$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa File: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (raw, json) Hash identifier: 7mnEbW853H0TtxSAAqitSldZ+gKZe1bS6fxCspOc670= Subject key identifier: 98:81:96:8C:3C:9F:78:50:A5:D7:96:47:6A:11:1B:4F:6C:A7:E7:F9 Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Certificate serial: 013F Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa Signing time: Fri 03 Oct 2025 01:28:17 +0000 ROA not before: Fri 03 Oct 2025 01:28:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132686 IP address blocks: 103.73.236.0/22 maxlen: 22 103.73.236.0/24 maxlen: 24 103.73.237.0/24 maxlen: 24 103.73.238.0/24 maxlen: 24 103.73.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Validity Not Before: Oct 3 01:28:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68df26b1-17c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:fb:fc:67:23:37:e7:ae:bc:19:d9:11:e1: 67:fb:4b:3a:22:19:9a:89:ba:9a:16:d1:cd:d2:09: ab:41:1e:ea:70:0f:b5:05:b6:fa:24:8e:79:e8:fe: 2f:cf:c3:a7:fe:e7:89:ac:81:b3:3a:91:f7:f2:4a: fb:5d:34:76:2b:5e:3b:96:33:b1:4f:31:fa:01:56: da:3e:77:4c:f8:c3:7c:ec:b8:f2:47:f7:3f:57:1a: fb:52:7f:c9:0d:91:6b:68:0d:39:0d:f1:d4:da:0d: af:ce:89:8d:a8:ce:3c:fc:87:b3:17:ae:3e:66:18: e6:9f:5e:f6:c1:c8:86:16:68:6c:f9:f1:e3:a7:a6: 2c:63:e5:02:86:ec:0a:67:37:9e:39:c0:11:ef:12: 74:e2:86:0d:59:74:59:6c:74:6a:7f:7f:3d:71:fb: af:50:c9:6c:35:06:75:e0:d9:c0:3a:e2:34:bc:f2: 4c:88:07:99:fa:29:3b:56:c1:3c:bf:0d:bc:67:07: c7:80:72:05:6b:55:1a:b8:62:14:b5:e5:6a:70:93: 3e:3c:88:2e:46:15:b8:f5:2d:60:6e:18:60:36:e9: 95:b9:45:9e:56:a8:53:ed:bb:4a:51:dc:4a:54:0c: ca:ac:99:a9:ae:9c:e8:cb:41:58:eb:ec:ad:cc:60: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:81:96:8C:3C:9F:78:50:A5:D7:96:47:6A:11:1B:4F:6C:A7:E7:F9 X509v3 Authority Key Identifier: keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.236.0/22 Signature Algorithm: sha256WithRSAEncryption 60:18:6f:4e:a3:36:cb:20:fb:d5:59:b9:49:5f:4b:3a:55:77: 33:50:ae:b8:5d:42:95:d7:99:11:c2:20:9f:ad:0c:9e:49:01: 04:6e:59:46:57:4e:3d:43:70:f7:49:69:ab:a0:4c:65:09:c0: 7e:01:9a:b7:c7:5f:3b:dd:65:29:03:af:7a:81:65:7c:47:a4: 50:07:2c:ab:4e:c5:32:3e:88:8c:04:47:59:7e:b4:90:84:29: 05:4b:b7:04:28:34:3a:af:8e:ef:0a:dd:37:bb:49:af:51:56: ba:bd:79:ee:de:6e:72:54:2b:c7:2d:f8:5e:a8:c2:d1:ba:b0: 92:ce:9e:ea:a4:c5:d9:0b:fe:a6:94:00:73:3d:32:da:e0:2d: ff:0c:5b:f2:74:4c:be:79:85:95:65:1e:8b:36:9c:97:14:07: 34:4d:ee:b9:e2:4e:05:a5:32:98:a9:68:cf:b6:7b:b5:e6:f2: 3d:7a:0e:94:e6:0f:cc:40:ab:a0:f2:a5:19:df:88:e9:a1:a1: 83:f1:76:3d:55:11:52:b3:8e:40:2a:13:4d:9d:80:b9:15:b1: 55:71:3f:54:7e:d2:45:35:f5:5f:ae:1f:03:25:2e:5f:4e:d4: f9:fb:1e:5e:07:df:9a:5c:7d:4b:c5:d6:46:eb:05:04:e7:ef: 68:00:94:06 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKEFDNkEyMkYxRTRFMTY1MEFDRkI1Mjg5RjVEQ0I1RDUz OTIwRkNGMzQwHhcNMjUxMDAzMDEyODE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRmMjZiMS0xN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hz7/GcjN+euvBnZEeFn+0s6IhmaibqaFtHN0gmrQR7qcA+1Bbb6JI556P4v z8On/ueJrIGzOpH38kr7XTR2K147ljOxTzH6AVbaPndM+MN87LjyR/c/Vxr7Un/J DZFraA05DfHU2g2vzomNqM48/IezF64+Zhjmn172wciGFmhs+fHjp6YsY+UChuwK ZzeeOcAR7xJ04oYNWXRZbHRqf389cfuvUMlsNQZ14NnAOuI0vPJMiAeZ+ik7VsE8 vw28ZwfHgHIFa1UauGIUteVqcJM+PIguRhW49S1gbhhgNumVuUWeVqhT7btKUdxK VAzKrJmprpzoy0FY6+ytzGC7xQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJiBlow8 n3hQpdeWR2oRG09sp+f5MB8GA1UdIwQYMBaAFKxqIvHk4WUKz7Uon13LXVOSD880 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpRclB0U2lmWGN0ZFU1SVB6 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb2k4ZVRoWlFyUHRTaWZYY3RkVTVJUHp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIyRDcvNUI5RjcxRDJFRDMwMTFFQ0JGMDdGMDEyQzRGOUFFMDIvQ0U1Rjc0RTJC RTU4MTFFRUE4QzAyRTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnSewwDQYJKoZIhvcNAQELBQADggEBAGAYb06jNssg+9VZ uUlfSzpVdzNQrrhdQpXXmRHCIJ+tDJ5JAQRuWUZXTj1DcPdJaaugTGUJwH4BmrfH XzvdZSkDr3qBZXxHpFAHLKtOxTI+iIwER1l+tJCEKQVLtwQoNDqvju8K3Te7Sa9R Vrq9ee7ebnJUK8ct+F6owtG6sJLOnuqkxdkL/qaUAHM9MtrgLf8MW/J0TL55hZVl Hos2nJcUBzRN7rniTgWlMpipaM+2e7Xm8j16DpTmD8xAq6DypRnfiOmhoYPxdj1V EVKzjkAqE02dgLkVsVVxP1R+0kU19V+uHwMlLl9O1Pn7Hl4H35pcfUvF1kbrBQTn 72gAlAY= -----END CERTIFICATE-----Generated at Tue Oct 21 00:51:53 2025 by rpki-client