$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/B04338609E8811F09A69050AC4F9AE02.roa File: B04338609E8811F09A69050AC4F9AE02.roa (raw, json) Hash identifier: 0XVtpLEu6mzH4OrnlrOYyiblJIwpUeCvabkFn8jxbN4= Subject key identifier: 85:59:01:8F:C1:9A:25:23:D3:97:81:00:D9:BB:17:14:C7:BE:0F:A7 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: 011F Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/B04338609E8811F09A69050AC4F9AE02.roa Signing time: Wed 01 Oct 2025 05:38:44 +0000 ROA not before: Wed 01 Oct 2025 05:38:44 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152689 IP address blocks: 103.6.160.0/24 maxlen: 24 2001:df3:aa40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Oct 2025 07:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Oct 1 05:38:44 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68dcbe64-ff01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:73:65:9e:29:fe:36:45:fc:da:eb:62:8b: 56:1e:e2:1a:81:80:e7:3c:f1:ac:b5:0b:64:e5:ee: b9:fa:cc:bc:5a:c5:97:3b:04:49:b0:bd:08:e4:65: 10:c8:4d:fe:cf:c1:6d:3c:d9:65:8f:3b:c2:0d:48: 77:d8:1a:d4:43:d4:03:3b:c4:45:3d:63:41:1f:da: cf:54:d0:12:66:f8:73:39:c4:02:4c:b9:80:9f:25: 6f:19:42:58:f8:69:47:9d:e7:18:95:6b:81:1d:71: 16:2e:75:2c:f8:f8:02:7c:7b:83:bd:c5:23:26:12: 18:67:63:17:97:ce:d2:fb:c9:08:41:70:89:09:bc: aa:e0:12:3b:19:03:2f:0e:63:1d:98:6b:9c:68:ef: e4:da:a5:a2:4b:53:44:aa:1b:4c:a2:0c:e8:4a:7b: b9:28:eb:41:14:fc:d5:dc:ed:60:73:15:79:74:e7: 7d:06:9a:ac:d7:8b:8e:b6:7a:dd:6e:a9:e3:0d:ba: a2:36:79:3a:64:65:20:f5:47:33:2d:3a:d0:51:cb: 4f:42:6d:fe:5d:42:47:4a:23:8a:cd:40:39:e4:ac: 79:66:fe:9f:5b:5b:82:57:4f:aa:e7:7b:cd:58:96: 92:cb:c8:e9:67:31:68:75:ee:f0:e1:e6:d4:b5:67: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:59:01:8F:C1:9A:25:23:D3:97:81:00:D9:BB:17:14:C7:BE:0F:A7 X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/B04338609E8811F09A69050AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.160.0/24 IPv6: 2001:df3:aa40::/48 Signature Algorithm: sha256WithRSAEncryption 75:39:36:59:b3:84:ec:0b:67:6c:e7:02:b5:7e:64:4b:e2:48: f5:c4:31:0f:83:ca:ed:d3:db:6e:39:6a:41:de:45:ac:4f:db: c4:1e:2d:46:fa:19:07:32:de:38:19:98:4c:77:4a:4b:80:61: b6:e2:c0:bc:8e:ca:8d:1c:1d:0f:ef:ff:22:d5:b4:ee:cc:b9: eb:3f:57:de:fa:c8:4a:ff:0b:e0:ee:59:e5:c9:f8:7e:fa:50: b4:2f:ce:f7:ec:4b:d8:4b:f6:22:0c:0d:c2:86:cd:a1:35:1d: 33:c2:a4:f0:57:cd:e0:b4:04:0c:54:75:95:2c:7d:7e:65:be: 16:22:99:35:db:66:cc:36:1d:7a:8c:b8:a1:36:0e:e3:5d:57: 61:74:71:3a:2a:5c:e2:b7:bb:e8:9b:43:a0:cd:4d:f2:9f:d5: 41:c4:25:5f:a3:bf:30:89:03:13:8c:79:77:07:e4:c5:48:db: 7f:16:38:91:61:bb:2e:15:c8:6d:18:af:61:75:ac:73:1d:d1: 7d:cc:80:86:a1:92:7f:05:c2:83:f2:12:b5:9d:d6:48:e6:92: 13:55:56:a9:23:8e:d5:6a:dc:04:78:90:f0:ca:43:3a:04:96: 1e:97:02:9f:85:7f:a4:a6:07:32:8f:25:b6:88:36:26:c2:46: c8:93:f3:d7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjUxMDAxMDUzODQ0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjYmU2NC1mZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ehzZZ4p/jZF/NrrYotWHuIagYDnPPGstQtk5e65+sy8WsWXOwRJsL0I5GUQ yE3+z8FtPNlljzvCDUh32BrUQ9QDO8RFPWNBH9rPVNASZvhzOcQCTLmAnyVvGUJY +GlHnecYlWuBHXEWLnUs+PgCfHuDvcUjJhIYZ2MXl87S+8kIQXCJCbyq4BI7GQMv DmMdmGucaO/k2qWiS1NEqhtMogzoSnu5KOtBFPzV3O1gcxV5dOd9Bpqs14uOtnrd bqnjDbqiNnk6ZGUg9UczLTrQUctPQm3+XUJHSiOKzUA55Kx5Zv6fW1uCV0+q53vN WJaSy8jpZzFode7w4ebUtWdCrwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIVZAY/B miUj05eBANm7FxTHvg+nMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTgyMkYvNTg0MkQzMDRGN0YwMTFFRTk4QzhDOTJCQzRGOUFFMDIvQjA0MzM4NjA5 RTg4MTFGMDlBNjkwNTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnBqAwDwQCAAIwCQMHACABDfOqQDANBgkqhkiG9w0BAQsF AAOCAQEAdTk2WbOE7AtnbOcCtX5kS+JI9cQxD4PK7dPbbjlqQd5FrE/bxB4tRvoZ BzLeOBmYTHdKS4BhtuLAvI7KjRwdD+//ItW07sy56z9X3vrISv8L4O5Z5cn4fvpQ tC/O9+xL2Ev2IgwNwobNoTUdM8Kk8FfN4LQEDFR1lSx9fmW+FiKZNdtmzDYdeoy4 oTYO411XYXRxOipc4re76JtDoM1N8p/VQcQlX6O/MIkDE4x5dwfkxUjbfxY4kWG7 LhXIbRivYXWscx3RfcyAhqGSfwXCg/IStZ3WSOaSE1VWqSOO1WrcBHiQ8MpDOgSW HpcCn4V/pKYHMo8ltog2JsJGyJPz1w== -----END CERTIFICATE-----Generated at Sat Oct 11 14:50:25 2025 by rpki-client