$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/58AEC9929C0F11EA9CC4217CC4F9AE02.roa File: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (raw, json) Hash identifier: nPz5etvH54CH9fTIMVloTiUDB5Qsl1I9QXbAO8u0vO8= Subject key identifier: FE:2E:60:A2:A1:E2:89:71:80:95:B8:F2:64:D1:08:2E:55:66:94:AE Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0C8F Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/58AEC9929C0F11EA9CC4217CC4F9AE02.roa Signing time: Sun 28 Sep 2025 18:49:06 +0000 ROA not before: Sun 28 Sep 2025 18:49:06 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 24342 IP address blocks: 103.97.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3215 (0xc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: Sep 28 18:49:06 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68d98322-62bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:44:f9:c2:cd:5b:2b:f1:d2:6f:60:34:97: f8:39:46:b8:05:c8:00:bd:18:c0:8d:70:05:47:9f: 61:88:98:da:07:91:9c:fe:7c:49:bd:29:01:99:da: 08:4c:9c:46:04:e8:80:28:c9:e2:8b:ee:03:1c:54: 2a:3b:46:55:5f:d6:33:ac:60:08:95:b9:f2:13:09: 1a:be:f1:23:cc:27:c3:0c:39:b9:29:b1:16:20:17: f4:22:aa:73:43:10:61:d7:b7:85:83:05:f8:eb:3a: 21:54:00:b5:da:c3:54:02:8e:e4:2a:bf:8e:2d:c5: f2:be:67:ac:4c:2e:96:05:18:55:29:75:d2:6d:98: 6a:a6:53:5a:87:9c:1e:4e:23:d6:29:9d:3d:e3:b3: 93:ea:10:cd:c6:b5:22:e7:73:28:d5:0f:0f:7b:2c: 1d:8b:c7:0c:c9:74:14:0e:b7:5d:be:b0:33:0c:50: cb:6e:58:c4:a2:60:a4:85:91:ec:f9:d1:e4:64:98: e4:2b:0b:1b:1b:4a:61:04:f3:dc:7c:6b:39:56:b7: 0c:43:3b:6c:6a:a8:14:01:fc:ab:10:99:8d:b2:51: 2a:c8:8b:06:2f:c7:5b:73:d9:9b:5c:25:df:fa:1f: 56:a3:8d:ec:a6:e3:7e:d7:06:be:d5:74:8b:2a:e8: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2E:60:A2:A1:E2:89:71:80:95:B8:F2:64:D1:08:2E:55:66:94:AE X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/58AEC9929C0F11EA9CC4217CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.120.0/22 Signature Algorithm: sha256WithRSAEncryption 67:cd:f6:e6:e5:e8:2a:4c:8e:da:c0:d6:8f:42:cd:9c:b4:e9: 00:da:b2:a2:0e:38:e9:85:1d:ee:c7:9c:1c:bb:76:21:4f:19: 09:2f:ae:a7:7c:40:77:a9:44:49:6a:b6:0a:62:e5:fd:0b:b5: 77:b3:62:b5:52:91:cc:0c:15:74:40:9c:4b:5e:f8:04:6d:61: 1f:f6:03:80:56:8b:07:aa:93:66:66:65:05:ee:4c:53:76:4f: 83:ba:71:bf:86:2d:b9:7a:92:5f:27:74:9a:8a:8a:fb:df:d6: cd:cf:eb:99:31:fc:c3:0c:27:02:00:11:14:48:a2:9b:d8:e5: dd:46:f5:ac:0d:c1:55:33:64:c0:cc:91:ef:3a:7d:1d:86:8b: 6b:ed:61:3d:8d:d2:e3:56:0d:20:43:ab:59:48:fe:86:d4:79: c3:3e:74:0d:80:c9:85:b0:b5:03:97:5e:ad:a7:23:9d:17:9d: 35:75:7a:9d:0d:41:f7:08:b2:70:13:ec:e4:58:f0:76:2b:31: 37:1b:21:ae:70:96:e4:09:b5:f3:9c:78:ee:5c:b2:99:16:2a: b0:11:27:2c:fa:21:e2:2c:22:3c:fd:ce:9f:c3:59:ba:83:84: 04:01:8b:39:61:0b:f6:55:81:d9:72:fd:77:ba:d8:aa:3d:6c: 1f:e0:71:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjUwOTI4MTg0OTA2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ5ODMyMi02MmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0lE+cLNWyvx0m9gNJf4OUa4BcgAvRjAjXAFR59hiJjaB5Gc/nxJvSkBmdoI TJxGBOiAKMnii+4DHFQqO0ZVX9YzrGAIlbnyEwkavvEjzCfDDDm5KbEWIBf0Iqpz QxBh17eFgwX46zohVAC12sNUAo7kKr+OLcXyvmesTC6WBRhVKXXSbZhqplNah5we TiPWKZ0947OT6hDNxrUi53Mo1Q8Peywdi8cMyXQUDrddvrAzDFDLbljEomCkhZHs +dHkZJjkKwsbG0phBPPcfGs5VrcMQztsaqgUAfyrEJmNslEqyIsGL8dbc9mbXCXf +h9Wo43spuN+1wa+1XSLKuisVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP4uYKKh 4olxgJW48mTRCC5VZpSuMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODU2QzQvQTNCQUQ4RTIwNEZGMTFFQTkzRUU5QTIzQzRGOUFFMDIvNThBRUM5OTI5 QzBGMTFFQTlDQzQyMTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnYXgwDQYJKoZIhvcNAQELBQADggEBAGfN9ubl6CpMjtrA 1o9CzZy06QDasqIOOOmFHe7HnBy7diFPGQkvrqd8QHepRElqtgpi5f0LtXezYrVS kcwMFXRAnEte+ARtYR/2A4BWiweqk2ZmZQXuTFN2T4O6cb+GLbl6kl8ndJqKivvf 1s3P65kx/MMMJwIAERRIopvY5d1G9awNwVUzZMDMke86fR2Gi2vtYT2N0uNWDSBD q1lI/obUecM+dA2AyYWwtQOXXq2nI50XnTV1ep0NQfcIsnAT7ORY8HYrMTcbIa5w luQJtfOceO5cspkWKrARJyz6IeIsIjz9zp/DWbqDhAQBizlhC/ZVgdly/Xe62Ko9 bB/gcX4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:08:31 2025 by rpki-client