$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/10771E5497C211F0A9D40817C4F9AE02.roa File: 10771E5497C211F0A9D40817C4F9AE02.roa (raw, json) Hash identifier: saXUgFYFE88ebAmrp0hfBEAM07HUjSBQgX0rZpCJXb0= Subject key identifier: C8:D0:E9:A8:AE:DF:AF:ED:89:73:F4:BE:96:15:E0:D5:F8:6A:9F:19 Certificate issuer: /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Certificate serial: 0127 Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/10771E5497C211F0A9D40817C4F9AE02.roa Signing time: Mon 22 Sep 2025 14:44:13 +0000 ROA not before: Mon 22 Sep 2025 14:44:13 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133894 IP address blocks: 43.230.209.0/24 maxlen: 24 103.46.208.0/22 maxlen: 23 103.46.208.0/24 maxlen: 24 103.46.209.0/24 maxlen: 24 103.46.210.0/24 maxlen: 24 103.46.211.0/24 maxlen: 24 103.96.233.0/24 maxlen: 24 103.146.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD2D, serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Validity Not Before: Sep 22 14:44:13 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68d160bd-1117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:72:bf:05:ae:8e:1a:bd:56:5a:ee:87:7d:bd: 07:c2:6d:62:be:59:53:0c:8a:52:b8:15:07:5c:69: c8:18:5a:73:a3:45:6e:71:59:ed:81:d7:78:27:77: fe:dc:36:15:fe:8f:d8:17:8f:d0:27:8f:9c:17:fe: 42:f5:f4:a7:33:93:58:2d:76:ba:02:59:03:43:5a: b7:da:cd:24:eb:4c:de:f8:29:a0:ed:e0:d9:98:6a: 35:f2:a1:3d:29:98:3b:80:2f:17:66:2c:78:57:3a: 9d:80:ca:87:6d:df:11:59:d1:0b:a9:79:88:8c:1c: 0e:9c:66:e9:e8:d3:03:1c:53:d7:66:49:04:4d:97: e7:06:b0:c7:9f:80:45:9b:d7:bd:12:7f:f3:3e:0a: bd:20:82:78:46:04:02:ac:73:b0:f6:b3:5f:2a:82: 60:52:59:6c:e3:12:9f:98:b2:85:cd:d7:08:ec:89: c9:60:4d:0d:d3:2d:96:8b:b0:51:6d:2d:2c:92:72: 2f:21:7e:e4:3e:51:8a:97:12:2b:4e:e3:0e:26:c5: 22:f7:aa:d2:90:4c:11:7b:57:c9:0c:d2:86:98:c2: 4f:84:1a:e3:ae:70:fe:ca:e3:a2:41:c1:cd:a5:80: f6:8f:73:16:82:06:63:a3:41:df:57:95:79:12:be: 59:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D0:E9:A8:AE:DF:AF:ED:89:73:F4:BE:96:15:E0:D5:F8:6A:9F:19 X509v3 Authority Key Identifier: keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/10771E5497C211F0A9D40817C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.209.0/24 103.46.208.0/22 103.96.233.0/24 103.146.104.0/24 Signature Algorithm: sha256WithRSAEncryption 87:79:6e:2e:5d:bf:32:47:a7:b8:62:f2:e0:7b:af:0d:2b:c5: 90:53:e1:c5:a3:a6:dc:d5:8b:88:fb:c7:4f:51:f2:ee:80:db: 76:c7:38:d5:3a:85:5d:52:21:93:35:e9:dc:8e:db:3b:00:1e: 1f:8f:af:d4:40:13:36:17:9f:00:d5:5e:24:f2:71:b7:f1:c6: b5:5f:a7:8f:3c:0f:a1:4f:c8:6f:90:c6:8a:1d:98:91:d5:2a: 15:d7:0c:9d:ae:c5:46:18:2e:c7:6b:59:3e:38:d5:20:0e:f1: 5f:ce:9a:b0:58:10:ab:18:9f:ad:2a:02:7a:fc:52:06:4c:19: 87:e6:d4:f5:80:0f:4a:42:e5:e4:28:00:4a:4d:e0:12:06:c5: fd:87:84:f1:85:26:9d:c0:fa:59:7f:6a:0b:36:69:0c:44:b4: a2:38:31:7c:5e:37:82:01:db:ae:68:c7:ae:81:7b:b1:af:59: 89:6a:55:bd:76:60:0e:40:bf:9a:11:1c:d0:6f:e4:5f:87:13: 3c:79:12:14:07:62:47:56:77:d4:67:b7:29:db:58:6f:fb:db: e1:4b:9d:53:76:40:92:d7:36:ae:c2:df:74:80:43:5e:40:27: ca:f4:f7:e1:95:70:27:8a:cd:3b:1a:a8:99:55:b2:07:9b:ce: 8d:47:2f:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEMkQxMTAvBgNVBAUTKDk0QTk1MEIzMDNCNDY5MDBERDVBMzA2MTAzMEM4OUE0 ODk2ODAzQUYwHhcNMjUwOTIyMTQ0NDEzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxNjBiZC0xMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHK/Ba6OGr1WWu6Hfb0Hwm1ivllTDIpSuBUHXGnIGFpzo0VucVntgdd4J3f+ 3DYV/o/YF4/QJ4+cF/5C9fSnM5NYLXa6AlkDQ1q32s0k60ze+Cmg7eDZmGo18qE9 KZg7gC8XZix4VzqdgMqHbd8RWdELqXmIjBwOnGbp6NMDHFPXZkkETZfnBrDHn4BF m9e9En/zPgq9IIJ4RgQCrHOw9rNfKoJgUlls4xKfmLKFzdcI7InJYE0N0y2Wi7BR bS0sknIvIX7kPlGKlxIrTuMOJsUi96rSkEwRe1fJDNKGmMJPhBrjrnD+yuOiQcHN pYD2j3MWggZjo0HfV5V5Er5ZxwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFMjQ6aiu 36/tiXP0vpYV4NX4ap8ZMB8GA1UdIwQYMBaAFJSpULMDtGkA3VowYQMMiaSJaAOv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQyRC85MDg4RUU1QUU4 MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFRRGRXakJoQXd5SnBJbG9B NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLbFFzd08wYVFEZFdqQmhBd3lKcElsb0E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFEMkQvOTA4OEVFNUFFODAxMTFFRUFENkM1MDMwQzRGOUFFMDIvMTA3NzFFNTQ5 N0MyMTFGMEE5RDQwODE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAr5tEDBAJnLtADBABnYOkDBABnkmgwDQYJKoZIhvcNAQEL BQADggEBAId5bi5dvzJHp7hi8uB7rw0rxZBT4cWjptzVi4j7x09R8u6A23bHONU6 hV1SIZM16dyO2zsAHh+Pr9RAEzYXnwDVXiTycbfxxrVfp488D6FPyG+QxoodmJHV KhXXDJ2uxUYYLsdrWT441SAO8V/OmrBYEKsYn60qAnr8UgZMGYfm1PWAD0pC5eQo AEpN4BIGxf2HhPGFJp3A+ll/ags2aQxEtKI4MXxeN4IB265ox66Be7GvWYlqVb12 YA5Av5oRHNBv5F+HEzx5EhQHYkdWd9RntynbWG/72+FLnVN2QJLXNq7C33SAQ15A J8r09+GVcCeKzTsaqJlVsgebzo1HL9Q= -----END CERTIFICATE-----Generated at Mon Oct 20 08:27:30 2025 by rpki-client