$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9E3C65828CA011F0B1F47C12C4F9AE02.roa File: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (raw, json) Hash identifier: AhcbearK6iV6xBjXUDN0qGwO1GubeQ+m8AdvrMUpw0Q= Subject key identifier: 21:91:C5:8C:C1:49:AD:00:2D:40:92:19:54:2C:84:5B:33:95:F0:4D Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 053C Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9E3C65828CA011F0B1F47C12C4F9AE02.roa Signing time: Sat 04 Oct 2025 23:55:38 +0000 ROA not before: Sat 04 Oct 2025 23:55:38 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 36002 IP address blocks: 103.73.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 23:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Oct 4 23:55:38 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e1b3fa-42c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:58:32:6b:02:eb:2d:48:88:67:83:05:ec:de: 50:27:e4:bd:0f:71:6b:40:9e:c6:12:88:38:76:69: 3d:1a:d0:56:ab:34:38:ed:77:4d:69:03:e6:e0:e3: 0b:af:95:c9:8f:19:13:a7:0a:6e:01:21:fd:62:19: 60:74:eb:da:e1:55:b3:bc:55:65:1a:fe:30:ac:77: b1:32:e7:aa:22:06:66:44:18:ef:15:c2:78:73:fc: 3e:ff:de:19:3e:7f:b7:5b:95:d7:18:f6:8c:eb:9f: e6:e2:50:01:6e:8d:f5:c8:1b:4c:47:f7:58:5c:91: 38:2d:7a:f4:bb:79:b8:6c:f0:ff:95:9b:c3:de:aa: 4e:d5:2d:ec:d4:37:2f:2a:a3:c7:6e:e9:c8:05:8f: a4:ca:92:0b:19:86:66:cb:f7:db:18:06:b6:bf:28: fd:cf:88:22:c9:84:c5:9b:4d:b4:9a:07:9f:78:de: a0:90:e1:17:0d:c5:d0:04:99:30:de:74:1f:40:09: 8e:62:fc:56:03:cf:d8:0c:64:1f:dd:70:16:2a:f0: e1:b8:46:aa:36:0b:91:4b:0b:d5:34:2d:f1:99:e7: c3:02:dc:36:3b:0e:20:b9:ce:4a:72:5e:bc:9e:23: 08:25:77:7d:00:88:e6:43:16:a6:72:8a:37:5c:7d: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:91:C5:8C:C1:49:AD:00:2D:40:92:19:54:2C:84:5B:33:95:F0:4D X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/9E3C65828CA011F0B1F47C12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.220.0/24 Signature Algorithm: sha256WithRSAEncryption 83:46:fc:f6:88:53:14:96:94:94:7a:1f:36:36:23:7b:b0:57: b7:4b:cf:7a:2c:91:3c:9e:72:59:cc:c3:bc:24:a2:6a:ec:b0: 61:56:ba:6d:dd:7a:80:68:61:97:84:fe:d1:51:4c:82:80:43: 4e:98:9e:5b:c0:48:12:08:82:25:a4:2c:ae:94:77:da:b8:5c: 9e:7b:ec:00:9b:e2:58:12:c6:bd:ad:75:2c:01:41:b3:7b:80: 94:ea:f8:d4:0e:89:39:3f:5e:e3:ef:d2:0c:12:ea:99:41:e2: 95:80:73:69:1c:48:b0:f2:f6:54:02:5b:c8:ea:28:db:67:21: 5b:62:ea:89:17:9b:7f:b7:9b:b1:d1:1c:33:5f:fd:6d:0f:3e: 6d:f2:c9:11:b7:91:d4:26:5f:9a:4d:89:25:44:1f:a8:9c:c1: 8d:ca:f0:7a:37:54:31:5e:de:9d:68:d9:3d:52:bc:e5:10:c7: 2e:46:fa:70:63:4b:0e:6a:86:ea:5d:f8:a5:77:cf:b1:2f:df: 36:74:df:ee:f0:d6:40:be:3e:66:98:1c:58:4f:89:f1:d5:8c: 2d:c9:53:1d:ab:1b:03:5f:76:91:c1:1b:3b:89:3f:42:ed:a5: 9c:e3:00:b6:d2:f8:ea:73:5b:66:92:9f:df:7e:55:2f:17:56: 31:28:1f:40 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUxMDA0MjM1NTM4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxYjNmYS00MmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVgyawLrLUiIZ4MF7N5QJ+S9D3FrQJ7GEog4dmk9GtBWqzQ47XdNaQPm4OML r5XJjxkTpwpuASH9YhlgdOva4VWzvFVlGv4wrHexMueqIgZmRBjvFcJ4c/w+/94Z Pn+3W5XXGPaM65/m4lABbo31yBtMR/dYXJE4LXr0u3m4bPD/lZvD3qpO1S3s1Dcv KqPHbunIBY+kypILGYZmy/fbGAa2vyj9z4giyYTFm020mgefeN6gkOEXDcXQBJkw 3nQfQAmOYvxWA8/YDGQf3XAWKvDhuEaqNguRSwvVNC3xmefDAtw2Ow4guc5Kcl68 niMIJXd9AIjmQxamcoo3XH0upwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCGRxYzB Sa0ALUCSGVQshFszlfBNMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg4RDQvMkY1OEU0NzIyRTUwMTFFQ0EwNEI2QzI1QzRGOUFFMDIvOUUzQzY1ODI4 Q0EwMTFGMEIxRjQ3QzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnSdwwDQYJKoZIhvcNAQELBQADggEBAING/PaIUxSWlJR6 HzY2I3uwV7dLz3oskTyeclnMw7wkomrssGFWum3deoBoYZeE/tFRTIKAQ06YnlvA SBIIgiWkLK6Ud9q4XJ577ACb4lgSxr2tdSwBQbN7gJTq+NQOiTk/XuPv0gwS6plB 4pWAc2kcSLDy9lQCW8jqKNtnIVti6okXm3+3m7HRHDNf/W0PPm3yyRG3kdQmX5pN iSVEH6icwY3K8Ho3VDFe3p1o2T1SvOUQxy5G+nBjSw5qhupd+KV3z7Ev3zZ03+7w 1kC+PmaYHFhPifHVjC3JUx2rGwNfdpHBGzuJP0LtpZzjALbS+OpzW2aSn99+VS8X VjEoH0A= -----END CERTIFICATE-----Generated at Thu Oct 9 08:47:15 2025 by rpki-client