$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa File: F23AE0AE632D11ED8C102087C4F9AE02.roa (raw, json) Hash identifier: Bi2+TUUi9KjDZhYC/bMb0EhL81rd7MZoY9SFjv5WPeY= Subject key identifier: B1:10:09:C4:14:B9:0C:75:1F:C3:3E:33:73:29:60:27:34:C2:EB:37 Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Certificate serial: 021F Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa Signing time: Tue 09 Sep 2025 02:39:22 +0000 ROA not before: Tue 09 Sep 2025 02:39:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 150302 IP address blocks: 103.217.98.0/24 maxlen: 24 103.217.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Validity Not Before: Sep 9 02:39:22 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68bf9359-76d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:95:7a:6b:17:06:1f:de:66:65:b5:32:46: b7:2e:b5:22:bb:6f:8d:fa:ee:72:48:83:ab:7d:22: 33:ed:e4:7b:ea:f4:d6:01:a9:9b:53:ae:7f:8c:8f: 49:38:cf:c7:c2:f1:85:87:c0:0f:0e:2a:04:ee:92: 79:7e:6a:bc:c6:ff:93:81:ef:f2:2b:f0:e8:22:b5: 69:18:43:ec:16:9b:b5:bb:1c:ab:86:db:a5:43:ff: 46:8a:92:a2:8e:9f:b7:aa:99:c5:6f:62:15:42:4e: 7e:09:9e:99:65:16:0a:f4:82:29:bc:a9:92:45:b0: 95:09:44:95:25:7f:2e:09:ba:8c:5d:84:44:3d:4a: 68:98:4a:b5:8a:24:c3:99:f8:1b:6c:84:d1:fb:08: 7e:4b:0c:3a:6d:50:fc:0f:13:2c:cb:3e:00:23:f3: 3c:68:53:24:41:cd:ea:3d:ba:25:16:86:81:82:74: 92:60:f5:f0:3b:e4:41:f1:ac:a0:81:0c:da:6d:2f: f8:1c:f2:69:2d:5e:fe:28:c2:d4:1b:95:96:f1:b8: 7e:5c:85:09:35:62:24:ff:6b:15:09:0e:3c:8e:f5: 13:28:55:4d:ae:fc:b5:cd:11:03:27:9c:45:ae:1d: 3b:61:30:1d:d8:dc:81:70:8b:2c:37:6c:77:3d:13: c1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:10:09:C4:14:B9:0C:75:1F:C3:3E:33:73:29:60:27:34:C2:EB:37 X509v3 Authority Key Identifier: keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/F23AE0AE632D11ED8C102087C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.217.98.0/23 Signature Algorithm: sha256WithRSAEncryption 00:90:80:5e:8f:17:9b:2c:77:c3:0a:84:36:d1:47:74:5f:2d: 5e:5a:15:56:23:4f:75:36:66:00:28:c8:aa:8f:a6:15:61:3a: bd:f7:da:14:7b:1b:b9:35:55:03:9f:b2:9a:1f:2d:5e:31:81: fc:c5:7b:02:1a:3b:6b:a1:86:82:24:fb:aa:d7:ec:e5:61:c1: 09:8f:77:dd:74:5a:3b:93:cf:e4:5c:58:28:f7:0e:a8:4e:36: 8a:fc:53:cc:dc:e4:5e:01:5f:ba:3d:b3:57:84:2a:38:05:3f: a0:f7:c1:45:4d:9a:52:95:ef:08:27:4c:32:59:8d:75:fc:f4: 6e:c7:fb:5a:4c:d4:df:44:44:4c:23:2f:b5:52:88:53:18:c1: 2c:87:de:0f:a8:f0:67:ea:a8:25:56:53:9c:a0:31:0f:3e:31: 6e:19:0a:1b:b3:0d:8b:08:9c:f9:e9:09:04:5e:c4:21:68:ae: da:7e:bc:b8:07:fd:3a:6d:30:bb:cc:30:02:10:de:cf:e6:47: be:d6:bc:34:dc:b6:dc:32:6a:e1:90:86:cb:3d:3a:e9:5c:89: f2:11:7e:7f:91:e9:bc:4f:e9:c4:aa:15:79:c6:6e:f2:96:d8: 13:04:dd:53:fc:64:ae:91:5b:22:96:8b:89:2d:16:50:53:59: 7c:8d:e3:45 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1MDkxMTAvBgNVBAUTKDUxQkVBMzYwOTQyOUQ5MUIxQzRFNDAyMkRBNjhCRDY0 M0MzM0MzRkIwHhcNMjUwOTA5MDIzOTIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJmOTM1OS03NmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEqVemsXBh/eZmW1Mka3LrUiu2+N+u5ySIOrfSIz7eR76vTWAambU65/jI9J OM/HwvGFh8APDioE7pJ5fmq8xv+Tge/yK/DoIrVpGEPsFpu1uxyrhtulQ/9GipKi jp+3qpnFb2IVQk5+CZ6ZZRYK9IIpvKmSRbCVCUSVJX8uCbqMXYREPUpomEq1iiTD mfgbbITR+wh+Sww6bVD8DxMsyz4AI/M8aFMkQc3qPbolFoaBgnSSYPXwO+RB8ayg gQzabS/4HPJpLV7+KMLUG5WW8bh+XIUJNWIk/2sVCQ48jvUTKFVNrvy1zREDJ5xF rh07YTAd2NyBcIssN2x3PRPBPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLEQCcQU uQx1H8M+M3MpYCc0wus3MB8GA1UdIwQYMBaAFFG+o2CUKdkbHE5AItpovWQ8M8P7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUwOS8yNzRFRDE1RTYw MUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJSc2NUa0FpMm1pOVpEd3p3 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ViNmpZSlFwMlJzY1RrQWkybWk5WkR3endfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk1MDkvMjc0RUQxNUU2MDFBMTFFREI3NDE2QjZDQzRGOUFFMDIvRjIzQUUwQUU2 MzJEMTFFRDhDMTAyMDg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn2WIwDQYJKoZIhvcNAQELBQADggEBAACQgF6PF5ssd8MK hDbRR3RfLV5aFVYjT3U2ZgAoyKqPphVhOr332hR7G7k1VQOfspofLV4xgfzFewIa O2uhhoIk+6rX7OVhwQmPd910WjuTz+RcWCj3DqhONor8U8zc5F4BX7o9s1eEKjgF P6D3wUVNmlKV7wgnTDJZjXX89G7H+1pM1N9EREwjL7VSiFMYwSyH3g+o8GfqqCVW U5ygMQ8+MW4ZChuzDYsInPnpCQRexCFortp+vLgH/TptMLvMMAIQ3s/mR77WvDTc ttwyauGQhss9OulcifIRfn+R6bxP6cSqFXnGbvKW2BME3VP8ZK6RWyKWi4ktFlBT WXyN40U= -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:26 2025 by rpki-client