$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/DAAB94840EC911EBA913852BC4F9AE02.roa File: DAAB94840EC911EBA913852BC4F9AE02.roa (raw, json) Hash identifier: GZbNr4hWJMQHmwZjxnOSE/qUptolcknoCfCUMmvTKYc= Subject key identifier: 43:17:CC:46:75:7A:8E:F1:D0:2D:32:BE:24:E3:C7:79:A7:D7:4D:08 Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Certificate serial: 07DD Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/DAAB94840EC911EBA913852BC4F9AE02.roa Signing time: Fri 24 Oct 2025 22:11:05 +0000 ROA not before: Fri 24 Oct 2025 22:11:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 23729 IP address blocks: 103.100.92.0/22 maxlen: 22 103.100.92.0/24 maxlen: 24 103.100.93.0/24 maxlen: 24 103.100.94.0/24 maxlen: 24 103.100.95.0/24 maxlen: 24 118.179.0.0/21 maxlen: 24 2401:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Validity Not Before: Oct 24 22:11:05 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68fbf979-ee03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:17:c5:7e:e1:16:44:e3:84:80:63:12:4f: cd:88:0c:c5:25:73:10:a4:75:c7:47:55:67:a7:c9: 9f:4b:b0:df:b2:82:ff:a4:29:87:c2:bb:47:6d:4d: 9b:9a:1f:50:33:e5:5f:81:9b:68:24:7f:2a:aa:2e: 7c:9a:91:e0:4f:15:23:ba:ef:60:ef:2b:27:23:9c: e5:17:e7:97:30:44:20:ab:5d:2b:9f:81:90:be:0f: 4d:da:2a:fe:39:6e:28:cc:70:50:25:d0:14:d2:54: 41:c7:14:b1:c1:ae:03:05:21:98:87:7d:8f:8b:51: ac:58:08:84:39:e2:e4:41:d7:42:3f:7d:4f:fd:7a: fc:5e:77:e3:d6:50:fd:31:87:a4:3b:c1:7d:ca:e3: 35:8c:c0:f9:ba:aa:d8:18:aa:01:52:fa:a3:eb:95: 1f:63:60:a8:dd:b5:5c:e7:fb:81:ad:9f:b3:dd:79: 44:9f:5e:c6:ba:21:a5:5f:d6:30:92:29:93:65:38: 26:12:e6:7d:30:68:81:ec:68:14:12:1b:38:4c:bc: 62:d1:fc:7b:5d:5d:f1:0e:9c:cf:31:66:31:2c:43: a2:ba:46:78:6a:e6:77:aa:8f:d7:b6:bd:59:ac:bc: 92:1b:64:a5:53:14:05:82:d7:d9:ce:a6:56:d7:a2: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:17:CC:46:75:7A:8E:F1:D0:2D:32:BE:24:E3:C7:79:A7:D7:4D:08 X509v3 Authority Key Identifier: keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/DAAB94840EC911EBA913852BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.100.92.0/22 118.179.0.0/21 IPv6: 2401:bac0::/32 Signature Algorithm: sha256WithRSAEncryption 34:e1:b2:eb:19:21:7f:75:4d:2a:38:07:10:27:36:23:db:cb: 5e:42:70:25:65:c4:02:13:ff:dc:9c:eb:59:c8:de:38:b4:22: 02:77:f2:1b:bf:78:87:b9:36:7b:a9:01:2c:9c:b7:fe:87:39: e9:33:f4:d5:4f:75:df:67:1c:ab:29:71:52:74:4a:98:e9:0b: 62:13:12:b7:0d:8e:75:39:b7:5e:c2:ce:61:a9:5d:6f:e2:76: c9:cc:f7:05:87:85:2e:1b:d0:17:a3:a1:91:81:52:3c:0b:b6: 51:6f:f7:cd:e2:0a:3e:c4:e3:11:81:bc:f4:1e:c3:d8:2d:d6: 65:22:55:6f:ba:c1:7e:9c:50:dc:7c:aa:12:c2:71:4f:c8:02: 3d:42:72:b5:3c:42:0a:a4:8b:9a:e5:04:96:d1:c8:8b:6a:36: 45:35:e8:ad:e7:40:d5:94:c7:fe:6b:4c:05:39:ed:16:c0:7f: 3d:e6:a3:24:a2:9f:57:71:7a:1b:79:3b:f3:4a:59:fe:86:da: a5:31:97:4e:e1:c0:b6:1d:01:2b:f2:24:a8:2f:c8:ab:91:24: e0:aa:e3:80:8f:a9:dd:98:ec:36:cb:30:2f:b8:24:42:4b:08: ed:a6:5c:78:cf:70:c9:ab:8f:47:93:db:f2:b2:d1:1b:60:3c: ae:86:45:9b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix QUU1NDQyMzkwHhcNMjUxMDI0MjIxMTA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZiZjk3OS1lZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu34XxX7hFkTjhIBjEk/NiAzFJXMQpHXHR1Vnp8mfS7DfsoL/pCmHwrtHbU2b mh9QM+VfgZtoJH8qqi58mpHgTxUjuu9g7ysnI5zlF+eXMEQgq10rn4GQvg9N2ir+ OW4ozHBQJdAU0lRBxxSxwa4DBSGYh32Pi1GsWAiEOeLkQddCP31P/Xr8Xnfj1lD9 MYekO8F9yuM1jMD5uqrYGKoBUvqj65UfY2Co3bVc5/uBrZ+z3XlEn17GuiGlX9Yw kimTZTgmEuZ9MGiB7GgUEhs4TLxi0fx7XV3xDpzPMWYxLEOiukZ4auZ3qo/Xtr1Z rLySG2SlUxQFgtfZzqZW16LpVQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFEMXzEZ1 eo7x0C0yviTjx3mn100IMB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0QxMjEvOEIwRjhCMEMwRUM4MTFFQkE1MDQyQzJBQzRGOUFFMDIvREFBQjk0ODQw RUM5MTFFQkE5MTM4NTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnZFwDBAN2swAwDQQCAAIwBwMFACQBusAwDQYJKoZIhvcN AQELBQADggEBADThsusZIX91TSo4BxAnNiPby15CcCVlxAIT/9yc61nI3ji0IgJ3 8hu/eIe5NnupASyct/6HOekz9NVPdd9nHKspcVJ0SpjpC2ITErcNjnU5t17CzmGp XW/idsnM9wWHhS4b0BejoZGBUjwLtlFv983iCj7E4xGBvPQew9gt1mUiVW+6wX6c UNx8qhLCcU/IAj1CcrU8Qgqki5rlBJbRyItqNkU16K3nQNWUx/5rTAU57RbAfz3m oySin1dxeht5O/NKWf6G2qUxl07hwLYdASvyJKgvyKuRJOCq44CPqd2Y7DbLMC+4 JEJLCO2mXHjPcMmrj0eT2/Ky0RtgPK6GRZs= -----END CERTIFICATE-----Generated at Thu Nov 6 00:52:11 2025 by rpki-client