$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa File: F719961A1A8611ECB908E939C4F9AE02.roa (raw, json) Hash identifier: K4Tk1pgMDNh5SKenYzBLQtmFUIf8LUH33Tf6G2W39As= Subject key identifier: 27:03:7D:87:93:BC:A7:A0:1E:E7:77:95:69:55:36:15:74:8F:F6:FC Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Certificate serial: 0524 Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa Signing time: Wed 03 Sep 2025 00:15:27 +0000 ROA not before: Wed 03 Sep 2025 00:15:27 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55736 IP address blocks: 103.164.128.0/24 maxlen: 24 103.164.129.0/24 maxlen: 24 123.100.228.0/24 maxlen: 24 123.100.229.0/24 maxlen: 24 123.100.230.0/24 maxlen: 24 123.100.231.0/24 maxlen: 24 202.157.178.0/24 maxlen: 24 203.142.9.0/24 maxlen: 24 2405:70c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Validity Not Before: Sep 3 00:15:27 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b7889e-d9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:ee:3e:73:7f:bf:ef:73:35:3e:13:1c:6e: a2:e8:5d:47:a8:66:98:12:8e:2d:8e:2e:df:a0:58: a8:a3:bd:af:bf:db:f9:5d:e2:12:bb:d9:0d:cb:fa: fb:cb:88:ee:b0:47:84:76:2a:f4:aa:67:5a:2e:63: 2e:68:0f:6f:f4:1c:d2:c8:fa:8b:62:21:0d:0b:45: 60:9e:7a:3e:e7:b3:7b:6c:ae:65:f8:6b:be:9a:65: 52:e2:95:00:70:ec:76:08:a5:e3:53:2d:f7:05:ee: 5b:e9:4d:87:fd:1d:c6:f3:1c:c6:b3:d5:d7:fa:fd: 1c:ba:d9:35:2c:87:93:e9:17:0d:89:82:61:82:58: f8:1f:58:a8:9a:81:f5:bc:a8:2e:b8:d4:0a:70:ff: 1b:ed:94:9b:58:b3:39:ae:f5:88:40:e6:d1:b5:34: 84:0d:29:c1:68:1f:43:3d:54:0c:eb:38:15:75:75: 0c:65:ea:17:fb:31:15:f9:3b:28:13:e5:36:32:31: 76:01:28:8f:c8:c3:2b:47:1b:c2:81:e1:e5:45:d6: 43:c3:83:3b:2d:0a:18:9b:bb:18:f2:1f:bc:21:f7: 48:cf:b6:04:a1:53:f1:3e:4c:0f:93:51:73:d9:8e: 87:78:7a:7f:0e:9d:db:e8:4f:a5:4a:24:d3:3e:6a: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:7D:87:93:BC:A7:A0:1E:E7:77:95:69:55:36:15:74:8F:F6:FC X509v3 Authority Key Identifier: keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.128.0/23 123.100.228.0/22 202.157.178.0/24 203.142.9.0/24 IPv6: 2405:70c0::/32 Signature Algorithm: sha256WithRSAEncryption 1c:b9:5b:58:0c:92:f6:3f:bd:61:93:c8:91:f9:a6:bf:85:6d: 7c:20:34:d3:0d:61:c8:bc:9d:ec:3f:63:ce:a9:2f:db:cc:9d: 32:63:3a:33:d0:a2:ca:36:56:23:b9:11:e6:75:30:08:2f:d5: 75:7c:68:ad:fa:c4:bb:1f:c9:c8:12:96:03:19:2d:f9:bf:e7: a4:0f:53:2b:3f:a4:e7:ed:2b:05:8b:2b:1b:84:b9:91:94:bc: 50:ab:cb:e7:d0:38:95:68:79:ca:89:37:e2:dc:b8:ea:55:06: a1:64:5a:89:04:04:4e:b3:19:31:cc:a8:31:28:58:0a:81:40: 07:44:93:0d:ae:04:94:fc:2c:6e:06:34:1b:12:8b:e9:2a:1e: 0e:72:d6:6d:be:81:33:a0:5b:51:9b:16:73:8d:ee:c7:cb:93: 63:c3:fa:58:03:95:ff:e3:9a:d3:29:17:12:37:ce:23:9a:08: c6:ed:72:10:05:f9:e0:97:e6:a9:6c:42:f8:42:e2:2f:9e:b6: 89:4f:69:4a:42:fe:cc:f9:f0:d0:4d:45:b4:c1:3c:3d:1f:6d: 3b:51:8f:dd:ef:b3:17:d5:59:f9:55:92:77:f8:b0:68:18:28: 44:3b:e9:3c:95:64:49:28:8d:36:bc:c2:57:03:89:f5:a7:87: b2:ee:44:94 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0MUIxMTAvBgNVBAUTKDA4MDI1QjlCNDRFRUQ4QUUwQjc2RjExRTAzNzJDRTk2 MTg3N0FEOUYwHhcNMjUwOTAzMDAxNTI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3ODg5ZS1kOWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsruPnN/v+9zNT4THG6i6F1HqGaYEo4tji7foFioo72vv9v5XeISu9kNy/r7 y4jusEeEdir0qmdaLmMuaA9v9BzSyPqLYiENC0Vgnno+57N7bK5l+Gu+mmVS4pUA cOx2CKXjUy33Be5b6U2H/R3G8xzGs9XX+v0cutk1LIeT6RcNiYJhglj4H1iomoH1 vKguuNQKcP8b7ZSbWLM5rvWIQObRtTSEDSnBaB9DPVQM6zgVdXUMZeoX+zEV+Tso E+U2MjF2ASiPyMMrRxvCgeHlRdZDw4M7LQoYm7sY8h+8IfdIz7YEoVPxPkwPk1Fz 2Y6HeHp/Dp3b6E+lSiTTPmpxlwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFCcDfYeT vKegHud3lWlVNhV0j/b8MB8GA1UdIwQYMBaAFAgCW5tE7tiuC3bxHgNyzpYYd62f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQxQi82OUY2QjdERTFB ODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJLNExkdkVlQTNMT2xoaDNy WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBSmJtMFR1Mks0TGR2RWVBM0xPbGhoM3JaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk0MUIvNjlGNkI3REUxQTgzMTFFQzhDOTIyMjI5QzRGOUFFMDIvRjcxOTk2MUEx QTg2MTFFQ0I5MDhFOTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAFnpIADBAJ7ZOQDBADKnbIDBADLjgkwDQQCAAIwBwMFACQF cMAwDQYJKoZIhvcNAQELBQADggEBABy5W1gMkvY/vWGTyJH5pr+FbXwgNNMNYci8 new/Y86pL9vMnTJjOjPQoso2ViO5EeZ1MAgv1XV8aK36xLsfycgSlgMZLfm/56QP Uys/pOftKwWLKxuEuZGUvFCry+fQOJVoecqJN+LcuOpVBqFkWokEBE6zGTHMqDEo WAqBQAdEkw2uBJT8LG4GNBsSi+kqHg5y1m2+gTOgW1GbFnON7sfLk2PD+lgDlf/j mtMpFxI3ziOaCMbtchAF+eCX5qlsQvhC4i+etolPaUpC/sz58NBNRbTBPD0fbTtR j93vsxfVWflVknf4sGgYKEQ76TyVZEkojTa8wlcDifWnh7LuRJQ= -----END CERTIFICATE-----Generated at Tue Oct 21 08:07:14 2025 by rpki-client