$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa File: 0361CF86560211EB97A98D46C4F9AE02.roa (raw, json) Hash identifier: HlIyCnozTXmahx4OrgB34hXtStTSnVnLcqtp68+OH5c= Subject key identifier: 72:22:D4:4C:62:F6:BC:DF:E5:33:F9:A8:E6:2E:51:BD:75:8C:36:3D Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 0706 Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa Signing time: Thu 28 Aug 2025 22:44:15 +0000 ROA not before: Thu 28 Aug 2025 22:44:15 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131230 IP address blocks: 103.68.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1798 (0x706) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Validity Not Before: Aug 28 22:44:15 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68b0dbbf-caf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:4b:96:e3:eb:c6:35:1a:20:0b:17:75:b0: f3:d0:e8:7c:e7:ab:60:2d:02:65:cc:17:e7:f8:b7: 9f:6d:83:0f:c0:1e:09:06:a0:91:c8:05:af:ba:2b: 00:af:17:d3:3e:9c:ac:52:73:b7:ee:0c:b6:c5:9a: 98:22:27:de:43:ba:9f:7f:81:41:2a:e7:0b:b1:37: ca:44:bf:06:a9:0a:e5:1a:43:03:f5:69:e4:ad:47: 25:42:41:0c:de:cc:10:f6:3c:7a:7d:d9:63:10:cf: 88:d5:5a:9d:9a:4a:73:dd:09:b1:cd:f2:30:4c:3a: 45:53:18:34:90:af:41:31:f9:98:b4:3a:dd:4e:53: eb:67:e2:e8:93:af:eb:ca:5b:d3:43:30:14:7d:e6: 81:3a:d0:82:c2:a9:65:dc:d9:3d:64:3a:6a:0a:ac: 58:f7:4f:b4:46:31:51:db:28:b5:db:00:f4:c9:14: 78:2f:23:c8:66:ff:2d:73:3d:56:ba:ab:6a:20:5a: 70:fb:de:51:94:df:64:34:5b:5b:2f:d1:20:03:36: 8f:4b:e7:9b:db:70:52:cd:31:4c:07:0f:68:86:f4: 4f:ec:e8:a3:65:43:f8:76:74:12:91:f4:32:0f:fc: 3d:1c:ed:6d:64:bc:8f:15:65:9b:d6:cd:a1:92:e5: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:22:D4:4C:62:F6:BC:DF:E5:33:F9:A8:E6:2E:51:BD:75:8C:36:3D X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/0361CF86560211EB97A98D46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.124.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:1d:dd:e3:7c:56:4f:07:cb:0a:01:58:ff:3d:16:0a:c0:53: da:7e:d7:18:7b:4c:d8:9a:14:57:7a:48:b0:0f:21:33:ab:c4: 08:fb:0f:c4:59:80:e8:3b:88:d4:3c:39:ef:90:77:e7:ff:b5: c7:9d:1d:66:4b:5d:e9:56:e1:85:8c:f9:94:7d:eb:96:56:b2: 07:3c:29:e9:ab:a6:f5:7d:30:d4:cb:e4:ca:55:5e:22:6c:b6: cc:af:8a:3b:f9:65:d0:bb:f7:90:36:7c:fa:44:61:ab:1a:7f: bd:86:7d:85:0f:63:16:3f:95:63:14:95:b5:a0:76:25:f4:fc: 26:e8:4e:f3:87:12:86:57:62:81:2d:98:d6:ce:6e:3f:7a:04: 7b:77:ef:bc:83:64:37:20:b3:7b:9d:9e:6a:af:be:7d:87:35: 07:1d:ce:c0:cd:0c:9f:cd:2f:87:42:a2:a2:57:9f:06:37:01: 02:7f:c8:21:c4:e4:ca:e2:57:80:7e:89:49:c8:a7:83:16:c5: 7f:95:f2:6e:f8:6b:bd:13:9f:10:13:8b:b1:99:6d:63:9b:9d: 1a:74:b3:7f:6e:9a:fa:40:e6:bb:5a:77:75:ee:39:8a:21:9c: d5:bc:ce:8e:c1:6c:63:00:25:cf:39:65:2a:f9:a4:c6:10:82: 9d:56:c7:80 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjUwODI4MjI0NDE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwZGJiZi1jYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsh1LluPrxjUaIAsXdbDz0Oh856tgLQJlzBfn+LefbYMPwB4JBqCRyAWvuisA rxfTPpysUnO37gy2xZqYIifeQ7qff4FBKucLsTfKRL8GqQrlGkMD9WnkrUclQkEM 3swQ9jx6fdljEM+I1Vqdmkpz3QmxzfIwTDpFUxg0kK9BMfmYtDrdTlPrZ+Lok6/r ylvTQzAUfeaBOtCCwqll3Nk9ZDpqCqxY90+0RjFR2yi12wD0yRR4LyPIZv8tcz1W uqtqIFpw+95RlN9kNFtbL9EgAzaPS+eb23BSzTFMBw9ohvRP7OijZUP4dnQSkfQy D/w9HO1tZLyPFWWb1s2hkuVO9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHIi1Exi 9rzf5TP5qOYuUb11jDY9MB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDExQzAvQjk2MDM3NTg1NUZGMTFFQkJDMzZDODQzQzRGOUFFMDIvMDM2MUNGODY1 NjAyMTFFQjk3QTk4RDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnRHwwDQYJKoZIhvcNAQELBQADggEBAI4d3eN8Vk8HywoB WP89FgrAU9p+1xh7TNiaFFd6SLAPITOrxAj7D8RZgOg7iNQ8Oe+Qd+f/tcedHWZL XelW4YWM+ZR965ZWsgc8KemrpvV9MNTL5MpVXiJstsyvijv5ZdC795A2fPpEYasa f72GfYUPYxY/lWMUlbWgdiX0/CboTvOHEoZXYoEtmNbObj96BHt377yDZDcgs3ud nmqvvn2HNQcdzsDNDJ/NL4dCoqJXnwY3AQJ/yCHE5MriV4B+iUnIp4MWxX+V8m74 a70TnxATi7GZbWObnRp0s39umvpA5rtad3XuOYohnNW8zo7BbGMAJc85ZSr5pMYQ gp1Wx4A= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:57 2025 by rpki-client