$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/4A9AD51270F811F0BA070F34C4F9AE02.roa File: 4A9AD51270F811F0BA070F34C4F9AE02.roa (raw, json) Hash identifier: GfIBo0sJeXzYPko1KN4K0PA1n9E0Kyw46Z51n+s1ljE= Subject key identifier: EF:EF:B5:1B:F8:D7:E3:C2:7F:2F:A9:42:ED:C3:12:06:57:1C:C9:77 Certificate issuer: /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Certificate serial: 0113 Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/4A9AD51270F811F0BA070F34C4F9AE02.roa Signing time: Sat 13 Sep 2025 05:11:49 +0000 ROA not before: Sat 13 Sep 2025 05:11:49 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38713 IP address blocks: 103.121.40.0/22 maxlen: 22 103.121.40.0/24 maxlen: 24 103.121.41.0/24 maxlen: 24 103.121.42.0/24 maxlen: 24 103.121.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C10F, serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Validity Not Before: Sep 13 05:11:49 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68c4fd15-f803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:e8:c3:8a:1e:76:7e:5f:aa:42:b6:2a:f9: 09:aa:78:fd:77:77:95:bd:df:4c:87:cc:91:58:9f: d4:6f:2e:d4:c1:92:3b:31:b5:dd:78:62:d3:13:36: 3d:c1:96:7d:9e:b3:da:cb:72:14:91:69:9f:7f:ea: 34:5b:31:be:a9:de:7d:8d:01:84:f2:bc:ee:52:53: 79:01:e5:1a:63:c3:25:bb:db:73:20:66:8d:87:4e: 35:16:3c:ae:4d:a2:ca:63:8e:59:3e:d0:a2:65:df: 21:cb:f9:de:98:dc:6e:4f:7a:0e:18:59:0f:0c:c4: a0:0e:06:83:f8:a0:b1:05:36:7f:1d:b3:ca:68:10: 90:3b:eb:78:03:b7:49:8a:bd:32:6e:02:e9:ad:b5: 0e:94:6d:f1:69:9c:ed:06:55:72:00:0f:85:63:59: f3:d4:a7:ae:e9:e5:81:5f:fb:d9:67:85:90:95:06: f1:02:67:02:2f:8f:3c:d4:e1:61:44:d0:5f:f6:72: ec:07:40:78:72:51:10:59:13:ba:ec:b3:fb:0a:45: 03:9a:8a:e8:9a:03:8a:a0:d8:5a:3a:8a:f4:10:54: e3:3e:09:72:99:5d:93:84:7a:ea:3f:33:37:32:e1: f7:91:dd:6d:3a:13:2f:de:00:7f:91:e3:c0:52:95: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EF:B5:1B:F8:D7:E3:C2:7F:2F:A9:42:ED:C3:12:06:57:1C:C9:77 X509v3 Authority Key Identifier: keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/4A9AD51270F811F0BA070F34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.40.0/22 Signature Algorithm: sha256WithRSAEncryption 44:a9:fc:ee:3f:a5:b2:7c:1c:04:b2:28:c0:77:e5:57:76:2f: e5:1f:33:d9:05:3a:b8:75:08:91:3b:66:e1:f5:d0:de:eb:b3: f3:61:a8:db:2f:a4:c5:12:6f:a6:72:c4:1f:85:89:88:21:37: f3:53:37:fb:ae:57:cd:62:6a:f8:2e:03:fa:bd:2c:78:17:89: 53:11:7d:72:d5:b7:94:a3:42:42:41:46:9a:25:52:2f:70:30: 36:30:d0:3c:12:78:72:07:a8:3b:66:1f:b7:5e:2e:5e:73:d0: e7:bc:23:f3:49:d2:6b:c6:b9:62:74:9a:21:f8:78:79:5b:e7: 8b:cf:71:10:e0:8e:b6:71:6c:73:6c:b9:b0:30:8b:aa:d4:c8: 03:b2:ba:b5:11:32:16:c4:2c:b8:76:ed:fe:29:a0:af:18:a4: e7:02:58:5a:05:1a:fc:ff:03:99:08:cf:6a:d2:5c:bb:3a:82: 12:19:b1:45:32:a0:ee:a1:a8:a2:f4:47:67:66:c5:e7:a5:57: 4b:14:40:c0:5b:50:2e:c3:ab:13:04:cf:5a:2f:95:f8:6e:c1: 23:7a:c0:2b:d7:35:b2:57:39:56:13:41:77:02:dc:da:b4:d9: ef:92:a1:96:5d:07:5b:fc:0a:a2:d6:84:23:48:e0:9d:df:29: 4b:b2:ac:f3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMxMEYxMTAvBgNVBAUTKEEzRUI1MUQyOTk5QkJCNDQ2NTlCRERBNkJFMUUxMEZB NTUxRTIyNjUwHhcNMjUwOTEzMDUxMTQ5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM0ZmQxNS1mODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxTow4oedn5fqkK2KvkJqnj9d3eVvd9Mh8yRWJ/Uby7UwZI7MbXdeGLTEzY9 wZZ9nrPay3IUkWmff+o0WzG+qd59jQGE8rzuUlN5AeUaY8Mlu9tzIGaNh041Fjyu TaLKY45ZPtCiZd8hy/nemNxuT3oOGFkPDMSgDgaD+KCxBTZ/HbPKaBCQO+t4A7dJ ir0ybgLprbUOlG3xaZztBlVyAA+FY1nz1Keu6eWBX/vZZ4WQlQbxAmcCL4881OFh RNBf9nLsB0B4clEQWRO67LP7CkUDmoromgOKoNhaOor0EFTjPglymV2ThHrqPzM3 MuH3kd1tOhMv3gB/kePAUpW2uQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO/vtRv4 1+PCfy+pQu3DEgZXHMl3MB8GA1UdIwQYMBaAFKPrUdKZm7tEZZvdpr4eEPpVHiJl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzEwRi85QTc1ODBDOEZE NEExMUVFODA5QjA3MzBDNEY5QUUwMi9vLXRSMHBtYnUwUmxtOTJtdmg0US1sVWVJ bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdFIwcG1idTBSbG05Mm12aDRRLWxVZUltVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkMxMEYvOUE3NTgwQzhGRDRBMTFFRTgwOUIwNzMwQzRGOUFFMDIvNEE5QUQ1MTI3 MEY4MTFGMEJBMDcwRjM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneSgwDQYJKoZIhvcNAQELBQADggEBAESp/O4/pbJ8HASy KMB35Vd2L+UfM9kFOrh1CJE7ZuH10N7rs/NhqNsvpMUSb6ZyxB+FiYghN/NTN/uu V81iavguA/q9LHgXiVMRfXLVt5SjQkJBRpolUi9wMDYw0DwSeHIHqDtmH7deLl5z 0Oe8I/NJ0mvGuWJ0miH4eHlb54vPcRDgjrZxbHNsubAwi6rUyAOyurURMhbELLh2 7f4poK8YpOcCWFoFGvz/A5kIz2rSXLs6ghIZsUUyoO6hqKL0R2dmxeelV0sUQMBb UC7DqxMEz1ovlfhuwSN6wCvXNbJXOVYTQXcC3Nq02e+SoZZdB1v8CqLWhCNI4J3f KUuyrPM= -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:53 2025 by rpki-client