$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/D276D68CACDC11F093B6B95AC4F9AE02.roa File: D276D68CACDC11F093B6B95AC4F9AE02.roa (raw, json) Hash identifier: HogXJmL/NwNRLzeVXgVFZcWMkVgOGwGFOMaQzjDPXUk= Subject key identifier: FC:08:6D:DF:CB:19:43:B0:87:DB:C7:07:13:CF:81:F5:82:47:C9:46 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1193 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/D276D68CACDC11F093B6B95AC4F9AE02.roa Signing time: Sun 19 Oct 2025 11:14:47 +0000 ROA not before: Sun 19 Oct 2025 11:14:47 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136406 IP address blocks: 103.86.193.0/24 maxlen: 24 103.86.195.0/24 maxlen: 24 220.152.114.0/24 maxlen: 24 2400:c640::/32 maxlen: 36 2400:c640:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4499 (0x1193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Oct 19 11:14:47 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68f4c827-5202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:62:cd:3e:65:83:a4:11:98:89:2f:e6:b0: 23:c2:ce:05:67:8c:e5:a6:7d:a3:f2:a2:17:1a:a7: 8a:4e:35:72:aa:1a:28:97:14:1e:08:7e:8d:d2:ab: 1d:39:bd:cd:9f:05:cd:54:ce:20:4b:6e:88:36:33: 8c:66:cc:d5:62:4b:ab:de:e4:48:49:58:8f:c9:69: 29:94:7a:bf:7c:3d:18:5e:9c:a8:1c:96:f1:e7:54: bd:46:ad:3c:1e:1d:15:d6:29:a7:68:bd:e5:90:37: 35:69:b8:25:b4:7b:93:25:9d:8f:bb:5b:62:f5:5e: 90:9c:12:e2:78:39:26:c5:43:db:09:95:28:8c:f0: 64:2a:3f:b1:54:78:71:55:bb:9b:55:31:25:e3:23: 7a:1c:8d:38:df:9c:21:32:21:cb:99:a1:c5:92:00: 4c:03:f1:8f:4b:d1:45:6a:6a:69:3d:64:3d:47:15: c7:15:a4:64:27:fa:21:8b:4b:2c:d6:b2:df:e7:08: 99:87:5d:d2:9b:18:d7:2d:19:13:04:5d:01:17:c5: bb:2b:b1:74:d7:48:7c:84:f5:3a:dd:2f:21:d1:af: 5d:1b:0f:5e:52:aa:9e:0d:74:93:f2:96:8b:d4:7c: 05:be:5c:eb:33:f2:57:5b:fe:5c:0c:ff:05:a7:a2: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:08:6D:DF:CB:19:43:B0:87:DB:C7:07:13:CF:81:F5:82:47:C9:46 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/D276D68CACDC11F093B6B95AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.193.0/24 103.86.195.0/24 220.152.114.0/24 IPv6: 2400:c640::/32 Signature Algorithm: sha256WithRSAEncryption 7d:d7:e9:38:d6:21:fc:2e:d3:b1:2d:7e:6f:10:42:38:c4:a5: 92:79:16:b7:65:e8:26:f2:ae:a5:92:8f:e1:c5:34:e7:04:4a: a4:96:0c:40:b8:04:a7:1e:be:aa:72:e1:be:23:bf:c4:7a:bc: 57:7a:6e:fb:e0:23:9e:c7:68:cd:9d:9c:7d:ce:c6:f6:f0:ed: e9:c7:87:0e:e0:d3:15:56:85:87:59:4e:da:41:e5:9d:22:cc: f2:05:b6:af:76:d3:eb:0c:cb:5c:0f:43:74:4a:6b:e8:1a:e3: 71:2c:da:c4:d5:bc:0d:43:e2:3b:03:d1:14:26:66:76:48:5b: 33:fb:d3:b7:aa:c2:4c:94:fe:ca:83:cd:c3:3c:b7:e1:da:26: 2a:7d:fb:db:82:f1:99:f5:32:30:be:cd:f0:f8:f8:86:54:4e: 59:1d:c8:de:d6:05:21:f3:fa:d9:84:e4:94:cf:78:36:14:21: d7:ce:19:53:b4:97:fe:54:31:1d:32:aa:da:c4:b9:ce:d5:80: cf:78:50:73:1e:79:42:9f:a9:1c:9d:02:83:fe:18:c7:92:ca: 1e:51:f1:b7:14:7a:7e:3e:0c:51:7b:81:95:77:17:73:75:22: 81:96:c3:5a:1d:9f:96:03:e7:2c:0b:6e:94:17:81:43:c2:92: a4:a2:f1:f1 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICEZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUxMDE5MTExNDQ3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGY0YzgyNy01MjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZpizT5lg6QRmIkv5rAjws4FZ4zlpn2j8qIXGqeKTjVyqhoolxQeCH6N0qsd Ob3NnwXNVM4gS26INjOMZszVYkur3uRISViPyWkplHq/fD0YXpyoHJbx51S9Rq08 Hh0V1imnaL3lkDc1abgltHuTJZ2Pu1ti9V6QnBLieDkmxUPbCZUojPBkKj+xVHhx VbubVTEl4yN6HI0435whMiHLmaHFkgBMA/GPS9FFamppPWQ9RxXHFaRkJ/ohi0ss 1rLf5wiZh13SmxjXLRkTBF0BF8W7K7F010h8hPU63S8h0a9dGw9eUqqeDXST8paL 1HwFvlzrM/JXW/5cDP8Fp6JoKQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPwIbd/L GUOwh9vHBxPPgfWCR8lGMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvRDI3NkQ2OENB Q0RDMTFGMDkzQjZCOTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABnVsEDBABnVsMDBADcmHIwDQQCAAIwBwMFACQAxkAwDQYJ KoZIhvcNAQELBQADggEBAH3X6TjWIfwu07Etfm8QQjjEpZJ5Frdl6CbyrqWSj+HF NOcESqSWDEC4BKcevqpy4b4jv8R6vFd6bvvgI57HaM2dnH3Oxvbw7enHhw7g0xVW hYdZTtpB5Z0izPIFtq920+sMy1wPQ3RKa+ga43Es2sTVvA1D4jsD0RQmZnZIWzP7 07eqwkyU/sqDzcM8t+HaJip9+9uC8Zn1MjC+zfD4+IZUTlkdyN7WBSHz+tmE5JTP eDYUIdfOGVO0l/5UMR0yqtrEuc7VgM94UHMeeUKfqRydAoP+GMeSyh5R8bcUen4+ DFF7gZV3F3N1IoGWw1odn5YD5ywLbpQXgUPCkqSi8fE= -----END CERTIFICATE-----Generated at Tue Oct 21 01:57:13 2025 by rpki-client