$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa File: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (raw, json) Hash identifier: oBuS5xinsgEEPRO4L87WKgJisQvCYTMja8uyPjXphjc= Subject key identifier: D0:2D:38:25:9D:58:90:85:A4:7D:A6:60:95:49:5D:3B:A9:BB:45:43 Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Certificate serial: 020A Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa Signing time: Sun 19 Oct 2025 05:07:14 +0000 ROA not before: Sun 19 Oct 2025 05:07:14 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 137941 IP address blocks: 103.250.196.0/23 maxlen: 23 103.250.196.0/24 maxlen: 24 103.250.197.0/24 maxlen: 24 2400:aa60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Validity Not Before: Oct 19 05:07:14 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f47202-7701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:1b:7c:c7:9a:94:ec:36:06:ea:60:6d:4c: 28:8e:1a:84:d0:50:09:77:f0:5f:28:23:1d:36:44: 18:e7:49:0e:63:d5:6f:4a:e3:bf:e8:1a:0f:98:eb: 3a:66:e7:00:1f:30:0e:58:6c:92:2c:56:9c:63:f5: 42:f0:08:a0:4d:a9:70:b3:6b:13:7a:ee:39:84:12: 97:c4:37:0e:6a:65:86:a0:5c:ca:84:24:a5:ff:a0: 17:66:a1:59:3e:42:a6:1e:2d:3c:48:03:d1:78:64: ce:9a:f2:e3:41:cb:cd:6d:f7:e4:ee:70:90:1e:66: 65:b0:d1:39:bd:ac:a6:6e:74:57:d9:91:97:47:17: 16:d8:49:08:7f:ad:b1:7f:54:33:c9:8d:c7:bc:35: 72:56:11:a1:b2:23:89:4f:4c:ab:d4:be:e5:47:f1: 17:9c:40:6a:2f:75:73:1c:1d:a2:d5:46:87:7f:ab: 04:9a:0c:78:5c:93:46:e7:33:ed:cb:fd:0f:88:1b: cd:0e:ad:dd:b8:b1:ac:8c:2f:f5:6a:98:bf:79:1e: 5c:fe:04:bf:7b:5f:1b:31:3f:60:c8:ca:95:56:dc: 06:ab:5f:68:30:59:19:c1:4d:34:da:00:ed:66:64: b3:cb:52:59:e6:7a:25:e6:0d:b2:71:4f:08:ba:a1: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2D:38:25:9D:58:90:85:A4:7D:A6:60:95:49:5D:3B:A9:BB:45:43 X509v3 Authority Key Identifier: keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/37A0ACFC8FCD11EDB4772D55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.250.196.0/23 IPv6: 2400:aa60::/32 Signature Algorithm: sha256WithRSAEncryption 82:ab:b0:68:3e:07:ac:9d:25:15:fc:3d:f9:52:c5:2b:75:4b: 38:c9:2c:03:a7:0e:f6:68:0f:11:bb:5c:12:41:49:62:14:68: a6:e8:c7:2d:e5:81:83:ad:18:2a:77:32:d8:66:0d:66:15:2b: fe:2d:7d:f0:4c:a0:c8:9c:14:85:30:b4:b5:3d:2b:9e:18:47: 49:17:9f:a3:18:68:ac:94:94:15:d7:bd:ef:a8:f5:14:bd:19: e9:42:42:6e:65:0e:22:a4:41:17:60:ab:ba:8f:e4:ee:14:41: 31:57:30:5a:b2:00:e2:9c:2c:cc:aa:fd:fc:8f:86:1c:8a:6b: db:1b:fb:dc:fa:0c:d0:5c:d6:96:39:93:36:44:e1:87:e7:51: 2c:71:8d:99:96:72:12:50:16:13:10:58:ef:ff:85:f9:96:4c: 71:19:19:ad:68:97:7d:2a:71:e2:d9:59:19:67:6b:3a:3f:5a: b2:a3:d8:9d:93:c2:86:10:a4:42:d7:aa:a8:f1:8f:e6:1a:31: 05:cf:4f:c1:9a:78:80:4b:17:d0:e1:be:ba:85:92:3b:61:0e: 5a:95:7c:f0:94:04:02:b2:5c:1b:87:f3:c8:2b:f7:1c:59:5f: e9:97:66:4a:b7:66:d5:b6:ae:7b:8f:80:18:14:05:0e:64:e1: 61:5e:d4:3e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2QzQxMTAvBgNVBAUTKDdDMzNDMjFFMUYzNkY2N0U0QzZBMDRFQjIzOTAxOUFE NzcyQkNCMkEwHhcNMjUxMDE5MDUwNzE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY0NzIwMi03NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nsbfMealOw2BupgbUwojhqE0FAJd/BfKCMdNkQY50kOY9VvSuO/6BoPmOs6 ZucAHzAOWGySLFacY/VC8AigTalws2sTeu45hBKXxDcOamWGoFzKhCSl/6AXZqFZ PkKmHi08SAPReGTOmvLjQcvNbffk7nCQHmZlsNE5vaymbnRX2ZGXRxcW2EkIf62x f1QzyY3HvDVyVhGhsiOJT0yr1L7lR/EXnEBqL3VzHB2i1UaHf6sEmgx4XJNG5zPt y/0PiBvNDq3duLGsjC/1api/eR5c/gS/e18bMT9gyMqVVtwGq19oMFkZwU002gDt ZmSzy1JZ5nol5g2ycU8IuqFrEQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNAtOCWd WJCFpH2mYJVJXTupu0VDMB8GA1UdIwQYMBaAFHwzwh4fNvZ+TGoE6yOQGa13K8sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZDNC85RDRCMTA2ODhG Q0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4MjluNU1hZ1RySTVBWnJYY3J5 eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZEUENIaDgyOW41TWFnVHJJNUFaclhjcnl5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODM2QzQvOUQ0QjEwNjg4RkNBMTFFREI3OTExMjU0QzRGOUFFMDIvMzdBMEFDRkM4 RkNEMTFFREI0NzcyRDU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFn+sQwDQQCAAIwBwMFACQAqmAwDQYJKoZIhvcNAQELBQAD ggEBAIKrsGg+B6ydJRX8PflSxSt1SzjJLAOnDvZoDxG7XBJBSWIUaKboxy3lgYOt GCp3MthmDWYVK/4tffBMoMicFIUwtLU9K54YR0kXn6MYaKyUlBXXve+o9RS9GelC Qm5lDiKkQRdgq7qP5O4UQTFXMFqyAOKcLMyq/fyPhhyKa9sb+9z6DNBc1pY5kzZE 4YfnUSxxjZmWchJQFhMQWO//hfmWTHEZGa1ol30qceLZWRlnazo/WrKj2J2TwoYQ pELXqqjxj+YaMQXPT8GaeIBLF9DhvrqFkjthDlqVfPCUBAKyXBuH88gr9xxZX+mX Zkq3ZtW2rnuPgBgUBQ5k4WFe1D4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:34:49 2025 by rpki-client