$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa File: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (raw, json) Hash identifier: 5nVofohvG6M+3k2sujdcV8yvkToMkKYigEUYnGzho5Y= Subject key identifier: A7:17:B8:54:11:BD:D1:5F:0D:B7:BE:06:78:3B:B2:D6:B8:FC:58:47 Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C Certificate serial: 071C Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa Signing time: Fri 17 Oct 2025 10:10:43 +0000 ROA not before: Fri 17 Oct 2025 10:10:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 131183 IP address blocks: 103.136.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C Validity Not Before: Oct 17 10:10:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68f21623-946b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:27:1a:97:3f:43:e5:05:37:27:51:cb:10: 8c:29:e3:0c:ab:d1:dd:fc:a0:55:f3:8d:b9:1b:fb: bb:07:08:2b:de:3b:e6:f7:89:ce:24:9d:1a:23:8a: 97:6b:76:43:63:a9:e6:00:31:c2:47:e5:7b:ec:8e: 9a:71:32:ce:63:9a:e9:47:14:1b:14:d1:1b:af:ee: 72:f4:23:90:f1:85:0f:92:4f:9e:fe:1c:14:84:24: 0c:1a:ff:b1:e5:2e:26:76:b4:34:2d:b3:54:37:fe: 74:b2:11:31:e2:da:0c:ad:c7:d9:25:d9:58:f2:ca: e6:51:3f:87:f0:60:24:92:ab:96:3b:83:1f:fb:f8: 3b:78:a4:9d:f9:08:d9:77:eb:a4:8c:49:75:37:1f: 37:f7:b6:c1:05:e6:6b:99:f3:98:da:bf:e3:a1:ba: 2a:1d:0b:1c:11:d1:e2:4f:6b:c4:07:3b:4b:08:a4: 23:e3:bd:0c:35:38:f0:8d:eb:cc:1e:4f:c6:fe:eb: 0b:e4:99:50:95:ff:fa:20:91:1d:c0:f0:96:ac:6d: 4f:1a:4b:a8:e0:e6:3d:fd:01:fc:43:25:64:b3:7b: 46:47:4b:82:e2:5f:20:4d:92:87:b3:9e:63:1a:6d: bb:20:bf:b8:3f:27:51:d4:8e:f6:6e:2c:6b:3e:b6: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:17:B8:54:11:BD:D1:5F:0D:B7:BE:06:78:3B:B2:D6:B8:FC:58:47 X509v3 Authority Key Identifier: keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.105.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:27:31:a7:42:1f:11:4f:e7:70:4d:0a:f8:05:dd:55:21:fd: f5:14:4e:ae:cb:3e:94:29:fb:6c:66:45:46:16:50:57:bf:b5: b7:20:3d:9f:7e:6b:77:dd:0f:e2:8a:b2:5f:f6:49:5a:4f:b9: 63:d4:af:73:7f:f8:a0:71:9e:57:01:f0:58:70:fd:2d:8e:de: 22:f5:71:78:e7:a6:33:37:99:45:7d:48:d8:80:d8:0c:4d:f5: 16:66:b7:14:00:bd:fa:8a:e2:eb:5d:ba:50:29:49:14:c1:93: 1e:00:33:5b:b2:fc:3f:5f:84:cb:65:e7:7b:26:98:3a:71:86: 57:02:60:bb:61:99:41:fb:3c:2d:7d:23:c7:22:14:c6:da:14: 58:9b:9c:49:58:0e:13:ec:aa:67:59:7f:17:90:b2:03:61:23: 78:90:fd:49:77:2b:1d:86:ba:f2:6e:c6:d6:c7:e1:92:54:be: 24:0d:03:03:d1:a9:1a:fb:92:47:54:3c:87:b1:27:63:a0:7d: 81:7e:82:4e:7c:59:fe:87:9d:ec:ee:4e:b1:64:89:af:b3:bb: a4:57:07:c8:18:34:11:c5:fb:29:26:8f:7b:13:ef:81:4d:1d: 30:98:f3:6b:ff:97:12:fe:9f:64:fc:4d:b0:ca:e1:5c:c2:ae: 32:1e:c1:de -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5NzkxMTAvBgNVBAUTKDg2QjJCMUQxRTc4MjQ0OEI4NEY2OTgxOEYxNkExRjcw N0I1NEM4NkMwHhcNMjUxMDE3MTAxMDQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYyMTYyMy05NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7AnGpc/Q+UFNydRyxCMKeMMq9Hd/KBV8425G/u7Bwgr3jvm94nOJJ0aI4qX a3ZDY6nmADHCR+V77I6acTLOY5rpRxQbFNEbr+5y9COQ8YUPkk+e/hwUhCQMGv+x 5S4mdrQ0LbNUN/50shEx4toMrcfZJdlY8srmUT+H8GAkkquWO4Mf+/g7eKSd+QjZ d+ukjEl1Nx8397bBBeZrmfOY2r/joboqHQscEdHiT2vEBztLCKQj470MNTjwjevM Hk/G/usL5JlQlf/6IJEdwPCWrG1PGkuo4OY9/QH8QyVks3tGR0uC4l8gTZKHs55j Gm27IL+4PydR1I72bixrPrZ6HQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKcXuFQR vdFfDbe+Bng7sta4/FhHMB8GA1UdIwQYMBaAFIaysdHngkSLhPaYGPFqH3B7VMhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzk3OS9FRDYzM0U4NjVG RDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJdUU5cGdZOFdvZmNIdFV5 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hyS3gwZWVDUkl1RTlwZ1k4V29mY0h0VXlHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM5NzkvRUQ2MzNFODY1RkQ5MTFFQkEzMEVFMzdCQzRGOUFFMDIvOEE1QUE5QkFB QjQxMTFGMDlFNTMxMjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniGkwDQYJKoZIhvcNAQELBQADggEBAD0nMadCHxFP53BN CvgF3VUh/fUUTq7LPpQp+2xmRUYWUFe/tbcgPZ9+a3fdD+KKsl/2SVpPuWPUr3N/ +KBxnlcB8Fhw/S2O3iL1cXjnpjM3mUV9SNiA2AxN9RZmtxQAvfqK4utdulApSRTB kx4AM1uy/D9fhMtl53smmDpxhlcCYLthmUH7PC19I8ciFMbaFFibnElYDhPsqmdZ fxeQsgNhI3iQ/Ul3Kx2GuvJuxtbH4ZJUviQNAwPRqRr7kkdUPIexJ2OgfYF+gk58 Wf6HnezuTrFkia+zu6RXB8gYNBHF+ykmj3sT74FNHTCY82v/lxL+n2T8TbDK4VzC rjIewd4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:49 2025 by rpki-client