$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/98B1A08E256211EEB175EF31C4F9AE02.roa File: 98B1A08E256211EEB175EF31C4F9AE02.roa (raw, json) Hash identifier: f/XfH+fCVff7PA8nldVD7NmbtLtb1i0+sniLXngDEPo= Subject key identifier: BA:91:12:F5:E0:A8:BA:2C:13:F7:6E:DA:55:87:4A:19:E8:F9:9D:6A Certificate issuer: /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB Certificate serial: 0191 Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/98B1A08E256211EEB175EF31C4F9AE02.roa Signing time: Mon 01 Sep 2025 03:50:23 +0000 ROA not before: Mon 01 Sep 2025 03:50:23 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 141723 IP address blocks: 103.239.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB Validity Not Before: Sep 1 03:50:23 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b517fe-8020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bd:3a:96:a0:dc:e1:ae:8f:42:aa:5f:a4:f9: 0b:8f:41:19:c2:c3:c4:bf:85:de:40:95:57:b7:bd: cc:1e:e3:52:a7:d1:e1:cf:48:ea:dc:81:16:39:68: 07:a5:79:cf:a7:c9:8e:8f:ba:02:20:f4:6c:fa:cd: 5e:6a:cd:08:ad:74:03:a1:6f:39:23:43:ae:dd:20: 90:3b:07:cf:f6:2c:9d:48:89:cb:48:f5:51:d6:e6: d8:e1:58:9d:81:75:13:d1:8f:4e:50:ff:05:0c:42: bd:d2:ed:24:c3:b3:cc:5a:cd:1b:ac:51:5a:9e:52: 85:65:3f:2c:86:8d:9f:6b:b7:31:55:be:ea:b4:56: 81:ae:e4:a6:dc:07:c5:2a:03:08:cb:17:f5:b1:ed: 52:55:c0:b7:05:ce:23:f8:e9:2d:75:39:c6:4e:10: b9:8e:80:8a:40:f0:a2:06:bc:67:51:48:b4:e1:61: 9c:f7:b0:10:a7:ea:e1:69:bb:c1:d9:d8:1b:a9:94: f0:9d:ef:38:13:3f:ab:ea:17:a8:df:ae:85:17:6c: be:29:92:b6:24:a0:56:6d:03:5e:1e:f4:03:ab:8b: bb:9e:e5:47:b9:cd:d5:08:97:3b:1e:38:e5:ff:35: f4:d7:24:62:4a:19:b0:d9:e7:09:7e:97:22:79:19: 7c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:91:12:F5:E0:A8:BA:2C:13:F7:6E:DA:55:87:4A:19:E8:F9:9D:6A X509v3 Authority Key Identifier: keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/98B1A08E256211EEB175EF31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.239.42.0/23 Signature Algorithm: sha256WithRSAEncryption a2:78:6a:98:e0:95:fa:84:85:5c:cc:7a:69:f7:fa:dd:23:36: 93:a5:1c:b2:7d:ec:0e:9b:63:87:96:bc:7f:7e:ce:3b:79:ae: 9c:42:51:ec:f1:7d:c8:65:b2:74:8b:eb:a5:f1:8e:e4:a3:89: 3a:8b:b3:21:f1:8c:ea:48:38:95:20:a8:88:f3:cc:9f:31:ed: 78:97:b3:87:bd:4b:b8:96:90:75:4b:0a:27:3e:11:25:96:39: be:2e:c2:48:10:9b:2f:6a:e2:a3:e4:4e:bf:f2:c4:76:05:9b: 9d:24:80:00:b5:70:f1:88:35:00:b5:f4:fe:b5:7e:dc:26:c8: fb:80:b6:5c:8d:42:45:1f:a7:3a:00:27:09:f4:32:a5:d0:d7: e3:c7:3b:6e:ca:70:df:92:76:63:ef:f7:39:78:90:3d:ac:29: a1:8d:21:05:50:31:56:25:66:33:97:66:bd:2d:94:c6:f5:0f: e2:77:a0:98:74:1e:93:d6:a1:0c:db:d2:a6:89:9d:44:55:29: 63:03:36:b8:02:f5:0b:4a:68:3f:86:d2:dd:b6:8f:d3:af:ff: 8d:0f:69:98:4a:45:c1:a4:f2:2b:da:bc:c0:42:5d:69:22:57: 86:df:0f:93:1a:47:10:57:d0:e2:68:3a:74:47:8f:0c:f9:3f: 25:5d:4a:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFMUYxMTAvBgNVBAUTKDNDQkMzOTRFQkY1QTIyMDlCMEVCMkM3NDdDM0ZGMDA2 QjZBRDE5REIwHhcNMjUwOTAxMDM1MDIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI1MTdmZS04MDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2r06lqDc4a6PQqpfpPkLj0EZwsPEv4XeQJVXt73MHuNSp9Hhz0jq3IEWOWgH pXnPp8mOj7oCIPRs+s1eas0IrXQDoW85I0Ou3SCQOwfP9iydSInLSPVR1ubY4Vid gXUT0Y9OUP8FDEK90u0kw7PMWs0brFFanlKFZT8sho2fa7cxVb7qtFaBruSm3AfF KgMIyxf1se1SVcC3Bc4j+OktdTnGThC5joCKQPCiBrxnUUi04WGc97AQp+rhabvB 2dgbqZTwne84Ez+r6heo366FF2y+KZK2JKBWbQNeHvQDq4u7nuVHuc3VCJc7Hjjl /zX01yRiShmw2ecJfpcieRl8OwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLqREvXg qLosE/du2lWHShno+Z1qMB8GA1UdIwQYMBaAFDy8OU6/WiIJsOssdHw/8Aa2rRnb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUxRi8xNjkyRDQ4ODI1 NjIxMUVFODEyMjJFMzFDNEY5QUUwMi9QTHc1VHI5YUlnbXc2eXgwZkRfd0JyYXRH ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BMdzVUcjlhSWdtdzZ5eDBmRF93QnJhdEdkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjhFMUYvMTY5MkQ0ODgyNTYyMTFFRTgxMjIyRTMxQzRGOUFFMDIvOThCMUEwOEUy NTYyMTFFRUIxNzVFRjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn7yowDQYJKoZIhvcNAQELBQADggEBAKJ4apjglfqEhVzM emn3+t0jNpOlHLJ97A6bY4eWvH9+zjt5rpxCUezxfchlsnSL66XxjuSjiTqLsyHx jOpIOJUgqIjzzJ8x7XiXs4e9S7iWkHVLCic+ESWWOb4uwkgQmy9q4qPkTr/yxHYF m50kgAC1cPGINQC19P61ftwmyPuAtlyNQkUfpzoAJwn0MqXQ1+PHO27KcN+SdmPv 9zl4kD2sKaGNIQVQMVYlZjOXZr0tlMb1D+J3oJh0HpPWoQzb0qaJnURVKWMDNrgC 9QtKaD+G0t22j9Ov/40PaZhKRcGk8ivavMBCXWkiV4bfD5MaRxBX0OJoOnRHjwz5 PyVdSrE= -----END CERTIFICATE-----Generated at Mon Oct 20 17:03:52 2025 by rpki-client