$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/993EC4A6053A11EAAC92336CC4F9AE02.roa File: 993EC4A6053A11EAAC92336CC4F9AE02.roa (raw, json) Hash identifier: OUjIlN8Q3EsaPIKbBShyZ2ErWs3i9iaEMQNeWIb8brA= Subject key identifier: 8A:B9:7D:2B:07:7D:1F:53:BE:CD:8D:1A:C0:64:4A:3D:3F:3C:93:FD Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0C80 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/993EC4A6053A11EAAC92336CC4F9AE02.roa Signing time: Tue 16 Sep 2025 18:58:15 +0000 ROA not before: Tue 16 Sep 2025 18:58:15 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136911 IP address blocks: 103.98.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3200 (0xc80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Sep 16 18:58:15 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c9b347-21be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:72:a4:17:9f:b2:bb:f6:88:69:a5:84:98: 3b:24:01:ed:e2:fd:31:7b:79:1f:53:28:01:ed:60: 69:b6:9e:b0:d9:b1:f8:cc:63:18:f6:e0:e6:e0:d8: fb:88:a7:da:db:7c:84:3d:51:3e:06:19:55:46:45: c1:71:03:0c:bb:ad:12:05:06:fa:6d:a6:18:67:e8: 4a:c9:37:e1:c8:23:81:8e:3a:47:2e:09:30:69:c4: 39:87:85:d0:57:75:e9:40:df:66:00:6b:df:aa:cc: ca:22:1c:2e:2e:e0:8a:27:fa:48:2a:70:63:cc:fb: c6:dc:87:df:68:30:ca:b4:e7:2f:bb:01:a4:85:71: f8:01:ed:95:9c:23:8a:ca:45:fb:62:40:55:e5:e7: 66:27:8a:b5:1a:39:7f:59:3f:e6:e0:5d:19:ae:8f: 44:b8:20:8f:57:94:c6:74:7e:2d:c8:25:d0:ed:2c: bb:1a:f2:7c:fa:22:99:a8:3b:79:75:1d:64:22:68: c3:10:84:4c:81:58:bc:44:55:51:b0:a0:b1:0b:a6: 5e:37:79:60:51:75:3f:62:f5:e5:bc:00:e9:fd:23: c7:5a:bd:16:c2:a2:56:ba:3f:95:0a:51:4e:e9:d0: 31:7f:86:9d:5e:c5:ac:7e:62:ad:10:4c:c7:d5:72: 84:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B9:7D:2B:07:7D:1F:53:BE:CD:8D:1A:C0:64:4A:3D:3F:3C:93:FD X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/993EC4A6053A11EAAC92336CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.135.0/24 Signature Algorithm: sha256WithRSAEncryption 87:44:21:8e:63:e0:09:0a:2b:bd:14:42:9c:9a:69:61:b9:f7: cd:66:d0:fd:44:6c:4c:d3:15:1e:bd:42:43:1e:57:5f:56:b3: 6a:16:87:e6:7f:72:56:fc:d7:8e:bc:9d:ce:7d:16:f8:6e:ea: cd:dd:fc:5d:f6:90:88:3c:08:5c:54:38:4f:db:46:15:5b:60: ab:3e:bc:ab:01:bf:62:14:02:48:26:a9:9b:d8:e0:c2:f5:e8: 3d:32:48:1f:a2:97:b2:8d:d7:e9:e1:1a:6e:69:42:09:01:0b: d9:1c:94:e7:61:1d:06:49:5d:b4:01:4c:a7:95:1c:b4:94:72: 11:04:02:57:31:5b:d2:46:7f:71:2b:17:37:26:49:60:38:94: 67:23:24:95:f5:f5:6c:92:ef:32:7a:25:85:b1:80:27:ef:d0: 87:2c:9d:53:fa:86:58:8a:00:20:ff:63:37:88:0b:0b:72:b1: 8d:c2:23:ac:5f:4d:c0:43:cb:01:ab:a8:36:cf:a1:63:71:86: 90:e3:4a:8e:83:15:2d:db:c2:3c:87:89:2c:c4:cf:0e:d9:72: 68:67:1e:91:d2:6e:75:22:65:aa:84:01:43:dd:be:bd:9a:b1: 50:40:78:3b:54:bf:a2:f1:d0:7c:f8:f1:76:88:fd:00:40:6d: a5:fd:c9:48 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjUwOTE2MTg1ODE1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM5YjM0Ny0yMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLJypBefsrv2iGmlhJg7JAHt4v0xe3kfUygB7WBptp6w2bH4zGMY9uDm4Nj7 iKfa23yEPVE+BhlVRkXBcQMMu60SBQb6baYYZ+hKyTfhyCOBjjpHLgkwacQ5h4XQ V3XpQN9mAGvfqszKIhwuLuCKJ/pIKnBjzPvG3IffaDDKtOcvuwGkhXH4Ae2VnCOK ykX7YkBV5edmJ4q1Gjl/WT/m4F0Zro9EuCCPV5TGdH4tyCXQ7Sy7GvJ8+iKZqDt5 dR1kImjDEIRMgVi8RFVRsKCxC6ZeN3lgUXU/YvXlvADp/SPHWr0WwqJWuj+VClFO 6dAxf4adXsWsfmKtEEzH1XKEbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIq5fSsH fR9Tvs2NGsBkSj0/PJP9MB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkU0MEIvREM1RjFBQ0EwNTM5MTFFQUIxNzQyQzZCQzRGOUFFMDIvOTkzRUM0QTYw NTNBMTFFQUFDOTIzMzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnYocwDQYJKoZIhvcNAQELBQADggEBAIdEIY5j4AkKK70U QpyaaWG5981m0P1EbEzTFR69QkMeV19Ws2oWh+Z/clb81468nc59Fvhu6s3d/F32 kIg8CFxUOE/bRhVbYKs+vKsBv2IUAkgmqZvY4ML16D0ySB+il7KN1+nhGm5pQgkB C9kclOdhHQZJXbQBTKeVHLSUchEEAlcxW9JGf3ErFzcmSWA4lGcjJJX19WyS7zJ6 JYWxgCfv0IcsnVP6hliKACD/YzeICwtysY3CI6xfTcBDywGrqDbPoWNxhpDjSo6D FS3bwjyHiSzEzw7ZcmhnHpHSbnUiZaqEAUPdvr2asVBAeDtUv6Lx0Hz48XaI/QBA baX9yUg= -----END CERTIFICATE-----Generated at Mon Oct 20 11:28:21 2025 by rpki-client