$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CE988D80FB7311EC97CD7F85C4F9AE02.roa File: CE988D80FB7311EC97CD7F85C4F9AE02.roa (raw, json) Hash identifier: khj0U83Oh0MV75Awop79+WdRP+WJETqec/zA5LVnzro= Subject key identifier: 1B:DA:20:BA:58:E9:B3:94:11:D8:9C:91:47:DE:58:BE:B0:74:01:E9 Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 0577 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CE988D80FB7311EC97CD7F85C4F9AE02.roa Signing time: Fri 03 Oct 2025 08:22:09 +0000 ROA not before: Fri 03 Oct 2025 08:22:09 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 395092 IP address blocks: 43.230.160.0/22 maxlen: 24 103.20.234.0/23 maxlen: 24 103.27.132.0/23 maxlen: 23 103.27.134.0/23 maxlen: 23 103.159.64.0/23 maxlen: 24 117.55.192.0/23 maxlen: 24 203.96.176.0/22 maxlen: 24 210.16.64.0/22 maxlen: 24 2406:cb40::/48 maxlen: 48 2406:cb40:1::/48 maxlen: 48 2406:cb41::/48 maxlen: 48 2406:cb42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Oct 3 08:22:09 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68df87b1-d9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:2c:93:e5:8d:5d:77:b9:0f:d8:3d:d2:c6: 8b:f2:c0:49:7e:fe:57:03:41:e5:c8:d6:60:8b:13: fb:a9:51:d8:9f:00:c4:4a:c2:7c:9b:9a:f7:00:af: 58:94:ee:8a:79:8e:83:04:e0:36:73:c5:4f:23:41: 62:29:9b:ef:0d:a0:e1:da:b8:6e:bf:d7:ae:42:f8: 55:d6:b2:85:0a:b0:4c:ce:05:54:7b:ab:be:5b:da: 12:14:b2:8e:bd:3d:2f:b9:ba:98:9e:b5:66:f0:43: 32:da:6b:8e:88:ec:0f:00:66:06:6a:37:94:84:ce: 0c:a7:6c:4b:4c:cb:5f:51:ab:a7:51:30:4e:94:83: 93:e0:9d:e3:7e:b0:6c:b9:8c:75:69:f0:fa:06:73: cd:12:b9:a7:1c:77:be:4f:18:13:27:48:26:77:97: 6f:fe:a2:02:e4:10:cf:4d:5d:3c:b4:c0:5d:49:fc: 65:f1:4b:d8:48:e3:72:cb:ca:03:14:77:c9:40:3a: a9:d4:34:ec:48:74:93:ea:42:d6:48:d9:17:b2:e0: 6e:54:b8:18:38:cc:d6:87:89:a0:67:ab:19:35:46: 66:fa:cc:e6:91:71:a4:d9:47:e1:b5:f0:97:5a:1b: 67:53:d7:ec:0c:bc:47:78:12:37:08:1f:e5:86:af: 46:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DA:20:BA:58:E9:B3:94:11:D8:9C:91:47:DE:58:BE:B0:74:01:E9 X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CE988D80FB7311EC97CD7F85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.160.0/22 103.20.234.0/23 103.27.132.0/22 103.159.64.0/23 117.55.192.0/23 203.96.176.0/22 210.16.64.0/22 IPv6: 2406:cb40::/47 2406:cb41::/48 2406:cb42::/48 Signature Algorithm: sha256WithRSAEncryption 08:e4:5a:74:6b:8f:4f:a6:9d:53:5a:2e:8f:8d:15:c5:88:16: 62:c6:6b:38:08:8b:86:48:7e:3a:a9:83:fa:94:59:01:f6:b5: 05:2c:19:ba:74:76:c9:f2:77:46:94:19:d1:23:55:ca:81:b5: 68:cd:e3:72:a2:c5:0a:d9:69:40:81:ce:e2:72:00:09:05:82: b1:42:ad:13:99:65:3f:be:e3:21:16:77:cb:89:12:3b:5f:b1: 01:f1:54:5a:b0:0d:f1:d4:25:4d:b6:1c:03:01:21:c7:3d:b6: 40:ea:00:4a:7a:3c:94:86:ce:3a:57:0f:b1:59:bc:2b:f3:18: 39:09:0a:1e:00:fc:76:b1:04:35:a0:43:98:fb:ae:b5:95:75: 43:62:6c:c5:80:a5:93:a0:b0:3a:30:7f:df:70:56:ce:c3:b4: f8:16:2a:1e:17:b7:c0:62:61:99:ad:dc:37:3a:e1:d7:f5:dc: 5e:7e:51:5a:38:8f:42:99:41:8b:84:ee:c1:96:64:47:42:61: 92:9a:67:1f:db:f9:0e:8f:80:dd:15:ac:5b:91:2a:37:a2:eb: 69:7f:d3:fe:54:e8:57:97:6b:00:be:5d:2e:50:04:49:ca:bc: 57:60:1d:6d:de:59:ac:7f:e7:8d:a6:b2:7f:e8:85:90:a2:82: ce:e1:c3:08 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjUxMDAzMDgyMjA5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRmODdiMS1kOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuosk+WNXXe5D9g90saL8sBJfv5XA0HlyNZgixP7qVHYnwDESsJ8m5r3AK9Y lO6KeY6DBOA2c8VPI0FiKZvvDaDh2rhuv9euQvhV1rKFCrBMzgVUe6u+W9oSFLKO vT0vubqYnrVm8EMy2muOiOwPAGYGajeUhM4Mp2xLTMtfUaunUTBOlIOT4J3jfrBs uYx1afD6BnPNErmnHHe+TxgTJ0gmd5dv/qIC5BDPTV08tMBdSfxl8UvYSONyy8oD FHfJQDqp1DTsSHST6kLWSNkXsuBuVLgYOMzWh4mgZ6sZNUZm+szmkXGk2UfhtfCX WhtnU9fsDLxHeBI3CB/lhq9GwwIDAQABo4IC3DCCAtgwHQYDVR0OBBYEFBvaILpY 6bOUEdickUfeWL6wdAHpMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNENzIvNDU3NkE2NzIyNjEyMTFFQ0I5MzE5OTQyQzRGOUFFMDIvQ0U5ODhEODBG QjczMTFFQzk3Q0Q3Rjg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZgYIKwYBBQUHAQcBAf8E VzBVMDAEAgABMCoDBAIr5qADBAFnFOoDBAJnG4QDBAFnn0ADBAF1N8ADBALLYLAD BALSEEAwIQQCAAIwGwMHASQGy0AAAAMHACQGy0EAAAMHACQGy0IAADANBgkqhkiG 9w0BAQsFAAOCAQEACORadGuPT6adU1ouj40VxYgWYsZrOAiLhkh+OqmD+pRZAfa1 BSwZunR2yfJ3RpQZ0SNVyoG1aM3jcqLFCtlpQIHO4nIACQWCsUKtE5llP77jIRZ3 y4kSO1+xAfFUWrAN8dQlTbYcAwEhxz22QOoASno8lIbOOlcPsVm8K/MYOQkKHgD8 drEENaBDmPuutZV1Q2JsxYClk6CwOjB/33BWzsO0+BYqHhe3wGJhma3cNzrh1/Xc Xn5RWjiPQplBi4TuwZZkR0JhkppnH9v5Do+A3RWsW5EqN6LraX/T/lToV5drAL5d LlAEScq8V2Adbd5ZrH/njaayf+iFkKKCzuHDCA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:12:54 2025 by rpki-client