$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/D968823E3DA111EA9A3FD550C4F9AE02.roa File: D968823E3DA111EA9A3FD550C4F9AE02.roa (raw, json) Hash identifier: 1f6aFvhkVa/N7iAPf2YxVBmmTzpTWpZU9hllszfOpEI= Subject key identifier: 86:A4:18:B4:82:0B:6B:51:FE:40:D5:06:76:87:26:3E:DA:41:8B:DA Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0B8A Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/D968823E3DA111EA9A3FD550C4F9AE02.roa Signing time: Sat 18 Oct 2025 19:58:54 +0000 ROA not before: Sat 18 Oct 2025 19:58:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 38320 IP address blocks: 103.122.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2954 (0xb8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Oct 18 19:58:54 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f3f17d-76fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9f:53:c4:c1:36:04:4e:ec:de:fa:9c:3e:48: 33:64:98:cf:70:46:19:af:c6:5e:53:ee:18:fb:43: 30:f3:e1:7e:60:65:71:83:9c:cc:94:e7:62:66:8a: 89:9a:04:21:a9:e5:d6:44:67:95:91:9c:12:6f:7a: ba:f0:be:89:ef:fc:be:76:44:35:69:e3:af:fe:0e: 4b:c3:39:c2:55:1b:2c:ae:b1:60:54:16:68:ad:a1: a9:65:8a:e4:ed:aa:b1:d1:d5:f9:30:06:6a:ad:e6: 9f:41:fe:13:97:77:1c:52:ae:e7:81:7d:1f:a8:60: 16:1f:59:22:25:b8:e4:3a:f2:74:02:96:9c:bf:11: b8:92:67:e3:e2:df:a2:46:58:7c:d1:d7:c8:df:bb: d3:9b:84:75:e1:f2:04:1e:01:8d:ed:40:26:1d:b3: 1f:20:ef:2c:f0:60:9d:93:25:2a:a7:8b:82:21:89: d0:b1:af:cd:32:16:5a:2f:59:61:9f:c0:7d:83:84: c7:f2:de:ba:7a:04:bb:e2:b6:a6:85:3d:a4:c4:ea: 10:52:d7:70:df:ed:f5:46:ff:6e:66:f5:5b:65:65: fa:76:95:11:73:6c:81:70:ec:58:5b:79:92:58:93: 07:c4:8d:99:cb:bf:8e:16:16:51:de:ce:cd:78:fd: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A4:18:B4:82:0B:6B:51:FE:40:D5:06:76:87:26:3E:DA:41:8B:DA X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/D968823E3DA111EA9A3FD550C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.252.0/22 Signature Algorithm: sha256WithRSAEncryption 56:d1:8d:12:73:a7:d6:a1:73:d1:04:b8:6e:4c:6f:7e:c8:0a: 56:0a:35:7e:23:2b:7d:ae:9f:37:8d:e5:7c:93:0d:ea:56:10: b9:9d:d4:ce:cb:a6:c9:7e:3a:d4:80:98:73:ab:0d:b6:86:f8: 4c:9d:95:44:47:d4:91:bb:df:ad:b8:3c:87:5f:eb:e3:c5:8b: 82:f0:75:e1:2c:36:df:de:d6:ac:ba:4c:33:87:9a:d8:28:23: f9:94:33:20:cc:77:4f:d3:2e:7a:c5:21:61:a7:c2:76:76:4d: 86:80:41:9d:56:34:c6:09:8f:93:d4:50:6d:2a:d2:cc:45:cc: 05:fa:f5:fa:41:a3:5b:a0:3d:79:a4:7a:6d:3c:83:36:e6:aa: ae:b4:cd:f1:32:10:f9:de:17:a6:a8:91:9b:66:86:87:21:65: cc:14:2f:1d:00:06:01:19:04:3c:06:33:d7:e8:7e:10:29:c9: ab:7d:29:7e:71:99:b7:85:95:54:4f:a0:a2:d2:ec:b2:f5:7a: 02:09:ee:b8:b2:c7:14:ed:30:dc:78:cd:dd:91:c1:fe:09:5c: 22:4b:6b:fd:4b:44:23:2c:fd:c4:a6:35:5e:4c:db:06:da:b6: e1:9d:ff:d6:26:7b:31:bd:89:5c:ee:75:26:df:1c:5f:28:bc: 4a:70:30:5e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjUxMDE4MTk1ODU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYzZjE3ZC03NmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0J9TxME2BE7s3vqcPkgzZJjPcEYZr8ZeU+4Y+0Mw8+F+YGVxg5zMlOdiZoqJ mgQhqeXWRGeVkZwSb3q68L6J7/y+dkQ1aeOv/g5LwznCVRssrrFgVBZoraGpZYrk 7aqx0dX5MAZqreafQf4Tl3ccUq7ngX0fqGAWH1kiJbjkOvJ0ApacvxG4kmfj4t+i Rlh80dfI37vTm4R14fIEHgGN7UAmHbMfIO8s8GCdkyUqp4uCIYnQsa/NMhZaL1lh n8B9g4TH8t66egS74ramhT2kxOoQUtdw3+31Rv9uZvVbZWX6dpURc2yBcOxYW3mS WJMHxI2Zy7+OFhZR3s7NeP0a/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIakGLSC C2tR/kDVBnaHJj7aQYvaMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM5QjQvMUVFMTgyOUUzREExMTFFQThCNjdFOTRGQzRGOUFFMDIvRDk2ODgyM0Uz REExMTFFQTlBM0ZENTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnevwwDQYJKoZIhvcNAQELBQADggEBAFbRjRJzp9ahc9EE uG5Mb37IClYKNX4jK32unzeN5XyTDepWELmd1M7Lpsl+OtSAmHOrDbaG+EydlURH 1JG73624PIdf6+PFi4LwdeEsNt/e1qy6TDOHmtgoI/mUMyDMd0/TLnrFIWGnwnZ2 TYaAQZ1WNMYJj5PUUG0q0sxFzAX69fpBo1ugPXmkem08gzbmqq60zfEyEPneF6ao kZtmhochZcwULx0ABgEZBDwGM9fofhApyat9KX5xmbeFlVRPoKLS7LL1egIJ7riy xxTtMNx4zd2Rwf4JXCJLa/1LRCMs/cSmNV5M2wbatuGd/9YmezG9iVzudSbfHF8o vEpwMF4= -----END CERTIFICATE-----Generated at Tue Oct 21 05:18:01 2025 by rpki-client