$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa File: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (raw, json) Hash identifier: Rcj1EoUrEWKE8gFKXUKtPg6fSNvcYh9jkBihoa8ZQDE= Subject key identifier: F1:EB:68:32:D2:7D:D7:FB:7C:5E:A1:26:47:18:F1:71:77:F1:1A:64 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 0769 Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa Signing time: Sat 30 Aug 2025 22:44:00 +0000 ROA not before: Sat 30 Aug 2025 22:44:00 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139270 IP address blocks: 103.140.166.0/23 maxlen: 23 103.140.167.0/24 maxlen: 24 2001:df0:ca80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: Aug 30 22:44:00 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68b37eb0-5122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:f7:4e:10:6e:97:9e:73:fe:96:9a:0a:fe: 57:d8:9a:a6:b2:96:f4:4e:19:51:73:bb:6a:01:39: 91:c1:87:f2:0a:18:be:3b:5e:3b:37:70:c6:49:d3: a2:c1:43:a4:aa:74:76:83:14:99:8c:ad:21:95:06: 4a:71:47:6f:1a:bb:df:7f:8d:28:4b:b5:94:81:c6: 37:20:fc:29:9f:c2:50:1f:de:37:84:d3:07:ae:71: 93:63:94:ef:59:4f:17:0b:b9:b3:91:02:b7:f4:86: 06:9d:c2:b6:66:d8:16:9b:c9:73:6f:b8:c0:86:c4: 21:97:53:5b:b8:bd:f8:58:a6:58:59:9d:a3:b0:c9: 1b:47:36:fe:44:d1:38:72:d7:c7:3c:2e:f2:8e:df: a4:a6:41:31:19:52:db:50:3a:0e:fe:1e:35:4c:b1: b9:b3:62:a1:b7:f1:3e:98:84:9c:44:7a:4d:df:12: f9:d0:20:ae:1a:be:0e:f3:db:56:19:9b:2c:85:b6: f6:ce:4d:0e:5f:fc:be:79:be:81:8c:4f:a4:cd:19: 95:7b:22:e9:a9:61:1e:94:2d:71:a7:d9:a9:32:0b: fd:30:3a:9a:f0:af:36:bc:3a:c0:ca:ce:0a:97:e2: e2:5a:a7:83:7b:f9:9c:60:ea:4f:15:1f:a4:e1:40: a6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EB:68:32:D2:7D:D7:FB:7C:5E:A1:26:47:18:F1:71:77:F1:1A:64 X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.166.0/23 IPv6: 2001:df0:ca80::/48 Signature Algorithm: sha256WithRSAEncryption 78:75:ce:c3:21:d5:e9:d1:7d:d9:be:2d:df:49:a5:e2:13:cd: f9:27:5d:32:8b:5d:f7:90:e5:6b:f9:7d:59:11:ba:5c:5d:06: a5:da:0e:55:b1:27:61:9f:ec:6f:17:dd:b6:05:dd:20:33:8d: c8:a3:a6:b8:d5:5c:34:d0:07:86:31:41:5b:17:7d:df:4b:18: 2a:79:13:91:7c:a4:f2:cb:f9:dd:87:b6:ea:04:19:c8:e0:f3: b0:fa:c5:db:10:91:5d:48:11:35:96:45:73:00:92:81:79:b3: c1:b9:dc:15:70:25:c3:1c:83:24:fa:78:92:c8:ad:ab:5e:a3: a9:dc:6c:15:c6:4e:ef:73:46:c7:84:0f:9b:4c:f3:57:11:91: 5e:82:87:8b:72:1b:5b:85:47:ac:73:c3:ac:07:03:7c:b5:3c: be:73:05:14:5b:7c:19:36:49:2d:dc:da:23:2a:43:32:4b:35: 8c:fc:7d:e7:95:aa:0b:64:d4:8c:e9:a8:fd:ac:cb:09:a4:ff: c4:66:25:ac:4e:bb:9c:a1:7b:d5:52:7e:c7:0b:8c:7d:88:7f: 1d:44:ff:1e:e7:14:1d:42:55:ca:83:18:13:5a:68:17:6d:be: e4:d7:b8:c0:d2:5a:a6:16:f7:23:3e:6b:e3:e7:20:68:0f:d6: a8:0f:37:b1 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjUwODMwMjI0NDAwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzN2ViMC01MTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoc/3ThBul55z/paaCv5X2Jqmspb0ThlRc7tqATmRwYfyChi+O147N3DGSdOi wUOkqnR2gxSZjK0hlQZKcUdvGrvff40oS7WUgcY3IPwpn8JQH943hNMHrnGTY5Tv WU8XC7mzkQK39IYGncK2ZtgWm8lzb7jAhsQhl1NbuL34WKZYWZ2jsMkbRzb+RNE4 ctfHPC7yjt+kpkExGVLbUDoO/h41TLG5s2Kht/E+mIScRHpN3xL50CCuGr4O89tW GZsshbb2zk0OX/y+eb6BjE+kzRmVeyLpqWEelC1xp9mpMgv9MDqa8K82vDrAys4K l+LiWqeDe/mcYOpPFR+k4UCmLQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPHraDLS fdf7fF6hJkcY8XF38RpkMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ExQTYvMzhEOTNFMUUzRDMwMTFFQkIzQjJENjZFQzRGOUFFMDIvOTEwQTQ5QUFC NUNDMTFFQ0FFMzM3RTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjKYwDwQCAAIwCQMHACABDfDKgDANBgkqhkiG9w0BAQsF AAOCAQEAeHXOwyHV6dF92b4t30ml4hPN+SddMotd95Dla/l9WRG6XF0GpdoOVbEn YZ/sbxfdtgXdIDONyKOmuNVcNNAHhjFBWxd930sYKnkTkXyk8sv53Ye26gQZyODz sPrF2xCRXUgRNZZFcwCSgXmzwbncFXAlwxyDJPp4ksitq16jqdxsFcZO73NGx4QP m0zzVxGRXoKHi3IbW4VHrHPDrAcDfLU8vnMFFFt8GTZJLdzaIypDMks1jPx955Wq C2TUjOmo/azLCaT/xGYlrE67nKF71VJ+xwuMfYh/HUT/HucUHUJVyoMYE1poF22+ 5Ne4wNJaphb3Iz5r4+cgaA/WqA83sQ== -----END CERTIFICATE-----Generated at Mon Oct 20 11:31:41 2025 by rpki-client