$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/32758AB4A54011F0ADC9D13BC4F9AE02.roa File: 32758AB4A54011F0ADC9D13BC4F9AE02.roa (raw, json) Hash identifier: EqPoHokWPSQ1L2lcAAXRF+UXl8dKiWjU9iYk2iUWo3s= Subject key identifier: D0:39:32:72:F1:4F:72:6E:F8:B3:22:26:03:98:D6:16:EC:6B:80:7E Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 2336 Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/32758AB4A54011F0ADC9D13BC4F9AE02.roa Signing time: Thu 09 Oct 2025 18:46:20 +0000 ROA not before: Thu 09 Oct 2025 18:46:20 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 30456 IP address blocks: 103.241.212.0/22 maxlen: 24 202.165.124.0/22 maxlen: 22 202.165.124.0/24 maxlen: 24 202.165.125.0/24 maxlen: 24 202.165.126.0/24 maxlen: 24 202.165.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9014 (0x2336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Oct 9 18:46:20 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68e802fb-1e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:12:f8:6a:91:a8:21:e0:bf:14:f7:3f:31:8a: b8:af:a3:dc:37:fc:b5:a5:ed:ab:1d:78:74:00:df: 6d:5e:2d:32:46:2f:9d:1c:d9:88:55:4d:6d:ad:5b: 7a:f8:40:9e:ca:be:00:a1:55:bf:d9:32:1c:c1:48: a7:e8:34:84:bd:6e:60:34:36:fa:55:db:d7:68:ca: 00:77:db:66:7b:26:92:7c:8f:62:9b:67:44:10:92: 95:59:7a:fd:6d:e2:c7:a3:dd:1c:73:e9:88:77:4c: 93:33:0b:98:57:2f:16:68:2e:31:1b:5c:58:f3:bd: 3a:f3:47:ff:eb:0b:1a:cc:e4:02:15:54:e8:5d:e7: dc:33:6c:f2:84:60:80:9a:e4:2e:e1:78:a8:6b:94: d0:16:c4:81:d3:b6:19:63:be:0a:ea:0d:54:58:25: 3f:8f:f3:b7:d1:8a:68:f9:fd:6a:0e:58:3c:de:53: 50:11:56:e2:40:d1:01:b4:fb:68:fa:af:4d:8f:81: bb:61:fd:ea:b1:60:44:80:31:4a:1d:12:73:6c:ac: 8a:c4:dc:83:76:e7:22:39:e0:a3:56:7c:ad:f0:80: bd:91:1b:07:6e:b2:08:04:ae:7d:1f:ac:2e:50:2f: 8d:6c:a9:09:30:bc:95:c0:32:fe:02:d5:58:cb:f1: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:39:32:72:F1:4F:72:6E:F8:B3:22:26:03:98:D6:16:EC:6B:80:7E X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/32758AB4A54011F0ADC9D13BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.241.212.0/22 202.165.124.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:e4:f9:a8:c3:05:77:93:39:f5:30:82:c6:3e:0e:7a:aa:c3: 96:da:2e:12:45:f2:b0:1a:cb:93:84:21:af:59:d3:6c:84:00: 49:55:fe:0a:78:b3:b0:0b:ab:38:0b:1d:68:54:6d:20:eb:0a: 1a:68:c3:e4:00:03:a3:72:1b:99:1e:3e:09:b2:1a:9c:4e:ac: 08:b2:49:f8:a6:55:60:b6:56:c2:6e:87:d2:e3:51:3f:c6:26: 2d:8f:36:78:80:51:7b:7c:42:c7:1f:5d:b5:33:d5:82:04:83: f8:c0:7b:5e:83:5d:d9:b9:fa:2b:c7:83:08:1a:a6:d1:11:21: f9:01:9a:9d:c4:d2:30:e6:f1:3b:bb:36:87:92:37:74:0b:12: 34:84:03:c7:50:76:44:1d:34:23:0b:a0:ac:6c:85:c2:da:59: 27:dc:e2:39:04:fc:7c:5b:9b:eb:ab:91:b0:16:84:fc:8f:0e: 06:07:f8:4d:62:5d:d8:c6:76:f7:8e:b0:de:4b:6e:52:11:86: c3:ba:97:9e:93:a9:07:0d:9a:f9:cf:83:00:c4:f8:b3:dc:ec: 6c:12:45:0f:1c:1d:21:87:41:b7:f7:84:b6:20:69:cb:ac:92: bd:a0:61:9f:63:5b:c9:25:97:0f:be:1f:c3:69:4a:c6:01:0a: d2:2e:b4:67 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICIzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUxMDA5MTg0NjIwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU4MDJmYi0xZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRL4apGoIeC/FPc/MYq4r6PcN/y1pe2rHXh0AN9tXi0yRi+dHNmIVU1trVt6 +ECeyr4AoVW/2TIcwUin6DSEvW5gNDb6VdvXaMoAd9tmeyaSfI9im2dEEJKVWXr9 beLHo90cc+mId0yTMwuYVy8WaC4xG1xY870680f/6wsazOQCFVToXefcM2zyhGCA muQu4Xioa5TQFsSB07YZY74K6g1UWCU/j/O30Ypo+f1qDlg83lNQEVbiQNEBtPto +q9Nj4G7Yf3qsWBEgDFKHRJzbKyKxNyDduciOeCjVnyt8IC9kRsHbrIIBK59H6wu UC+NbKkJMLyVwDL+AtVYy/Hw0QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNA5MnLx T3Ju+LMiJgOY1hbsa4B+MB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzI2NjMvQjhBRUYxMzhBOTRDMTFFNTgyOTFDQTY3QzRGOUFFMDIvMzI3NThBQjRB NTQwMTFGMEFEQzlEMTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn8dQDBALKpXwwDQYJKoZIhvcNAQELBQADggEBAB3k+ajD BXeTOfUwgsY+Dnqqw5baLhJF8rAay5OEIa9Z02yEAElV/gp4s7ALqzgLHWhUbSDr Chpow+QAA6NyG5kePgmyGpxOrAiySfimVWC2VsJuh9LjUT/GJi2PNniAUXt8Qscf XbUz1YIEg/jAe16DXdm5+ivHgwgaptERIfkBmp3E0jDm8Tu7NoeSN3QLEjSEA8dQ dkQdNCMLoKxshcLaWSfc4jkE/Hxbm+urkbAWhPyPDgYH+E1iXdjGdveOsN5LblIR hsO6l56TqQcNmvnPgwDE+LPc7GwSRQ8cHSGHQbf3hLYgacuskr2gYZ9jW8kllw++ H8NpSsYBCtIutGc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:51:04 2025 by rpki-client