$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa File: C9989D9EF52011EF88416555C4F9AE02.roa (raw, json) Hash identifier: J1Y3R18xnrLrxVnTd6dnJAcJxU9kFVJTgj8vMihGb8o= Subject key identifier: E9:AE:E2:9A:7C:0E:98:24:FF:C9:C0:24:B9:28:53:EB:90:1E:63:DD Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Certificate serial: 0C6A Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa Signing time: Wed 15 Oct 2025 10:32:40 +0000 ROA not before: Wed 15 Oct 2025 10:32:40 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136022 IP address blocks: 103.134.40.0/24 maxlen: 24 103.134.41.0/24 maxlen: 24 2404:5cc0::/32 maxlen: 32 2404:5cc0::/48 maxlen: 48 2404:5cc0:1::/48 maxlen: 48 2404:5cc0:2::/48 maxlen: 48 2404:5cc0:3::/48 maxlen: 48 2404:5cc0:4::/48 maxlen: 48 2404:5cc0:5::/48 maxlen: 48 2404:5cc0:6::/48 maxlen: 48 2404:5cc0:7::/48 maxlen: 48 2404:5cc0:8::/48 maxlen: 48 2404:5cc0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA2CC, serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Validity Not Before: Oct 15 10:32:40 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68ef7847-5c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9c:6d:bb:df:0b:9a:3f:70:d1:b6:08:14:c2: bd:34:32:27:f2:ea:51:6b:ba:9d:ff:cf:e8:d8:eb: 6d:08:a0:93:4b:87:75:b3:05:4a:b1:88:90:6f:9b: 57:68:fe:05:c2:bb:97:8d:85:6b:56:b2:8f:da:73: 95:62:94:cb:9f:71:64:ac:f8:95:50:97:10:8c:5b: 17:81:0f:25:8f:f5:00:c2:ee:6d:ee:7d:6a:95:73: 02:9d:24:12:b7:a4:cb:c2:ca:d2:55:fa:35:17:31: 38:01:bb:42:a3:a9:e3:e4:fb:1c:eb:9b:0d:93:ad: 72:90:83:06:db:7c:5e:0a:ba:a8:36:57:d4:ed:1a: 61:d2:3d:83:75:b8:aa:8f:d2:d1:f5:4d:c4:69:e1: ae:93:44:1a:eb:67:ec:4b:e9:65:43:c0:55:fc:ef: 16:76:05:fe:0a:59:97:98:96:2e:27:5b:31:cd:24: 23:5e:44:80:c2:d4:31:bb:84:40:98:7a:2b:7c:97: 2e:69:01:cc:51:3a:31:44:f6:c8:5d:fa:11:34:75: a6:a0:74:c3:44:de:1c:3c:e2:4c:79:2d:55:d2:e0: 75:fc:a5:cb:10:36:b6:31:f0:a0:66:6b:fe:c0:6d: 6c:69:fc:86:9a:74:c3:17:62:31:de:59:3c:e6:19: df:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AE:E2:9A:7C:0E:98:24:FF:C9:C0:24:B9:28:53:EB:90:1E:63:DD X509v3 Authority Key Identifier: keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.40.0/23 IPv6: 2404:5cc0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:75:25:ac:d6:7d:95:8d:df:ab:61:3d:e4:21:a0:ed:53:76: 8f:63:25:9e:11:41:42:1c:96:12:4b:1c:47:6f:01:28:df:35: f5:bb:6d:54:19:72:24:1d:bb:b8:24:47:00:7a:09:38:32:4f: 7c:3a:75:e6:bb:e1:4b:df:56:8b:87:13:0b:3f:a8:d7:cf:dd: 74:11:e8:41:7e:9a:fa:d7:7f:f8:15:ce:10:a2:96:3f:35:f0: 5c:5b:d2:57:26:f0:e9:52:79:96:cb:3c:0b:5a:eb:18:f9:b2: b1:bd:f4:3b:21:51:fa:16:25:cf:8a:04:1f:63:fb:76:e8:b1: fb:6f:d1:92:7b:9b:53:e8:5e:73:da:3e:d0:ea:b9:8f:24:c2: 46:6e:0a:9e:cf:42:41:0a:4e:f8:c4:e9:33:7c:65:eb:e8:43: 3a:b8:cb:dc:cd:a3:f1:1c:79:86:fd:83:80:a0:20:85:39:22: 1f:a8:c9:3c:52:88:e5:67:79:b8:72:de:2f:ad:33:cf:10:67: a3:6f:0b:66:ee:cb:cf:49:88:59:6b:83:49:c4:0e:cc:30:bf: e9:da:3b:89:de:d0:37:d3:7d:f7:d7:27:d4:60:a3:a5:3c:84: e7:65:4d:34:b9:82:a8:d9:f7:b0:c6:a7:9f:10:41:f6:23:74: e0:1f:01:b4 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUEyQ0MxMTAvBgNVBAUTKDkwQTk4NDUwQjlEQTkzODExOEEyRDVBRDUzNEQ4ODI4 RjRCOTQ2MzQwHhcNMjUxMDE1MTAzMjQwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVmNzg0Ny01YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15xtu98Lmj9w0bYIFMK9NDIn8upRa7qd/8/o2OttCKCTS4d1swVKsYiQb5tX aP4FwruXjYVrVrKP2nOVYpTLn3FkrPiVUJcQjFsXgQ8lj/UAwu5t7n1qlXMCnSQS t6TLwsrSVfo1FzE4AbtCo6nj5Psc65sNk61ykIMG23xeCrqoNlfU7Rph0j2Ddbiq j9LR9U3EaeGuk0Qa62fsS+llQ8BV/O8WdgX+ClmXmJYuJ1sxzSQjXkSAwtQxu4RA mHorfJcuaQHMUToxRPbIXfoRNHWmoHTDRN4cPOJMeS1V0uB1/KXLEDa2MfCgZmv+ wG1safyGmnTDF2Ix3lk85hnf4QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOmu4pp8 Dpgk/8nAJLkoU+uQHmPdMB8GA1UdIwQYMBaAFJCphFC52pOBGKLVrVNNiCj0uUY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTJDQy9GMjZFMDZDRTEx RjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0RVlvdFd0VTAySUtQUzVS alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLbUVVTG5hazRFWW90V3RVMDJJS1BTNVJqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUEyQ0MvRjI2RTA2Q0UxMUY5MTFFQTlDQjg4QzM1QzRGOUFFMDIvQzk5ODlEOUVG NTIwMTFFRjg4NDE2NTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnhigwDQQCAAIwBwMFACQEXMAwDQYJKoZIhvcNAQELBQAD ggEBACx1JazWfZWN36thPeQhoO1Tdo9jJZ4RQUIclhJLHEdvASjfNfW7bVQZciQd u7gkRwB6CTgyT3w6dea74UvfVouHEws/qNfP3XQR6EF+mvrXf/gVzhCilj818Fxb 0lcm8OlSeZbLPAta6xj5srG99DshUfoWJc+KBB9j+3bosftv0ZJ7m1PoXnPaPtDq uY8kwkZuCp7PQkEKTvjE6TN8ZevoQzq4y9zNo/EceYb9g4CgIIU5Ih+oyTxSiOVn ebhy3i+tM88QZ6NvC2buy89JiFlrg0nEDswwv+naO4ne0DfTfffXJ9Rgo6U8hOdl TTS5gqjZ97DGp58QQfYjdOAfAbQ= -----END CERTIFICATE-----Generated at Mon Oct 20 22:45:06 2025 by rpki-client