$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/7A0359125C0E11ECA36CBF0FC4F9AE02.roa File: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (raw, json) Hash identifier: o9KgCgIfk9qmZZ9pgzWFPU4WMxKkFhiZ4bjzLNQ6ffs= Subject key identifier: A2:60:E0:8E:7D:3A:58:65:17:8A:61:4C:BA:B1:A4:98:A2:30:8E:F1 Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0C80 Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/7A0359125C0E11ECA36CBF0FC4F9AE02.roa Signing time: Wed 08 Oct 2025 18:48:35 +0000 ROA not before: Wed 08 Oct 2025 18:48:35 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134806 IP address blocks: 103.100.234.0/23 maxlen: 23 103.100.234.0/24 maxlen: 24 103.100.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3200 (0xc80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Oct 8 18:48:35 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e6b203-2098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:8f:ba:6b:97:77:1e:d0:08:19:f5:3c:ca: 1f:f2:04:95:44:a3:7f:7f:26:9c:4f:71:f3:0c:20: d1:0f:07:5b:e1:b9:d3:e9:6f:72:b1:ec:1c:c2:38: 1c:eb:38:59:8f:bc:da:4b:8f:bb:27:b2:08:fd:af: ce:8d:fe:02:22:e3:90:99:cd:82:e2:a9:a6:7d:60: ee:ea:b9:9d:78:67:e4:7d:55:8e:d9:91:8b:40:fb: 51:e8:eb:a1:04:d2:57:fc:e0:36:28:b1:cb:89:48: 06:0d:23:e0:7c:65:83:e7:25:b0:46:86:08:c0:54: 5c:22:d2:97:5d:d3:90:8e:52:5e:0a:ec:5a:91:79: 9e:5e:36:0e:cd:21:0a:0f:9f:95:43:fe:92:9c:b5: ea:9f:bf:02:9a:51:54:bc:d2:da:8c:57:30:d9:1d: fa:5c:26:52:6a:a3:ac:05:32:e0:6e:97:5e:8b:89: 6e:fc:88:5e:b6:ad:b5:da:d2:96:05:d3:52:2d:c8: be:59:73:77:61:fb:c8:49:b4:4d:fd:4f:92:19:dd: 02:b7:ea:a0:f4:bf:6b:6d:f8:ec:9f:67:28:ca:20: e4:af:cc:39:71:5d:b8:cd:02:5c:e0:43:ea:92:ed: fb:a0:c8:26:96:b3:1f:f9:5d:86:3a:88:64:1c:53: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:60:E0:8E:7D:3A:58:65:17:8A:61:4C:BA:B1:A4:98:A2:30:8E:F1 X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/7A0359125C0E11ECA36CBF0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.100.234.0/23 Signature Algorithm: sha256WithRSAEncryption 47:07:bf:c9:a4:9a:fe:4b:80:af:3f:58:c2:3e:4a:41:32:5e: b9:bf:75:e2:ca:a6:a2:ad:2f:c7:7f:4c:0d:9c:d0:ad:5d:f6: f5:a5:7d:fb:ad:84:d8:02:78:32:0a:c4:6e:2d:7f:aa:3a:e1: 3b:86:6c:cf:99:0c:d8:89:79:37:31:11:11:72:46:90:83:dc: 13:fd:e9:80:77:20:f2:f9:7f:0f:7d:f6:ae:09:01:e8:6c:d8: 13:34:0c:89:90:ab:d3:e9:aa:fe:c2:24:86:9e:a6:c4:53:a6: 70:e5:6a:af:14:79:00:54:c1:4d:43:73:7b:2a:a3:e9:9e:2d: 38:d3:1e:80:8f:a2:90:18:54:9d:ec:a4:75:78:bb:56:63:d3: 47:06:52:13:96:9a:be:87:5d:02:74:75:63:30:0b:da:a7:b9: c8:16:ff:20:44:73:57:fa:98:ac:03:ef:52:28:68:ac:4c:89: d2:0b:65:16:22:31:ac:68:42:1e:28:b7:eb:2d:41:25:83:ce: 25:32:8d:86:51:2e:26:7d:57:57:1b:86:37:f0:6c:25:77:ee: 42:c4:27:d9:b0:4f:af:c6:93:43:24:4a:ed:fb:6d:93:3b:5c: 49:b6:4e:07:50:27:e4:d9:b3:fd:ac:f6:fc:dc:a1:87:b0:80: 64:44:93:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjUxMDA4MTg0ODM1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2YjIwMy0yMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WGPumuXdx7QCBn1PMof8gSVRKN/fyacT3HzDCDRDwdb4bnT6W9ysewcwjgc 6zhZj7zaS4+7J7II/a/Ojf4CIuOQmc2C4qmmfWDu6rmdeGfkfVWO2ZGLQPtR6Ouh BNJX/OA2KLHLiUgGDSPgfGWD5yWwRoYIwFRcItKXXdOQjlJeCuxakXmeXjYOzSEK D5+VQ/6SnLXqn78CmlFUvNLajFcw2R36XCZSaqOsBTLgbpdei4lu/Ihetq212tKW BdNSLci+WXN3YfvISbRN/U+SGd0Ct+qg9L9rbfjsn2coyiDkr8w5cV24zQJc4EPq ku37oMgmlrMf+V2GOohkHFNciwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKJg4I59 OlhlF4phTLqxpJiiMI7xMB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1RTAvMjNCRjJGMjYxMTNFMTFFQTg4RTg3ODc2QzRGOUFFMDIvN0EwMzU5MTI1 QzBFMTFFQ0EzNkNCRjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnZOowDQYJKoZIhvcNAQELBQADggEBAEcHv8mkmv5LgK8/ WMI+SkEyXrm/deLKpqKtL8d/TA2c0K1d9vWlffuthNgCeDIKxG4tf6o64TuGbM+Z DNiJeTcxERFyRpCD3BP96YB3IPL5fw999q4JAehs2BM0DImQq9Ppqv7CJIaepsRT pnDlaq8UeQBUwU1Dc3sqo+meLTjTHoCPopAYVJ3spHV4u1Zj00cGUhOWmr6HXQJ0 dWMwC9qnucgW/yBEc1f6mKwD71IoaKxMidILZRYiMaxoQh4ot+stQSWDziUyjYZR LiZ9V1cbhjfwbCV37kLEJ9mwT6/Gk0MkSu37bZM7XEm2TgdQJ+TZs/2s9vzcoYew gGREk4o= -----END CERTIFICATE-----Generated at Mon Oct 20 18:25:37 2025 by rpki-client