$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/16105334922D11F087917886C4F9AE02.roa File: 16105334922D11F087917886C4F9AE02.roa (raw, json) Hash identifier: D5KaIdGc2ZrurRFfjIe8sBVZ5qr9BavnbZqsjgwmDZ4= Subject key identifier: 18:D4:0A:6F:30:43:DB:39:D0:51:FB:42:AF:45:C1:53:60:3B:0B:8F Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 69 Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/16105334922D11F087917886C4F9AE02.roa Signing time: Mon 15 Sep 2025 12:11:20 +0000 ROA not before: Mon 15 Sep 2025 12:11:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2914 IP address blocks: 163.223.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 07:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Sep 15 12:11:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68c80267-0fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:18:bd:11:29:ab:94:7f:61:f0:b9:91:6d: cf:07:48:83:de:8b:8c:65:f8:dd:ed:ca:b5:77:b2: a6:8a:df:8e:11:19:e5:90:b0:f0:91:cf:9a:f8:24: f8:52:83:bd:95:b4:8b:88:c1:da:99:86:8d:45:bb: e2:3e:19:1e:39:b2:fe:67:71:55:bf:33:5b:5d:32: b4:e8:d6:e2:8f:90:09:55:98:b2:1a:ae:ed:2e:c9: 0f:78:4e:6f:82:0a:76:b0:ff:06:8d:e6:b6:e2:63: ba:40:d8:6b:67:bc:eb:94:c8:02:9c:ea:08:09:b1: eb:2b:6e:78:31:4a:23:8d:06:84:f7:ba:8c:11:99: 22:ff:78:53:a6:f3:b0:c9:f1:0e:71:e9:3f:3c:f1: bb:47:59:43:17:eb:3c:d9:38:ab:d0:50:63:09:cd: 29:e1:21:a1:73:47:fa:fb:94:df:92:09:1d:9e:4f: 0f:6c:d5:a2:18:42:51:25:ac:51:bb:fb:7e:bf:b1: 01:96:5b:23:9d:26:03:87:64:22:b5:8d:0e:d5:53: 31:e7:32:c1:bf:ec:af:8d:05:dd:37:df:e4:56:6c: f6:13:ad:50:4d:e2:41:1a:d0:47:3c:73:db:2d:ce: 98:e8:fa:74:4d:3a:2e:1c:63:64:b8:43:d5:33:6d: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D4:0A:6F:30:43:DB:39:D0:51:FB:42:AF:45:C1:53:60:3B:0B:8F X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/16105334922D11F087917886C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.107.0/24 Signature Algorithm: sha256WithRSAEncryption 33:ff:d3:6b:a1:d9:a9:c5:1e:54:70:ca:9f:b8:80:fa:8b:f0: ef:33:00:de:2c:a1:05:9a:a9:b5:2c:b8:d6:3b:13:0c:7f:04: d3:84:96:b1:6a:89:75:c0:6f:02:b6:33:a2:b4:66:4b:43:ca: a3:cb:16:02:81:10:7d:87:18:77:62:4d:c9:a6:a5:6f:9f:ef: b1:bf:23:c3:50:1e:9c:95:de:da:81:7f:7e:b2:e8:68:6a:6f: 8f:18:a1:17:21:e2:75:4a:6d:fa:63:44:38:4c:60:7d:21:e1: 28:37:bd:9d:5b:e5:12:aa:61:c8:be:18:8f:e7:4f:8e:6a:ee: 9f:00:e4:1c:98:ae:fb:ac:26:20:18:0b:f8:0f:5c:cd:10:49: b7:89:3f:7c:93:58:56:5b:cc:52:b9:24:a5:69:d9:02:4e:17: 1a:4a:cc:be:e3:78:95:44:27:a8:d9:4e:af:73:7a:67:3d:4a: e5:97:cf:59:2b:ba:aa:85:22:36:c6:8a:55:b1:cd:13:f0:a4: 8e:d8:84:3d:71:01:3d:ad:3e:bd:13:59:24:93:e8:21:1d:d1: 15:0b:58:e0:f0:45:19:a4:25:32:81:48:c1:9a:52:0d:d9:65: a9:f9:c4:ca:f6:46:b3:41:cc:f4:5e:54:fa:f7:50:fe:f0:2e: de:52:da:87 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTdGMzExMC8GA1UEBRMoMzkyNDFEQzJBOTQ5MjJFQUZGOTgyRDlCNDA4MEY4QkU0 MEY3QjZCRDAeFw0yNTA5MTUxMjExMjBaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YzgwMjY3LTBmZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC44Ri9ESmrlH9h8LmRbc8HSIPei4xl+N3tyrV3sqaK344RGeWQsPCRz5r4JPhS g72VtIuIwdqZho1Fu+I+GR45sv5ncVW/M1tdMrTo1uKPkAlVmLIaru0uyQ94Tm+C Cnaw/waN5rbiY7pA2GtnvOuUyAKc6ggJsesrbngxSiONBoT3uowRmSL/eFOm87DJ 8Q5x6T888btHWUMX6zzZOKvQUGMJzSnhIaFzR/r7lN+SCR2eTw9s1aIYQlElrFG7 +36/sQGWWyOdJgOHZCK1jQ7VUzHnMsG/7K+NBd033+RWbPYTrVBN4kEa0Ec8c9st zpjo+nRNOi4cY2S4Q9UzbVV7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGNQKbzBD 2znQUftCr0XBU2A7C48wHwYDVR0jBBgwFoAUOSQdwqlJIur/mC2bQID4vkD3tr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxN0YzLzlBOUZCOEYyRkZF QzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3Ry MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1NRZHdxbEpJdXJfbUMyYlFJRDR2a0QzdHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdGMy85QTlGQjhGMkZGRUMxMUVGQkY1NUJCNkZDNEY5QUUwMi8xNjEwNTMzNDky MkQxMUYwODc5MTc4ODZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKPfazANBgkqhkiG9w0BAQsFAAOCAQEAM//Ta6HZqcUeVHDK n7iA+ovw7zMA3iyhBZqptSy41jsTDH8E04SWsWqJdcBvArYzorRmS0PKo8sWAoEQ fYcYd2JNyaalb5/vsb8jw1AenJXe2oF/frLoaGpvjxihFyHidUpt+mNEOExgfSHh KDe9nVvlEqphyL4Yj+dPjmrunwDkHJiu+6wmIBgL+A9czRBJt4k/fJNYVlvMUrkk pWnZAk4XGkrMvuN4lUQnqNlOr3N6Zz1K5ZfPWSu6qoUiNsaKVbHNE/CkjtiEPXEB Pa0+vRNZJJPoIR3RFQtY4PBFGaQlMoFIwZpSDdllqfnEyvZGs0HM9F5U+vdQ/vAu 3lLahw== -----END CERTIFICATE-----Generated at Wed Oct 8 11:54:32 2025 by rpki-client