$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/164B8B986D8B11EEAE28C283C4F9AE02.roa File: 164B8B986D8B11EEAE28C283C4F9AE02.roa (raw, json) Hash identifier: olVXu+2blIiQ/nPaKs9oAvL7LtQPo2noHIFDjFZB8b8= Subject key identifier: 12:DF:BD:E8:27:52:D2:B5:EB:A4:9E:A2:23:58:6C:9C:33:A1:DC:11 Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 017C Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/164B8B986D8B11EEAE28C283C4F9AE02.roa Signing time: Thu 09 Oct 2025 04:32:50 +0000 ROA not before: Thu 09 Oct 2025 04:32:50 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.172.192.0/24 maxlen: 24 2001:df2:f8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Oct 9 04:32:50 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e73af1-53aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:87:25:32:64:e5:2f:81:0c:09:58:74:41: 19:23:c4:40:58:95:bb:2e:66:31:a0:45:1b:71:aa: 31:c6:61:2d:93:c2:48:f1:64:9c:d3:6d:22:54:ca: 61:94:05:4f:8e:1e:a0:63:15:e4:21:cc:d4:b9:8e: 32:14:3f:8c:7f:65:b9:86:39:22:1c:f8:29:fd:72: 77:da:72:52:c7:d9:e8:c3:ef:2b:b2:da:67:1d:03: 11:77:4a:71:c8:ca:97:75:15:2f:13:c2:04:91:b7: 46:03:3c:2d:6c:ce:94:4d:bd:8d:01:a4:6c:13:32: 2a:f4:c1:46:0a:c1:b7:a1:13:98:dd:10:06:11:b9: 50:0d:3a:48:06:a7:e3:57:7f:e0:a5:99:2a:3b:c6: de:db:86:56:59:8e:e4:5a:79:f7:92:3d:29:4e:4e: 44:54:88:f9:bc:9b:5f:6c:b3:e6:d6:d4:2b:e8:19: bd:46:48:6b:69:45:86:30:ff:7e:62:e6:16:31:12: fc:43:9d:0c:47:53:f3:d6:00:32:4c:11:40:6d:6d: f8:ed:0c:3e:23:1a:7b:81:9a:80:06:ca:2d:63:53: 7a:14:ad:b5:94:3e:a8:8a:32:fa:64:4d:39:b9:e5: d3:f5:eb:58:cc:22:c2:06:a9:24:d9:22:05:64:a0: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DF:BD:E8:27:52:D2:B5:EB:A4:9E:A2:23:58:6C:9C:33:A1:DC:11 X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/164B8B986D8B11EEAE28C283C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.192.0/24 IPv6: 2001:df2:f8c0::/48 Signature Algorithm: sha256WithRSAEncryption 4c:3b:bc:98:c4:21:31:ec:9d:b8:35:9a:1f:5f:f1:df:7d:dd: e8:16:b1:a8:3e:9c:c9:47:e4:a5:59:46:94:df:6f:60:e3:f8: 84:02:1c:6e:8c:ba:36:9c:c5:e3:c2:d4:20:c5:6e:75:36:8c: da:c3:ec:13:8c:f1:79:9f:a7:f8:b0:bc:0e:43:34:9a:e0:08: ba:fc:7e:f7:56:d7:f2:18:fd:95:46:98:a0:22:89:cf:17:86: 58:ab:70:1e:19:5a:a6:23:2b:57:33:65:f9:ab:2a:3d:ad:e9: fd:4b:e7:4a:30:1d:56:2f:c1:3e:50:b6:c8:d6:bf:6e:f0:76: b5:c2:39:ef:92:ec:63:a8:3c:d8:28:33:d1:96:cc:e8:bc:c7: 65:ae:cc:17:24:17:b9:9e:d7:55:52:3d:bd:6d:09:6c:87:71: fb:a9:ad:ea:23:b7:62:ec:bb:e2:9c:66:5f:ff:cb:36:67:0a: e4:57:db:ca:21:7a:c0:f5:b5:4d:b2:05:ae:d7:18:64:c5:34: 33:c4:79:c9:0c:54:66:7e:54:4c:43:be:b9:90:1e:d6:70:31: e2:60:16:36:ba:5b:1a:32:94:fa:a9:96:66:17:06:7e:a4:11: db:79:aa:42:61:b0:8b:aa:f9:24:a7:ba:78:5d:ce:e0:d2:44: 56:ed:bb:f0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjUxMDA5MDQzMjUwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU3M2FmMS01M2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MeHJTJk5S+BDAlYdEEZI8RAWJW7LmYxoEUbcaoxxmEtk8JI8WSc020iVMph lAVPjh6gYxXkIczUuY4yFD+Mf2W5hjkiHPgp/XJ32nJSx9now+8rstpnHQMRd0px yMqXdRUvE8IEkbdGAzwtbM6UTb2NAaRsEzIq9MFGCsG3oROY3RAGEblQDTpIBqfj V3/gpZkqO8be24ZWWY7kWnn3kj0pTk5EVIj5vJtfbLPm1tQr6Bm9RkhraUWGMP9+ YuYWMRL8Q50MR1Pz1gAyTBFAbW347Qw+Ixp7gZqABsotY1N6FK21lD6oijL6ZE05 ueXT9etYzCLCBqkk2SIFZKA7hwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBLfvegn UtK166SeoiNYbJwzodwRMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFCRkQvODk1QTQ5NTA2RDg5MTFFRTgyQTFGNjgwQzRGOUFFMDIvMTY0QjhCOTg2 RDhCMTFFRUFFMjhDMjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnrMAwDwQCAAIwCQMHACABDfL4wDANBgkqhkiG9w0BAQsF AAOCAQEATDu8mMQhMeyduDWaH1/x333d6BaxqD6cyUfkpVlGlN9vYOP4hAIcboy6 NpzF48LUIMVudTaM2sPsE4zxeZ+n+LC8DkM0muAIuvx+91bX8hj9lUaYoCKJzxeG WKtwHhlapiMrVzNl+asqPa3p/UvnSjAdVi/BPlC2yNa/bvB2tcI575LsY6g82Cgz 0ZbM6LzHZa7MFyQXuZ7XVVI9vW0JbIdx+6mt6iO3Yuy74pxmX//LNmcK5FfbyiF6 wPW1TbIFrtcYZMU0M8R5yQxUZn5UTEO+uZAe1nAx4mAWNrpbGjKU+qmWZhcGfqQR 23mqQmGwi6r5JKe6eF3O4NJEVu278A== -----END CERTIFICATE-----Generated at Mon Oct 20 03:50:35 2025 by rpki-client