$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/95BB2A1C7E7511F0A9240744C4F9AE02.roa File: 95BB2A1C7E7511F0A9240744C4F9AE02.roa (raw, json) Hash identifier: dA0qOwTL7oqMY9RQlsM/ppq6x3c8mo1aKzhNOakp4RA= Subject key identifier: EC:E6:AE:70:22:E4:5F:9B:13:21:E5:E5:35:7B:7D:BB:F0:EE:D1:F5 Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE Certificate serial: 0100 Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/95BB2A1C7E7511F0A9240744C4F9AE02.roa Signing time: Thu 21 Aug 2025 09:59:54 +0000 ROA not before: Thu 21 Aug 2025 09:59:54 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132384 IP address blocks: 103.76.232.0/22 maxlen: 24 2407:7a80::/42 maxlen: 42 2407:7a80:10::/45 maxlen: 45 2407:7a80:10::/46 maxlen: 46 2407:7a80:10::/47 maxlen: 47 2407:7a80:12::/48 maxlen: 48 2407:7a80:13::/48 maxlen: 48 2407:7a80:14::/48 maxlen: 48 2407:7a80:15::/48 maxlen: 48 2407:7a80:20::/44 maxlen: 44 2407:7a80:20::/45 maxlen: 45 2407:7a80:20::/48 maxlen: 48 2407:7a80:21::/48 maxlen: 48 2407:7a80:22::/48 maxlen: 48 2407:7a80:23::/48 maxlen: 48 2407:7a80:24::/46 maxlen: 46 2407:7a80:28::/48 maxlen: 48 2407:7a80:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE Validity Not Before: Aug 21 09:59:54 2025 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=68a6ee19-46e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:64:d5:2a:c4:0a:59:bb:b0:e2:f3:51:41: f3:f2:91:a1:54:25:10:b8:a1:de:35:21:92:48:05: e4:df:2c:ff:0a:43:6c:26:d9:10:35:0d:e3:75:8a: 33:ae:50:ce:49:77:2e:47:15:68:7f:63:73:3a:2d: 2b:cd:3b:84:18:6c:cf:d4:21:b3:22:db:b7:f1:21: 20:a8:50:7a:c4:81:ce:aa:0e:a2:1f:54:4f:b4:f1: 2c:73:bc:82:38:fe:dd:77:16:d2:8c:15:e7:8f:c0: 4d:f9:65:63:27:c8:01:6a:db:6b:45:fc:75:27:9c: e2:17:81:60:05:f6:7f:9f:62:04:4e:b2:28:53:51: 48:77:99:b0:ab:f7:8c:e9:39:34:f5:89:45:99:30: df:cf:43:9e:06:17:d7:5e:6e:a3:df:a4:a6:5c:c1: 86:d3:d5:be:bf:6b:41:4b:1f:d0:17:f7:02:2b:c1: ce:27:ed:a4:60:32:a3:44:63:aa:ba:bf:c4:d0:95: 72:4c:a4:de:26:23:8e:92:b5:72:f2:22:60:d2:d1: 16:59:27:3f:8d:98:cc:70:5b:f4:d7:48:4b:15:85: 19:16:d6:ec:be:28:a0:e0:31:24:7d:4a:e7:09:10: 54:08:e3:5e:53:5b:18:be:90:d2:a9:9b:97:79:dd: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E6:AE:70:22:E4:5F:9B:13:21:E5:E5:35:7B:7D:BB:F0:EE:D1:F5 X509v3 Authority Key Identifier: keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/95BB2A1C7E7511F0A9240744C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.232.0/22 IPv6: 2407:7a80::/42 Signature Algorithm: sha256WithRSAEncryption 55:5d:d9:c9:3a:d8:b5:d8:e7:4c:82:1d:73:05:19:80:0c:62: 39:de:2d:3f:47:59:1b:59:cc:63:2f:c1:c1:60:76:8c:e5:67: 48:73:ca:8c:56:00:b6:47:f6:ff:a3:8a:50:46:6e:95:11:8b: 8e:54:e1:3f:74:53:21:f4:db:15:a3:65:36:39:a4:31:ca:22: d5:15:e0:2c:93:44:c8:be:fa:e6:11:b0:13:97:5d:f0:0d:de: bb:07:85:7f:db:0f:f9:7f:a5:ed:e0:ac:53:4e:6c:3e:81:1f: 8f:56:3d:47:83:f3:90:6a:d2:94:c5:fc:fc:9b:ed:ea:3d:9b: dc:2e:9f:9d:f0:48:d7:ad:9a:1e:46:1e:8b:5c:a1:0d:84:77: dd:d4:01:6e:95:fa:e8:6f:54:c5:5f:29:3e:7f:57:06:8d:76: ad:07:47:d2:5b:f4:01:be:2b:16:2f:a3:4d:1b:e7:87:b1:8d: da:cb:44:95:9c:0f:9f:a2:05:c4:3f:76:6d:13:90:57:88:f5: 59:a5:62:79:02:08:c7:d3:63:22:74:67:ad:a4:b1:1f:27:ee: 64:96:da:ba:f0:9a:26:32:c3:25:84:6c:d7:13:ef:c4:6a:dd: 02:f7:c7:7c:bc:e6:35:04:6b:64:af:2e:c4:ed:c5:89:28:6a: d0:d3:f2:a9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKDQwQjU1QzFBQzc0MDRDQzA1RjE3NzYzQTk5QkJCMjM4 OUJEMkVBQkUwHhcNMjUwODIxMDk1OTU0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2ZWUxOS00NmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrpk1SrEClm7sOLzUUHz8pGhVCUQuKHeNSGSSAXk3yz/CkNsJtkQNQ3jdYoz rlDOSXcuRxVof2NzOi0rzTuEGGzP1CGzItu38SEgqFB6xIHOqg6iH1RPtPEsc7yC OP7ddxbSjBXnj8BN+WVjJ8gBattrRfx1J5ziF4FgBfZ/n2IETrIoU1FId5mwq/eM 6Tk09YlFmTDfz0OeBhfXXm6j36SmXMGG09W+v2tBSx/QF/cCK8HOJ+2kYDKjRGOq ur/E0JVyTKTeJiOOkrVy8iJg0tEWWSc/jZjMcFv010hLFYUZFtbsviig4DEkfUrn CRBUCONeU1sYvpDSqZuXed3daQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOzmrnAi 5F+bEyHl5TV7fbvw7tH1MB8GA1UdIwQYMBaAFEC1XBrHQEzAXxd2Opm7sjib0uq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC81ODQwQTA3QzEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9RTFZjR3NkQVRNQmZGM1k2bWJ1eU9KdlM2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMVmNHc2RBVE1CZkYzWTZtYnV5T0p2UzZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURENjQvNTg0MEEwN0MxMzRCMTFFRjk0NDI0RDNEQzRGOUFFMDIvOTVCQjJBMUM3 RTc1MTFGMEE5MjQwNzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnTOgwDwQCAAIwCQMHBiQHeoAAADANBgkqhkiG9w0BAQsF AAOCAQEAVV3ZyTrYtdjnTIIdcwUZgAxiOd4tP0dZG1nMYy/BwWB2jOVnSHPKjFYA tkf2/6OKUEZulRGLjlThP3RTIfTbFaNlNjmkMcoi1RXgLJNEyL765hGwE5dd8A3e uweFf9sP+X+l7eCsU05sPoEfj1Y9R4PzkGrSlMX8/Jvt6j2b3C6fnfBI162aHkYe i1yhDYR33dQBbpX66G9UxV8pPn9XBo12rQdH0lv0Ab4rFi+jTRvnh7GN2stElZwP n6IFxD92bROQV4j1WaVieQIIx9NjInRnraSxHyfuZJbauvCaJjLDJYRs1xPvxGrd AvfHfLzmNQRrZK8uxO3FiShq0NPyqQ== -----END CERTIFICATE-----Generated at Sat Aug 23 21:36:15 2025 by rpki-client