$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9D752204479111ECA77ED34DC4F9AE02.roa File: 9D752204479111ECA77ED34DC4F9AE02.roa (raw, json) Hash identifier: oVtoN+E5ZyRj5IanIEy9OruScApwiNCgt2Cj41NAG60= Subject key identifier: 48:32:EC:4C:50:B6:7F:AE:F3:A1:C9:3A:D2:DB:04:A1:D9:5F:7E:8D Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 0566 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9D752204479111ECA77ED34DC4F9AE02.roa Signing time: Sat 04 Oct 2025 23:55:02 +0000 ROA not before: Sat 04 Oct 2025 23:55:02 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.196.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 23:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Oct 4 23:55:02 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e1b3d6-9336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:2c:d0:e0:8e:85:31:3e:65:7d:fc:8a:12: 37:2a:a0:6d:8b:f7:10:ee:66:67:71:1d:df:b4:9c: a2:57:2a:e9:42:6b:7a:80:65:79:84:56:f8:9c:b8: e0:b6:98:ea:8b:eb:bd:0b:03:da:41:cf:66:d8:75: 33:6c:3b:1c:e3:ec:05:c1:93:26:2d:a5:94:cb:f3: 3b:0d:32:7b:dc:80:b3:af:0a:73:e9:0e:a0:8d:41: 84:73:39:1a:18:45:b1:9c:7c:6c:20:a7:97:66:d1: b6:e9:13:31:52:9a:ab:39:1d:08:c2:5a:89:58:2e: 52:1b:c7:c8:60:5b:ca:c1:64:f5:b4:7d:22:96:2c: f8:78:55:01:05:58:04:3d:dc:48:2a:47:fa:d9:4a: 63:42:05:6f:2b:52:52:c4:83:af:56:79:c2:70:e2: 89:02:56:1a:0e:67:9a:fe:19:ce:b9:a9:04:06:d5: cf:b1:90:da:37:f8:26:47:e0:5e:5c:03:28:5f:f6: 33:e6:76:68:12:bf:cd:3c:d1:5f:ef:ed:a4:55:83: 7c:82:3f:05:c8:69:77:32:a7:de:ad:bd:86:dd:c6: 62:a8:01:7a:46:ec:de:50:c6:7c:85:a4:37:33:f8: ae:6a:f6:78:a3:d7:90:ca:a0:17:bc:3d:47:a1:53: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:32:EC:4C:50:B6:7F:AE:F3:A1:C9:3A:D2:DB:04:A1:D9:5F:7E:8D X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9D752204479111ECA77ED34DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.196.32.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:10:47:2e:9a:30:79:6f:17:fb:98:65:38:15:c8:20:79:00: 4e:7e:3b:aa:f4:1a:98:17:73:02:7f:cd:23:80:30:0d:44:b9: c5:30:85:8d:9a:3c:7b:52:c2:b8:fc:b8:a0:48:d2:1f:53:8b: 1c:3c:81:3c:68:c3:1d:a2:46:f5:80:4f:fd:1b:40:b8:63:00: 2f:72:c5:2b:3c:ab:59:b6:2a:09:94:28:7f:c8:58:92:55:73: c1:ca:bc:8c:6e:f8:47:51:76:80:eb:cc:3e:91:99:aa:2e:56: 5f:7d:1a:f6:4c:32:cd:e8:c9:88:0b:01:b8:5d:52:7d:9c:17: da:41:ba:36:37:62:c2:27:d7:52:98:f4:95:d2:32:8c:c1:ae: 7f:5f:a9:9c:01:ce:32:8b:87:72:ec:fb:be:a0:d8:ec:98:ce: 42:f3:e1:83:c5:2c:39:2d:ff:ed:8a:7c:12:f1:19:5c:97:d1: 38:26:46:3b:bf:8d:c4:7a:b3:d9:36:e4:e1:8c:e1:ed:4e:4e: 0a:46:d0:c5:23:d0:dd:b1:f2:f3:a8:a1:6e:41:af:bb:c7:68: d3:90:82:21:d2:53:55:89:13:e9:66:79:e3:80:3d:94:88:63: 59:b5:ff:99:cd:9a:1a:ad:6e:83:5d:00:dd:af:fb:4b:17:98: 44:dd:da:c5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjUxMDA0MjM1NTAyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxYjNkNi05MzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHos0OCOhTE+ZX38ihI3KqBti/cQ7mZncR3ftJyiVyrpQmt6gGV5hFb4nLjg tpjqi+u9CwPaQc9m2HUzbDsc4+wFwZMmLaWUy/M7DTJ73ICzrwpz6Q6gjUGEczka GEWxnHxsIKeXZtG26RMxUpqrOR0IwlqJWC5SG8fIYFvKwWT1tH0iliz4eFUBBVgE PdxIKkf62UpjQgVvK1JSxIOvVnnCcOKJAlYaDmea/hnOuakEBtXPsZDaN/gmR+Be XAMoX/Yz5nZoEr/NPNFf7+2kVYN8gj8FyGl3Mqferb2G3cZiqAF6RuzeUMZ8haQ3 M/iuavZ4o9eQyqAXvD1HoVNEKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEgy7ExQ tn+u86HJOtLbBKHZX36NMB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzI3OEIvMDZCMEI2MkEwQTQ4MTFFQ0JDNTczRDVGQzRGOUFFMDIvOUQ3NTIyMDQ0 NzkxMTFFQ0E3N0VEMzREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnxCAwDQYJKoZIhvcNAQELBQADggEBAI0QRy6aMHlvF/uY ZTgVyCB5AE5+O6r0GpgXcwJ/zSOAMA1EucUwhY2aPHtSwrj8uKBI0h9Tixw8gTxo wx2iRvWAT/0bQLhjAC9yxSs8q1m2KgmUKH/IWJJVc8HKvIxu+EdRdoDrzD6Rmaou Vl99GvZMMs3oyYgLAbhdUn2cF9pBujY3YsIn11KY9JXSMozBrn9fqZwBzjKLh3Ls +76g2OyYzkLz4YPFLDkt/+2KfBLxGVyX0TgmRju/jcR6s9k25OGM4e1OTgpG0MUj 0N2x8vOooW5Br7vHaNOQgiHSU1WJE+lmeeOAPZSIY1m1/5nNmhqtboNdAN2v+0sX mETd2sU= -----END CERTIFICATE-----Generated at Thu Oct 9 03:58:10 2025 by rpki-client