$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa File: C310EE5AACD311ED84BAA06EC4F9AE02.roa (raw, json) Hash identifier: puxNQ3IQMgK+455LW/i47TSp2iaIUiKVoUSQH0z/5bw= Subject key identifier: A2:88:29:99:E6:E3:D9:54:F5:63:2A:35:8F:BA:58:79:AF:AE:45:98 Certificate issuer: /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6 Certificate serial: 01EF Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa Signing time: Thu 25 Sep 2025 01:17:59 +0000 ROA not before: Thu 25 Sep 2025 01:17:59 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136744 IP address blocks: 103.141.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4FA, serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6 Validity Not Before: Sep 25 01:17:59 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d49847-430e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:bf:06:4f:97:e8:82:99:df:36:50:fb:dd: e5:ae:db:d6:6b:56:41:90:ff:7a:e5:8d:3b:2b:90: 2d:09:d5:a8:06:95:66:54:67:0c:90:d9:c8:b0:f1: 2e:5f:e8:f4:8f:d5:cc:56:91:36:d4:9f:3d:a5:06: 5a:73:9b:d0:c5:0e:11:bc:06:6d:c7:14:a5:6d:b0: 16:48:93:b3:d2:89:30:99:32:86:bd:79:9e:b5:d2: fe:61:b2:84:64:cc:cf:80:b3:f4:fb:53:ae:52:ea: 14:6c:c7:a1:e4:1f:ed:41:41:54:f9:a7:98:82:4c: 30:9f:eb:8a:6d:60:16:e7:0a:1d:e3:8b:62:f3:18: 3e:a2:26:ee:84:70:2e:39:be:5c:06:59:97:bc:1d: b4:c4:92:29:47:29:c4:07:9e:b6:a5:f6:8c:13:37: bb:54:b0:e7:08:14:35:d4:de:dd:71:48:7e:a4:a0: 8f:32:94:c1:53:df:10:78:40:f4:c9:70:10:6b:10: 24:84:7b:ba:1d:5e:6d:8c:6d:51:8b:e5:cd:2a:d5: e5:08:f7:29:e7:98:10:9b:80:f8:cf:f4:c3:ac:93: 87:0f:1e:2b:d4:1b:3c:23:e6:3f:37:a1:af:80:91: 5e:c9:93:23:0a:2b:e9:f2:7e:44:6c:f9:c4:12:ba: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:88:29:99:E6:E3:D9:54:F5:63:2A:35:8F:BA:58:79:AF:AE:45:98 X509v3 Authority Key Identifier: keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/C310EE5AACD311ED84BAA06EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.224.0/23 Signature Algorithm: sha256WithRSAEncryption 95:84:c4:c6:bc:0a:09:70:0b:bd:96:9b:38:ac:10:11:c9:25: dc:e0:71:1b:20:cb:0d:58:ec:29:5b:e6:a7:15:80:16:11:3c: cb:4f:06:af:2a:a1:37:fd:5d:14:85:4f:4a:87:fe:c3:0a:a0: 26:f2:cb:11:e6:cd:28:49:d8:24:81:d6:a9:10:7b:8b:d9:fa: da:1b:18:26:a8:98:6b:83:53:6a:9e:61:32:38:82:67:36:35: bc:2c:d1:b2:b9:1b:7e:ee:85:a2:16:64:99:89:0f:2a:98:b0: 3a:80:3a:8d:c4:37:24:36:f9:79:7f:78:f8:62:2b:b7:f3:25: a2:22:3d:6f:81:12:3c:c1:f6:44:45:64:3c:11:12:4a:d5:03: 40:d0:2a:a6:e0:cd:ea:ed:ef:d3:ef:8d:25:97:6d:43:ea:9c: 8d:46:af:eb:75:92:df:83:e7:f0:b3:5d:59:e2:db:07:fe:df: 33:99:4c:77:53:95:f0:68:fb:2a:d2:a2:a9:e4:f3:90:84:9d: 69:94:53:4d:45:4b:d2:07:b8:65:d4:fe:72:3b:a4:a4:4c:bb: 79:ac:19:1d:9e:9a:5f:ec:22:c3:bb:6a:d2:43:72:d6:8a:92: 57:03:d0:d1:05:ff:3c:62:ba:b4:64:ec:d1:a5:96:bd:24:16: 67:f3:fe:14 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0RkExMTAvBgNVBAUTKDk2RTdDQzc3QTM4RTNFMTgwQkY3NTI2QkExRDk1MzIx ODA0RTM1RTYwHhcNMjUwOTI1MDExNzU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ0OTg0Ny00MzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstO/Bk+X6IKZ3zZQ+93lrtvWa1ZBkP965Y07K5AtCdWoBpVmVGcMkNnIsPEu X+j0j9XMVpE21J89pQZac5vQxQ4RvAZtxxSlbbAWSJOz0okwmTKGvXmetdL+YbKE ZMzPgLP0+1OuUuoUbMeh5B/tQUFU+aeYgkwwn+uKbWAW5wod44ti8xg+oibuhHAu Ob5cBlmXvB20xJIpRynEB562pfaMEze7VLDnCBQ11N7dcUh+pKCPMpTBU98QeED0 yXAQaxAkhHu6HV5tjG1Ri+XNKtXlCPcp55gQm4D4z/TDrJOHDx4r1Bs8I+Y/N6Gv gJFeyZMjCivp8n5EbPnEErocpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKKIKZnm 49lU9WMqNY+6WHmvrkWYMB8GA1UdIwQYMBaAFJbnzHejjj4YC/dSa6HZUyGATjXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB NkExMUVDODJBQzA3ODdDNEY5QUUwMi9sdWZNZDZPT1BoZ0w5MUpyb2RsVElZQk9O ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x1Zk1kNk9PUGhnTDkxSnJvZGxUSVlCT05lWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM0RkEvQjg5QkNCRjRCQTZBMTFFQzgyQUMwNzg3QzRGOUFFMDIvQzMxMEVFNUFB Q0QzMTFFRDg0QkFBMDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjeAwDQYJKoZIhvcNAQELBQADggEBAJWExMa8CglwC72W mzisEBHJJdzgcRsgyw1Y7Clb5qcVgBYRPMtPBq8qoTf9XRSFT0qH/sMKoCbyyxHm zShJ2CSB1qkQe4vZ+tobGCaomGuDU2qeYTI4gmc2Nbws0bK5G37uhaIWZJmJDyqY sDqAOo3ENyQ2+Xl/ePhiK7fzJaIiPW+BEjzB9kRFZDwREkrVA0DQKqbgzert79Pv jSWXbUPqnI1Gr+t1kt+D5/CzXVni2wf+3zOZTHdTlfBo+yrSoqnk85CEnWmUU01F S9IHuGXU/nI7pKRMu3msGR2eml/sIsO7atJDctaKklcD0NEF/zxiurRk7NGllr0k Fmfz/hQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:58:56 2025 by rpki-client