$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A4E3DD6A366311EEB376DC3AC4F9AE02.roa File: A4E3DD6A366311EEB376DC3AC4F9AE02.roa (raw, json) Hash identifier: F/8OplCzxxbsHxuvcFxtuR1UH/SV8pdy21RejCPpR20= Subject key identifier: 6F:29:AF:20:F2:56:08:BE:3E:F2:D5:0F:40:01:B9:2E:42:D3:C9:8D Certificate issuer: /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA Certificate serial: 019E Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A4E3DD6A366311EEB376DC3AC4F9AE02.roa Signing time: Mon 23 Jun 2025 03:22:26 +0000 ROA not before: Mon 23 Jun 2025 03:22:26 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132876 IP address blocks: 103.14.11.0/24 maxlen: 24 2400:6280::/48 maxlen: 48 2400:6280:1::/48 maxlen: 48 2400:6280:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA Validity Not Before: Jun 23 03:22:26 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6858c871-1a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:f1:82:8e:f5:db:9d:33:a5:78:a0:a8:ee: 68:57:b4:f9:b9:82:54:96:db:26:85:cb:1e:5e:70: 2a:d1:c4:0d:25:51:73:22:d2:45:63:8f:e0:2b:7c: fd:ad:ff:b4:c0:fb:aa:59:56:80:8d:97:36:c7:0d: 42:61:6d:d2:1c:3a:bc:2c:31:4e:24:c4:74:b8:11: ad:2c:46:8a:ba:40:ca:dd:6a:d9:05:cd:e8:1c:12: fd:1a:7a:45:20:e2:8f:aa:ce:84:03:ce:e4:3e:0c: 8b:95:25:69:60:59:d0:da:f0:f2:7f:f4:6b:1e:0a: db:55:71:02:68:23:a3:f0:10:a0:d0:cf:6b:f3:31: 79:a4:a7:67:92:cc:b8:3a:72:f8:c8:6c:3c:b5:3c: 0f:c5:09:be:ee:69:3e:de:28:43:aa:a5:fc:40:94: da:b0:d4:16:0a:9a:0f:eb:51:14:fb:ed:1c:65:6c: 9e:a4:b2:0d:2c:6f:75:4e:93:b3:58:ec:4e:23:0a: 45:3f:f7:5a:8f:f6:03:b7:f0:b2:d9:09:76:36:84: 72:30:b3:c8:2d:fa:2f:b7:3b:a8:ac:c0:0e:d4:ba: ca:35:5d:28:4d:ff:9d:f7:4f:c7:a1:32:98:f6:cb: 70:07:8f:d9:b4:ec:29:65:33:09:f9:2c:ec:8f:0f: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:29:AF:20:F2:56:08:BE:3E:F2:D5:0F:40:01:B9:2E:42:D3:C9:8D X509v3 Authority Key Identifier: keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A4E3DD6A366311EEB376DC3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.11.0/24 IPv6: 2400:6280::/47 2400:6280:20::/48 Signature Algorithm: sha256WithRSAEncryption 4f:cd:a0:44:a2:91:a9:68:5a:c5:c3:bf:a1:1a:43:44:5c:7b: a4:a0:df:0e:6f:5a:00:48:d2:87:6a:dc:9a:66:bd:b6:1a:75: 26:a4:f2:b0:d2:0a:14:13:5b:32:5f:39:78:1b:9f:98:2d:44: 83:05:5d:68:f6:2f:85:fb:27:0f:69:b6:4c:b8:1a:fd:03:31: f0:3b:23:04:57:4c:e5:ea:b6:a9:cb:85:77:8f:4c:94:82:5f: 1f:4d:7f:cf:10:6f:e6:38:d6:d9:b5:be:86:5a:6e:d6:ee:8c: 74:e5:69:17:0a:cf:7d:7c:ea:a6:63:69:b9:b9:ff:c1:db:36: 0d:96:d7:54:5d:10:6a:da:a5:1a:19:8b:46:16:a9:03:3e:03: ce:7c:e2:68:d7:e2:bb:85:95:c4:a9:f0:32:62:ce:a3:68:59: 8a:04:02:9a:f5:35:e5:d2:7a:23:54:e3:91:ae:04:9b:65:aa: 26:ce:70:9c:ab:a0:7d:7d:da:c2:d5:76:21:30:95:bf:8b:1a: 09:9a:44:ae:9a:09:3f:32:22:e5:80:d5:be:96:4b:3c:37:86: 8e:ea:04:96:15:8c:1e:ed:6b:72:9c:fb:f3:5b:c6:68:78:bc: 6c:43:e4:94:42:8b:99:cd:dc:d9:21:db:93:8e:ad:b2:c6:40: 35:8c:e1:28 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKDQ4ODk3MDUwNjI2NEVGOTZEODFFQzEyRTZBQkQyNTZE QjMwRkRDRkEwHhcNMjUwNjIzMDMyMjI2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU4Yzg3MS0xYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFTxgo71250zpXigqO5oV7T5uYJUltsmhcseXnAq0cQNJVFzItJFY4/gK3z9 rf+0wPuqWVaAjZc2xw1CYW3SHDq8LDFOJMR0uBGtLEaKukDK3WrZBc3oHBL9GnpF IOKPqs6EA87kPgyLlSVpYFnQ2vDyf/RrHgrbVXECaCOj8BCg0M9r8zF5pKdnksy4 OnL4yGw8tTwPxQm+7mk+3ihDqqX8QJTasNQWCpoP61EU++0cZWyepLINLG91TpOz WOxOIwpFP/daj/YDt/Cy2Ql2NoRyMLPILfovtzuorMAO1LrKNV0oTf+d90/HoTKY 9stwB4/ZtOwpZTMJ+Szsjw/t9wIDAQABo4ICrzCCAqswHQYDVR0OBBYEFG8pryDy Vgi+PvLVD0ABuS5C08mNMB8GA1UdIwQYMBaAFEiJcFBiZO+W2B7BLmq9JW2zD9z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83RTREODQ2MDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9TSWx3VUdKazc1YllIc0V1YXIwbGJiTVAz UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NJbHdVR0prNzViWUhzRXVhcjBsYmJNUDNQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvN0U0RDg0NjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvQTRFM0RENkEz NjYzMTFFRUIzNzZEQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBABnDgswGAQCAAIwEgMHASQAYoAAAAMHACQAYoAAIDANBgkq hkiG9w0BAQsFAAOCAQEAT82gRKKRqWhaxcO/oRpDRFx7pKDfDm9aAEjSh2rcmma9 thp1JqTysNIKFBNbMl85eBufmC1EgwVdaPYvhfsnD2m2TLga/QMx8DsjBFdM5eq2 qcuFd49MlIJfH01/zxBv5jjW2bW+hlpu1u6MdOVpFwrPfXzqpmNpubn/wds2DZbX VF0QatqlGhmLRhapAz4DznziaNfiu4WVxKnwMmLOo2hZigQCmvU15dJ6I1Tjka4E m2WqJs5wnKugfX3awtV2ITCVv4saCZpErpoJPzIi5YDVvpZLPDeGjuoElhWMHu1r cpz781vGaHi8bEPklEKLmc3c2SHbk46tssZANYzhKA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:36 2025 by rpki-client