$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa File: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (raw, json) Hash identifier: faPX+RT4u0aFWk0BQoLYurHE34SqXeH6Z33EAVEOUo0= Subject key identifier: 71:8A:B2:80:B9:24:6C:91:21:49:7A:4F:22:F3:DF:BD:8A:B2:93:8C Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 1428 Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa Signing time: Thu 18 Sep 2025 17:26:08 +0000 ROA not before: Thu 18 Sep 2025 17:26:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 23876 IP address blocks: 103.110.212.0/23 maxlen: 24 123.49.43.0/24 maxlen: 24 218.100.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5160 (0x1428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Sep 18 17:26:08 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68cc40b0-adac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4e:5c:b9:87:d8:fb:aa:99:1c:a4:4c:93:65: d7:48:19:9f:68:4d:78:28:02:fc:d5:69:52:da:15: d0:d2:aa:5b:c6:c2:8a:31:79:7a:49:ba:31:b6:2c: 6e:41:f5:bf:3b:a9:b3:af:2d:87:af:c2:2a:a6:6e: 12:b8:89:a4:27:98:bd:cc:ba:c9:17:69:0e:03:4a: c3:38:2c:4c:f7:47:e9:f9:65:df:20:6f:a8:37:74: 45:17:41:67:d1:f4:e5:51:ed:bf:4e:29:71:43:b9: 58:46:88:1f:4a:9f:62:ba:5e:ab:50:6d:43:ad:83: 31:7a:99:c8:2b:85:7f:e3:3c:33:8f:56:38:49:28: c0:de:3d:74:ea:80:62:bb:12:5c:fe:9f:aa:98:e7: b3:fe:21:6e:94:d6:7b:05:6a:54:f0:03:a3:5c:48: 4f:ef:13:50:cc:52:ca:f0:5d:22:3d:a7:62:ae:7b: 72:7e:fd:90:6f:e7:76:8f:9a:b1:ce:85:86:a9:09: 65:b4:bb:e2:a8:5b:12:ee:9e:27:25:b9:9a:9d:11: d7:47:cc:6f:44:6e:c3:01:67:d0:b4:36:d0:0e:07: 3e:eb:76:b5:9d:9c:fe:3a:ba:2f:80:fd:ba:7e:85: ff:8c:fb:b4:f1:f7:99:11:bc:69:ed:65:85:fa:ce: e9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8A:B2:80:B9:24:6C:91:21:49:7A:4F:22:F3:DF:BD:8A:B2:93:8C X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/17780EF09B3C11E8A13BA63AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.212.0/23 123.49.43.0/24 218.100.37.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:8b:8f:c0:47:3a:ee:25:dd:2e:a1:52:5a:a1:1f:38:e5:c2: b8:b0:75:2d:9c:85:0e:66:9b:39:da:e1:b5:3d:0a:36:6d:88: d4:41:1a:7e:ce:27:57:65:7a:7a:0b:b2:3e:09:38:16:3a:f5: 4e:1e:53:4a:8a:86:72:f5:58:7c:9b:ff:a0:ee:29:7b:a3:5b: 86:fa:86:9f:75:2f:71:f3:07:d6:94:1e:fb:99:0e:33:38:2a: 51:ff:f1:fb:34:88:f2:eb:d7:03:35:43:94:ca:7a:a6:35:21: f8:0d:77:9b:8b:49:22:55:ff:cd:8b:e1:7d:a0:8a:62:be:03: c5:aa:0d:fa:58:5e:e6:68:e7:dd:ef:f8:50:a7:48:59:5c:37: 1e:4b:2e:20:79:01:63:f9:70:2e:25:79:cd:71:9f:f4:dd:0c: f4:b8:c0:08:f1:1f:8c:27:c7:3a:07:27:19:25:b9:ec:4b:3a: e5:b7:6f:6b:f1:e1:fd:92:be:f7:b3:48:f8:13:c3:f1:d5:70: 16:4f:3b:5d:0b:32:b2:8d:1f:4d:eb:ed:63:ee:7f:be:9e:11: 3f:e0:c2:09:dc:e4:9d:25:cd:86:9b:67:6a:9f:27:74:da:9b: 1e:f2:e9:19:7e:6a:d3:6e:0f:64:0c:4c:90:75:ba:6c:49:6e: 3e:8f:96:76 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICFCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUwOTE4MTcyNjA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNjNDBiMC1hZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9k5cuYfY+6qZHKRMk2XXSBmfaE14KAL81WlS2hXQ0qpbxsKKMXl6Sboxtixu QfW/O6mzry2Hr8Iqpm4SuImkJ5i9zLrJF2kOA0rDOCxM90fp+WXfIG+oN3RFF0Fn 0fTlUe2/TilxQ7lYRogfSp9iul6rUG1DrYMxepnIK4V/4zwzj1Y4SSjA3j106oBi uxJc/p+qmOez/iFulNZ7BWpU8AOjXEhP7xNQzFLK8F0iPadirntyfv2Qb+d2j5qx zoWGqQlltLviqFsS7p4nJbmanRHXR8xvRG7DAWfQtDbQDgc+63a1nZz+OrovgP26 foX/jPu08feZEbxp7WWF+s7pPwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHGKsoC5 JGyRIUl6TyLz372KspOMMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM4NDcvQUNGOTQzNTI5QUYzMTFFOEFBQjRENTVEQzRGOUFFMDIvMTc3ODBFRjA5 QjNDMTFFOEExM0JBNjNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnbtQDBAB7MSsDBADaZCUwDQYJKoZIhvcNAQELBQADggEB AE6Lj8BHOu4l3S6hUlqhHzjlwriwdS2chQ5mmzna4bU9CjZtiNRBGn7OJ1dlenoL sj4JOBY69U4eU0qKhnL1WHyb/6DuKXujW4b6hp91L3HzB9aUHvuZDjM4KlH/8fs0 iPLr1wM1Q5TKeqY1IfgNd5uLSSJV/82L4X2gimK+A8WqDfpYXuZo593v+FCnSFlc Nx5LLiB5AWP5cC4lec1xn/TdDPS4wAjxH4wnxzoHJxkluexLOuW3b2vx4f2Svvez SPgTw/HVcBZPO10LMrKNH03r7WPuf76eET/gwgnc5J0lzYabZ2qfJ3Tamx7y6Rl+ atNuD2QMTJB1umxJbj6PlnY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:44 2025 by rpki-client