$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/994AC0903E1E11EFB5BBDD3BC4F9AE02.roa File: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (raw, json) Hash identifier: mfifBvvuBOWR51qu4TAHtYf7r268zx0oLY0Ybp1m38c= Subject key identifier: 9F:3B:79:44:0A:AD:2F:41:F1:3F:95:3C:45:54:6F:5B:5E:33:B8:23 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 020D Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/994AC0903E1E11EFB5BBDD3BC4F9AE02.roa Signing time: Tue 07 Oct 2025 12:38:01 +0000 ROA not before: Tue 07 Oct 2025 12:38:01 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 25687 IP address blocks: 103.224.8.0/22 maxlen: 22 103.224.8.0/24 maxlen: 24 103.224.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: Oct 7 12:38:01 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68e509a9-5b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:cc:f3:94:dc:d6:e8:e7:7c:ce:f3:4f:96: 36:3d:1b:10:28:7e:48:92:8a:dc:f1:d1:74:fe:81: 00:d3:53:03:74:8c:9b:c4:61:db:c7:cc:9b:3e:ff: 50:2b:5c:9c:fc:ff:44:0b:2b:3d:9b:ef:71:e4:8a: f7:12:92:15:c6:e6:9b:fa:5b:9b:cf:43:23:85:78: c3:8f:2d:cf:40:0d:48:cf:b1:f0:67:f3:09:30:0d: b5:6c:9b:c3:11:c1:c3:3e:6f:fb:bd:24:42:74:ed: 04:85:23:38:ac:40:72:66:ba:09:e1:c1:e8:c6:f8: de:eb:02:86:e1:79:f8:a5:e5:56:cb:af:8b:eb:14: 13:25:20:87:f9:5e:b9:e4:85:ac:c5:f4:87:a6:0f: 87:c3:fc:bf:51:b6:16:77:96:ee:f7:1b:bf:e2:59: 64:9e:cc:29:c4:cc:76:6d:ad:18:34:ea:e9:86:ca: df:45:3a:88:6c:35:60:ad:82:ae:3f:29:2e:5f:78: d5:f5:b8:02:9a:21:a2:8a:bd:59:d2:ac:ac:5e:2d: 4e:00:38:c1:7f:16:52:85:f4:0f:f3:76:a5:6f:4c: 31:5e:55:34:10:01:5e:b8:eb:79:93:7d:ee:52:cd: 27:a0:9e:6b:22:02:cc:0a:1d:71:6e:20:4f:53:24: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3B:79:44:0A:AD:2F:41:F1:3F:95:3C:45:54:6F:5B:5E:33:B8:23 X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/994AC0903E1E11EFB5BBDD3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.8.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:1b:9d:f0:e6:9a:8d:53:de:f7:72:b0:5e:d1:d2:93:95:23: 6f:35:70:22:cd:cd:61:99:c5:a2:bf:94:66:45:cf:76:73:0a: 07:e5:f5:52:3b:9a:30:3b:19:78:54:91:eb:27:94:c7:06:6d: c7:7d:42:2f:56:26:8e:f7:dc:2c:7a:53:43:49:d1:76:df:29: 12:81:9e:92:cc:36:5c:f3:16:1e:0d:3d:f7:c9:ab:fa:a4:86: 47:32:f9:76:58:d0:ea:79:bc:d9:7f:56:0a:c2:72:bc:2d:f3: 0a:17:00:79:79:c5:8c:fe:32:e4:86:d8:33:49:de:33:55:b8: d6:10:9f:9d:36:67:76:49:26:21:82:bb:31:66:cf:46:30:eb: 0f:25:3c:4d:8e:19:ea:b8:b7:0d:b8:f5:c9:e9:6d:92:c8:ac: b8:f2:0f:7d:30:00:64:5a:55:ca:4d:c2:c5:5a:08:d8:7b:ac: dd:f3:8a:6f:39:91:93:2a:1b:b6:e5:4d:72:4a:45:d9:02:97: 9f:6a:4e:6d:06:7d:8e:25:8f:56:4d:74:5e:90:67:95:1a:e3: ef:6c:fc:e9:98:b6:92:83:2d:46:81:2d:48:cc:e3:06:eb:f3: 5f:e6:49:42:ca:3e:75:02:88:ab:d7:7f:68:78:25:e1:ab:b2: da:97:f8:c8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjUxMDA3MTIzODAxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU1MDlhOS01YjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1XM85Tc1ujnfM7zT5Y2PRsQKH5Ikorc8dF0/oEA01MDdIybxGHbx8ybPv9Q K1yc/P9ECys9m+9x5Ir3EpIVxuab+lubz0MjhXjDjy3PQA1Iz7HwZ/MJMA21bJvD EcHDPm/7vSRCdO0EhSM4rEByZroJ4cHoxvje6wKG4Xn4peVWy6+L6xQTJSCH+V65 5IWsxfSHpg+Hw/y/UbYWd5bu9xu/4llknswpxMx2ba0YNOrphsrfRTqIbDVgrYKu PykuX3jV9bgCmiGiir1Z0qysXi1OADjBfxZShfQP83alb0wxXlU0EAFeuOt5k33u Us0noJ5rIgLMCh1xbiBPUyT8CQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ87eUQK rS9B8T+VPEVUb1teM7gjMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDVBQTgvMjc4NTk5MTI5MUVGMTFFREIwNkJBRDFGQzRGOUFFMDIvOTk0QUMwOTAz RTFFMTFFRkI1QkJERDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn4AgwDQYJKoZIhvcNAQELBQADggEBAG4bnfDmmo1T3vdy sF7R0pOVI281cCLNzWGZxaK/lGZFz3ZzCgfl9VI7mjA7GXhUkesnlMcGbcd9Qi9W Jo733Cx6U0NJ0XbfKRKBnpLMNlzzFh4NPffJq/qkhkcy+XZY0Op5vNl/VgrCcrwt 8woXAHl5xYz+MuSG2DNJ3jNVuNYQn502Z3ZJJiGCuzFmz0Yw6w8lPE2OGeq4tw24 9cnpbZLIrLjyD30wAGRaVcpNwsVaCNh7rN3zim85kZMqG7blTXJKRdkCl59qTm0G fY4lj1ZNdF6QZ5Ua4+9s/OmYtpKDLUaBLUjM4wbr81/mSULKPnUCiKvXf2h4JeGr stqX+Mg= -----END CERTIFICATE-----Generated at Mon Oct 20 11:27:51 2025 by rpki-client