$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/27865D0CA81311EF8B4DB01EC4F9AE02.roa File: 27865D0CA81311EF8B4DB01EC4F9AE02.roa (raw, json) Hash identifier: 00EOF2SkNQY+g2uOrsmFG2EVfhOEMG8CZO8LKFYTUdc= Subject key identifier: E9:AF:01:8C:40:80:99:65:63:08:80:19:31:6A:D5:BD:FD:06:EA:1E Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0B01 Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/27865D0CA81311EF8B4DB01EC4F9AE02.roa Signing time: Thu 31 Jul 2025 20:30:24 +0000 ROA not before: Thu 31 Jul 2025 20:30:24 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139223 IP address blocks: 103.139.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: Jul 31 20:30:24 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688bd25f-d802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:ab:8c:02:63:1e:4f:6b:d4:70:eb:16:f7: 3e:ca:35:87:c3:42:5f:1b:5c:60:c4:00:46:26:e3: 97:b3:b0:48:c1:70:46:b6:20:ea:47:1d:33:e4:b9: 72:15:3f:63:68:3a:9e:ea:02:51:51:97:13:f3:87: 61:48:13:6a:b7:e5:51:a7:78:bc:e2:5d:a3:24:53: dd:48:f5:65:05:76:02:9b:0d:0a:3d:7b:b6:25:1f: 7f:da:7f:ee:7a:63:02:2d:4a:21:20:e7:a4:b2:e4: b8:9f:e3:f4:39:fa:04:ec:b7:93:b1:36:89:3f:11: 74:b2:cd:f9:32:76:fe:1f:a3:da:85:72:4e:73:ff: 67:0c:96:30:bf:8e:5b:bd:56:c0:67:0e:dc:06:15: 0a:56:ff:fc:02:34:a0:74:b7:d5:4f:df:a7:dc:71: 65:25:72:48:cf:2c:4d:29:91:d1:ca:94:7f:f4:41: ad:29:68:79:d2:09:fe:75:58:97:72:08:bb:bb:09: 30:b0:b4:a6:4e:3b:29:b0:7f:2c:8c:97:19:8a:4e: b2:1f:1b:61:42:92:44:0f:eb:11:27:06:43:ea:2d: 37:11:ee:25:10:62:6e:9a:e1:9c:1a:55:f4:e2:15: ba:e8:0c:52:d2:b9:c1:34:ec:00:75:ef:a3:90:89: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AF:01:8C:40:80:99:65:63:08:80:19:31:6A:D5:BD:FD:06:EA:1E X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/27865D0CA81311EF8B4DB01EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.253.0/24 Signature Algorithm: sha256WithRSAEncryption 21:8e:0b:7f:15:17:19:80:71:9a:50:53:f4:8f:9d:ab:06:08: b5:d2:d2:0b:84:cb:ad:bf:2f:c2:25:37:63:b8:15:47:aa:da: 32:13:4c:6a:fe:64:f8:1b:e0:09:e8:bc:45:fc:dd:d0:39:51: 1d:5d:f0:ac:65:9f:ff:e4:75:23:73:c1:84:bd:16:96:b2:46: 67:83:1c:3f:ee:08:61:0d:8d:93:04:d3:52:08:7a:b9:4f:93: d9:53:99:ad:8e:6a:c3:ea:0b:43:19:08:a2:78:de:a6:5e:93: d5:22:4d:f6:73:f6:90:6f:e2:fb:52:31:63:41:f6:5d:9e:a5: ac:c2:9a:06:bb:1a:22:e8:08:f5:48:35:8e:32:a6:79:31:8c: 16:4d:9b:e6:bb:5b:54:be:12:58:66:15:57:71:66:cc:6b:d9: fb:c7:da:ea:78:c7:49:70:fa:8b:a1:3c:09:12:63:ca:82:b9: 7a:a0:a2:4b:b3:9e:3e:ad:8f:aa:77:72:3d:6b:4b:bd:38:f4: 58:6a:01:54:fe:2f:d5:73:27:8b:d4:34:76:12:e6:39:67:83: 30:60:fd:8d:74:14:8f:d2:24:38:a0:91:5d:99:40:3d:67:f7: e8:fc:0f:d0:82:e3:dd:a5:47:b0:81:33:99:68:1f:be:33:a3: 85:03:a9:8b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUwNzMxMjAzMDI0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiZDI1Zi1kODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxyrjAJjHk9r1HDrFvc+yjWHw0JfG1xgxABGJuOXs7BIwXBGtiDqRx0z5Lly FT9jaDqe6gJRUZcT84dhSBNqt+VRp3i84l2jJFPdSPVlBXYCmw0KPXu2JR9/2n/u emMCLUohIOeksuS4n+P0OfoE7LeTsTaJPxF0ss35Mnb+H6PahXJOc/9nDJYwv45b vVbAZw7cBhUKVv/8AjSgdLfVT9+n3HFlJXJIzyxNKZHRypR/9EGtKWh50gn+dViX cgi7uwkwsLSmTjspsH8sjJcZik6yHxthQpJED+sRJwZD6i03Ee4lEGJumuGcGlX0 4hW66AxS0rnBNOwAde+jkImHLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOmvAYxA gJllYwiAGTFq1b39BuoeMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERDRDkvNDEwQkJDMTQ0RTZDMTFFQTg5MDQ5NzQ3QzRGOUFFMDIvMjc4NjVEMENB ODEzMTFFRjhCNERCMDFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABni/0wDQYJKoZIhvcNAQELBQADggEBACGOC38VFxmAcZpQ U/SPnasGCLXS0guEy62/L8IlN2O4FUeq2jITTGr+ZPgb4AnovEX83dA5UR1d8Kxl n//kdSNzwYS9FpayRmeDHD/uCGENjZME01IIerlPk9lTma2OasPqC0MZCKJ43qZe k9UiTfZz9pBv4vtSMWNB9l2epazCmga7GiLoCPVINY4ypnkxjBZNm+a7W1S+Elhm FVdxZsxr2fvH2up4x0lw+ouhPAkSY8qCuXqgokuznj6tj6p3cj1rS7049FhqAVT+ L9VzJ4vUNHYS5jlngzBg/Y10FI/SJDigkV2ZQD1n9+j8D9CC492lR7CBM5loH74z o4UDqYs= -----END CERTIFICATE-----Generated at Sun Aug 24 03:15:37 2025 by rpki-client