$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/C13356C0921511F089DDCF39C4F9AE02.roa File: C13356C0921511F089DDCF39C4F9AE02.roa (raw, json) Hash identifier: GIRtzwnKS+hvb6bEPI5Irt7NyfjR/9n068VTfKa3GPU= Subject key identifier: 6E:20:31:D1:B3:D7:9A:DA:55:16:14:95:9D:FC:66:2D:15:E7:A3:1D Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0CCB Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/C13356C0921511F089DDCF39C4F9AE02.roa Signing time: Mon 27 Oct 2025 18:38:51 +0000 ROA not before: Mon 27 Oct 2025 18:38:51 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135037 IP address blocks: 103.251.244.0/24 maxlen: 24 220.247.129.0/24 maxlen: 24 2407:7380:a::/48 maxlen: 48 2407:7380:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Oct 27 18:38:51 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68ffbc3b-11bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0b:9f:41:79:73:38:d5:ca:19:df:2a:67:2a: fd:89:48:b7:9f:dc:1d:65:48:4c:7f:b1:f6:f8:84: ad:d5:bc:e6:2d:f6:46:a0:39:b3:5d:84:1c:22:70: 1d:c1:a9:1a:72:80:38:16:39:b3:ec:47:4b:0f:e3: 8e:a0:9b:c2:da:54:f6:91:60:1d:39:ba:fc:35:19: 5a:11:4a:61:93:ef:82:19:d4:d0:04:19:1c:0b:bd: 75:e4:8f:d3:6e:8f:27:6d:0c:38:46:30:73:08:08: e8:61:63:4c:9d:f9:f0:6e:99:93:7d:5b:09:f1:3f: e1:bc:af:cf:c8:4c:3f:9f:a3:57:77:cc:47:83:98: 6f:28:c6:ce:6a:73:c3:28:64:d4:af:33:97:5d:ad: dc:7c:7b:c0:e0:5b:8f:c6:df:54:ce:70:81:d6:ee: d4:d1:d4:82:79:74:48:62:78:6c:14:ef:b0:f9:67: 29:7c:11:06:83:24:d2:1a:57:5e:9a:6e:3a:a9:a4: f2:3a:a0:a3:f8:3a:19:de:e8:1f:3b:fe:22:d5:bc: 49:73:c9:cd:30:01:dc:89:ea:66:f4:9d:00:31:fc: 46:5e:d9:b4:9c:be:8d:fe:ef:ec:78:5f:02:0d:51: e2:fa:fc:3f:20:d7:d0:8d:e8:c8:85:2a:0a:de:58: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:20:31:D1:B3:D7:9A:DA:55:16:14:95:9D:FC:66:2D:15:E7:A3:1D X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/C13356C0921511F089DDCF39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.251.244.0/24 220.247.129.0/24 IPv6: 2407:7380:a::/48 2407:7380:a000::/48 Signature Algorithm: sha256WithRSAEncryption 67:48:eb:07:20:59:08:1c:de:7b:19:e0:ac:0e:1c:ed:b4:20: a3:41:67:f5:62:04:d4:a0:bc:db:ff:73:8f:1d:d7:87:30:79: 08:d3:2e:5e:15:b1:d3:2f:c2:fa:74:6e:ac:55:1f:e8:ff:43: 64:1d:1e:3a:60:a3:31:22:d6:2f:20:05:ef:39:ab:fa:dd:cb: 49:67:1e:19:aa:b6:e6:b3:83:03:6f:28:8c:1a:92:9d:c0:c5: 88:1d:3e:f6:06:bf:bb:1b:cd:9c:70:93:df:85:31:4d:65:59: 01:be:89:9d:db:45:69:72:84:a2:85:cc:f2:f9:c9:28:fd:e9: 6b:d5:72:c1:51:3f:e0:16:84:3f:a3:9a:36:2f:c9:ff:c4:e6: 84:4f:06:8b:9d:92:20:b4:cf:00:ad:f7:29:96:30:69:70:b6: 49:24:90:83:ab:da:ea:96:f9:ba:5d:41:07:64:6c:e0:ab:81: 1d:75:4f:de:b7:26:0b:38:36:5d:1f:3f:97:ff:5f:85:83:58: 49:c9:3f:e4:08:01:4e:4b:a7:4f:bf:24:8a:10:c5:c4:fb:af: 92:70:0e:fa:17:37:11:7d:f3:fe:76:78:c7:5a:4b:85:07:e4: b0:1b:f6:b3:74:13:25:4b:10:80:ae:a7:e9:dc:bb:5c:75:86: d3:a1:cd:e7 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjUxMDI3MTgzODUxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZmYmMzYi0xMWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAufQXlzONXKGd8qZyr9iUi3n9wdZUhMf7H2+ISt1bzmLfZGoDmzXYQcInAd wakacoA4Fjmz7EdLD+OOoJvC2lT2kWAdObr8NRlaEUphk++CGdTQBBkcC7115I/T bo8nbQw4RjBzCAjoYWNMnfnwbpmTfVsJ8T/hvK/PyEw/n6NXd8xHg5hvKMbOanPD KGTUrzOXXa3cfHvA4FuPxt9UznCB1u7U0dSCeXRIYnhsFO+w+WcpfBEGgyTSGlde mm46qaTyOqCj+DoZ3ugfO/4i1bxJc8nNMAHciepm9J0AMfxGXtm0nL6N/u/seF8C DVHi+vw/INfQjejIhSoK3ljMRwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFG4gMdGz 15raVRYUlZ38Zi0V56MdMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUMzQkUvOTQ3QjM1MDYwOTM4MTFFQTk1Q0EzMTI5QzRGOUFFMDIvQzEzMzU2QzA5 MjE1MTFGMDg5RERDRjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBABn+/QDBADc94EwGAQCAAIwEgMHACQHc4AACgMHACQHc4Cg ADANBgkqhkiG9w0BAQsFAAOCAQEAZ0jrByBZCBzeexngrA4c7bQgo0Fn9WIE1KC8 2/9zjx3XhzB5CNMuXhWx0y/C+nRurFUf6P9DZB0eOmCjMSLWLyAF7zmr+t3LSWce Gaq25rODA28ojBqSncDFiB0+9ga/uxvNnHCT34UxTWVZAb6JndtFaXKEooXM8vnJ KP3pa9VywVE/4BaEP6OaNi/J/8TmhE8Gi52SILTPAK33KZYwaXC2SSSQg6va6pb5 ul1BB2Rs4KuBHXVP3rcmCzg2XR8/l/9fhYNYSck/5AgBTkunT78kihDFxPuvknAO +hc3EX3z/nZ4x1pLhQfksBv2s3QTJUsQgK6n6dy7XHWG06HN5w== -----END CERTIFICATE-----Generated at Wed Nov 5 02:13:26 2025 by rpki-client