$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/BE9174768DDE11ED97AFDA82C4F9AE02.roa File: BE9174768DDE11ED97AFDA82C4F9AE02.roa (raw, json) Hash identifier: L+V30ULZZ1KBiifHC7zDGdNJ17lrpWMv8iHx76Nc92w= Subject key identifier: 3F:6C:27:6A:1E:B1:94:66:2A:93:0E:AC:72:C6:E7:16:C7:9B:B6:CA Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 01C4 Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/BE9174768DDE11ED97AFDA82C4F9AE02.roa Signing time: Sat 24 May 2025 23:33:26 +0000 ROA not before: Sat 24 May 2025 23:33:26 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 141342 IP address blocks: 103.157.40.0/24 maxlen: 24 103.157.41.0/24 maxlen: 24 2400:8220::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: May 24 23:33:26 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68325745-90eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:c4:29:11:45:e8:8d:51:39:ca:f8:68:d3: a2:3f:55:f9:ee:5e:c4:ee:ac:8f:eb:0b:e2:a9:5c: 6d:aa:67:ff:28:a9:31:a1:84:d0:34:a2:eb:24:df: 3d:7c:1b:ec:9a:66:43:02:60:ee:2d:32:61:b0:94: f8:a5:44:df:64:fd:0e:76:18:62:d1:e5:3a:7b:ba: 76:58:6d:89:2e:97:46:a0:9b:f6:c3:b9:a0:c8:19: 5c:75:8e:2a:74:92:47:7b:ed:b7:dc:0a:40:7c:7a: 70:d0:3d:d0:cc:94:d7:f1:f5:ca:6e:65:a1:b0:86: 9d:60:52:f8:cc:8b:91:88:01:c3:a7:e6:c5:65:cd: 46:10:0f:7e:c9:20:92:7d:56:5b:da:77:57:c2:9c: 67:16:e5:42:44:fc:1b:40:07:69:63:5d:76:7d:ee: 7f:14:9b:1f:1b:05:aa:ce:89:bf:d2:06:b2:6d:3b: 2a:3c:98:88:b1:a1:b4:dc:55:4b:21:0b:db:60:a0: 53:ed:ba:72:62:b1:c7:2a:47:9b:9a:72:9a:de:11: 21:9d:49:24:0f:a6:39:62:ac:0d:79:7a:e0:9c:fc: 6f:5d:30:00:78:c4:7a:d7:1b:8d:9e:fd:e5:d2:90: 93:67:4c:f4:6e:ef:57:ba:58:9c:ec:89:65:8a:98: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6C:27:6A:1E:B1:94:66:2A:93:0E:AC:72:C6:E7:16:C7:9B:B6:CA X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/BE9174768DDE11ED97AFDA82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.40.0/23 IPv6: 2400:8220::/32 Signature Algorithm: sha256WithRSAEncryption 76:db:51:2a:0c:a2:fa:d6:13:2a:14:cd:f7:e7:57:d6:a4:b4: 60:3b:de:4f:6e:c2:c1:a2:bf:14:ab:5c:f2:8e:9b:5f:81:ea: af:93:9d:e7:9e:f9:4d:73:01:7e:40:4f:22:20:a2:3e:e6:78: 37:14:b8:4d:da:80:36:bd:7c:f6:3c:e5:11:6c:cd:d2:66:11: a7:bb:aa:c9:32:2e:4b:7b:b4:db:c9:e5:20:e8:11:e5:b1:7a: 09:40:0f:d1:f9:da:b3:aa:93:44:14:c3:17:e8:41:e2:08:f5: 0c:ac:84:8c:c0:7b:8f:c6:80:36:3b:12:39:b4:ea:3b:fd:5b: 66:4a:c8:73:dc:e1:e8:8e:8d:b6:94:1c:d5:d8:ce:47:61:06: 13:ff:e0:51:e5:07:e5:46:b8:8d:93:10:df:f4:86:37:f9:b2: 27:b6:54:c8:56:c5:04:44:e0:0d:7d:31:6a:2d:1e:38:b9:54: 0d:7f:ae:6e:4c:6d:9b:c8:c6:ae:05:82:58:96:25:2e:e7:86: 70:44:82:f0:21:63:30:4c:80:28:3a:56:df:0c:99:94:6e:de: df:6a:fd:dc:52:e8:6b:ae:fb:11:ad:18:04:da:34:5b:62:22: 69:4d:83:44:97:0c:93:dc:2a:b2:0e:a0:2f:52:fe:6a:82:44: 9f:08:d4:67 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjUwNTI0MjMzMzI2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODMyNTc0NS05MGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUrEKRFF6I1ROcr4aNOiP1X57l7E7qyP6wviqVxtqmf/KKkxoYTQNKLrJN89 fBvsmmZDAmDuLTJhsJT4pUTfZP0Odhhi0eU6e7p2WG2JLpdGoJv2w7mgyBlcdY4q dJJHe+233ApAfHpw0D3QzJTX8fXKbmWhsIadYFL4zIuRiAHDp+bFZc1GEA9+ySCS fVZb2ndXwpxnFuVCRPwbQAdpY112fe5/FJsfGwWqzom/0gaybTsqPJiIsaG03FVL IQvbYKBT7bpyYrHHKkebmnKa3hEhnUkkD6Y5YqwNeXrgnPxvXTAAeMR61xuNnv3l 0pCTZ0z0bu9Xulic7IlliphNIwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFD9sJ2oe sZRmKpMOrHLG5xbHm7bKMB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk2MEQvQkQwQjY0QzY4RERBMTFFRDg3M0E3NDg3QzRGOUFFMDIvQkU5MTc0NzY4 RERFMTFFRDk3QUZEQTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnnSgwDQQCAAIwBwMFACQAgiAwDQYJKoZIhvcNAQELBQAD ggEBAHbbUSoMovrWEyoUzffnV9aktGA73k9uwsGivxSrXPKOm1+B6q+Tneee+U1z AX5ATyIgoj7meDcUuE3agDa9fPY85RFszdJmEae7qskyLkt7tNvJ5SDoEeWxeglA D9H52rOqk0QUwxfoQeII9QyshIzAe4/GgDY7Ejm06jv9W2ZKyHPc4eiOjbaUHNXY zkdhBhP/4FHlB+VGuI2TEN/0hjf5sie2VMhWxQRE4A19MWotHji5VA1/rm5MbZvI xq4FgliWJS7nhnBEgvAhYzBMgCg6Vt8MmZRu3t9q/dxS6Guu+xGtGATaNFtiImlN g0SXDJPcKrIOoC9S/mqCRJ8I1Gc= -----END CERTIFICATE-----Generated at Wed Nov 5 22:44:35 2025 by rpki-client