$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/7A9A936A9AC911F0B0769F75C4F9AE02.roa File: 7A9A936A9AC911F0B0769F75C4F9AE02.roa (raw, json) Hash identifier: Lbb9uN05DsVT0248uhhIwxXcZbkEoim+rIYz/HSIkug= Subject key identifier: 03:78:B5:04:C8:9A:07:89:6B:42:94:AF:2E:D5:8C:60:48:BD:21:59 Certificate issuer: /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Certificate serial: 011D Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/7A9A936A9AC911F0B0769F75C4F9AE02.roa Signing time: Wed 15 Oct 2025 08:32:00 +0000 ROA not before: Wed 15 Oct 2025 08:32:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 21859 IP address blocks: 103.108.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Validity Not Before: Oct 15 08:32:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68ef5c00-d974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:b1:40:0c:cb:61:59:9d:16:00:f6:f2:0d: 70:94:ed:8a:f8:39:d9:33:d4:28:fe:dc:ec:2a:7c: de:10:04:01:d8:65:ca:d6:55:cb:a4:0f:fa:97:0b: e0:5f:10:f5:9e:2a:d7:8f:e4:76:bc:34:d6:04:85: 59:a0:b1:5c:a1:05:1c:0f:71:06:e9:7f:d5:8d:2d: 70:3d:91:c1:1e:f9:98:03:e2:38:86:bd:83:d9:5d: a7:f3:29:3f:13:ad:1a:3a:e8:55:47:92:1a:72:67: 23:6a:df:dd:d8:46:23:d6:b1:14:73:ff:6e:ce:17: b6:12:85:ed:a0:f3:29:27:8e:02:af:ca:9a:3d:ff: 76:95:13:14:6c:45:14:d0:13:02:19:6c:97:d2:23: 03:44:3e:f9:19:36:c6:25:f8:c0:6c:0e:6f:f4:46: 7e:3f:9b:82:08:bc:61:b0:e1:97:dc:67:97:07:f1: 20:18:8f:a9:59:21:74:78:bd:ed:9e:7b:85:59:6b: 8e:5d:12:ac:80:16:65:ea:e6:ae:e6:db:29:9c:be: 2c:ee:14:9f:0e:d3:16:0d:e7:29:af:63:49:e3:05: 49:c3:bf:31:c5:50:64:f2:3e:6c:9a:54:77:54:5c: d8:e1:dc:85:09:4b:92:8c:00:52:9f:f9:dd:79:ff: 5f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:78:B5:04:C8:9A:07:89:6B:42:94:AF:2E:D5:8C:60:48:BD:21:59 X509v3 Authority Key Identifier: keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/7A9A936A9AC911F0B0769F75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.175.0/24 Signature Algorithm: sha256WithRSAEncryption 42:93:fd:46:04:60:f8:82:fd:1b:dd:ae:63:24:6e:d0:74:f4: e0:7c:9a:3c:17:48:72:6f:36:2e:1b:ba:1d:57:85:4b:97:5e: ca:e6:54:05:b3:de:ce:6b:7a:76:34:3e:ac:1b:42:7a:ff:e5: 3e:e2:76:b8:19:b3:68:53:97:98:f5:36:9f:6b:be:c8:9f:22: bf:e9:80:61:95:84:9c:1a:89:89:4c:56:62:75:6d:8f:0f:0f: 36:b4:a7:ba:2a:7a:4f:58:78:15:fb:55:6c:e1:6e:4d:61:18: 4f:69:f9:67:c7:1a:ce:e0:09:9a:aa:7a:32:97:6a:ff:7e:5b: 89:ce:df:b0:63:ab:41:ed:5e:71:4d:38:3a:66:40:57:e1:4f: b4:5d:c5:1d:5c:c0:ab:e4:29:83:d0:77:42:ef:63:6d:6f:37: 98:17:01:43:03:db:8a:b4:e6:67:0e:56:8d:b7:ac:dc:c8:96: 6b:e5:9e:12:2e:ab:68:1f:62:b6:9f:ff:56:b9:95:f5:81:7e: b2:15:35:e5:cf:9c:4a:ed:ae:99:45:57:44:2d:2e:16:e8:d3: 71:8d:af:b8:57:5e:fb:92:11:e3:e8:90:f4:0e:3f:84:3e:a1: c8:fb:5b:db:5c:22:cd:c2:d7:b3:7f:25:22:d8:7d:fe:d8:0f: 1c:d3:0e:80 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NjAxMTAvBgNVBAUTKEUzOEVCM0Y1QTUxMDdFMzBGMENBNzFEREVBNzVCMTcw RDBCMDMyNTYwHhcNMjUxMDE1MDgzMjAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVmNWMwMC1kOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK+xQAzLYVmdFgD28g1wlO2K+DnZM9Qo/tzsKnzeEAQB2GXK1lXLpA/6lwvg XxD1nirXj+R2vDTWBIVZoLFcoQUcD3EG6X/VjS1wPZHBHvmYA+I4hr2D2V2n8yk/ E60aOuhVR5Iacmcjat/d2EYj1rEUc/9uzhe2EoXtoPMpJ44Cr8qaPf92lRMUbEUU 0BMCGWyX0iMDRD75GTbGJfjAbA5v9EZ+P5uCCLxhsOGX3GeXB/EgGI+pWSF0eL3t nnuFWWuOXRKsgBZl6uau5tspnL4s7hSfDtMWDecpr2NJ4wVJw78xxVBk8j5smlR3 VFzY4dyFCUuSjABSn/ndef9fAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAN4tQTI mgeJa0KUry7VjGBIvSFZMB8GA1UdIwQYMBaAFOOOs/WlEH4w8Mpx3ep1sXDQsDJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU2MC80QzNENkJDMDIx NkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZqRHd5bkhkNm5XeGNOQ3dN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0Nno5YVVRZmpEd3luSGQ2bld4Y05Dd01sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU1NjAvNEMzRDZCQzAyMTZGMTFFRkFGNDVFQTJEQzRGOUFFMDIvN0E5QTkzNkE5 QUM5MTFGMEIwNzY5Rjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnbK8wDQYJKoZIhvcNAQELBQADggEBAEKT/UYEYPiC/Rvd rmMkbtB09OB8mjwXSHJvNi4buh1XhUuXXsrmVAWz3s5renY0PqwbQnr/5T7idrgZ s2hTl5j1Np9rvsifIr/pgGGVhJwaiYlMVmJ1bY8PDza0p7oqek9YeBX7VWzhbk1h GE9p+WfHGs7gCZqqejKXav9+W4nO37Bjq0HtXnFNODpmQFfhT7RdxR1cwKvkKYPQ d0LvY21vN5gXAUMD24q05mcOVo23rNzIlmvlnhIuq2gfYraf/1a5lfWBfrIVNeXP nErtrplFV0QtLhbo03GNr7hXXvuSEePokPQOP4Q+ocj7W9tcIs3C17N/JSLYff7Y DxzTDoA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:52:58 2025 by rpki-client