$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/4A9AD51270F811F0BA070F34C4F9AE02.roa File: 4A9AD51270F811F0BA070F34C4F9AE02.roa (raw, json) Hash identifier: QDfFAc+QsuBck33Pcmt3S/+ttTSwrhFIgTHSmH6YmEQ= Subject key identifier: 0D:2B:B6:D9:71:36:9C:64:29:30:1F:C1:DE:2C:B2:69:58:65:99:58 Certificate issuer: /CN=A916C10F/serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Certificate serial: FA Authority key identifier: A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/4A9AD51270F811F0BA070F34C4F9AE02.roa Signing time: Mon 04 Aug 2025 06:26:18 +0000 ROA not before: Mon 04 Aug 2025 06:26:18 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 38713 IP address blocks: 103.121.40.0/22 maxlen: 22 103.121.40.0/24 maxlen: 24 103.121.41.0/24 maxlen: 24 103.121.42.0/24 maxlen: 24 103.121.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C10F, serialNumber=A3EB51D2999BBB44659BDDA6BE1E10FA551E2265 Validity Not Before: Aug 4 06:26:18 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6890528a-4c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:34:5e:42:12:81:f2:97:b3:e4:9a:14:48: b6:79:08:d3:73:17:8c:8b:41:73:ca:2e:19:65:97: 68:95:91:11:14:31:69:0c:fe:7d:c9:71:6d:e5:dd: 0f:14:68:f0:1a:18:06:dc:d7:3a:b8:86:c2:e2:db: 59:7e:5b:ca:80:d3:9b:50:6a:70:a3:69:ab:7d:c3: 75:68:7c:80:10:65:80:b6:b9:87:b2:0d:6f:87:e6: 20:b7:5b:a5:8e:00:4b:75:95:c6:89:fb:5d:9e:6e: 86:ea:41:9f:e4:bd:1c:5f:a8:03:cc:b2:be:7d:06: 40:d8:47:16:4a:72:c8:54:e6:15:3d:f8:4a:50:cb: d0:3b:3b:6b:81:d6:c6:43:74:e5:c1:d5:91:b4:75: b2:11:fd:78:e8:1a:54:13:c3:80:f1:07:76:ce:48: 68:32:f7:7f:43:eb:3a:df:85:66:d1:d8:d5:92:19: a4:fb:74:f8:af:42:01:90:d7:48:75:e5:2b:e3:6a: eb:b6:b3:15:58:57:5a:66:05:51:a2:25:12:35:f6: 7d:ed:97:55:58:9d:88:f1:e0:d8:21:07:c2:29:7a: 38:e1:39:a5:5d:f4:12:5d:54:34:a3:5f:91:d7:a0: 96:ac:c7:e1:af:61:07:e6:7e:97:08:61:7c:37:98: 48:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2B:B6:D9:71:36:9C:64:29:30:1F:C1:DE:2C:B2:69:58:65:99:58 X509v3 Authority Key Identifier: keyid:A3:EB:51:D2:99:9B:BB:44:65:9B:DD:A6:BE:1E:10:FA:55:1E:22:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/o-tR0pmbu0Rlm92mvh4Q-lUeImU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-tR0pmbu0Rlm92mvh4Q-lUeImU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/9A7580C8FD4A11EE809B0730C4F9AE02/4A9AD51270F811F0BA070F34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.40.0/22 Signature Algorithm: sha256WithRSAEncryption 34:30:4b:79:7c:62:d4:ba:6f:b7:a2:3c:94:95:a2:86:56:7f: 15:79:bb:e5:33:15:5b:5f:43:af:6c:fc:7a:c6:8c:30:f7:04: 62:da:09:60:b0:02:a3:63:7f:c7:f6:0e:b2:a4:8f:af:ff:5f: 1b:ed:45:76:cc:8c:6d:c3:6a:f7:e0:df:4d:7f:f9:3e:51:97: ed:a8:cf:dd:d5:b4:25:55:3f:3f:1c:db:63:7c:ba:f6:5d:8e: bd:a6:44:25:cf:32:9f:98:9f:94:a0:20:4a:a6:1a:b4:bd:d5: 65:c9:c3:c4:12:71:29:fc:ec:8c:c6:0c:62:2c:e7:cb:8d:b6: 7d:e2:39:8a:b9:3c:43:24:53:74:12:5f:dc:e9:7c:f8:e0:38: 33:5e:3c:96:e8:44:0c:fd:55:bb:14:84:bf:25:a6:e1:74:6d: 70:6c:2e:1f:34:26:f4:34:7f:d8:c8:d9:59:76:f8:67:1c:85: 90:04:8d:60:4e:fc:00:b3:88:d9:04:cb:bd:e2:80:b2:44:6d: be:fc:51:05:62:e8:f7:11:e8:9e:17:a3:a3:a9:2a:7d:8e:7b: 3d:b4:46:3f:60:f4:6b:a1:f6:69:27:2a:ab:37:79:5d:06:c4: 49:e1:ac:52:0b:ae:3b:a0:d0:66:59:b8:ca:ef:a7:cd:d9:be: a8:09:f7:81 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMxMEYxMTAvBgNVBAUTKEEzRUI1MUQyOTk5QkJCNDQ2NTlCRERBNkJFMUUxMEZB NTUxRTIyNjUwHhcNMjUwODA0MDYyNjE4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkwNTI4YS00YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVc0XkISgfKXs+SaFEi2eQjTcxeMi0Fzyi4ZZZdolZERFDFpDP59yXFt5d0P FGjwGhgG3Nc6uIbC4ttZflvKgNObUGpwo2mrfcN1aHyAEGWAtrmHsg1vh+Ygt1ul jgBLdZXGiftdnm6G6kGf5L0cX6gDzLK+fQZA2EcWSnLIVOYVPfhKUMvQOztrgdbG Q3TlwdWRtHWyEf146BpUE8OA8Qd2zkhoMvd/Q+s634Vm0djVkhmk+3T4r0IBkNdI deUr42rrtrMVWFdaZgVRoiUSNfZ97ZdVWJ2I8eDYIQfCKXo44TmlXfQSXVQ0o1+R 16CWrMfhr2EH5n6XCGF8N5hIhQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA0rttlx NpxkKTAfwd4ssmlYZZlYMB8GA1UdIwQYMBaAFKPrUdKZm7tEZZvdpr4eEPpVHiJl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzEwRi85QTc1ODBDOEZE NEExMUVFODA5QjA3MzBDNEY5QUUwMi9vLXRSMHBtYnUwUmxtOTJtdmg0US1sVWVJ bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdFIwcG1idTBSbG05Mm12aDRRLWxVZUltVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkMxMEYvOUE3NTgwQzhGRDRBMTFFRTgwOUIwNzMwQzRGOUFFMDIvNEE5QUQ1MTI3 MEY4MTFGMEJBMDcwRjM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneSgwDQYJKoZIhvcNAQELBQADggEBADQwS3l8YtS6b7ei PJSVooZWfxV5u+UzFVtfQ69s/HrGjDD3BGLaCWCwAqNjf8f2DrKkj6//XxvtRXbM jG3Davfg301/+T5Rl+2oz93VtCVVPz8c22N8uvZdjr2mRCXPMp+Yn5SgIEqmGrS9 1WXJw8QScSn87IzGDGIs58uNtn3iOYq5PEMkU3QSX9zpfPjgODNePJboRAz9VbsU hL8lpuF0bXBsLh80JvQ0f9jI2Vl2+GcchZAEjWBO/ACziNkEy73igLJEbb78UQVi 6PcR6J4Xo6OpKn2Oez20Rj9g9Guh9mknKqs3eV0GxEnhrFILrjug0GZZuMrvp83Z vqgJ94E= -----END CERTIFICATE-----Generated at Sat Aug 9 14:23:22 2025 by rpki-client