$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/09664BCE144D11EBA0AF3555C4F9AE02.roa File: 09664BCE144D11EBA0AF3555C4F9AE02.roa (raw, json) Hash identifier: R46kSRwUPT0o0L3SeYvTpp+6+QBHFN3Gx97bjF86iSQ= Subject key identifier: 88:C5:66:CF:A5:B0:7D:3B:20:9D:B1:E6:83:10:FD:B7:99:EC:5D:BB Certificate issuer: /CN=A91B6395/serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Certificate serial: 07C5 Authority key identifier: E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/09664BCE144D11EBA0AF3555C4F9AE02.roa Signing time: Thu 02 Oct 2025 21:51:17 +0000 ROA not before: Thu 02 Oct 2025 21:51:17 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 23930 IP address blocks: 103.140.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1989 (0x7c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6395, serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Validity Not Before: Oct 2 21:51:17 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68def3d5-baa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:7a:14:32:4b:fd:c0:e5:f0:af:f5:ce:4f: 67:c2:e4:6d:97:42:d1:79:d3:ef:22:f7:29:ca:88: 7b:c7:0d:10:1e:f2:17:f6:bf:1e:ff:2d:ee:42:80: 3f:e6:6d:cb:df:4e:6f:16:13:6c:31:dd:74:6e:b6: f2:fc:73:b1:c0:c2:64:dd:82:bb:7f:28:95:98:e4: 11:85:35:1f:e5:27:5e:5c:3c:fa:7a:c4:59:89:31: 50:2e:ae:da:2f:4b:bf:90:66:db:a5:a1:85:ca:8f: a1:ad:99:96:d7:0a:8e:1e:22:ca:df:63:bd:30:1d: 8d:bd:e8:36:bc:d1:23:a1:f9:79:58:9d:0e:89:ef: 9f:28:90:a9:18:5c:ba:cc:4a:54:28:09:be:91:e5: ed:e4:49:40:98:ac:e4:86:90:3b:44:4c:e3:99:b7: 0d:4b:cf:2a:3f:ca:55:e2:9d:68:58:fa:46:00:c6: 32:78:38:27:65:4c:7c:63:fc:03:51:6b:ac:00:ab: 08:75:90:94:27:05:36:b8:5d:ab:1a:b8:40:21:5b: 61:9f:14:86:e3:41:41:48:38:02:a0:a3:36:45:17: 41:f2:63:0a:fc:39:1b:8e:97:76:a5:dd:cb:b6:4f: c7:d5:34:ee:b0:8b:bb:0e:4c:a5:3c:56:78:69:6b: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C5:66:CF:A5:B0:7D:3B:20:9D:B1:E6:83:10:FD:B7:99:EC:5D:BB X509v3 Authority Key Identifier: keyid:E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/09664BCE144D11EBA0AF3555C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.227.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:29:83:0b:15:00:61:8c:a1:58:dc:05:12:d3:7f:90:7c:f5: a1:ec:c8:08:12:22:98:22:cf:80:7e:cf:72:61:9c:46:c6:ea: 1b:4f:95:84:82:7e:2e:52:19:f8:22:a8:ac:b3:67:b0:93:f1: 5b:ba:ba:48:35:fa:e3:e9:d3:8c:a8:08:4a:ae:aa:75:2b:a0: 4f:d2:fb:fe:f5:64:b5:3f:8b:a1:75:d6:1d:51:de:66:f3:88: bf:7a:64:49:5c:63:23:d1:64:a4:36:19:ed:74:cc:c5:2d:59: 3f:3f:97:4d:9f:5c:47:a0:73:dd:c7:fa:d7:6a:d7:8d:1a:4c: 5f:04:be:91:e6:65:8b:85:84:f6:9c:ec:24:71:11:e4:50:5d: b8:33:56:90:1c:f0:3a:ad:76:d2:3d:5a:63:50:22:39:a6:54: 62:9e:c7:39:cc:d6:a3:0f:76:a0:80:77:f4:7c:75:f6:db:cb: a7:96:de:af:80:24:d2:57:38:93:f1:c2:0d:f0:aa:3b:fa:47: 99:ac:29:af:30:81:13:66:ce:8f:3e:38:3e:e2:e4:f2:ce:84: d1:a3:f1:87:f0:2b:9b:47:b4:f0:73:41:7f:d4:b8:07:af:5e: d5:7b:77:3f:a6:89:89:f6:31:18:7d:4d:ed:aa:24:b1:e3:09: 28:a3:b5:e9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYzOTUxMTAvBgNVBAUTKEU2QUNGNEY1OTRBNDQzOEY4OTdBRURBQUI0QTNEMzhD ODY1Q0NFMjIwHhcNMjUxMDAyMjE1MTE3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlZjNkNS1iYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWh6FDJL/cDl8K/1zk9nwuRtl0LRedPvIvcpyoh7xw0QHvIX9r8e/y3uQoA/ 5m3L305vFhNsMd10brby/HOxwMJk3YK7fyiVmOQRhTUf5SdeXDz6esRZiTFQLq7a L0u/kGbbpaGFyo+hrZmW1wqOHiLK32O9MB2Nveg2vNEjofl5WJ0Oie+fKJCpGFy6 zEpUKAm+keXt5ElAmKzkhpA7REzjmbcNS88qP8pV4p1oWPpGAMYyeDgnZUx8Y/wD UWusAKsIdZCUJwU2uF2rGrhAIVthnxSG40FBSDgCoKM2RRdB8mMK/Dkbjpd2pd3L tk/H1TTusIu7DkylPFZ4aWulFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIjFZs+l sH07IJ2x5oMQ/beZ7F27MB8GA1UdIwQYMBaAFOas9PWUpEOPiXrtqrSj04yGXM4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjM5NS9EQzQ1NjU3ODE0 NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0LUpldTJxdEtQVGpJWmN6 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVxejA5WlNrUTQtSmV1MnF0S1BUaklaY3ppSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYzOTUvREM0NTY1NzgxNDRBMTFFQjk0MDc2NjUyQzRGOUFFMDIvMDk2NjRCQ0Ux NDREMTFFQkEwQUYzNTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnjOMwDQYJKoZIhvcNAQELBQADggEBABspgwsVAGGMoVjc BRLTf5B89aHsyAgSIpgiz4B+z3JhnEbG6htPlYSCfi5SGfgiqKyzZ7CT8Vu6ukg1 +uPp04yoCEquqnUroE/S+/71ZLU/i6F11h1R3mbziL96ZElcYyPRZKQ2Ge10zMUt WT8/l02fXEegc93H+tdq140aTF8EvpHmZYuFhPac7CRxEeRQXbgzVpAc8DqtdtI9 WmNQIjmmVGKexznM1qMPdqCAd/R8dfbby6eW3q+AJNJXOJPxwg3wqjv6R5msKa8w gRNmzo8+OD7i5PLOhNGj8YfwK5tHtPBzQX/UuAevXtV7dz+miYn2MRh9Te2qJLHj CSijtek= -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:04 2025 by rpki-client