$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/9DF7DA5C557C11E7B34BCE81C4F9AE02.roa File: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (raw, json) Hash identifier: eoxU71y8QTEqx+M0m1aW0+InRIR2E5b4rwucrZ2tLw0= Subject key identifier: 44:73:DA:90:87:35:69:7E:14:BA:96:7F:B5:E8:3F:07:A4:BC:11:B1 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1A5E Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/9DF7DA5C557C11E7B34BCE81C4F9AE02.roa Signing time: Mon 22 Sep 2025 16:35:17 +0000 ROA not before: Mon 22 Sep 2025 16:35:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134433 IP address blocks: 103.241.84.0/24 maxlen: 24 103.241.85.0/24 maxlen: 24 103.241.86.0/24 maxlen: 24 103.241.87.0/24 maxlen: 24 2407:d500::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6750 (0x1a5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Sep 22 16:35:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d17ac5-a62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:76:3c:c8:35:52:cb:12:cd:ec:6d:fb:13: a1:11:24:05:a5:ec:6b:86:86:5f:29:0f:3f:11:5d: 04:14:67:03:43:21:7e:db:75:19:c4:87:e9:22:15: fd:7e:1a:53:d7:d3:d9:6b:65:1c:dc:77:3f:ab:cb: da:97:42:94:04:1b:41:93:a4:e6:92:f7:19:b4:ff: 8b:c3:5f:67:44:b3:82:bc:e1:67:ef:59:b8:48:14: a5:ec:67:bb:6a:90:6b:e1:b4:1f:fb:7b:42:e0:a6: 0b:28:fa:fc:ea:be:cf:37:e8:1f:26:3f:fa:9b:f3: 2a:aa:ff:30:e9:1f:7f:c1:42:a7:90:91:37:a6:d0: 57:32:ba:a1:56:7d:16:bd:36:ee:dd:a2:15:f3:f7: da:e0:11:4f:e9:8f:52:c4:61:75:84:f1:e6:a7:3b: 69:f6:62:3e:33:55:26:73:f5:82:a7:fd:ea:63:e6: 46:e2:9d:e8:d6:f2:a5:73:27:6f:b9:8e:7f:bc:00: b5:3a:3b:a3:59:d6:81:c5:2d:6b:6a:93:fb:a7:e6: af:7c:67:09:ea:c0:f3:da:a6:7b:ef:d3:b2:1c:68: ed:8a:38:46:bc:0b:d0:68:36:2b:01:26:92:7f:82: 1a:3f:04:62:3c:89:cb:ba:54:ae:f8:3a:f5:5e:69: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:73:DA:90:87:35:69:7E:14:BA:96:7F:B5:E8:3F:07:A4:BC:11:B1 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/9DF7DA5C557C11E7B34BCE81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.241.84.0/22 IPv6: 2407:d500::/32 Signature Algorithm: sha256WithRSAEncryption 85:d8:73:53:05:80:23:c6:db:b4:bb:cc:c6:2f:0f:b0:a1:61: 3b:4b:1d:aa:89:a2:21:d2:6c:43:87:fa:02:f1:0b:92:ac:b6: d8:90:dc:6a:ad:67:11:90:b1:85:40:72:b2:31:dd:ec:8b:85: 9a:8c:c5:71:71:1e:d2:89:73:13:a7:39:be:66:9a:1e:31:43: 1b:d5:4f:89:83:ac:e3:59:0f:13:e3:03:fb:7a:45:fe:55:09: 81:03:56:e9:ef:3f:f6:b1:b1:dc:cf:be:72:78:c5:c8:79:b5: ba:c6:02:22:94:73:86:0b:0a:f9:58:9c:cb:cf:11:29:fb:f8: 93:e9:07:3c:bb:ea:a5:f6:98:14:29:84:1e:b8:2e:ae:93:0a: 27:eb:8e:79:71:be:e6:ac:b1:e2:92:ad:5d:de:19:ff:b7:9e: d1:4f:b5:92:36:b4:ac:51:42:45:bf:6c:9f:4a:1d:7a:45:3f: cb:44:6e:cc:e3:8e:0b:47:3b:56:1d:75:73:b4:d8:b0:4a:ae: aa:50:85:2c:41:ff:5f:fb:68:8f:0a:e4:0b:2c:eb:54:9b:f1: 42:b3:7b:58:cc:65:c5:09:9d:fa:2e:85:bb:46:bb:0e:e4:8b: 75:bc:72:3b:c4:71:ce:f9:f1:48:d0:8d:e7:ad:be:a5:92:a8: eb:7a:9d:9b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjUwOTIyMTYzNTE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxN2FjNS1hNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5p2PMg1UssSzext+xOhESQFpexrhoZfKQ8/EV0EFGcDQyF+23UZxIfpIhX9 fhpT19PZa2Uc3Hc/q8val0KUBBtBk6TmkvcZtP+Lw19nRLOCvOFn71m4SBSl7Ge7 apBr4bQf+3tC4KYLKPr86r7PN+gfJj/6m/Mqqv8w6R9/wUKnkJE3ptBXMrqhVn0W vTbu3aIV8/fa4BFP6Y9SxGF1hPHmpztp9mI+M1Umc/WCp/3qY+ZG4p3o1vKlcydv uY5/vAC1OjujWdaBxS1rapP7p+avfGcJ6sDz2qZ779OyHGjtijhGvAvQaDYrASaS f4IaPwRiPInLulSu+Dr1Xmk0RwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFERz2pCH NWl+FLqWf7XoPwekvBGxMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvMkY4Qjg1NTI1NDg1MTFFN0IxRDg0NzEzQzRGOUFFMDIvOURGN0RBNUM1 NTdDMTFFN0IzNEJDRTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn8VQwDQQCAAIwBwMFACQH1QAwDQYJKoZIhvcNAQELBQAD ggEBAIXYc1MFgCPG27S7zMYvD7ChYTtLHaqJoiHSbEOH+gLxC5KsttiQ3GqtZxGQ sYVAcrIx3eyLhZqMxXFxHtKJcxOnOb5mmh4xQxvVT4mDrONZDxPjA/t6Rf5VCYED VunvP/axsdzPvnJ4xch5tbrGAiKUc4YLCvlYnMvPESn7+JPpBzy76qX2mBQphB64 Lq6TCifrjnlxvuasseKSrV3eGf+3ntFPtZI2tKxRQkW/bJ9KHXpFP8tEbszjjgtH O1YddXO02LBKrqpQhSxB/1/7aI8K5Ass61Sb8UKze1jMZcUJnfouhbtGuw7ki3W8 cjvEcc758UjQjeetvqWSqOt6nZs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:42 2025 by rpki-client