$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0A8890FE2F4C11EDB0375D6CC4F9AE02.roa File: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (raw, json) Hash identifier: x+qXnpZHzZY+dh94g38SoTHaDPy2ifolaZ4sk7Pctiw= Subject key identifier: C0:59:3D:36:C4:0D:E8:DA:B8:34:95:93:B4:4E:D6:4F:10:AA:27:E8 Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Certificate serial: 0908 Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0A8890FE2F4C11EDB0375D6CC4F9AE02.roa Signing time: Fri 22 Aug 2025 21:00:41 +0000 ROA not before: Fri 22 Aug 2025 21:00:41 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 6939 IP address blocks: 103.253.24.0/24 maxlen: 24 103.253.25.0/24 maxlen: 24 103.253.26.0/24 maxlen: 24 103.253.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2312 (0x908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813F1, serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Validity Not Before: Aug 22 21:00:41 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a8da79-1497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0e:b2:9f:51:f1:b4:81:75:f2:4e:26:98:cf: ed:e9:e8:73:e6:3b:26:69:fb:be:04:0b:12:3a:a4: 34:d8:bc:00:c4:fe:99:94:53:9a:61:41:61:5e:b8: 0f:31:4e:ce:4d:47:47:a3:de:2f:a1:9f:ba:f3:87: 4b:ab:60:77:bf:fb:31:e2:3c:10:16:a2:cf:62:f4: d4:16:e7:45:fc:d0:50:10:d4:59:2f:98:bc:c4:b2: d4:3d:4f:45:62:03:78:41:8c:41:c4:a4:2a:92:1c: 68:58:af:7e:68:62:05:c8:91:f3:28:5f:9e:ad:50: ca:bd:aa:73:18:46:3e:94:be:73:f4:f7:fd:3d:7c: 8d:9e:6c:e9:7a:47:90:1a:74:a2:db:40:bb:62:83: 12:86:10:4e:32:24:6f:1c:b9:b2:e9:53:4f:fc:35: ef:bd:b7:de:10:72:0e:e4:0f:9e:b9:e1:26:94:50: a8:4d:a2:be:cb:bf:ec:66:8e:b1:30:5f:9a:6b:86: 28:98:30:e1:e8:2b:93:0b:56:eb:2c:46:ed:11:94: ff:05:14:d6:61:75:8d:86:fb:b4:08:31:9c:79:a2: a2:5c:73:41:21:76:8a:64:23:72:b3:f1:5c:79:02: be:4c:ed:19:5c:79:9a:9a:41:1e:2d:11:50:ad:bc: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:59:3D:36:C4:0D:E8:DA:B8:34:95:93:B4:4E:D6:4F:10:AA:27:E8 X509v3 Authority Key Identifier: keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/0A8890FE2F4C11EDB0375D6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.24.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:d9:e4:65:97:00:6f:d1:4b:46:b3:3b:d8:65:bb:17:de:64: db:53:cf:2a:aa:7b:70:ab:f7:a5:a6:41:3c:e2:dc:89:54:97: ba:77:47:05:ff:40:60:05:35:39:4b:ea:0c:44:a7:fc:35:f1: cb:36:4a:da:68:11:0b:f8:c0:85:47:8d:2c:ba:74:b9:2c:35: fe:96:45:0c:b0:f4:30:47:bf:5d:59:ea:7f:05:44:3b:86:88: 9d:3c:8f:59:c2:ef:d7:e1:d8:c6:23:1b:49:4f:01:d4:3c:91: be:e8:30:12:e3:f2:75:74:30:a6:5a:6c:40:77:dd:b7:73:0f: 4f:3e:b4:da:c9:64:72:9e:96:b7:bb:89:a5:14:a4:6e:3e:64: ef:2e:6b:63:8f:d0:86:d1:86:33:75:fa:67:5f:40:4d:50:7c: 63:af:29:3f:a0:ec:04:78:6a:45:2b:38:22:92:75:a7:62:73: a7:db:f2:6a:c4:f1:7a:a4:a4:6f:9d:cf:95:a7:6d:cb:6e:32: 41:f7:f5:10:1b:32:74:9d:9e:0e:e6:37:03:6d:69:13:0a:67: 0a:d0:67:ed:0b:9d:95:7c:e1:36:cb:a0:cb:3d:bd:02:d4:d0: 71:c2:c5:63:85:1d:ee:6d:a3:03:28:58:00:44:29:3c:04:e3: 58:84:e1:b3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRjExMTAvBgNVBAUTKDlFRkVBQTcyNEQ3MDhDRkU4MkM2QjZCRjI3MENCQjVE RDQzMDZGMjAwHhcNMjUwODIyMjEwMDQxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE4ZGE3OS0xNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAww6yn1HxtIF18k4mmM/t6ehz5jsmafu+BAsSOqQ02LwAxP6ZlFOaYUFhXrgP MU7OTUdHo94voZ+684dLq2B3v/sx4jwQFqLPYvTUFudF/NBQENRZL5i8xLLUPU9F YgN4QYxBxKQqkhxoWK9+aGIFyJHzKF+erVDKvapzGEY+lL5z9Pf9PXyNnmzpekeQ GnSi20C7YoMShhBOMiRvHLmy6VNP/DXvvbfeEHIO5A+eueEmlFCoTaK+y7/sZo6x MF+aa4YomDDh6CuTC1brLEbtEZT/BRTWYXWNhvu0CDGceaKiXHNBIXaKZCNys/Fc eQK+TO0ZXHmamkEeLRFQrbwhGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMBZPTbE DejauDSVk7RO1k8QqifoMB8GA1UdIwQYMBaAFJ7+qnJNcIz+gsa2vycMu13UMG8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNGMS9EMENBRjM4NEJB NTkxMUVBOTA0RkY5MURDNEY5QUUwMi9udjZxY2sxd2pQNkN4cmFfSnd5N1hkUXdi eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252NnFjazF3alA2Q3hyYV9Kd3k3WGRRd2J5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODEzRjEvRDBDQUYzODRCQTU5MTFFQTkwNEZGOTFEQzRGOUFFMDIvMEE4ODkwRkUy RjRDMTFFREIwMzc1RDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn/RgwDQYJKoZIhvcNAQELBQADggEBAGvZ5GWXAG/RS0az O9hluxfeZNtTzyqqe3Cr96WmQTzi3IlUl7p3RwX/QGAFNTlL6gxEp/w18cs2Stpo EQv4wIVHjSy6dLksNf6WRQyw9DBHv11Z6n8FRDuGiJ08j1nC79fh2MYjG0lPAdQ8 kb7oMBLj8nV0MKZabEB33bdzD08+tNrJZHKelre7iaUUpG4+ZO8ua2OP0IbRhjN1 +mdfQE1QfGOvKT+g7AR4akUrOCKSdadic6fb8mrE8XqkpG+dz5WnbctuMkH39RAb MnSdng7mNwNtaRMKZwrQZ+0LnZV84TbLoMs9vQLU0HHCxWOFHe5towMoWABEKTwE 41iE4bM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:17 2025 by rpki-client