$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/C26576D4F4ED11E9ACC51713C4F9AE02.roa File: C26576D4F4ED11E9ACC51713C4F9AE02.roa (raw, json) Hash identifier: iq5QW3Y97Rtj3h5uSMsDVDo+gTS/iiUYWbO1Wkr9rpU= Subject key identifier: 9E:E7:95:F0:CB:AD:FE:04:2B:63:0B:D0:F9:F8:CF:15:A9:1E:0D:D0 Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Certificate serial: 0E45 Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/C26576D4F4ED11E9ACC51713C4F9AE02.roa Signing time: Thu 02 Oct 2025 18:17:18 +0000 ROA not before: Thu 02 Oct 2025 18:17:18 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 63526 IP address blocks: 103.120.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3653 (0xe45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Validity Not Before: Oct 2 18:17:18 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68dec1ae-c3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:79:76:3a:f2:cc:25:53:26:48:96:b8:40: b8:67:fa:69:dd:07:0d:f1:af:14:00:02:a1:14:fe: b7:2f:60:eb:95:b1:ac:c5:24:0f:62:b0:3d:0a:a8: 76:02:ec:5c:10:ed:f4:34:62:66:8e:29:fb:50:f2: 2d:92:f8:0a:65:34:c3:38:62:b9:4a:16:ca:fe:fe: c2:95:93:51:9e:ed:45:90:05:68:67:a7:53:61:77: 36:c2:60:69:a1:c7:5b:9f:d5:e3:b9:0b:6f:5c:f6: 11:6b:0b:35:98:41:ca:26:dd:d1:5f:56:9e:aa:9a: 53:d1:0c:78:d7:d2:46:e1:bf:b1:92:fb:32:85:f2: 18:f2:20:8d:23:7e:af:83:b8:ce:f9:c9:c1:10:2a: 87:06:7e:db:87:6f:0d:cc:1b:9e:01:ee:1d:ea:2f: a7:83:94:99:7b:bf:8c:b8:a1:a9:f5:d8:84:82:bb: a9:eb:71:e7:42:45:a7:2b:0d:a3:7d:ad:d2:42:8e: 6e:ed:43:da:1c:ee:2c:86:e3:ef:4d:d4:ef:b1:7b: 98:7d:0c:d1:b6:c3:9d:c4:83:5e:22:ed:67:5e:07: e3:26:97:b4:78:ff:d2:b2:35:60:d2:1a:52:46:70: 19:b8:4c:87:5e:83:91:b2:f1:44:b1:25:c2:e2:97: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E7:95:F0:CB:AD:FE:04:2B:63:0B:D0:F9:F8:CF:15:A9:1E:0D:D0 X509v3 Authority Key Identifier: keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/C26576D4F4ED11E9ACC51713C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.200.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:1e:c4:fa:0a:4c:09:62:bc:cf:da:61:49:64:97:de:ab:41: 19:d5:7d:d6:f9:52:c0:0a:08:6c:d8:25:98:63:6a:44:e5:38: dd:fb:3c:78:c7:af:3d:1f:29:c1:51:54:f9:ce:fd:db:b8:0b: 61:2c:3e:48:03:da:c6:cf:4a:20:0c:0a:3a:1a:87:26:06:01: 2d:25:bf:29:15:be:ee:cf:68:7e:5b:77:5f:7a:b5:26:ac:9a: 68:29:45:60:3e:06:d8:ef:0a:71:4b:65:93:c4:cd:f5:6d:b9: 4e:7b:fe:52:cc:df:84:2f:e1:4e:0b:6a:c1:cb:e0:8e:81:a4: f2:d6:48:e3:44:d1:2e:66:20:48:ad:57:e8:c3:7f:8d:19:3a: 11:87:b9:b0:b6:35:36:8e:ba:4e:2b:fa:df:6c:2a:d6:0e:0e: c2:3e:53:0b:14:95:33:3f:04:25:f8:1a:05:8c:9c:0e:15:e4: 7b:26:20:ca:e9:1f:e3:f4:8a:1c:61:6e:74:22:0b:3f:83:6d: 8b:09:2f:aa:26:0f:e2:70:28:df:ec:27:c4:df:93:78:9d:52: 48:d0:2b:40:ea:b6:a3:b0:c0:9c:5e:96:3b:8e:7e:6b:eb:6e: ba:81:3c:85:32:e4:d9:c7:80:30:ce:36:05:99:21:cd:a0:8f: f7:43:a3:18 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw M0I3MkUyMzYwHhcNMjUxMDAyMTgxNzE4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlYzFhZS1jM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkrZ5djryzCVTJkiWuEC4Z/pp3QcN8a8UAAKhFP63L2DrlbGsxSQPYrA9Cqh2 AuxcEO30NGJmjin7UPItkvgKZTTDOGK5ShbK/v7ClZNRnu1FkAVoZ6dTYXc2wmBp ocdbn9XjuQtvXPYRaws1mEHKJt3RX1aeqppT0Qx419JG4b+xkvsyhfIY8iCNI36v g7jO+cnBECqHBn7bh28NzBueAe4d6i+ng5SZe7+MuKGp9diEgrup63HnQkWnKw2j fa3SQo5u7UPaHO4shuPvTdTvsXuYfQzRtsOdxINeIu1nXgfjJpe0eP/SsjVg0hpS RnAZuEyHXoORsvFEsSXC4pfgWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ7nlfDL rf4EK2ML0Pn4zxWpHg3QMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTMzRDcvREM3RDg4NjRBRUIwMTFFOThEMDhFMTNDQzRGOUFFMDIvQzI2NTc2RDRG NEVEMTFFOUFDQzUxNzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneMgwDQYJKoZIhvcNAQELBQADggEBAH8exPoKTAlivM/a YUlkl96rQRnVfdb5UsAKCGzYJZhjakTlON37PHjHrz0fKcFRVPnO/du4C2EsPkgD 2sbPSiAMCjoahyYGAS0lvykVvu7PaH5bd196tSasmmgpRWA+BtjvCnFLZZPEzfVt uU57/lLM34Qv4U4LasHL4I6BpPLWSONE0S5mIEitV+jDf40ZOhGHubC2NTaOuk4r +t9sKtYODsI+UwsUlTM/BCX4GgWMnA4V5HsmIMrpH+P0ihxhbnQiCz+DbYsJL6om D+JwKN/sJ8Tfk3idUkjQK0DqtqOwwJxeljuOfmvrbrqBPIUy5NnHgDDONgWZIc2g j/dDoxg= -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:13 2025 by rpki-client