$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/A3E5DB46A8B911F09B776445C4F9AE02.roa File: A3E5DB46A8B911F09B776445C4F9AE02.roa (raw, json) Hash identifier: qOtnCDQlpjOtnx/hK0mhrlg08ljwiyNWi/uM19rlLro= Subject key identifier: 2E:DA:5D:F1:97:14:81:6E:F0:90:01:09:E2:C3:28:51:69:55:F7:A2 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0558 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/A3E5DB46A8B911F09B776445C4F9AE02.roa Signing time: Tue 14 Oct 2025 04:52:52 +0000 ROA not before: Tue 14 Oct 2025 04:52:52 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 834 IP address blocks: 103.204.21.0/24 maxlen: 24 103.204.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Oct 14 04:52:52 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68edd724-c9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:78:d4:0c:d5:ba:04:fc:6b:17:fd:a0:01: 09:32:36:d1:85:06:37:73:42:a8:a0:e7:1c:65:74: 85:b5:32:1d:bf:0f:e5:c5:3c:f4:89:94:4d:9f:f6: 2a:e4:94:7a:ec:b0:cf:45:a4:38:4a:3c:7d:c1:18: 92:57:43:69:8c:05:03:88:75:13:d9:5f:97:f6:ba: 26:a2:52:a2:af:fc:6b:d8:eb:0b:94:22:bd:15:7d: a8:d7:71:82:6d:19:38:88:84:44:00:75:ba:0d:16: 46:e5:47:ff:1a:61:5f:be:c1:a0:5b:17:89:27:c2: 7e:f1:7e:7f:36:68:d3:0b:e5:a9:65:11:e2:d2:ca: 98:07:f8:53:c7:8e:38:a2:9d:cb:59:b8:0b:98:95: 61:2b:58:19:45:2a:76:aa:29:a1:5c:b1:1e:1a:26: 66:d7:bb:84:0d:2f:a1:8b:c9:64:05:18:cc:e3:5e: 71:6b:f6:bf:eb:88:3b:21:44:72:b2:f3:ca:57:a2: ea:54:a7:32:d5:df:f8:04:5e:55:ed:0b:43:4b:9d: c0:eb:96:0c:5a:af:ed:c3:44:bc:af:d5:8f:56:fa: 9a:88:04:60:03:fa:6e:25:27:73:13:c4:48:a0:7d: d7:b6:8d:05:92:a0:23:67:f9:b3:e4:2f:ab:c3:06: c8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DA:5D:F1:97:14:81:6E:F0:90:01:09:E2:C3:28:51:69:55:F7:A2 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/A3E5DB46A8B911F09B776445C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.21.0-103.204.22.255 Signature Algorithm: sha256WithRSAEncryption 14:64:bb:37:b1:ad:d6:9d:e0:91:73:63:80:98:19:84:af:d7: 66:e1:80:87:ed:c8:77:df:4d:b7:32:b7:83:79:d8:80:e1:73: 98:41:fc:e3:1e:fc:15:c0:be:aa:d5:4f:4e:de:11:8d:c7:10: c7:6c:9e:c2:f6:4f:bd:40:c8:50:ee:a8:52:7e:f2:b4:dd:fe: e3:3a:1e:fa:d1:fe:0f:6c:84:30:93:1c:61:f2:6e:29:61:70: 2c:17:8b:5b:a1:36:cf:ca:cf:32:18:38:58:7b:36:13:9d:b8: 62:fb:d6:49:de:27:f7:84:95:22:ea:27:98:a2:d3:68:15:3e: a1:67:0a:58:55:bf:02:29:a3:94:ec:c7:04:2f:e6:10:2e:87: 41:7e:89:df:ae:f0:97:19:47:fa:08:d5:d4:c6:f3:cc:30:c2: f8:ee:61:58:e9:79:37:1e:04:26:2a:60:4c:dd:f4:2c:60:26: d9:19:92:0a:c7:45:a6:c9:20:aa:c7:7f:61:f3:e0:4a:64:5f: 12:9e:88:e3:78:ae:fd:5f:d4:32:f3:54:46:70:a8:5e:97:e3: a6:8a:1d:ff:42:53:eb:c5:f3:8e:90:88:8d:bd:f2:3b:3b:92: 1b:89:dd:a9:06:c4:7e:7e:53:c4:e5:f6:bc:43:df:14:84:8c: a5:d6:48:ab -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUxMDE0MDQ1MjUyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVkZDcyNC1jOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDR41AzVugT8axf9oAEJMjbRhQY3c0KooOccZXSFtTIdvw/lxTz0iZRNn/Yq 5JR67LDPRaQ4Sjx9wRiSV0NpjAUDiHUT2V+X9romolKir/xr2OsLlCK9FX2o13GC bRk4iIREAHW6DRZG5Uf/GmFfvsGgWxeJJ8J+8X5/NmjTC+WpZRHi0sqYB/hTx444 op3LWbgLmJVhK1gZRSp2qimhXLEeGiZm17uEDS+hi8lkBRjM415xa/a/64g7IURy svPKV6LqVKcy1d/4BF5V7QtDS53A65YMWq/tw0S8r9WPVvqaiARgA/puJSdzE8RI oH3Xto0FkqAjZ/mz5C+rwwbIAQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFC7aXfGX FIFu8JABCeLDKFFpVfeiMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBEODcvRjY4M0NFRjIyMUVCMTFFQzkyNTAxODE5QzRGOUFFMDIvQTNFNURCNDZB OEI5MTFGMDlCNzc2NDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGfMFQMEAGfMFjANBgkqhkiG9w0BAQsFAAOCAQEAFGS7 N7Gt1p3gkXNjgJgZhK/XZuGAh+3Id99NtzK3g3nYgOFzmEH84x78FcC+qtVPTt4R jccQx2yewvZPvUDIUO6oUn7ytN3+4zoe+tH+D2yEMJMcYfJuKWFwLBeLW6E2z8rP Mhg4WHs2E524YvvWSd4n94SVIuonmKLTaBU+oWcKWFW/AimjlOzHBC/mEC6HQX6J 367wlxlH+gjV1MbzzDDC+O5hWOl5Nx4EJipgTN30LGAm2RmSCsdFpskgqsd/YfPg SmRfEp6I43iu/V/UMvNURnCoXpfjpood/0JT68XzjpCIjb3yOzuSG4ndqQbEfn5T xOX2vEPfFISMpdZIqw== -----END CERTIFICATE-----Generated at Sun Oct 19 14:41:42 2025 by rpki-client