wTS2xo6Oe12lUyAH6S28JrPIRVE0GkZVGmZ5fbU9C27pJKEO VfmphP6cIMeuNi9ul6xDff+ABvS9zMzLyv0BfQ== -----END CERTIFICATE-----Generated at Tue Nov 4 17:02:01 2025 by rpki-client