$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa File: C4D92628BF0611EC889EE54DC4F9AE02.roa (raw, json) Hash identifier: g3SXB+4AH8ieBzvPvGBIcveBiQwDazEZHnrGmYchbPc= Subject key identifier: 70:94:E2:2F:CE:DC:A9:A8:C6:B4:A4:40:C0:2C:33:CA:DC:FE:49:6C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4E3E Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:57:53 +0000 ROA not before: Thu 28 Aug 2025 14:57:53 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 63736 IP address blocks: 103.207.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20030 (0x4e3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:53 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e71-e864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:75:7b:d9:de:b2:57:cd:ea:b2:12:a3:4b: e9:e1:ba:88:64:b1:9c:4d:2e:d7:c3:5e:74:86:dc: 5e:65:55:36:77:94:96:47:fb:d3:2b:ce:7f:e6:5d: 99:6e:28:a6:0f:92:8f:61:b2:c8:29:30:a4:a8:fd: e0:f1:63:55:d0:25:7b:79:15:e2:29:f5:96:e6:72: a6:7b:4a:d7:8a:50:c7:5f:ca:82:83:a4:a9:22:8e: 8f:db:d3:c0:04:0b:4b:3b:6d:ab:49:76:1c:eb:c0: 31:ea:d0:40:6b:47:52:ba:c7:23:bc:41:17:b8:f5: 70:b3:1f:d9:88:37:b4:11:09:93:e7:28:74:45:25: bc:8e:4a:46:4d:80:a0:68:44:d0:2e:f1:34:d6:bd: 0b:0a:59:1a:f3:e4:0b:a3:e7:97:e1:f2:cc:20:a0: 41:5f:73:b7:cb:94:56:8a:f3:8b:63:ec:74:fe:01: 76:04:9d:6c:b2:c3:3d:11:e3:7f:fa:b8:d9:13:5f: c9:3b:b1:e1:4c:99:af:50:2e:1e:ea:90:5e:d1:3e: 93:82:af:13:4b:8d:1b:9b:3f:10:20:c0:41:90:03: 2b:b1:16:c5:c9:e1:06:ee:7a:39:34:98:ea:48:b2: 73:2b:4e:50:49:9a:43:70:76:73:e8:ea:94:f4:58: 59:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:94:E2:2F:CE:DC:A9:A8:C6:B4:A4:40:C0:2C:33:CA:DC:FE:49:6C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C4D92628BF0611EC889EE54DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.207.32.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:db:56:c3:00:b7:1f:33:60:0f:35:a4:f0:b1:7f:8f:53:4f: 40:66:de:54:be:97:81:74:a0:c4:66:44:bc:63:28:39:70:a7: 3b:8c:9f:a8:fe:86:68:25:65:9f:2a:8c:68:4e:44:4e:39:b2: 03:a8:08:7f:42:20:55:9e:fe:68:2b:25:1f:3f:29:6f:3f:fd: 77:09:f7:e1:cf:83:74:6f:81:7c:4d:65:a8:24:fb:a3:65:8b: d6:4b:ef:73:01:e3:f4:63:2b:fe:e2:c2:2d:2f:6c:53:09:03: 72:12:54:54:ea:dc:a6:1c:4e:07:e3:ff:b3:3a:77:b0:71:1a: 84:a1:5f:8d:bf:5a:24:db:ba:58:b6:3d:aa:78:cf:65:1b:64: f3:a6:65:1e:cc:b9:35:09:2f:ed:81:4a:dc:43:59:ae:c9:f2: 2c:0b:b7:28:b8:10:6a:cf:5a:e7:d3:b7:d7:a1:93:61:b4:df: e2:b7:03:c7:a6:e7:96:2a:26:66:f6:88:4c:9f:76:39:c7:d2: 56:2d:29:b8:bf:bf:e9:d5:6f:50:9e:97:a3:b4:4c:ff:9a:e7: 24:04:e1:2d:a4:fa:02:5f:da:03:a1:60:cc:46:f4:5a:ae:9e: 05:5e:87:03:ee:25:4b:17:b2:8f:c0:d0:e1:8c:73:e4:3a:a8: 80:6c:0e:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICTj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzUzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmU3MS1lODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW51e9neslfN6rISo0vp4bqIZLGcTS7Xw150htxeZVU2d5SWR/vTK85/5l2Z biimD5KPYbLIKTCkqP3g8WNV0CV7eRXiKfWW5nKme0rXilDHX8qCg6SpIo6P29PA BAtLO22rSXYc68Ax6tBAa0dSuscjvEEXuPVwsx/ZiDe0EQmT5yh0RSW8jkpGTYCg aETQLvE01r0LClka8+QLo+eX4fLMIKBBX3O3y5RWivOLY+x0/gF2BJ1sssM9EeN/ +rjZE1/JO7HhTJmvUC4e6pBe0T6Tgq8TS40bmz8QIMBBkAMrsRbFyeEG7no5NJjq SLJzK05QSZpDcHZz6OqU9FhZnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHCU4i/O 3KmoxrSkQMAsM8rc/klsMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzREOTI2MjhC RjA2MTFFQzg4OUVFNTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnzyAwDQYJKoZIhvcNAQELBQADggEBACrbVsMAtx8zYA81 pPCxf49TT0Bm3lS+l4F0oMRmRLxjKDlwpzuMn6j+hmglZZ8qjGhORE45sgOoCH9C IFWe/mgrJR8/KW8//XcJ9+HPg3RvgXxNZagk+6Nli9ZL73MB4/RjK/7iwi0vbFMJ A3ISVFTq3KYcTgfj/7M6d7BxGoShX42/WiTbuli2Pap4z2UbZPOmZR7MuTUJL+2B StxDWa7J8iwLtyi4EGrPWufTt9ehk2G03+K3A8em55YqJmb2iEyfdjnH0lYtKbi/ v+nVb1Cel6O0TP+a5yQE4S2k+gJf2gOhYMxG9FqungVehwPuJUsXso/A0OGMc+Q6 qIBsDtg= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:23 2025 by rpki-client