$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa File: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (raw, json) Hash identifier: op1f0dmOmYKN53NdiioOTuPiw+z0pYxBQfbuO2UDbqE= Subject key identifier: 85:D7:A8:10:DC:94:D9:46:5C:44:3D:18:00:9F:5C:06:C2:C7:12:5B Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50 Certificate serial: 0593 Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa Signing time: Sun 02 Nov 2025 23:43:20 +0000 ROA not before: Sun 02 Nov 2025 23:43:20 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 24499 IP address blocks: 103.123.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50 Validity Not Before: Nov 2 23:43:20 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6907ec97-4797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:ac:c1:24:70:5e:93:3e:59:05:65:fd:77: 01:a7:7c:69:15:27:de:e9:7e:80:ec:21:b3:20:3f: 37:30:35:7d:b7:f9:f2:ff:21:8c:6b:9a:d6:27:1a: 1c:5b:d4:17:8e:f3:b6:70:f5:27:55:4b:e4:37:ba: 13:0a:e4:01:01:d3:89:5b:e8:39:28:c2:b9:ae:38: 24:c3:e3:9a:2a:14:8a:6b:77:74:f9:68:31:27:68: 3d:0c:7b:fd:45:25:b2:ec:96:ed:d0:a4:d4:0e:fe: 43:4b:12:96:d7:0c:df:e5:df:d4:62:c6:60:c2:54: 8a:96:d3:73:0b:43:ba:59:2f:e6:89:eb:f2:c9:d8: 0c:b4:50:de:73:8d:21:b5:08:bb:54:f7:63:b1:39: fd:b2:3c:1e:2e:da:2f:ea:65:b5:7a:d6:d0:7c:0b: 86:f4:bc:01:a2:18:39:76:43:ed:cb:3c:4c:af:7a: 39:25:28:a2:b3:22:17:a5:df:cb:87:33:f5:3c:51: ce:8a:57:87:62:1a:0d:17:e7:79:c5:8a:13:25:cd: 25:69:b6:90:c3:4e:69:83:c9:3c:a4:9f:d0:f7:ef: 36:87:3f:c2:7f:7b:ba:f3:80:8d:ff:75:07:e3:73: d6:6a:e8:9c:82:9d:7b:d7:16:4a:81:a8:12:28:5c: 03:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D7:A8:10:DC:94:D9:46:5C:44:3D:18:00:9F:5C:06:C2:C7:12:5B X509v3 Authority Key Identifier: keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/7A532A308E1D11EE9CC5535CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.115.0/24 Signature Algorithm: sha256WithRSAEncryption b2:bd:71:a5:24:ff:40:63:93:2e:ec:0b:54:c3:6b:3f:12:6c: 40:55:2d:f7:d7:ee:0d:a5:d8:53:b5:11:52:2e:1c:2d:cc:99: 7b:26:f8:86:92:9f:97:69:7b:b7:4f:04:21:2c:25:ef:73:0e: 5a:1f:2d:64:00:80:ee:48:82:82:6b:39:77:a7:7c:f7:64:98: c8:ba:a7:f0:18:82:c5:e6:b8:80:0a:63:38:b0:51:3b:f4:e9: f7:ef:c8:a3:14:f1:b9:3b:08:d3:37:d4:49:3c:4b:15:ce:05: ae:5d:7b:a8:3e:f8:0f:3f:20:50:aa:6f:7e:72:11:93:63:af: 57:f9:8f:d9:43:b8:78:19:e1:ce:71:7d:b3:90:a4:69:b3:a7: 2d:bd:d3:69:13:b9:2b:39:cb:ad:aa:7e:a2:ce:52:98:eb:0c: 8c:35:c1:ac:f7:81:3b:dc:ad:e8:d4:3e:a2:bc:a6:23:b6:9f: da:1c:63:a2:7a:b7:2c:5f:14:e7:f1:87:07:5b:d4:20:b1:bf: 57:c5:f3:36:d0:06:16:87:41:d2:ab:a2:e2:9a:bb:d6:fd:1d: 0c:9c:ff:94:eb:d2:72:ae:e9:47:c3:d4:ec:e8:26:67:6e:e0: 36:b6:f2:0f:ce:8b:53:89:0d:30:ee:a9:9a:fb:1e:74:5c:70: 24:5c:15:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NFRTMxMTAvBgNVBAUTKDMwRTA4MDNERUJBNjAwQUM5QTkyNjQ0Qzk2Rjc4QThF ODg1RDdDNTAwHhcNMjUxMTAyMjM0MzIwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ZWM5Ny00Nzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyKswSRwXpM+WQVl/XcBp3xpFSfe6X6A7CGzID83MDV9t/ny/yGMa5rWJxoc W9QXjvO2cPUnVUvkN7oTCuQBAdOJW+g5KMK5rjgkw+OaKhSKa3d0+WgxJ2g9DHv9 RSWy7Jbt0KTUDv5DSxKW1wzf5d/UYsZgwlSKltNzC0O6WS/mievyydgMtFDec40h tQi7VPdjsTn9sjweLtov6mW1etbQfAuG9LwBohg5dkPtyzxMr3o5JSiisyIXpd/L hzP1PFHOileHYhoNF+d5xYoTJc0labaQw05pg8k8pJ/Q9+82hz/Cf3u684CN/3UH 43PWauicgp171xZKgagSKFwDTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIXXqBDc lNlGXEQ9GACfXAbCxxJbMB8GA1UdIwQYMBaAFDDggD3rpgCsmpJkTJb3io6IXXxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0VFMy85QTc3QUEyQTA1 OTQxMUVDOUY2NDY4NTRDNEY5QUUwMi9NT0NBUGV1bUFLeWFrbVJNbHZlS2pvaGRm RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PQ0FQZXVtQUt5YWttUk1sdmVLam9oZGZGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0NFRTMvOUE3N0FBMkEwNTk0MTFFQzlGNjQ2ODU0QzRGOUFFMDIvN0E1MzJBMzA4 RTFEMTFFRTlDQzU1MzVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABne3MwDQYJKoZIhvcNAQELBQADggEBALK9caUk/0Bjky7s C1TDaz8SbEBVLffX7g2l2FO1EVIuHC3MmXsm+IaSn5dpe7dPBCEsJe9zDlofLWQA gO5IgoJrOXenfPdkmMi6p/AYgsXmuIAKYziwUTv06ffvyKMU8bk7CNM31Ek8SxXO Ba5de6g++A8/IFCqb35yEZNjr1f5j9lDuHgZ4c5xfbOQpGmzpy2902kTuSs5y62q fqLOUpjrDIw1waz3gTvcrejUPqK8piO2n9ocY6J6tyxfFOfxhwdb1CCxv1fF8zbQ BhaHQdKrouKau9b9HQyc/5Tr0nKu6UfD1OzoJmdu4Da28g/Oi1OJDTDuqZr7HnRc cCRcFTU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:53 2025 by rpki-client