$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/7083BABC100311EE8B670F78C4F9AE02.roa File: 7083BABC100311EE8B670F78C4F9AE02.roa (raw, json) Hash identifier: 9j+LK0QHnkGYtPNakBubHKZ/6YjPaB29/d58er0EGgA= Subject key identifier: A3:FF:FD:4F:43:E9:31:0E:DB:01:AF:76:D9:7D:F5:3E:58:C4:C3:13 Certificate issuer: /CN=A91E1022/serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0 Certificate serial: 01BD Authority key identifier: 76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/7083BABC100311EE8B670F78C4F9AE02.roa Signing time: Sat 27 Sep 2025 04:01:29 +0000 ROA not before: Sat 27 Sep 2025 04:01:29 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 141153 IP address blocks: 103.192.38.0/23 maxlen: 23 103.192.38.0/24 maxlen: 24 103.192.39.0/24 maxlen: 24 2407:6480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1022, serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0 Validity Not Before: Sep 27 04:01:29 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68d76199-3052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:54:a7:2e:68:12:a6:da:41:b9:dd:c0:80: 12:02:51:a7:94:9b:0d:8f:82:16:a4:ed:bd:de:12: 56:93:20:e3:b3:51:60:c5:b6:f0:40:dd:58:ae:3b: 01:6d:41:82:71:89:a0:22:69:58:20:dd:f8:16:9c: 05:c2:ef:e3:a0:58:02:ef:2c:86:d8:a0:cd:36:95: f1:7b:6c:00:e8:ad:20:c1:50:bc:90:2a:39:a8:ed: 9d:3e:30:d2:cb:4f:82:18:2b:7d:82:86:ce:87:ef: 88:9a:52:85:98:c4:5d:a8:54:79:40:76:41:fa:0f: 7e:3e:66:ab:c5:70:1c:4d:71:54:3f:c4:1a:da:02: f0:fa:47:37:d7:a9:0e:20:4f:12:a5:a9:10:52:6c: e7:be:86:16:72:96:1d:56:8b:8f:bd:8e:49:c6:68: 79:91:9c:7e:f5:99:52:c8:eb:d7:6b:26:be:60:d8: 8a:3c:15:3c:2f:fa:96:01:7b:e0:30:a2:a4:9b:03: ab:24:96:23:1c:a4:c2:e2:ff:83:39:45:fb:4b:3a: e4:01:eb:87:d2:85:04:3a:2c:48:f8:2b:f3:82:94: a8:e2:ef:5b:46:c7:61:a9:85:20:7c:34:f2:a8:16: 20:5b:8a:a6:cd:f2:e7:d0:52:a4:3c:79:c8:3b:35: 11:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:FD:4F:43:E9:31:0E:DB:01:AF:76:D9:7D:F5:3E:58:C4:C3:13 X509v3 Authority Key Identifier: keyid:76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/7083BABC100311EE8B670F78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.192.38.0/23 IPv6: 2407:6480::/32 Signature Algorithm: sha256WithRSAEncryption 36:02:c6:b8:50:e9:22:68:5a:3f:50:62:89:74:50:f8:19:73: 30:b9:ad:53:43:85:1c:ff:02:d1:b1:fc:29:f6:31:88:fa:a0: fd:19:ee:64:46:76:88:2f:79:1b:97:9f:f3:07:a5:2b:89:9f: 5e:fa:2a:dc:35:a7:e8:b0:2a:5e:64:96:16:76:bd:a1:2a:56: 6c:5c:90:ba:d8:2c:b3:6d:b7:f9:bc:31:51:6d:cb:46:8e:78: 90:6c:f3:aa:70:4c:34:a0:40:04:ed:ff:b9:9e:57:a7:8c:ce: a2:7b:2d:bf:e9:c9:aa:32:19:15:e7:9f:a0:45:4f:80:8a:03: 38:53:4c:e2:df:08:55:d7:ab:c8:b4:d4:2e:7e:48:72:22:90: a4:84:34:83:c2:e0:33:81:2d:d5:aa:31:b7:1b:9c:74:7e:9d: 90:9c:8f:0e:21:1c:e8:7d:5a:7f:49:cc:48:45:04:06:d0:b3: 24:a0:7f:76:be:20:89:88:92:5d:2d:ef:01:bf:75:39:fd:bd: 82:9d:21:87:9c:39:d4:50:0c:5a:48:b0:0b:ea:b6:1f:70:f0: 70:a6:32:c2:81:44:05:dd:e5:6e:75:fd:df:14:c7:be:92:d3: 3f:da:d3:9d:65:7c:d8:4a:c0:ac:b8:c7:ea:80:e4:87:a2:0b: c1:5d:0d:3f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEwMjIxMTAvBgNVBAUTKDc2QUEyMENBMjRBNkMyRTMyODg3NkQwMDREMTMxNEUx MTdBNkU3RDAwHhcNMjUwOTI3MDQwMTI5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ3NjE5OS0zMDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzChUpy5oEqbaQbndwIASAlGnlJsNj4IWpO293hJWkyDjs1FgxbbwQN1YrjsB bUGCcYmgImlYIN34FpwFwu/joFgC7yyG2KDNNpXxe2wA6K0gwVC8kCo5qO2dPjDS y0+CGCt9gobOh++ImlKFmMRdqFR5QHZB+g9+PmarxXAcTXFUP8Qa2gLw+kc316kO IE8SpakQUmznvoYWcpYdVouPvY5Jxmh5kZx+9ZlSyOvXaya+YNiKPBU8L/qWAXvg MKKkmwOrJJYjHKTC4v+DOUX7SzrkAeuH0oUEOixI+CvzgpSo4u9bRsdhqYUgfDTy qBYgW4qmzfLn0FKkPHnIOzURYQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKP//U9D 6TEO2wGvdtl99T5YxMMTMB8GA1UdIwQYMBaAFHaqIMokpsLjKIdtAE0TFOEXpufQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTAyMi85Q0MwMEE0QTBG RkUxMUVFQjYxOTJCNzZDNEY5QUUwMi9kcW9neWlTbXd1TW9oMjBBVFJNVTRSZW01 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Rxb2d5aVNtd3VNb2gyMEFUUk1VNFJlbTU5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTEwMjIvOUNDMDBBNEEwRkZFMTFFRUI2MTkyQjc2QzRGOUFFMDIvNzA4M0JBQkMx MDAzMTFFRThCNjcwRjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnwCYwDQQCAAIwBwMFACQHZIAwDQYJKoZIhvcNAQELBQAD ggEBADYCxrhQ6SJoWj9QYol0UPgZczC5rVNDhRz/AtGx/Cn2MYj6oP0Z7mRGdogv eRuXn/MHpSuJn176Ktw1p+iwKl5klhZ2vaEqVmxckLrYLLNtt/m8MVFty0aOeJBs 86pwTDSgQATt/7meV6eMzqJ7Lb/pyaoyGRXnn6BFT4CKAzhTTOLfCFXXq8i01C5+ SHIikKSENIPC4DOBLdWqMbcbnHR+nZCcjw4hHOh9Wn9JzEhFBAbQsySgf3a+IImI kl0t7wG/dTn9vYKdIYecOdRQDFpIsAvqth9w8HCmMsKBRAXd5W51/d8Ux76S0z/a 051lfNhKwKy4x+qA5IeiC8FdDT8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:16:55 2025 by rpki-client