$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa File: 9FD12146ED7211ED8A92041CC4F9AE02.roa (raw, json) Hash identifier: aFxmstcvEMQ/qqQO/m7uR2Alk5KmIeuyGi0FUw+S+g0= Subject key identifier: F3:EF:7F:D8:1A:EF:97:BD:1E:3E:DC:52:35:42:F0:75:D0:74:24:2F Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 01E4 Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa Signing time: Tue 04 Nov 2025 16:33:52 +0000 ROA not before: Tue 04 Nov 2025 16:33:52 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133866 IP address blocks: 103.76.44.0/22 maxlen: 22 103.76.44.0/24 maxlen: 24 103.76.45.0/24 maxlen: 24 103.76.46.0/24 maxlen: 24 103.76.47.0/24 maxlen: 24 116.206.88.0/22 maxlen: 22 116.206.88.0/24 maxlen: 24 116.206.89.0/24 maxlen: 24 116.206.90.0/24 maxlen: 24 116.206.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: Nov 4 16:33:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690a2aef-8876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a5:d4:0f:18:49:99:28:d4:be:c8:e8:e3:2a: 6d:91:a6:78:b8:cb:6a:f4:e6:37:96:19:63:da:2f: 10:24:4c:71:07:cb:3f:5b:81:50:fd:c7:87:6c:90: b0:0c:79:5b:4e:3f:8d:d4:95:cd:4e:7d:18:78:1a: 39:fa:19:b7:e1:fe:a1:12:03:d6:68:c9:2b:0c:dc: e7:7e:1f:82:21:15:20:42:49:39:d8:56:99:c2:85: b4:38:15:37:23:bc:07:0c:48:3b:3b:b8:35:c7:52: 0c:f9:0a:49:1e:69:15:f1:1c:ec:4f:05:ac:d6:ec: 7f:aa:c3:5c:13:f3:56:45:39:0d:af:26:80:b6:cc: 9b:bb:f5:c2:8b:94:bb:13:47:cb:56:23:1f:5e:3b: 30:da:74:cb:1c:8c:d3:7c:28:6e:86:5f:8b:3c:25: bf:d2:a0:46:0c:eb:97:36:af:28:01:02:17:50:39: f1:4c:89:94:d6:d6:c8:14:50:84:55:e3:7d:06:6c: 90:3b:f9:1f:6c:de:4c:38:2b:56:7e:61:30:fd:ff: 0c:0c:2c:2e:27:ea:4a:ae:d1:98:aa:da:52:59:95: 6c:64:54:88:f8:db:d7:a3:5d:dd:70:d1:b6:18:23: e5:89:76:ad:6b:93:06:8b:d2:b0:60:44:0e:dd:19: b5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EF:7F:D8:1A:EF:97:BD:1E:3E:DC:52:35:42:F0:75:D0:74:24:2F X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/9FD12146ED7211ED8A92041CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.44.0/22 116.206.88.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:3c:a2:ca:80:66:31:f4:c4:2b:92:84:52:a7:74:d1:ac:5b: 9c:d2:2a:64:e5:5c:16:e8:f2:9c:e1:27:90:2b:ae:ce:56:41: 57:32:c5:87:1d:43:da:2d:4e:4d:02:4d:56:db:e8:a4:cf:81: 37:1d:2b:e1:5b:14:62:e5:74:b2:34:ae:dc:b5:19:7c:c4:31: a0:16:6d:9d:00:77:99:69:7e:74:bd:eb:61:c8:ed:9f:4b:b1: f8:d8:38:ed:89:27:18:46:24:76:17:ab:6e:03:0b:2c:7b:eb: 09:51:1c:7e:25:83:9f:76:8e:92:9c:2a:49:0b:4c:8f:2a:e3: 22:4e:31:fc:4c:d0:12:3a:52:2a:0d:e8:fa:62:41:76:79:e8: 71:a1:4b:1b:f1:3d:27:97:75:69:66:24:5c:97:ff:23:a2:01: 2b:e1:4b:95:ca:7b:18:83:b7:24:bf:d0:bf:5f:58:ef:d9:a6: 86:57:03:73:9f:e6:6b:4d:ca:01:f5:cb:2e:35:c1:6e:0c:cb: 9e:7b:ed:46:35:d2:bd:08:08:af:8a:71:36:fc:8e:bf:03:2d: 4b:cd:43:2c:6a:ef:b8:3d:b4:5a:3b:01:fe:31:65:51:f9:18: 06:09:67:75:d0:63:d5:5e:5d:d3:ac:87:a4:8f:f8:44:48:c9: ba:84:4f:4f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjUxMTA0MTYzMzUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhMmFlZi04ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qXUDxhJmSjUvsjo4yptkaZ4uMtq9OY3lhlj2i8QJExxB8s/W4FQ/ceHbJCw DHlbTj+N1JXNTn0YeBo5+hm34f6hEgPWaMkrDNznfh+CIRUgQkk52FaZwoW0OBU3 I7wHDEg7O7g1x1IM+QpJHmkV8RzsTwWs1ux/qsNcE/NWRTkNryaAtsybu/XCi5S7 E0fLViMfXjsw2nTLHIzTfChuhl+LPCW/0qBGDOuXNq8oAQIXUDnxTImU1tbIFFCE VeN9BmyQO/kfbN5MOCtWfmEw/f8MDCwuJ+pKrtGYqtpSWZVsZFSI+NvXo13dcNG2 GCPliXata5MGi9KwYEQO3Rm14wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPPvf9ga 75e9Hj7cUjVC8HXQdCQvMB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQyRUEvRjUzMzJEN0U4NEMzMTFFNkI5ODIxQTgxQzRGOUFFMDIvOUZEMTIxNDZF RDcyMTFFRDhBOTIwNDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnTCwDBAJ0zlgwDQYJKoZIhvcNAQELBQADggEBAE88osqA ZjH0xCuShFKndNGsW5zSKmTlXBbo8pzhJ5Arrs5WQVcyxYcdQ9otTk0CTVbb6KTP gTcdK+FbFGLldLI0rty1GXzEMaAWbZ0Ad5lpfnS962HI7Z9LsfjYOO2JJxhGJHYX q24DCyx76wlRHH4lg592jpKcKkkLTI8q4yJOMfxM0BI6UioN6PpiQXZ56HGhSxvx PSeXdWlmJFyX/yOiASvhS5XKexiDtyS/0L9fWO/ZpoZXA3Of5mtNygH1yy41wW4M y5577UY10r0ICK+KcTb8jr8DLUvNQyxq77g9tFo7Af4xZVH5GAYJZ3XQY9VeXdOs h6SP+ERIybqET08= -----END CERTIFICATE-----Generated at Thu Nov 6 00:39:16 2025 by rpki-client