$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/07332486B1D111EBA956F96AC4F9AE02.roa File: 07332486B1D111EBA956F96AC4F9AE02.roa (raw, json) Hash identifier: ttRZLKoMySXPeabXatArFdOxpzq9cRtpWwNwu6sfYas= Subject key identifier: 57:F3:A3:FD:F6:47:90:15:8C:70:B4:8D:65:A6:03:ED:E1:FF:14:60 Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Certificate serial: 062F Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/07332486B1D111EBA956F96AC4F9AE02.roa Signing time: Tue 30 Sep 2025 23:25:27 +0000 ROA not before: Tue 30 Sep 2025 23:25:27 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136960 IP address blocks: 103.100.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Validity Not Before: Sep 30 23:25:27 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68dc66e7-e1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:c4:8a:a4:f4:da:8b:ff:7c:c7:91:a2:15: fb:d8:5f:53:d9:4e:9f:58:87:d7:b8:69:43:e9:d2: fb:40:d2:b5:5a:5f:91:3d:7e:10:a7:bd:a6:7f:c9: 53:b3:00:96:8e:85:9f:40:4e:ec:38:47:ed:c9:f8: ec:a6:bd:63:19:02:08:d9:0b:db:60:44:97:42:2a: ba:fd:ab:34:6b:eb:fb:7b:39:b1:6a:b4:ad:c6:b5: 81:d4:16:4f:71:9f:a8:09:f3:21:4c:3a:97:4f:44: 14:3f:f1:e6:20:19:96:d4:6d:d7:3e:17:ad:3e:21: 22:b4:fe:92:2d:a5:33:47:0c:46:aa:9a:70:a5:33: 57:99:e5:52:3b:92:0b:7f:1e:c7:c8:08:2c:7c:8e: 8c:6b:11:21:1f:85:5b:38:20:9a:2e:fd:6b:b4:76: af:83:14:3a:34:ba:8c:f5:ef:e4:49:0f:34:7b:a6: c2:ba:b2:86:bf:2e:5e:96:fb:fd:63:79:de:35:3d: 63:fc:38:79:72:d0:9b:aa:23:d0:03:51:ae:f5:ed: f1:a2:da:f0:40:18:25:64:c8:cc:98:4a:91:72:18: 11:e9:f2:73:78:96:75:13:16:45:62:c3:cc:71:4e: aa:52:a5:55:63:39:78:05:f7:c6:ed:9e:c7:0e:68: de:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F3:A3:FD:F6:47:90:15:8C:70:B4:8D:65:A6:03:ED:E1:FF:14:60 X509v3 Authority Key Identifier: keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/07332486B1D111EBA956F96AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.100.86.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:92:09:39:1c:96:79:00:96:f4:6c:db:92:6d:0b:92:d1:55: f4:2c:fd:c0:aa:b5:6b:76:8b:2d:55:0e:c2:dc:c3:01:c9:02: 85:e6:97:e4:aa:2e:55:cc:80:82:ee:d8:28:85:75:7d:1e:bb: 87:2e:64:27:5f:3f:50:4f:58:bf:cf:99:04:cd:ad:2a:aa:58: de:63:c0:f1:50:19:54:0b:fa:e2:5f:2f:bb:fa:93:2e:95:3b: b8:4f:a7:ef:52:70:4f:2e:f3:80:51:50:64:e8:06:f4:7a:e8: da:0e:fd:14:fd:7d:51:a8:14:c8:f0:2b:13:03:85:e4:37:3e: 9f:aa:97:79:a1:c2:52:79:85:e8:0c:36:cc:ed:46:39:0c:db: 1a:db:37:16:fe:ee:c9:cf:51:c8:ed:e5:86:94:a3:1b:da:2a: 8b:c6:65:f7:1f:ec:aa:59:18:8a:49:b6:c3:9a:29:ff:17:7d: 39:80:50:21:54:11:27:79:56:85:0c:69:01:76:20:1b:08:66: 77:9e:92:aa:c0:29:20:51:a4:13:7e:41:76:14:5b:1d:83:d4: a5:01:19:2f:ba:8e:87:68:88:82:8b:7e:a2:7a:55:5a:84:fb: ee:19:f1:2c:f7:cd:40:90:92:6e:f5:52:b7:15:31:61:4f:f6: 27:3b:0b:65 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QTIxMTAvBgNVBAUTKEE5MjFDRjg4RDhDODlFMEJBQ0Q0RUUxODUzOEMzM0Iy NzhBOTU5MkMwHhcNMjUwOTMwMjMyNTI3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjNjZlNy1lMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nzEiqT02ov/fMeRohX72F9T2U6fWIfXuGlD6dL7QNK1Wl+RPX4Qp72mf8lT swCWjoWfQE7sOEftyfjspr1jGQII2QvbYESXQiq6/as0a+v7ezmxarStxrWB1BZP cZ+oCfMhTDqXT0QUP/HmIBmW1G3XPhetPiEitP6SLaUzRwxGqppwpTNXmeVSO5IL fx7HyAgsfI6MaxEhH4VbOCCaLv1rtHavgxQ6NLqM9e/kSQ80e6bCurKGvy5elvv9 Y3neNT1j/Dh5ctCbqiPQA1Gu9e3xotrwQBglZMjMmEqRchgR6fJzeJZ1ExZFYsPM cU6qUqVVYzl4BffG7Z7HDmje9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFfzo/32 R5AVjHC0jWWmA+3h/xRgMB8GA1UdIwQYMBaAFKkhz4jYyJ4LrNTuGFOMM7J4qVks MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdBMi9EMUNENTQ1OEIx Q0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5ndXMxTzRZVTR3enNuaXBX U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTSFBpTmpJbmd1czFPNFlVNHd6c25pcFdTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI3QTIvRDFDRDU0NThCMUNFMTFFQjhGRjFDMDY3QzRGOUFFMDIvMDczMzI0ODZC MUQxMTFFQkE5NTZGOTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnZFYwDQYJKoZIhvcNAQELBQADggEBAI+SCTkclnkAlvRs 25JtC5LRVfQs/cCqtWt2iy1VDsLcwwHJAoXml+SqLlXMgILu2CiFdX0eu4cuZCdf P1BPWL/PmQTNrSqqWN5jwPFQGVQL+uJfL7v6ky6VO7hPp+9ScE8u84BRUGToBvR6 6NoO/RT9fVGoFMjwKxMDheQ3Pp+ql3mhwlJ5hegMNsztRjkM2xrbNxb+7snPUcjt 5YaUoxvaKovGZfcf7KpZGIpJtsOaKf8XfTmAUCFUESd5VoUMaQF2IBsIZneekqrA KSBRpBN+QXYUWx2D1KUBGS+6jodoiIKLfqJ6VVqE++4Z8Sz3zUCQkm71UrcVMWFP 9ic7C2U= -----END CERTIFICATE-----Generated at Mon Oct 20 23:35:51 2025 by rpki-client