$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa File: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (raw, json) Hash identifier: OQ/guaL+54MthYgFWH5vV+2qqkhoKOGTMDARqMovmDI= Subject key identifier: 80:9A:5C:CB:F1:4A:E7:14:66:41:9E:46:9E:7A:7C:35:AB:E6:9D:74 Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: C0 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa Signing time: Sun 07 Sep 2025 06:43:27 +0000 ROA not before: Sun 07 Sep 2025 06:43:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 8796 IP address blocks: 103.110.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Sep 7 06:43:27 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68bd298f-0a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:f4:b4:38:4a:19:15:aa:67:94:e7:a7:39: ea:de:06:ab:51:1b:26:1c:cb:b6:67:3b:e0:16:c9: d7:21:35:d9:12:36:0d:ff:d9:23:72:d9:29:d6:91: 51:bc:61:2d:fe:32:c0:cd:2b:83:59:2c:ff:12:14: de:b7:93:68:bb:02:14:13:d8:f1:d5:85:82:8d:57: 98:24:9c:ca:50:34:2c:60:30:9e:fa:17:c3:09:00: c7:3e:de:47:eb:cc:6a:9f:d4:85:37:16:7b:19:20: 7f:e4:b1:db:53:35:c6:f8:83:19:5f:b3:c6:cb:3f: 06:2d:b8:a1:e6:20:66:9f:72:f8:d8:c4:3d:11:f0: 9b:29:e6:92:13:34:f0:2d:72:e1:fe:66:41:d7:6e: 6b:82:04:eb:24:c9:66:48:9a:ca:d1:d1:95:26:bc: 94:75:43:5a:3f:2b:b7:06:25:88:3f:fd:bb:3e:68: 91:2d:7b:f8:27:04:be:c3:68:c5:d4:18:77:3d:89: 76:e5:ef:29:2b:1b:37:6f:c7:c3:23:bf:52:ba:8f: e2:db:9c:1b:d7:34:21:1a:30:32:c7:ca:21:fa:6e: f1:76:13:6f:5e:9e:6b:10:86:2d:33:e8:60:50:fa: bf:45:8b:d0:16:93:5e:eb:e5:96:85:fa:df:7c:dd: 99:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9A:5C:CB:F1:4A:E7:14:66:41:9E:46:9E:7A:7C:35:AB:E6:9D:74 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.220.0/23 Signature Algorithm: sha256WithRSAEncryption 85:9f:a2:01:c6:99:3e:ba:08:2f:0e:f3:6f:72:57:60:ef:46: b8:b2:40:98:67:da:fb:37:88:49:2d:d2:d9:be:55:80:4b:d4: 89:eb:02:47:fc:ad:5e:d0:75:f7:ab:22:ef:1b:9a:35:4d:bb: 16:8e:b5:a0:8e:6e:8b:c8:26:b4:9b:e6:b9:f3:85:ba:ae:c7: 29:09:ff:f3:82:60:e0:0a:0b:64:8c:ca:c1:d3:68:48:24:08: 5d:01:89:74:20:e2:f7:ab:21:ad:3b:57:c2:72:b5:22:62:9f: 4f:fe:bb:0f:b1:e9:1c:50:a1:24:bc:76:63:d6:56:a5:3c:be: 28:e3:0e:c6:50:de:b6:13:2b:eb:33:10:5f:90:2f:2d:a9:28: 43:f7:eb:2e:d2:87:18:20:82:27:30:18:f4:7b:e8:30:d6:15: 99:24:a5:f3:7b:52:9c:be:c8:fa:de:40:23:2b:07:e3:bf:b2: ce:77:4a:37:4d:35:2d:2a:02:ba:f2:e0:9d:e7:d9:e5:a1:97: 9f:79:ad:24:e6:56:1d:6a:73:3a:b1:31:28:cb:58:87:69:b7: 16:a0:d8:e1:7a:76:5e:f8:95:0a:d2:35:cf:0a:2f:d6:25:bc: 9e:12:b5:79:56:47:2c:2c:b0:35:42:45:e0:1b:9c:f0:b7:55: 78:02:2c:38 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUwOTA3MDY0MzI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJkMjk4Zi0wYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7/0tDhKGRWqZ5Tnpznq3garURsmHMu2ZzvgFsnXITXZEjYN/9kjctkp1pFR vGEt/jLAzSuDWSz/EhTet5NouwIUE9jx1YWCjVeYJJzKUDQsYDCe+hfDCQDHPt5H 68xqn9SFNxZ7GSB/5LHbUzXG+IMZX7PGyz8GLbih5iBmn3L42MQ9EfCbKeaSEzTw LXLh/mZB125rggTrJMlmSJrK0dGVJryUdUNaPyu3BiWIP/27PmiRLXv4JwS+w2jF 1Bh3PYl25e8pKxs3b8fDI79Suo/i25wb1zQhGjAyx8oh+m7xdhNvXp5rEIYtM+hg UPq/RYvQFpNe6+WWhfrffN2Z1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFICaXMvx SucUZkGeRp56fDWr5p10MB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNCNEMvREM5REUyOEU4QzUwMTFFRkEwNjdDODE1QzRGOUFFMDIvMkZFN0I3RTY1 MDBEMTFGMEIxOEQ3Mzc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnbtwwDQYJKoZIhvcNAQELBQADggEBAIWfogHGmT66CC8O 829yV2DvRriyQJhn2vs3iEkt0tm+VYBL1InrAkf8rV7QdferIu8bmjVNuxaOtaCO bovIJrSb5rnzhbquxykJ//OCYOAKC2SMysHTaEgkCF0BiXQg4verIa07V8JytSJi n0/+uw+x6RxQoSS8dmPWVqU8vijjDsZQ3rYTK+szEF+QLy2pKEP36y7Shxgggicw GPR76DDWFZkkpfN7Upy+yPreQCMrB+O/ss53SjdNNS0qArry4J3n2eWhl595rSTm Vh1qczqxMSjLWIdptxag2OF6dl74lQrSNc8KL9YlvJ4StXlWRywssDVCReAbnPC3 VXgCLDg= -----END CERTIFICATE-----Generated at Sun Oct 19 21:13:13 2025 by rpki-client