$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/40C4FB74AB3A11EEA3CBE616C4F9AE02.roa File: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (raw, json) Hash identifier: 9jHu3pObxxfWdzGy7pK2inH03eaLWHZ7GI2Hxp0P/hk= Subject key identifier: 44:7C:A9:5C:5E:00:31:4F:C1:4E:C3:E1:39:33:47:69:0B:D0:7E:04 Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: 0159 Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/40C4FB74AB3A11EEA3CBE616C4F9AE02.roa Signing time: Mon 03 Nov 2025 04:18:33 +0000 ROA not before: Mon 03 Nov 2025 04:18:33 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 393262 IP address blocks: 103.142.222.0/24 maxlen: 24 103.142.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: Nov 3 04:18:33 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69082d19-46ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:80:c3:8c:ad:fc:cd:70:5a:81:30:c1:1a: 63:11:1e:38:35:09:4d:24:ee:ad:2b:d9:e7:7b:f9: 99:c4:73:23:1d:d4:87:50:bc:3c:26:75:d4:7c:e5: 72:42:3a:d7:0c:72:17:0f:40:8e:6d:bf:a9:2b:3d: 14:82:cc:50:6c:ab:fd:11:80:05:96:c3:02:72:32: b0:70:f1:72:89:d9:96:c9:c8:90:6b:b7:9e:d5:c0: 7d:c9:8a:03:9b:a7:2f:81:ab:ee:87:ac:7b:c3:0a: 9b:e6:6a:ae:bb:ac:26:5b:b9:54:7a:01:81:b8:d6: 99:04:f7:8a:1a:81:13:31:51:a1:6b:19:37:34:d0: 68:fc:96:e7:49:28:26:c2:00:2b:ae:e5:be:a2:5c: 03:d4:e9:9b:d5:24:a2:7a:3a:d2:c0:d9:7e:78:ed: 78:d0:a8:8e:e4:c1:7e:f6:ca:74:62:8e:cf:09:2b: 3a:7b:80:63:49:47:17:a0:15:a5:b4:ef:b4:d7:f8: d9:0f:1c:f5:6b:6d:9b:44:de:ee:08:68:90:61:68: f6:42:ca:aa:00:8e:e5:ba:e2:ce:7e:ef:7a:a8:f0: a7:86:61:39:d0:b4:c2:2d:6f:71:76:57:fc:ac:c6: f5:2d:3e:9c:b7:d0:cc:ed:53:a8:b3:8f:d9:de:14: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7C:A9:5C:5E:00:31:4F:C1:4E:C3:E1:39:33:47:69:0B:D0:7E:04 X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/40C4FB74AB3A11EEA3CBE616C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.222.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:8c:6b:6c:cc:e9:13:d3:65:f6:df:1c:db:23:b7:07:cf:a6: d8:5c:31:59:e7:14:99:0f:5f:34:29:f9:b2:f1:d4:7b:56:36: da:5e:dc:6d:6d:6c:3b:6c:b7:81:b5:c8:bc:94:c2:7a:59:60: f1:7d:60:5e:63:45:1e:9d:e0:05:13:11:54:5b:3f:79:98:63: 1b:8a:cc:5c:bc:73:77:22:dc:8c:09:5d:ae:6d:12:b6:35:f8: c1:18:d0:85:db:68:44:c3:e7:90:df:82:9d:f1:40:4a:81:15: b7:9d:b5:4e:74:7d:d7:b0:ad:e7:18:c6:9c:4b:16:ee:28:c8: 0b:6b:17:96:4e:9b:64:cf:1f:c4:c3:17:af:cd:26:d4:56:bd: 2c:14:de:6f:4a:e5:08:61:53:21:c6:97:39:5b:26:e6:56:0c: e0:d2:c1:2a:b3:83:ce:ff:2b:1b:77:f5:36:a8:19:2c:ad:df: f8:c1:a0:63:14:53:2d:d8:92:6a:0f:99:02:66:32:89:d6:f4: 12:c8:54:b7:71:c3:dd:a5:97:03:23:a7:bb:fc:9d:10:61:b2: e1:c1:b8:c7:94:e7:c3:85:3c:bb:a6:9a:4b:cc:31:8e:fc:59: e0:1d:d6:56:27:3e:53:f8:6a:95:be:12:76:07:f1:81:4b:d2: f5:b2:fd:a9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUxMTAzMDQxODMzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MmQxOS00NmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxe6Aw4yt/M1wWoEwwRpjER44NQlNJO6tK9nne/mZxHMjHdSHULw8JnXUfOVy QjrXDHIXD0CObb+pKz0UgsxQbKv9EYAFlsMCcjKwcPFyidmWyciQa7ee1cB9yYoD m6cvgavuh6x7wwqb5mquu6wmW7lUegGBuNaZBPeKGoETMVGhaxk3NNBo/JbnSSgm wgArruW+olwD1Omb1SSiejrSwNl+eO140KiO5MF+9sp0Yo7PCSs6e4BjSUcXoBWl tO+01/jZDxz1a22bRN7uCGiQYWj2QsqqAI7luuLOfu96qPCnhmE50LTCLW9xdlf8 rMb1LT6ct9DM7VOos4/Z3hSAdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFER8qVxe ADFPwU7D4TkzR2kL0H4EMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURDRDIvRUU1MUU1RENBQjM5MTFFRUExQUIyMzE2QzRGOUFFMDIvNDBDNEZCNzRB QjNBMTFFRUEzQ0JFNjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjt4wDQYJKoZIhvcNAQELBQADggEBAJ+Ma2zM6RPTZfbf HNsjtwfPpthcMVnnFJkPXzQp+bLx1HtWNtpe3G1tbDtst4G1yLyUwnpZYPF9YF5j RR6d4AUTEVRbP3mYYxuKzFy8c3ci3IwJXa5tErY1+MEY0IXbaETD55Dfgp3xQEqB FbedtU50fdewrecYxpxLFu4oyAtrF5ZOm2TPH8TDF6/NJtRWvSwU3m9K5QhhUyHG lzlbJuZWDODSwSqzg87/Kxt39TaoGSyt3/jBoGMUUy3YkmoPmQJmMonW9BLIVLdx w92llwMjp7v8nRBhsuHBuMeU58OFPLummkvMMY78WeAd1lYnPlP4apW+EnYH8YFL 0vWy/ak= -----END CERTIFICATE-----Generated at Wed Nov 5 11:11:15 2025 by rpki-client