$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/C8FB0DB8616D11EB928F0250C4F9AE02.roa File: C8FB0DB8616D11EB928F0250C4F9AE02.roa (raw, json) Hash identifier: lKS3o3ulScSFpZae2wNxVd1Zi3XsGitxWFugMmnXO+Q= Subject key identifier: 10:66:A4:49:1A:76:DF:20:2C:57:03:82:EE:C0:26:50:55:89:0C:B3 Certificate issuer: /CN=A91B3062/serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Certificate serial: 0702 Authority key identifier: E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/C8FB0DB8616D11EB928F0250C4F9AE02.roa Signing time: Thu 16 Oct 2025 23:33:34 +0000 ROA not before: Thu 16 Oct 2025 23:33:34 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141231 IP address blocks: 103.156.222.0/23 maxlen: 23 103.156.222.0/24 maxlen: 24 103.156.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1794 (0x702) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3062, serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Validity Not Before: Oct 16 23:33:34 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f180ce-9472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:56:f0:66:68:bf:e4:ae:3a:94:19:f8:05: e5:2c:37:26:f4:65:b7:53:78:93:74:74:f6:ba:1a: 82:f1:c9:f5:ac:e3:00:e8:a6:d4:a6:49:0a:af:34: 90:67:5f:46:76:f9:4a:f0:4d:b5:3c:49:ea:7f:2a: 39:94:9d:35:63:4b:39:6f:a8:60:0c:5f:42:69:e7: a0:98:fc:d3:9e:47:4b:96:35:02:3f:2a:d9:0f:1e: 7b:b8:db:0d:ec:1f:6a:67:eb:6d:7d:de:ef:c1:9a: 13:d0:71:98:02:d3:70:51:5b:9a:39:2e:63:de:2e: 7c:4b:51:80:44:3c:ba:f8:4b:ce:5c:35:20:5d:f2: 02:77:03:a3:42:36:bb:6e:f4:18:8a:6d:17:94:9c: 03:57:2d:32:03:99:b2:82:d3:02:c2:35:65:85:b6: bb:eb:1f:44:60:19:f5:1b:f4:8a:2d:47:93:74:9b: 5b:73:24:e1:e8:c7:fa:ba:d0:59:c6:37:89:aa:a1: 93:4d:9a:d1:79:08:20:96:ee:10:89:07:a3:42:2d: 08:55:1a:1f:d8:ba:a1:6f:4e:8b:94:18:cc:fc:df: 14:b9:7a:c1:4e:1b:d5:57:8c:63:73:aa:c9:cc:a0: 42:27:8a:7b:6d:22:4b:7b:35:9c:93:16:b2:37:a9: bc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:66:A4:49:1A:76:DF:20:2C:57:03:82:EE:C0:26:50:55:89:0C:B3 X509v3 Authority Key Identifier: keyid:E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/C8FB0DB8616D11EB928F0250C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.222.0/23 Signature Algorithm: sha256WithRSAEncryption 90:1c:82:a7:69:33:92:c1:f1:30:34:91:7e:36:49:b4:87:94: 58:cb:18:f7:92:e8:aa:4f:2a:8a:35:d0:fc:60:94:a1:8a:4d: 88:54:f5:c9:42:e9:de:52:66:d5:e8:9b:8b:b2:11:9b:5d:f2: ce:47:20:4a:60:54:e7:73:a2:90:68:14:db:79:9f:d2:68:be: 90:22:92:42:77:27:ea:fe:58:df:14:47:b5:fe:52:b1:b4:fb: b1:3c:17:70:fb:29:a1:1f:39:86:c9:95:ad:eb:89:6c:2a:43: 82:7d:d7:f7:e7:a9:d2:8c:c0:aa:92:80:dd:e4:05:80:46:5c: d0:82:95:56:e5:5c:58:08:1a:6c:35:dd:98:0f:97:42:d4:de: 74:fe:31:ea:59:e2:19:f3:72:f3:65:12:47:bf:d7:b7:8e:d2: 92:32:24:1e:0b:b5:93:78:7c:dc:5e:97:00:67:38:f1:99:5a: 60:f9:a2:93:09:bf:30:17:92:e6:c6:62:ec:7f:79:26:57:24: a1:11:37:dd:99:d3:19:2d:76:b5:fc:e0:94:a2:fd:9c:4d:1a: 91:e1:6b:4b:21:37:7d:6f:10:e5:1a:1e:cf:ee:50:7b:67:34: b8:02:32:ec:1d:ed:3c:68:ce:e7:52:32:96:7e:35:26:32:ad: f8:e9:10:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwNjIxMTAvBgNVBAUTKEU0NDY1OUVBNkZEQ0QzNDNDNkMxRTdGRkQwMTRBNUIw NzgxODk2OEIwHhcNMjUxMDE2MjMzMzM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYxODBjZS05NDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+dW8GZov+SuOpQZ+AXlLDcm9GW3U3iTdHT2uhqC8cn1rOMA6KbUpkkKrzSQ Z19GdvlK8E21PEnqfyo5lJ01Y0s5b6hgDF9CaeegmPzTnkdLljUCPyrZDx57uNsN 7B9qZ+ttfd7vwZoT0HGYAtNwUVuaOS5j3i58S1GARDy6+EvOXDUgXfICdwOjQja7 bvQYim0XlJwDVy0yA5mygtMCwjVlhba76x9EYBn1G/SKLUeTdJtbcyTh6Mf6utBZ xjeJqqGTTZrReQgglu4QiQejQi0IVRof2Lqhb06LlBjM/N8UuXrBThvVV4xjc6rJ zKBCJ4p7bSJLezWckxayN6m8DQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBBmpEka dt8gLFcDgu7AJlBViQyzMB8GA1UdIwQYMBaAFORGWepv3NNDxsHn/9AUpbB4GJaL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA2Mi85ODgwODlFNDYx NkIxMUVCQTY0Nzg3NEFDNEY5QUUwMi81RVpaNm1fYzAwUEd3ZWZfMEJTbHNIZ1ls b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFWlo2bV9jMDBQR3dlZl8wQlNsc0hnWWxvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjMwNjIvOTg4MDg5RTQ2MTZCMTFFQkE2NDc4NzRBQzRGOUFFMDIvQzhGQjBEQjg2 MTZEMTFFQjkyOEYwMjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnN4wDQYJKoZIhvcNAQELBQADggEBAJAcgqdpM5LB8TA0 kX42SbSHlFjLGPeS6KpPKoo10PxglKGKTYhU9clC6d5SZtXom4uyEZtd8s5HIEpg VOdzopBoFNt5n9JovpAikkJ3J+r+WN8UR7X+UrG0+7E8F3D7KaEfOYbJla3riWwq Q4J91/fnqdKMwKqSgN3kBYBGXNCClVblXFgIGmw13ZgPl0LU3nT+MepZ4hnzcvNl Eke/17eO0pIyJB4LtZN4fNxelwBnOPGZWmD5opMJvzAXkubGYux/eSZXJKERN92Z 0xktdrX84JSi/ZxNGpHha0shN31vEOUaHs/uUHtnNLgCMuwd7TxozudSMpZ+NSYy rfjpELc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:18:26 2025 by rpki-client