$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/395AFD84135811EB942A3E15C4F9AE02.roa File: 395AFD84135811EB942A3E15C4F9AE02.roa (raw, json) Hash identifier: VTVmiPXci74bD3x9vDrskSMST/OFHNVISI3dme//H6s= Subject key identifier: 48:EE:C6:30:09:C3:48:58:9C:68:B5:08:DC:D6:FC:42:C7:89:A4:30 Certificate issuer: /CN=A91F4F00/serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4 Certificate serial: 07C5 Authority key identifier: 2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/395AFD84135811EB942A3E15C4F9AE02.roa Signing time: Sat 04 Oct 2025 21:21:54 +0000 ROA not before: Sat 04 Oct 2025 21:21:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138214 IP address blocks: 103.122.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1989 (0x7c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4F00, serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4 Validity Not Before: Oct 4 21:21:54 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e18ff2-6b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:73:94:7c:60:a6:55:3a:fc:d9:9a:a2:cb:f8: 62:15:25:ef:72:8b:fd:f9:ce:25:91:65:e6:f1:87: 71:1f:9e:9f:d7:c6:a7:68:e8:da:02:9b:6f:38:b4: 76:f0:68:58:79:20:67:e4:93:d0:f9:9e:2b:8b:7e: 62:ba:f7:7d:62:cd:e5:4f:0a:6d:86:dd:54:c3:05: 6d:b5:5b:4f:9a:aa:13:be:56:95:14:d3:1b:eb:2f: f0:51:87:fa:e3:b2:eb:6b:e2:0a:01:c0:0e:d1:54: 7d:a0:34:7f:d4:87:d6:2f:b5:fe:d0:af:2e:5c:a6: de:f0:68:6d:1f:3a:9a:68:51:10:2a:ac:5e:0a:06: 21:94:b9:0e:33:8f:2d:a7:4a:4b:a7:7b:9a:7b:8a: 29:69:ca:86:9b:e6:8d:c1:a2:a7:ca:7a:3a:9c:63: 57:9a:aa:84:c3:39:8e:40:18:0e:97:fa:b7:02:69: 9e:dd:df:e3:6d:44:8f:96:23:ef:64:bc:5f:83:0b: 27:ca:5d:a2:84:1c:9c:7f:2e:77:b1:e3:51:0b:66: cd:48:85:3c:03:f5:5a:21:d3:53:c4:df:6b:0e:b0: c1:13:53:a7:6f:d3:46:00:80:d0:49:ac:5f:ac:9a: a9:f8:e4:f9:00:cc:7d:4c:7c:91:ba:6c:21:43:dc: 9e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EE:C6:30:09:C3:48:58:9C:68:B5:08:DC:D6:FC:42:C7:89:A4:30 X509v3 Authority Key Identifier: keyid:2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/395AFD84135811EB942A3E15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.88.0/23 Signature Algorithm: sha256WithRSAEncryption 27:2f:0d:35:fc:5e:4c:47:37:18:98:87:33:00:16:0c:66:64: 6c:54:e4:77:f4:2a:6c:94:5b:5f:49:09:51:ff:c8:1a:f8:7c: b8:33:33:6c:b0:49:99:f3:14:18:ff:18:5a:03:9b:f1:3e:b8: ad:f3:1f:a4:b7:28:ba:71:5b:16:8b:39:38:5d:f7:0e:f2:8d: 91:cc:54:61:b6:3e:da:4a:48:1f:96:db:e9:62:f7:7d:e9:da: 55:06:82:4b:3d:ec:75:c6:28:2e:df:f3:d4:dd:50:8c:05:bb: 27:03:6b:fa:aa:af:5a:03:dd:e3:33:8c:27:f3:b4:1c:ff:99: 50:56:40:08:6b:51:36:6e:91:a8:ae:c3:f4:05:1e:62:d2:ea: f0:da:9c:4a:0c:88:98:c6:ce:82:47:97:bc:e8:68:47:ad:99: 24:e2:95:66:87:ae:bc:ed:e1:2d:81:4e:19:af:87:34:67:cd: 3f:b3:26:ec:b5:b3:16:c9:c3:26:a7:64:7f:bf:b1:a1:fa:61: 5a:e7:6d:bb:75:23:a3:fd:99:3b:b4:9f:f1:be:44:45:82:46: 88:aa:a9:77:a2:3a:4d:27:80:17:c4:7b:5a:c7:d3:a0:51:ea: 7f:6c:92:ad:5f:d9:6e:3b:47:65:3b:e4:7e:6c:bd:62:fb:42: 44:b8:d8:33 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGMDAxMTAvBgNVBAUTKDJCM0VFNDRFQTlDQjVCODEyOTZCQjY3REYwRjU0NkY4 QUFDOEE0QjQwHhcNMjUxMDA0MjEyMTU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxOGZmMi02YjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XOUfGCmVTr82Zqiy/hiFSXvcov9+c4lkWXm8YdxH56f18anaOjaAptvOLR2 8GhYeSBn5JPQ+Z4ri35iuvd9Ys3lTwptht1UwwVttVtPmqoTvlaVFNMb6y/wUYf6 47Lra+IKAcAO0VR9oDR/1IfWL7X+0K8uXKbe8GhtHzqaaFEQKqxeCgYhlLkOM48t p0pLp3uae4opacqGm+aNwaKnyno6nGNXmqqEwzmOQBgOl/q3Amme3d/jbUSPliPv ZLxfgwsnyl2ihBycfy53seNRC2bNSIU8A/VaIdNTxN9rDrDBE1Onb9NGAIDQSaxf rJqp+OT5AMx9THyRumwhQ9yejQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEjuxjAJ w0hYnGi1CNzW/ELHiaQwMB8GA1UdIwQYMBaAFCs+5E6py1uBKWu2ffD1RviqyKS0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEYwMC8zREE2OTAxNjEz NTcxMUVCQTIzREE3MTRDNEY5QUUwMi9LejdrVHFuTFc0RXBhN1o5OFBWRy1Lcklw TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t6N2tUcW5MVzRFcGE3Wjk4UFZHLUtySXBMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjRGMDAvM0RBNjkwMTYxMzU3MTFFQkEyM0RBNzE0QzRGOUFFMDIvMzk1QUZEODQx MzU4MTFFQjk0MkEzRTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnelgwDQYJKoZIhvcNAQELBQADggEBACcvDTX8XkxHNxiY hzMAFgxmZGxU5Hf0KmyUW19JCVH/yBr4fLgzM2ywSZnzFBj/GFoDm/E+uK3zH6S3 KLpxWxaLOThd9w7yjZHMVGG2PtpKSB+W2+li933p2lUGgks97HXGKC7f89TdUIwF uycDa/qqr1oD3eMzjCfztBz/mVBWQAhrUTZukaiuw/QFHmLS6vDanEoMiJjGzoJH l7zoaEetmSTilWaHrrzt4S2BThmvhzRnzT+zJuy1sxbJwyanZH+/saH6YVrnbbt1 I6P9mTu0n/G+REWCRoiqqXeiOk0ngBfEe1rH06BR6n9skq1f2W47R2U75H5svWL7 QkS42DM= -----END CERTIFICATE-----Generated at Tue Oct 21 05:22:35 2025 by rpki-client