$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5A020E1229E011EB80A2FF13C4F9AE02.roa File: 5A020E1229E011EB80A2FF13C4F9AE02.roa (raw, json) Hash identifier: 5FNBX5H270TTnOX6V0W/sXkhhqzheyLbOa1sf514DnQ= Subject key identifier: 5B:ED:78:40:92:90:C4:51:41:F6:A5:73:32:7C:1A:48:AD:A4:60:2E Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 0850 Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5A020E1229E011EB80A2FF13C4F9AE02.roa Signing time: Sat 30 Aug 2025 21:12:47 +0000 ROA not before: Sat 30 Aug 2025 21:12:47 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138505 IP address blocks: 103.154.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: Aug 30 21:12:47 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b3694f-cde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:c1:0e:c1:97:cf:24:f0:7d:b7:7d:13:7b: e8:d5:74:5f:0c:60:f8:4d:23:16:ef:27:2f:b7:3f: eb:43:5f:3f:40:63:29:d7:0d:f6:f0:a0:3e:a5:76: 2d:67:92:b4:cd:d9:32:5b:d1:35:d0:f6:52:05:22: 58:22:ab:75:be:2c:cb:f3:bb:f2:88:cc:6d:ba:4d: 7f:54:f2:34:28:59:e8:ff:c1:47:22:0a:33:98:96: f9:65:1f:6b:97:ad:3b:16:21:9b:e5:98:a2:b4:8c: c5:6d:70:2f:01:99:b8:f6:8d:37:55:ac:03:92:d1: 88:ee:21:59:c6:a3:ce:dd:d0:aa:f9:53:a6:9c:47: 25:57:50:e4:f6:60:d8:47:92:f5:44:40:51:05:00: 98:32:eb:44:df:d5:66:a1:b5:68:21:55:07:10:90: 25:44:a6:a5:76:60:9d:37:04:25:9b:af:78:64:cb: 0d:c8:d7:37:6a:e5:12:d1:4b:8e:d1:8a:98:c8:d6: 2e:b0:d0:d9:cf:bb:7a:75:88:ad:4f:53:cf:aa:40: 29:33:55:1e:5d:7e:7e:2a:5e:eb:57:8f:38:cd:2d: af:9b:77:ad:76:97:be:e8:33:13:25:29:ec:cd:0c: 7b:00:8f:f4:bb:af:85:68:28:20:6b:c9:37:7f:bc: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:ED:78:40:92:90:C4:51:41:F6:A5:73:32:7C:1A:48:AD:A4:60:2E X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/5A020E1229E011EB80A2FF13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.17.0/24 Signature Algorithm: sha256WithRSAEncryption 86:30:65:be:cc:f5:03:9e:07:17:35:63:54:03:19:a5:f5:38: d3:fc:8d:4f:d5:82:81:2b:ca:0f:b4:7b:ce:67:4b:c5:c6:0f: 00:4a:52:2f:6d:6c:c6:80:ce:39:36:11:a3:57:4a:53:9a:a6: 26:e9:5b:21:52:17:00:76:f1:97:58:f4:fd:22:5a:14:0e:85: d1:50:a1:98:e0:1b:ce:05:0a:c5:24:65:dc:56:53:3d:36:67: 7d:47:71:64:52:f4:01:37:ac:c7:f5:16:b4:1b:00:49:f3:c0: 7a:61:a4:b7:4c:92:67:48:2d:63:f7:cf:91:57:55:91:27:15: bc:40:77:de:f7:ad:98:c4:2f:9e:be:17:22:13:f4:68:2c:f8: 88:12:6c:78:16:ac:63:03:1c:89:cf:c4:0f:60:2e:66:cf:d7: 71:c3:99:ce:13:4d:8c:18:f6:2d:38:57:3f:90:d6:96:6e:18: bf:f1:c8:c4:1b:a9:f3:dc:76:49:68:40:82:dc:58:a6:d3:b9: d7:96:64:ef:e9:d1:c3:fe:1e:d5:f2:43:8e:2c:fb:29:04:9a: f5:ef:71:05:22:2a:94:7b:a5:20:30:ca:13:d4:fc:89:69:62: 3e:be:b9:24:18:06:bb:8a:e2:ff:06:1f:a1:6e:ad:bd:59:48: ab:c3:d6:07 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjUwODMwMjExMjQ3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzNjk0Zi1jZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLTBDsGXzyTwfbd9E3vo1XRfDGD4TSMW7ycvtz/rQ18/QGMp1w328KA+pXYt Z5K0zdkyW9E10PZSBSJYIqt1vizL87vyiMxtuk1/VPI0KFno/8FHIgozmJb5ZR9r l607FiGb5ZiitIzFbXAvAZm49o03VawDktGI7iFZxqPO3dCq+VOmnEclV1Dk9mDY R5L1REBRBQCYMutE39VmobVoIVUHEJAlRKaldmCdNwQlm694ZMsNyNc3auUS0UuO 0YqYyNYusNDZz7t6dYitT1PPqkApM1UeXX5+Kl7rV484zS2vm3etdpe+6DMTJSns zQx7AI/0u6+FaCgga8k3f7xIKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFvteECS kMRRQfalczJ8GkitpGAuMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkxQTYvQkE0Q0NFMEVENzJCMTFFQThDMUJCRDREQzRGOUFFMDIvNUEwMjBFMTIy OUUwMTFFQjgwQTJGRjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmhEwDQYJKoZIhvcNAQELBQADggEBAIYwZb7M9QOeBxc1 Y1QDGaX1ONP8jU/VgoEryg+0e85nS8XGDwBKUi9tbMaAzjk2EaNXSlOapibpWyFS FwB28ZdY9P0iWhQOhdFQoZjgG84FCsUkZdxWUz02Z31HcWRS9AE3rMf1FrQbAEnz wHphpLdMkmdILWP3z5FXVZEnFbxAd973rZjEL56+FyIT9Ggs+IgSbHgWrGMDHInP xA9gLmbP13HDmc4TTYwY9i04Vz+Q1pZuGL/xyMQbqfPcdkloQILcWKbTudeWZO/p 0cP+HtXyQ44s+ykEmvXvcQUiKpR7pSAwyhPU/IlpYj6+uSQYBruK4v8GH6Furb1Z SKvD1gc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:18:03 2025 by rpki-client