$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31DE4D9C1D0E11EDA9995986C4F9AE02.roa File: 31DE4D9C1D0E11EDA9995986C4F9AE02.roa (raw, json) Hash identifier: AqqSk80Ol6N+rHOFupsXF40i5HrxpZFpbwhRhWWh+os= Subject key identifier: BC:02:44:2C:C9:7C:A7:5F:45:3B:79:34:55:F1:9D:CD:A4:37:38:6E Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CB3 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31DE4D9C1D0E11EDA9995986C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:52:19 +0000 ROA not before: Thu 28 Aug 2025 14:52:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131352 IP address blocks: 103.28.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19635 (0x4cb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:19 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d22-6fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:bf:2b:ef:04:16:29:ea:e3:a9:ec:ab:f3: 62:d0:78:b9:05:bb:1a:e6:2c:48:9b:78:f8:87:2e: b6:b4:f8:7d:53:81:a4:3d:90:fc:89:87:ea:22:a5: 69:dc:28:e8:48:2d:28:e4:99:62:3b:ae:13:77:32: e6:cf:40:9d:98:d7:92:73:ec:4f:2f:d0:65:46:d6: c0:fe:13:49:fc:87:1d:d8:ab:17:d1:15:c1:37:ac: 6d:ea:54:2b:05:50:08:31:6a:83:24:f9:bb:80:4f: c9:f0:c4:8b:7b:d4:5b:2a:d3:0f:48:ec:b1:a0:36: c8:36:a6:19:2b:00:70:fb:4f:f9:4e:a7:47:f6:e8: 8d:64:0b:40:a0:a6:0b:b5:fd:bb:13:bf:1a:09:32: a7:c3:50:d6:00:68:fb:68:c0:5c:b7:40:95:39:ea: 03:c9:01:87:20:de:36:f9:09:fb:bb:1d:30:06:73: 60:43:a9:99:7e:19:cd:8b:71:dd:2b:71:14:fe:4b: 7a:69:a5:83:9f:f4:d8:13:be:26:26:a6:c0:c1:7f: 9f:f4:71:01:6d:d4:0b:c0:dd:3b:fb:41:1b:1d:6e: 07:f3:83:6f:68:ad:5f:3a:ed:a1:b7:f5:84:3d:9d: 1f:80:7b:6b:e6:af:84:ef:3d:61:22:82:26:a1:b0: 4a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:02:44:2C:C9:7C:A7:5F:45:3B:79:34:55:F1:9D:CD:A4:37:38:6E X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/31DE4D9C1D0E11EDA9995986C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.172.0/22 Signature Algorithm: sha256WithRSAEncryption 60:f4:2b:bb:c2:9f:06:19:83:17:61:fa:bf:df:dc:cd:2c:56: 44:f6:c3:d4:f3:e4:9d:eb:18:2f:5e:19:fd:24:43:fd:6c:5e: 82:f9:07:a1:34:3d:44:80:0b:cc:a6:0e:4d:b9:a2:8a:49:c9: 04:d1:6c:8a:8a:f0:1a:86:00:14:6c:39:d7:04:5c:67:48:6f: 1e:b8:a3:c1:f2:bc:d9:10:ff:38:b8:bc:bb:09:00:2b:cd:62: 2c:10:53:46:e7:e1:f1:e3:89:21:f1:75:59:6b:84:48:64:1b: 7f:31:ac:61:91:4a:29:3b:0e:ec:ef:c3:71:9b:d4:fd:ee:3d: 95:ac:2f:79:cf:a5:3f:7a:2f:88:28:88:55:ad:46:b5:8d:8e: 99:20:58:9f:61:0c:a6:18:3f:05:53:00:cc:cd:10:bb:f4:63: 64:89:ff:20:dd:3e:30:16:b4:0f:44:26:1d:55:d7:f1:b6:ad: f4:d9:54:a7:be:41:79:2b:ea:fc:a5:8e:63:dd:87:79:18:61: 33:6b:91:a8:4f:56:cf:c6:23:79:cf:d2:1d:25:12:b6:1d:a8: 02:56:47:ab:92:af:1f:d5:10:c8:49:a9:14:77:f4:0b:19:fd: 98:89:5b:51:b8:a1:53:14:47:27:90:ef:93:98:4d:61:3b:19: 2c:c4:36:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICTLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQyMi02ZmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKy/K+8EFinq46nsq/Ni0Hi5Bbsa5ixIm3j4hy62tPh9U4GkPZD8iYfqIqVp 3CjoSC0o5JliO64TdzLmz0CdmNeSc+xPL9BlRtbA/hNJ/Icd2KsX0RXBN6xt6lQr BVAIMWqDJPm7gE/J8MSLe9RbKtMPSOyxoDbINqYZKwBw+0/5TqdH9uiNZAtAoKYL tf27E78aCTKnw1DWAGj7aMBct0CVOeoDyQGHIN42+Qn7ux0wBnNgQ6mZfhnNi3Hd K3EU/kt6aaWDn/TYE74mJqbAwX+f9HEBbdQLwN07+0EbHW4H84NvaK1fOu2ht/WE PZ0fgHtr5q+E7z1hIoImobBKOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLwCRCzJ fKdfRTt5NFXxnc2kNzhuMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzFERTREOUMx RDBFMTFFREE5OTk1OTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnHKwwDQYJKoZIhvcNAQELBQADggEBAGD0K7vCnwYZgxdh +r/f3M0sVkT2w9Tz5J3rGC9eGf0kQ/1sXoL5B6E0PUSAC8ymDk25oopJyQTRbIqK 8BqGABRsOdcEXGdIbx64o8HyvNkQ/zi4vLsJACvNYiwQU0bn4fHjiSHxdVlrhEhk G38xrGGRSik7Duzvw3Gb1P3uPZWsL3nPpT96L4goiFWtRrWNjpkgWJ9hDKYYPwVT AMzNELv0Y2SJ/yDdPjAWtA9EJh1V1/G2rfTZVKe+QXkr6vyljmPdh3kYYTNrkahP Vs/GI3nP0h0lErYdqAJWR6uSrx/VEMhJqRR39AsZ/ZiJW1G4oVMURyeQ75OYTWE7 GSzENtE= -----END CERTIFICATE-----Generated at Mon Oct 20 14:20:45 2025 by rpki-client