$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/DA21D1C8DF0711EFA13DFF77C4F9AE02.roa File: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (raw, json) Hash identifier: WBiQbxmKfw0D0XJ4l3vBPQQR/fNPllSnLo2npN/9Q8w= Subject key identifier: 8C:14:0A:8C:75:78:8C:A2:E1:FF:0D:D4:FF:73:CC:AF:0E:ED:EA:12 Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Certificate serial: DB Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/DA21D1C8DF0711EFA13DFF77C4F9AE02.roa Signing time: Thu 23 Oct 2025 07:49:44 +0000 ROA not before: Thu 23 Oct 2025 07:49:44 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153562 IP address blocks: 103.110.124.0/24 maxlen: 24 103.110.124.0/28 maxlen: 28 103.110.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Validity Not Before: Oct 23 07:49:44 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f9de18-de8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:9d:36:78:df:e3:2d:26:e3:63:a4:6a:6c: cf:8d:ae:10:4d:59:c7:ac:d9:1b:c9:72:70:ba:3a: c9:34:a0:ea:5a:0f:e1:82:25:1d:cd:88:b6:f6:c7: 68:6e:34:32:f7:1b:c8:6d:00:00:f4:e3:7e:bf:2b: d6:42:c1:67:68:97:1e:08:60:af:29:b5:70:15:92: ec:b8:d4:f0:bf:15:ec:a9:1f:1f:b0:22:24:99:52: a8:9f:98:ed:b1:b4:2f:7c:71:65:3e:30:e7:09:42: 83:fb:6f:8e:cf:fd:3f:4a:88:a2:d6:99:63:26:f8: 50:5b:a8:d7:25:de:33:af:f2:0e:80:52:44:da:04: 46:3e:a6:f6:d2:2c:f0:0a:b8:19:5f:ee:78:c8:21: ec:1c:9e:ce:b9:a5:52:79:97:37:64:63:b3:73:2f: cb:21:d1:63:5c:6f:d2:7a:71:2b:1a:5d:2b:50:7a: ff:0c:57:8b:27:85:58:cf:91:b3:a2:a1:d1:8e:dd: 4d:b0:81:c1:76:68:83:a0:7c:da:8a:2c:6f:a3:c2: ed:fc:ce:da:3a:e4:47:a5:ed:0f:98:41:5c:54:24: ca:94:3c:c6:c8:47:a8:14:46:37:48:a3:f0:c9:33: a1:50:8f:b3:16:ac:34:44:4c:9b:a0:fe:1e:91:65: 7a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:14:0A:8C:75:78:8C:A2:E1:FF:0D:D4:FF:73:CC:AF:0E:ED:EA:12 X509v3 Authority Key Identifier: keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/DA21D1C8DF0711EFA13DFF77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.124.0/23 Signature Algorithm: sha256WithRSAEncryption a0:18:d9:90:44:44:9a:57:fb:d9:2c:4e:60:12:60:c2:cd:c9: 5c:28:47:c4:49:5b:36:1d:d9:50:80:81:e5:cd:e2:ba:ed:97: 93:1a:49:1d:1d:83:40:20:39:4b:99:f9:45:fd:d8:c7:ee:bd: cd:7c:17:7a:80:6c:6f:6e:f7:87:91:c3:86:69:9b:8b:98:09: 7c:c7:4e:20:ee:9c:23:c5:de:35:92:6a:28:90:28:78:a8:4c: 97:30:06:85:c8:a6:34:d0:d0:f6:33:2f:c8:f5:14:3e:6d:34: c3:7a:20:7c:0c:38:57:09:6f:c2:d5:d9:52:65:08:e9:06:4e: 27:83:57:01:4d:de:f3:fe:57:dd:fc:14:60:3c:8a:0d:1b:96: a5:d7:78:00:5b:ed:cd:dd:c9:61:75:ac:1b:e7:30:43:2b:77: a9:58:f7:f0:dd:9a:5a:69:4b:60:73:67:6b:a1:c1:af:aa:2d: ce:53:61:c1:66:24:7e:a2:98:f9:16:8a:c6:1a:6b:90:30:ec: e9:d2:d2:1d:e5:b5:e2:43:13:02:81:da:86:b8:9b:64:a7:ee: 95:7d:a3:33:d1:93:b2:a5:10:d9:a5:fd:2d:d7:1c:ce:f9:a3: d4:ef:2e:59:17:d6:8c:50:13:86:99:f6:03:e9:24:82:9d:3f: 7f:7c:d6:47 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NTQxMTAvBgNVBAUTKEUxMUE0NzJGODQ5RkEzRDY2M0NBODdDQTY2MzNFQ0U3 RDhEMDA3NjIwHhcNMjUxMDIzMDc0OTQ0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5ZGUxOC1kZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DGdNnjf4y0m42OkamzPja4QTVnHrNkbyXJwujrJNKDqWg/hgiUdzYi29sdo bjQy9xvIbQAA9ON+vyvWQsFnaJceCGCvKbVwFZLsuNTwvxXsqR8fsCIkmVKon5jt sbQvfHFlPjDnCUKD+2+Oz/0/Soii1pljJvhQW6jXJd4zr/IOgFJE2gRGPqb20izw CrgZX+54yCHsHJ7OuaVSeZc3ZGOzcy/LIdFjXG/SenErGl0rUHr/DFeLJ4VYz5Gz oqHRjt1NsIHBdmiDoHzaiixvo8Lt/M7aOuRHpe0PmEFcVCTKlDzGyEeoFEY3SKPw yTOhUI+zFqw0REyboP4ekWV65wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIwUCox1 eIyi4f8N1P9zzK8O7eoSMB8GA1UdIwQYMBaAFOEaRy+En6PWY8qHymYz7OfY0Adi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg1NC9BODk2NDY2MDc5 OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85Wmp5b2ZLWmpQczU5alFC MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y4NTQvQTg5NjQ2NjA3OTlCMTFFRjgxMUY5MDE5QzRGOUFFMDIvREEyMUQxQzhE RjA3MTFFRkExM0RGRjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnbnwwDQYJKoZIhvcNAQELBQADggEBAKAY2ZBERJpX+9ks TmASYMLNyVwoR8RJWzYd2VCAgeXN4rrtl5MaSR0dg0AgOUuZ+UX92Mfuvc18F3qA bG9u94eRw4Zpm4uYCXzHTiDunCPF3jWSaiiQKHioTJcwBoXIpjTQ0PYzL8j1FD5t NMN6IHwMOFcJb8LV2VJlCOkGTieDVwFN3vP+V938FGA8ig0blqXXeABb7c3dyWF1 rBvnMEMrd6lY9/DdmlppS2BzZ2uhwa+qLc5TYcFmJH6imPkWisYaa5Aw7OnS0h3l teJDEwKB2oa4m2Sn7pV9ozPRk7KlENml/S3XHM75o9TvLlkX1oxQE4aZ9gPpJIKd P3981kc= -----END CERTIFICATE-----Generated at Wed Nov 5 14:36:05 2025 by rpki-client