$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/84AC17989B0811EDB5FDAF75C4F9AE02.roa File: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (raw, json) Hash identifier: eX92U/H+ZCVecCeGgTVqWhOCqzFSaTsYmsLKYsy4M8s= Subject key identifier: 9D:20:CB:C4:61:2D:EB:7C:BB:18:1B:7A:9C:63:8B:4B:0D:83:CF:F9 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0B90 Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/84AC17989B0811EDB5FDAF75C4F9AE02.roa Signing time: Fri 12 Sep 2025 19:29:23 +0000 ROA not before: Fri 12 Sep 2025 19:29:23 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136978 IP address blocks: 103.101.48.0/24 maxlen: 24 103.101.49.0/24 maxlen: 24 2401:ca40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2960 (0xb90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Sep 12 19:29:23 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c47493-6c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:18:16:27:6e:54:4f:44:e4:3c:8a:5a:4a: e1:07:5f:40:8e:1e:5d:26:37:3d:3d:a5:a6:51:15: ee:35:49:92:de:da:d1:a2:56:b2:d6:b8:03:58:59: a9:2a:e6:66:b5:38:2d:c8:9a:ea:c1:ff:45:36:89: 94:6a:41:99:72:3a:58:03:6e:3c:74:5a:6e:63:2c: 8d:fa:ef:1e:2c:80:5b:a9:77:7e:88:5b:88:8d:27: cc:d0:17:60:fe:ba:92:46:14:e3:9b:e2:87:41:86: e2:46:2c:dd:b7:36:d0:59:c4:e5:9f:86:4c:bd:8d: 48:8a:12:31:5a:90:0c:29:38:b2:fa:41:ac:91:55: 16:55:35:4a:66:4b:c2:da:ce:a1:58:23:2b:c5:72: 21:e7:bb:ee:54:f7:a1:ee:6e:0a:db:d7:cf:cb:7a: 2e:68:d2:1a:2b:c1:30:4a:d8:bd:48:16:4f:ea:0c: cd:52:ea:be:a0:54:6d:87:aa:de:92:12:cb:13:33: 13:94:2a:0a:54:07:90:ff:b6:68:78:83:14:33:d5: 0f:a1:de:81:be:49:44:a2:a0:d6:0f:f5:1b:d7:56: c6:2d:3d:87:a7:e6:ff:7b:bf:8c:d5:15:43:63:1d: 1a:6f:39:a3:31:4e:d8:a3:76:cf:dc:f0:4e:00:48: 66:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:20:CB:C4:61:2D:EB:7C:BB:18:1B:7A:9C:63:8B:4B:0D:83:CF:F9 X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/84AC17989B0811EDB5FDAF75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.48.0/23 IPv6: 2401:ca40::/32 Signature Algorithm: sha256WithRSAEncryption c1:45:bb:9a:05:65:9d:dc:1d:18:71:6b:fb:de:b6:2e:3b:d0: 21:b4:c6:5d:a6:5c:fa:09:2b:4c:ee:08:78:c7:63:76:27:57: ad:19:66:f1:46:04:fe:14:bf:bc:1c:6b:70:5d:be:f0:c8:05: d7:e5:1f:69:d0:d4:ed:c3:9a:ca:f1:7a:57:87:ba:43:f5:f5: 0b:13:a9:5a:87:4d:29:ee:cc:78:da:41:b9:d8:ad:5f:a3:18: c9:46:e4:56:41:e0:82:d3:44:fe:17:c1:05:cc:82:e3:40:be: 7d:58:36:af:e6:de:9f:76:43:94:9b:90:9b:ed:00:2b:4c:5c: 00:00:1d:94:77:ac:28:7e:a9:ac:9c:c9:b6:53:5e:0a:d7:ef: 42:c3:8b:14:24:b1:28:e6:1e:53:38:02:39:44:29:5f:da:d1: dc:d2:5a:38:bd:0d:b8:fa:fb:37:4b:06:13:2d:52:91:ea:5b: c1:91:5d:cc:ca:e7:bb:88:93:32:bb:96:78:04:4e:cd:c5:be: 0e:2e:c8:2d:99:05:00:bf:1f:4d:66:cf:38:d9:d8:1b:3f:c5: 4e:de:17:c4:0c:6a:3a:ce:a8:ec:33:86:5a:4e:bb:31:e6:24: 93:4b:80:48:1f:07:35:5b:36:e3:bc:ca:a1:f8:ea:81:dc:7b: e8:71:01:31 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjUwOTEyMTkyOTIzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM0NzQ5My02YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfUYFiduVE9E5DyKWkrhB19Ajh5dJjc9PaWmURXuNUmS3trRolay1rgDWFmp KuZmtTgtyJrqwf9FNomUakGZcjpYA248dFpuYyyN+u8eLIBbqXd+iFuIjSfM0Bdg /rqSRhTjm+KHQYbiRizdtzbQWcTln4ZMvY1IihIxWpAMKTiy+kGskVUWVTVKZkvC 2s6hWCMrxXIh57vuVPeh7m4K29fPy3ouaNIaK8EwSti9SBZP6gzNUuq+oFRth6re khLLEzMTlCoKVAeQ/7ZoeIMUM9UPod6BvklEoqDWD/Ub11bGLT2Hp+b/e7+M1RVD Yx0abzmjMU7Yo3bP3PBOAEhmTwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJ0gy8Rh Let8uxgbepxji0sNg8/5MB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU2RjAvN0Q2N0U0RDQzODRDMTFFQUJFQTJEQjcxQzRGOUFFMDIvODRBQzE3OTg5 QjA4MTFFREI1RkRBRjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnZTAwDQQCAAIwBwMFACQBykAwDQYJKoZIhvcNAQELBQAD ggEBAMFFu5oFZZ3cHRhxa/veti470CG0xl2mXPoJK0zuCHjHY3YnV60ZZvFGBP4U v7wca3BdvvDIBdflH2nQ1O3DmsrxeleHukP19QsTqVqHTSnuzHjaQbnYrV+jGMlG 5FZB4ILTRP4XwQXMguNAvn1YNq/m3p92Q5SbkJvtACtMXAAAHZR3rCh+qaycybZT XgrX70LDixQksSjmHlM4AjlEKV/a0dzSWji9Dbj6+zdLBhMtUpHqW8GRXczK57uI kzK7lngETs3Fvg4uyC2ZBQC/H01mzzjZ2Bs/xU7eF8QMajrOqOwzhlpOuzHmJJNL gEgfBzVbNuO8yqH46oHce+hxATE= -----END CERTIFICATE-----Generated at Mon Oct 20 17:07:29 2025 by rpki-client