$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/F3173EDC898C11EA97286262C4F9AE02.roa File: F3173EDC898C11EA97286262C4F9AE02.roa (raw, json) Hash identifier: BtxRntrFd2gslQewNiqZhW9mWCF+vgLPC26me/9r2bU= Subject key identifier: B9:D6:23:DD:1C:83:8C:C5:F2:61:8F:FC:A0:54:B4:CB:1C:24:1C:34 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 09E0 Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/F3173EDC898C11EA97286262C4F9AE02.roa Signing time: Tue 30 Sep 2025 20:21:58 +0000 ROA not before: Tue 30 Sep 2025 20:21:58 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132165 IP address blocks: 27.96.92.0/24 maxlen: 24 27.96.93.0/24 maxlen: 24 27.96.94.0/24 maxlen: 24 27.96.95.0/24 maxlen: 24 103.196.160.0/24 maxlen: 24 103.196.161.0/24 maxlen: 24 103.196.162.0/24 maxlen: 24 103.196.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2528 (0x9e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: Sep 30 20:21:58 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dc3be6-6d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:bc:88:0d:35:21:5f:03:ca:2c:8f:c7:f7: 01:17:35:91:84:f1:29:31:95:19:55:6f:33:9b:bc: 97:d9:28:a5:1a:ab:94:d0:46:96:9a:8a:a2:eb:c4: 4b:fb:9d:60:d2:df:59:bb:13:74:a8:68:6c:a2:c3: 2f:9f:b4:3d:7f:66:a7:ec:62:80:1e:99:dc:0d:0e: 37:a0:8d:3d:64:d3:eb:c9:42:57:b8:eb:63:65:72: 24:3a:81:bf:85:7c:1c:b8:e6:53:2a:3c:28:b5:b8: 11:06:35:1a:55:27:5f:cc:18:7d:b8:fc:f3:4b:e6: 8d:ed:58:3a:93:82:43:ae:e0:50:49:22:a4:d2:63: 28:ac:d7:0b:d9:cb:a0:a6:a8:e5:73:4e:27:01:81: 20:dd:b6:bb:81:1c:41:3d:b8:40:2a:39:d3:8a:ef: 64:fa:28:c6:b1:ee:13:52:8b:1b:e7:72:96:db:7c: a9:21:fc:de:df:fa:db:4f:8b:6c:ac:1d:a3:c8:cb: b8:18:d4:a5:29:fc:3d:cf:3a:a4:06:62:5e:12:e2: dd:fa:6f:24:0a:f7:d2:b0:db:75:9d:08:ac:33:d7: 83:f1:2b:d7:c4:2d:ed:ec:9d:4b:3f:b6:48:60:c6: 95:53:df:5d:ac:b3:27:45:ad:48:fc:ea:18:d6:c4: 20:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D6:23:DD:1C:83:8C:C5:F2:61:8F:FC:A0:54:B4:CB:1C:24:1C:34 X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/F3173EDC898C11EA97286262C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.96.92.0/22 103.196.160.0/22 Signature Algorithm: sha256WithRSAEncryption 12:fa:a3:5e:2f:ec:11:7d:f0:fa:ad:7b:02:89:3e:73:a0:ec: 4e:d5:15:f6:85:dc:a6:af:f6:c8:8f:68:7b:21:7e:db:f8:01: 34:32:d1:a2:33:94:1b:c8:7b:fe:3e:6c:dc:a2:f5:f4:38:7b: 58:27:f1:a1:5d:b1:92:68:02:5a:f8:51:5b:74:5e:d9:78:70: 5d:80:13:68:98:01:b1:b1:6f:90:30:44:f1:d3:2e:6c:3a:cb: 0d:45:49:ec:1c:ec:54:a1:41:51:de:2e:16:ef:bf:c1:1f:c8: af:b3:42:33:b0:57:34:f5:a9:d3:00:7e:3f:f6:12:81:8c:92: a2:ce:80:7c:7a:15:81:5a:9c:8f:5e:9d:ec:48:03:d1:a7:e2: 6a:a7:d9:c8:25:f0:6d:eb:4d:ba:ba:8b:f4:4c:4d:c8:35:86: 80:b2:80:fb:8d:97:bd:e7:a6:74:af:f2:1b:9d:22:01:cf:42: c3:4a:c7:55:3c:6c:45:8b:ab:4b:a7:90:95:4d:19:14:89:f0: 6e:1a:5a:53:84:e9:6b:99:1f:f9:6a:7a:0c:31:98:ba:f7:5a: 53:cb:f0:ff:05:c2:a0:39:04:91:87:cb:39:8d:bc:5f:16:0e: 5b:cc:53:e3:44:a5:d0:a3:ab:6d:5a:a3:41:7f:37:3f:17:e2: db:cd:00:6b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjUwOTMwMjAyMTU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjM2JlNi02ZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiG8iA01IV8DyiyPx/cBFzWRhPEpMZUZVW8zm7yX2SilGquU0EaWmoqi68RL +51g0t9ZuxN0qGhsosMvn7Q9f2an7GKAHpncDQ43oI09ZNPryUJXuOtjZXIkOoG/ hXwcuOZTKjwotbgRBjUaVSdfzBh9uPzzS+aN7Vg6k4JDruBQSSKk0mMorNcL2cug pqjlc04nAYEg3ba7gRxBPbhAKjnTiu9k+ijGse4TUosb53KW23ypIfze3/rbT4ts rB2jyMu4GNSlKfw9zzqkBmJeEuLd+m8kCvfSsNt1nQisM9eD8SvXxC3t7J1LP7ZI YMaVU99drLMnRa1I/OoY1sQgkQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLnWI90c g4zF8mGP/KBUtMscJBw0MB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTcxNjQvMjI4QUJGNzQ4OThCMTFFQTkyNzU5QTVDQzRGOUFFMDIvRjMxNzNFREM4 OThDMTFFQTk3Mjg2MjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIbYFwDBAJnxKAwDQYJKoZIhvcNAQELBQADggEBABL6o14v 7BF98PqtewKJPnOg7E7VFfaF3Kav9siPaHshftv4ATQy0aIzlBvIe/4+bNyi9fQ4 e1gn8aFdsZJoAlr4UVt0Xtl4cF2AE2iYAbGxb5AwRPHTLmw6yw1FSewc7FShQVHe Lhbvv8EfyK+zQjOwVzT1qdMAfj/2EoGMkqLOgHx6FYFanI9enexIA9Gn4mqn2cgl 8G3rTbq6i/RMTcg1hoCygPuNl73npnSv8hudIgHPQsNKx1U8bEWLq0unkJVNGRSJ 8G4aWlOE6WuZH/lqegwxmLr3WlPL8P8FwqA5BJGHyzmNvF8WDlvMU+NEpdCjq21a o0F/Nz8X4tvNAGs= -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:32 2025 by rpki-client