$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/E76ABE9EB51811EAA9D89B43C4F9AE02.roa File: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (raw, json) Hash identifier: m4UHiwp0JUFTF/BuJBJ638dc3TTaAGAQNXHClFrF1qI= Subject key identifier: 8A:C3:48:BE:1E:0A:FF:2A:B6:93:7E:C0:AD:47:E9:07:E9:80:64:5B Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 08FF Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/E76ABE9EB51811EAA9D89B43C4F9AE02.roa Signing time: Mon 22 Sep 2025 20:42:26 +0000 ROA not before: Mon 22 Sep 2025 20:42:26 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136936 IP address blocks: 103.99.103.0/24 maxlen: 24 2001:df2:5d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: Sep 22 20:42:26 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d1b4b2-f681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:05:87:ae:68:30:8d:73:3f:a3:ca:56:aa: e3:cb:3c:aa:de:66:b0:43:0c:87:8f:c9:68:23:cb: 0c:72:7f:ea:0c:01:f0:b5:a3:fe:c5:4b:91:a8:40: 88:74:49:84:d9:89:2b:38:db:f9:8d:9d:8c:c9:d0: 02:39:eb:ea:4b:2b:e2:ab:75:5c:88:a7:fb:dd:57: 6c:74:5a:51:d6:d2:2b:87:2a:52:14:87:6f:39:3d: a4:46:5b:70:f5:72:48:b4:5a:56:72:47:e8:d0:40: 1a:d5:0b:75:43:1b:1a:c5:2b:13:f5:a4:c6:c8:22: e4:85:c5:d2:2b:8b:e8:63:a3:85:85:3a:25:3e:80: 8e:92:f6:0f:b3:11:a2:49:0d:65:c8:92:68:d4:cf: 5c:71:6c:dd:4e:db:0a:f4:ac:c0:b5:dc:70:b4:bf: ea:f6:f8:79:9f:a4:74:bd:42:b9:c3:d4:c9:c1:c8: 59:fe:9e:cf:50:69:37:2f:a4:4d:59:b0:c1:d8:41: c7:74:fe:ff:df:87:95:0e:a6:d6:94:dd:f4:5b:cb: 31:49:c3:9d:c8:8b:2b:84:23:8b:96:11:70:ea:b2: be:fc:70:68:cf:0b:36:3a:72:59:02:07:c4:6a:b9: fa:e9:2a:1c:1f:87:da:61:33:50:b5:29:8c:3c:27: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C3:48:BE:1E:0A:FF:2A:B6:93:7E:C0:AD:47:E9:07:E9:80:64:5B X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/E76ABE9EB51811EAA9D89B43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.103.0/24 IPv6: 2001:df2:5d00::/48 Signature Algorithm: sha256WithRSAEncryption 0a:ac:bf:6e:a4:dd:5d:2d:a8:5f:f7:86:1c:dc:27:68:58:f4: 96:97:2c:1c:fe:ed:74:0c:b1:54:4b:c8:88:df:5f:0d:5a:ae: d9:a2:c3:b4:b3:40:82:79:b0:1c:74:30:3e:6e:98:1c:a6:5d: 07:98:95:2d:6e:09:4e:56:ae:98:5e:7e:eb:92:d5:49:c2:ec: 5b:95:15:3b:32:b0:69:42:eb:9d:cd:41:7d:20:00:7e:27:89: 4a:36:a4:8e:b7:01:b0:45:78:49:12:5d:dd:67:3e:91:0c:a0: 91:cc:f7:c6:1a:9b:d5:74:5b:57:35:ef:72:49:50:5c:52:07: 46:d5:c8:fc:87:df:bc:7d:4c:ea:e8:3c:f7:1a:f1:08:a0:d6: 86:76:78:52:1b:75:ab:18:ad:7f:cd:e9:d9:75:3f:02:10:72: 37:8d:15:35:af:bc:b3:f5:9e:62:67:6c:6e:a5:5a:ad:bc:cc: a0:8e:ad:fb:4b:08:f6:9e:46:cc:b9:28:2b:1f:f0:7b:74:78: c9:42:11:3a:84:28:71:83:57:ab:17:22:ce:d8:78:9f:9f:84: 84:ee:7c:0e:70:86:88:63:33:40:ae:a6:ee:ef:2f:2f:4b:ae: 9c:57:a3:03:e2:a4:35:24:03:09:e5:6e:ca:ba:c2:ec:3a:51: 0e:26:3f:d3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjUwOTIyMjA0MjI2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxYjRiMi1mNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzm4Fh65oMI1zP6PKVqrjyzyq3mawQwyHj8loI8sMcn/qDAHwtaP+xUuRqECI dEmE2YkrONv5jZ2MydACOevqSyviq3VciKf73VdsdFpR1tIrhypSFIdvOT2kRltw 9XJItFpWckfo0EAa1Qt1QxsaxSsT9aTGyCLkhcXSK4voY6OFhTolPoCOkvYPsxGi SQ1lyJJo1M9ccWzdTtsK9KzAtdxwtL/q9vh5n6R0vUK5w9TJwchZ/p7PUGk3L6RN WbDB2EHHdP7/34eVDqbWlN30W8sxScOdyIsrhCOLlhFw6rK+/HBozws2OnJZAgfE arn66SocH4faYTNQtSmMPCe+UQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIrDSL4e Cv8qtpN+wK1H6QfpgGRbMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUE4RTQvQzQyNUY1MjZCNEY5MTFFQTg1RTYwMDU5QzRGOUFFMDIvRTc2QUJFOUVC NTE4MTFFQUE5RDg5QjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnY2cwDwQCAAIwCQMHACABDfJdADANBgkqhkiG9w0BAQsF AAOCAQEACqy/bqTdXS2oX/eGHNwnaFj0lpcsHP7tdAyxVEvIiN9fDVqu2aLDtLNA gnmwHHQwPm6YHKZdB5iVLW4JTlaumF5+65LVScLsW5UVOzKwaULrnc1BfSAAfieJ SjakjrcBsEV4SRJd3Wc+kQygkcz3xhqb1XRbVzXvcklQXFIHRtXI/IffvH1M6ug8 9xrxCKDWhnZ4Uht1qxitf83p2XU/AhByN40VNa+8s/WeYmdsbqVarbzMoI6t+0sI 9p5GzLkoKx/we3R4yUIROoQocYNXqxcizth4n5+EhO58DnCGiGMzQK6m7u8vL0uu nFejA+KkNSQDCeVuyrrC7DpRDiY/0w== -----END CERTIFICATE-----Generated at Mon Oct 20 22:43:57 2025 by rpki-client