$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa File: AA5A77C88DB811EBA0613421C4F9AE02.roa (raw, json) Hash identifier: F64rTtQK62WkoJ4T7LBeaKOnYlMCrnrGJqKnlzvZNxc= Subject key identifier: A5:C1:34:AB:5C:29:4F:D8:D5:A6:90:D9:64:EC:44:C0:D7:FC:A5:3C Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 12FF Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa Signing time: Fri 12 Sep 2025 17:26:17 +0000 ROA not before: Fri 12 Sep 2025 17:26:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 33353 IP address blocks: 103.123.138.0/24 maxlen: 24 2403:7940::/33 maxlen: 33 2403:7940:fcc0::/48 maxlen: 48 2403:7940:fcd0::/48 maxlen: 48 2403:7940:fcd1::/48 maxlen: 48 2403:7940:fcd2::/48 maxlen: 48 2403:7940:fcd3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4863 (0x12ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Sep 12 17:26:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c457b8-c14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:c6:00:63:f5:2b:af:e3:2d:34:d7:0a:32: d2:01:2b:a9:c8:5c:49:22:86:1d:e1:cd:0f:54:50: 70:83:b6:7c:e9:51:6e:7b:ca:f9:59:2d:d7:a2:1a: b0:06:53:da:ed:13:17:5a:5b:47:c0:af:0d:b3:a3: 88:b9:46:ac:d3:43:7e:c3:01:46:da:ac:5c:83:e6: 4f:75:a5:8a:e7:ab:b4:54:e3:3b:c2:b9:81:5d:3a: ff:11:6e:3e:09:86:46:28:c9:c8:28:b1:22:73:ae: 6e:f6:9a:4d:2e:11:9e:f0:f1:81:80:4f:f6:af:d3: f2:93:51:a4:02:bc:9a:45:c0:81:9a:0b:b0:4e:7a: 9e:4e:8e:15:89:6e:0e:08:a1:32:e7:c3:83:cf:b4: 2d:52:f2:50:02:49:7d:54:4f:28:55:3b:fa:7e:6a: 34:e8:63:1e:60:79:4c:58:02:7a:a7:11:ef:2b:5e: aa:3a:a1:9f:94:98:6f:8f:b2:da:bb:b2:95:02:01: 33:25:da:8c:c1:60:43:48:bd:ea:af:0d:96:14:40: 30:6b:fc:20:f0:81:65:a2:dc:ba:40:fb:62:54:d1: c6:bc:d4:be:3c:7b:44:38:52:1b:db:32:f0:ac:dd: a0:82:ca:f4:34:18:ed:92:88:e4:fc:f0:ba:96:40: 26:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C1:34:AB:5C:29:4F:D8:D5:A6:90:D9:64:EC:44:C0:D7:FC:A5:3C X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.138.0/24 IPv6: 2403:7940::/33 2403:7940:fcc0::/48 2403:7940:fcd0::/46 Signature Algorithm: sha256WithRSAEncryption 09:fd:b8:bc:5c:f2:cb:94:08:c4:aa:34:25:0b:d3:b3:41:0a: c8:ef:8e:c6:f9:e7:2a:f5:17:6c:e2:66:5f:4a:9f:85:c3:08: 38:61:35:55:ae:2f:87:dc:3c:a2:f8:ec:4a:16:5b:e7:b9:8d: 5e:01:73:28:d0:44:10:d3:ba:18:56:cf:ad:ba:9b:5c:ad:5a: 5a:04:c1:31:29:0e:39:55:81:b4:2a:97:3a:36:8f:a3:93:66: 28:e5:7b:0a:f3:94:01:c3:6d:d6:f2:aa:a6:5d:f9:de:46:bf: 5a:27:b0:03:f2:6c:f0:b1:2a:fb:ae:7b:16:ae:7a:4b:ce:b7: d5:14:55:30:0f:3f:ad:0a:42:df:33:a3:fb:71:50:a8:d5:dc: 13:f6:14:a3:f5:5c:2e:38:28:2b:c6:48:c4:92:8e:f3:dd:0e: f3:b6:21:72:b9:29:81:eb:13:0a:67:1f:64:ec:3b:45:07:24: c6:4f:d6:c9:66:f0:07:17:a6:b0:bc:c8:9a:26:99:ee:90:7b: ae:c6:2c:25:73:04:b7:9b:fb:0f:f1:3d:a5:71:94:8d:ef:bb: e1:a7:dc:6f:98:30:1c:1e:ec:30:5b:36:0d:a4:0b:f3:ab:43: fd:e5:c0:5b:5e:b6:39:6a:e2:c6:da:e1:08:36:10:18:33:dd: 4a:2c:fa:c3 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICEv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjUwOTEyMTcyNjE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM0NTdiOC1jMTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTTGAGP1K6/jLTTXCjLSASupyFxJIoYd4c0PVFBwg7Z86VFue8r5WS3Xohqw BlPa7RMXWltHwK8Ns6OIuUas00N+wwFG2qxcg+ZPdaWK56u0VOM7wrmBXTr/EW4+ CYZGKMnIKLEic65u9ppNLhGe8PGBgE/2r9Pyk1GkAryaRcCBmguwTnqeTo4ViW4O CKEy58ODz7QtUvJQAkl9VE8oVTv6fmo06GMeYHlMWAJ6pxHvK16qOqGflJhvj7La u7KVAgEzJdqMwWBDSL3qrw2WFEAwa/wg8IFloty6QPtiVNHGvNS+PHtEOFIb2zLw rN2ggsr0NBjtkojk/PC6lkAmBQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFKXBNKtc KU/Y1aaQ2WTsRMDX/KU8MB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjcyRjkvRDJFRDQ5QzJDMjZEMTFFOEJBQkUxMTY1QzRGOUFFMDIvQUE1QTc3Qzg4 REI4MTFFQkEwNjEzNDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMAwEAgABMAYDBABne4owIAQCAAIwGgMGByQDeUAAAwcAJAN5QPzAAwcCJAN5 QPzQMA0GCSqGSIb3DQEBCwUAA4IBAQAJ/bi8XPLLlAjEqjQlC9OzQQrI747G+ecq 9Rds4mZfSp+Fwwg4YTVVri+H3Dyi+OxKFlvnuY1eAXMo0EQQ07oYVs+tuptcrVpa BMExKQ45VYG0Kpc6No+jk2Yo5XsK85QBw23W8qqmXfneRr9aJ7AD8mzwsSr7rnsW rnpLzrfVFFUwDz+tCkLfM6P7cVCo1dwT9hSj9VwuOCgrxkjEko7z3Q7ztiFyuSmB 6xMKZx9k7DtFByTGT9bJZvAHF6awvMiaJpnukHuuxiwlcwS3m/sP8T2lcZSN77vh p9xvmDAcHuwwWzYNpAvzq0P95cBbXrY5auLG2uEINhAYM91KLPrD -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:19 2025 by rpki-client