$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/FA93793637C011EB97405947C4F9AE02.roa File: FA93793637C011EB97405947C4F9AE02.roa (raw, json) Hash identifier: 6Z7fqbPSs+Ml8QXXKGeIZgjWtWxNfN8N/e0vyGnhKx8= Subject key identifier: 2B:BD:92:11:D7:17:FF:11:96:BB:65:09:AF:B7:89:5F:0B:1B:58:E7 Certificate issuer: /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Certificate serial: 076B Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/FA93793637C011EB97405947C4F9AE02.roa Signing time: Fri 26 Sep 2025 22:24:14 +0000 ROA not before: Fri 26 Sep 2025 22:24:14 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 14413 IP address blocks: 103.20.92.0/22 maxlen: 24 2405:2300::/33 maxlen: 48 2405:2300:8000::/34 maxlen: 48 2405:2300:c000::/35 maxlen: 48 2405:2300:e000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1899 (0x76b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Validity Not Before: Sep 26 22:24:14 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d7128e-4207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:b4:f2:df:0a:d9:59:4f:23:b9:a7:16:22: de:60:f3:a2:81:d5:76:31:5d:0a:ae:ff:79:f7:8f: 4a:32:9a:4b:ef:47:5a:84:c5:cd:47:2c:0e:f2:44: ff:86:aa:92:9c:c7:24:8c:0c:08:4c:29:be:95:2a: af:e9:5f:ac:f2:43:ca:44:0e:de:6c:b6:4f:dc:17: c2:d9:b3:c3:a1:47:82:ee:1d:39:a3:94:1c:f0:21: ac:5c:0e:e5:a6:f2:47:77:87:8e:ed:9d:a3:58:ab: 4a:92:20:47:9c:95:c0:cb:b8:42:71:e3:d1:16:d9: 27:e1:d0:ae:ea:44:c6:bd:c7:3a:35:dd:a6:fb:ea: 31:61:f4:e0:36:b3:46:48:9b:32:87:91:c3:9e:40: 70:90:c2:0f:07:18:93:0a:cb:ca:72:2c:ea:b8:7b: 8a:03:84:c0:2f:20:dd:82:db:95:8d:aa:f3:cc:cf: dc:74:4c:8d:22:47:d6:06:ee:36:1c:5e:3d:a5:e9: b4:12:92:09:aa:a9:01:18:e0:95:ea:10:01:ba:ee: 5d:2a:fe:d4:b2:8b:cd:2a:bd:33:f3:1a:9d:50:53: 56:3b:2a:59:a5:c0:15:39:f0:f4:2e:21:df:64:31: 54:80:8a:ab:0c:a2:bc:a3:96:0b:42:aa:21:3e:a1: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BD:92:11:D7:17:FF:11:96:BB:65:09:AF:B7:89:5F:0B:1B:58:E7 X509v3 Authority Key Identifier: keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/FA93793637C011EB97405947C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.92.0/22 IPv6: 2405:2300::-2405:2300:efff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption c0:15:f4:9f:9d:8e:62:87:84:a6:5e:60:70:39:a7:05:ba:c1: 32:01:90:77:65:c6:5a:ef:2c:5e:cb:59:a4:6e:c5:0d:60:ca: fd:4f:1d:c9:47:ed:93:23:6a:3f:31:da:39:99:29:50:aa:69: a2:6f:a8:9c:ac:16:a8:68:e7:e7:b1:f1:2e:3d:a7:97:53:0e: 7c:c3:fe:af:2f:b9:75:99:7d:6b:c3:85:4a:12:28:7f:98:a0: 3a:05:1c:98:3b:c6:37:25:29:0b:6c:88:06:7d:34:1b:94:35: a2:52:8f:49:fb:a1:b5:9a:87:2f:35:b4:5b:63:3e:b6:8e:0a: 3d:4b:0c:64:c3:87:59:d9:00:07:ed:ae:79:d2:5d:c2:ca:88: 39:82:68:05:59:35:04:7c:ca:b4:83:9f:d3:83:4e:98:1c:cc: e4:5d:27:8b:aa:a7:55:08:67:89:f1:b5:e8:51:ee:a9:0c:3c: 1e:80:b5:a3:5d:19:c9:2e:41:94:40:e2:46:af:14:ab:38:38: dd:eb:f3:e6:4b:45:56:40:42:a7:84:99:76:78:5c:c7:23:32: 3e:98:c0:22:0e:a0:90:e2:96:51:ef:8b:39:dc:a5:5e:63:71: b2:d1:2d:91:74:90:b6:ba:ed:35:f0:c6:52:58:7d:23:18:65: 78:cd:9f:54 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICB2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA0OTExMTAvBgNVBAUTKDVGQzNFODZEQUU0MzUzMTU4OEVCMDE1RDUwMUUzMTcx MjA1RjA4NTEwHhcNMjUwOTI2MjIyNDE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ3MTI4ZS00MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5e08t8K2VlPI7mnFiLeYPOigdV2MV0Krv95949KMppL70dahMXNRywO8kT/ hqqSnMckjAwITCm+lSqv6V+s8kPKRA7ebLZP3BfC2bPDoUeC7h05o5Qc8CGsXA7l pvJHd4eO7Z2jWKtKkiBHnJXAy7hCcePRFtkn4dCu6kTGvcc6Nd2m++oxYfTgNrNG SJsyh5HDnkBwkMIPBxiTCsvKcizquHuKA4TALyDdgtuVjarzzM/cdEyNIkfWBu42 HF49pem0EpIJqqkBGOCV6hABuu5dKv7UsovNKr0z8xqdUFNWOypZpcAVOfD0LiHf ZDFUgIqrDKK8o5YLQqohPqFdYQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFCu9khHX F/8RlrtlCa+3iV8LG1jnMB8GA1UdIwQYMBaAFF/D6G2uQ1MViOsBXVAeMXEgXwhR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQ5MS85MjlCREJDMjM3 QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4V0k2d0ZkVUI0eGNTQmZD RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4UG9iYTVEVXhXSTZ3RmRVQjR4Y1NCZkNGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTA0OTEvOTI5QkRCQzIzN0JFMTFFQjgzQUUxODQ0QzRGOUFFMDIvRkE5Mzc5MzYz N0MwMTFFQjk3NDA1OTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAJnFFwwFgQCAAIwEDAOAwQAJAUjAwYEJAUjAOAwDQYJKoZI hvcNAQELBQADggEBAMAV9J+djmKHhKZeYHA5pwW6wTIBkHdlxlrvLF7LWaRuxQ1g yv1PHclH7ZMjaj8x2jmZKVCqaaJvqJysFqho5+ex8S49p5dTDnzD/q8vuXWZfWvD hUoSKH+YoDoFHJg7xjclKQtsiAZ9NBuUNaJSj0n7obWahy81tFtjPraOCj1LDGTD h1nZAAftrnnSXcLKiDmCaAVZNQR8yrSDn9ODTpgczORdJ4uqp1UIZ4nxtehR7qkM PB6AtaNdGckuQZRA4kavFKs4ON3r8+ZLRVZAQqeEmXZ4XMcjMj6YwCIOoJDillHv izncpV5jcbLRLZF0kLa67TXwxlJYfSMYZXjNn1Q= -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:03 2025 by rpki-client