$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/BD37307CAAD011F0ACA9F95DC4F9AE02.roa File: BD37307CAAD011F0ACA9F95DC4F9AE02.roa (raw, json) Hash identifier: EBR7I5Emy01zmCBxXGGOXl37lY5pYBdqwHQoDpK1N3c= Subject key identifier: 0D:48:92:5B:74:E6:9B:49:42:64:78:79:1E:67:9B:90:A4:3D:B6:70 Certificate issuer: /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Certificate serial: 06 Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/BD37307CAAD011F0ACA9F95DC4F9AE02.roa Signing time: Sun 19 Oct 2025 11:44:45 +0000 ROA not before: Sun 19 Oct 2025 11:44:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136976 IP address blocks: 103.122.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Validity Not Before: Oct 19 11:44:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f4cf2d-9658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:be:42:c5:ac:87:92:d5:55:f5:1d:d2:af:d6: f1:14:1b:c5:32:ce:12:c2:a7:02:bf:37:bb:a2:77: dd:7e:54:51:a7:f5:1e:6a:3a:7f:a6:bd:eb:6b:99: 8c:7b:ad:87:4d:65:bd:db:7a:e3:9b:78:53:b3:ad: af:5f:33:03:0e:4c:97:22:b6:b3:f3:2c:61:91:63: e4:75:42:66:d0:9a:a5:9c:7e:66:df:a7:6c:3d:7f: 60:b5:c3:96:b1:f4:5d:30:bd:f8:54:87:62:0d:a0: 3a:1f:e2:43:42:99:99:a1:ac:b4:9e:31:15:0b:84: dd:06:ba:51:0a:3b:55:76:43:6f:ec:76:90:75:7c: 6c:94:8a:f7:b6:91:bd:87:33:5c:5c:4b:d2:c6:20: eb:dd:a8:76:b4:93:f3:29:27:4f:fb:ed:19:a2:1b: 20:43:45:06:c8:31:ea:45:6c:8f:78:40:7b:53:d2: d8:b7:09:fa:53:b4:d4:d5:62:4b:11:31:d2:74:61: e9:c6:f2:f1:51:f7:5e:6d:1a:59:6a:e3:ae:91:be: 13:9b:15:72:2a:ef:e1:ad:f8:12:1d:ff:7b:49:7a: a3:b4:94:a3:59:2f:d2:1f:5b:01:22:0c:94:eb:da: 12:7e:1c:65:73:e1:7f:a7:5a:ee:b2:04:b8:85:23: b3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:48:92:5B:74:E6:9B:49:42:64:78:79:1E:67:9B:90:A4:3D:B6:70 X509v3 Authority Key Identifier: keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/BD37307CAAD011F0ACA9F95DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.103.0/24 Signature Algorithm: sha256WithRSAEncryption 56:3b:32:14:d1:83:94:9f:23:6e:b4:e1:ab:ea:e1:fa:97:2f: 4a:41:99:f9:bc:35:36:8d:0f:d6:c3:22:10:69:02:ee:dc:98: 96:20:0b:93:72:22:6a:3d:d1:76:1e:e1:04:51:10:66:3a:c1: e4:74:0c:bc:08:80:6a:d1:53:cb:5f:87:f8:be:20:22:0e:67: 7f:47:e1:25:32:05:31:f4:db:bc:73:c1:cc:b2:9c:81:53:e6: 2c:f5:a3:93:67:23:7b:3d:ae:41:19:cb:8d:97:9c:da:c3:af: c7:f1:7f:32:b4:53:95:1a:2e:49:6f:2c:46:d0:58:e6:eb:2b: cf:f2:ae:16:98:3e:ee:03:b2:23:ef:84:5b:a3:3f:db:83:f2: 1b:3b:08:bd:6c:6b:c0:57:be:d0:2b:09:a6:c7:33:56:c4:79: 1f:36:c1:ea:4e:7a:6c:4c:ed:d1:ab:35:f7:3b:23:50:16:19: 8c:31:2f:3e:da:69:de:29:0c:12:e5:6a:fe:3e:12:a6:d6:ff: e2:ba:c9:ea:68:af:10:ea:c7:74:d8:5a:aa:87:20:21:b3:3a: 4a:8e:79:a7:19:8f:b8:b9:df:e1:6a:8c:91:62:2a:f3:79:99: eb:63:e3:c5:a9:f2:7a:d8:ba:f3:db:8a:78:37:61:50:26:d4: 70:d0:c4:17 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OERGMTExMC8GA1UEBRMoQzJDMTczRDc2MjQ4ODVCQzBCRDZGQzE5M0VGQkNFRTk1 NDNGQTI0MzAeFw0yNTEwMTkxMTQ0NDVaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZjRjZjJkLTk2NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhvkLFrIeS1VX1HdKv1vEUG8UyzhLCpwK/N7uid91+VFGn9R5qOn+mvetrmYx7 rYdNZb3beuObeFOzra9fMwMOTJcitrPzLGGRY+R1QmbQmqWcfmbfp2w9f2C1w5ax 9F0wvfhUh2INoDof4kNCmZmhrLSeMRULhN0GulEKO1V2Q2/sdpB1fGyUive2kb2H M1xcS9LGIOvdqHa0k/MpJ0/77RmiGyBDRQbIMepFbI94QHtT0ti3CfpTtNTVYksR MdJ0YenG8vFR915tGllq466RvhObFXIq7+Gt+BId/3tJeqO0lKNZL9IfWwEiDJTr 2hJ+HGVz4X+nWu6yBLiFI7NjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUDUiSW3Tm m0lCZHh5HmebkKQ9tnAwHwYDVR0jBBgwFoAUwsFz12JIhbwL1vwZPvvO6VQ/okMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4REYxL0U2MTdBRDkyQUFD RjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3TDF2d1pQdnZPNlZRX29r TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd3NGejEySkloYndMMXZ3WlB2dk82VlFfb2tNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OERGMS9FNjE3QUQ5MkFBQ0YxMUYwQkIxMUZCNUJDNEY5QUUwMi9CRDM3MzA3Q0FB RDAxMUYwQUNBOUY5NURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGd6ZzANBgkqhkiG9w0BAQsFAAOCAQEAVjsyFNGDlJ8jbrTh q+rh+pcvSkGZ+bw1No0P1sMiEGkC7tyYliALk3Iiaj3Rdh7hBFEQZjrB5HQMvAiA atFTy1+H+L4gIg5nf0fhJTIFMfTbvHPBzLKcgVPmLPWjk2cjez2uQRnLjZec2sOv x/F/MrRTlRouSW8sRtBY5usrz/KuFpg+7gOyI++EW6M/24PyGzsIvWxrwFe+0CsJ psczVsR5HzbB6k56bEzt0as19zsjUBYZjDEvPtpp3ikMEuVq/j4Sptb/4rrJ6miv EOrHdNhaqocgIbM6So55pxmPuLnf4WqMkWIq83mZ62Pjxanyeti689uKeDdhUCbU cNDEFw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:16:00 2025 by rpki-client