$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/E9C2CC6C29CC11F086897744C4F9AE02.roa File: E9C2CC6C29CC11F086897744C4F9AE02.roa (raw, json) Hash identifier: hA/qYpYBMY/Kd41Yn5++b5Q+qTaDQ7FCreW/lO2fSUE= Subject key identifier: F8:22:6E:19:AB:A1:15:FB:2B:EF:10:2F:87:A8:24:ED:FA:2B:E5:52 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 05CF Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/E9C2CC6C29CC11F086897744C4F9AE02.roa Signing time: Wed 13 Aug 2025 00:05:58 +0000 ROA not before: Wed 13 Aug 2025 00:05:58 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 152605 IP address blocks: 103.169.98.0/24 maxlen: 24 103.169.99.0/24 maxlen: 24 2001:df6:f580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 00:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1487 (0x5cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: Aug 13 00:05:58 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=689bd6e6-071f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:47:26:ff:f5:15:68:3b:71:f6:c7:f5:e6: 11:3a:88:5d:9b:1f:9b:78:db:9a:77:62:6d:14:d5: b2:ca:f8:19:88:4e:19:e4:a9:d3:f8:d0:15:9a:9d: fa:6d:53:fe:09:c5:8f:37:b0:7a:bf:cb:af:f3:c6: 12:d7:87:60:94:12:3f:aa:68:d5:87:f8:60:92:23: 98:bf:89:3d:53:10:d8:f2:2d:16:b3:fb:fa:26:d4: 0b:59:34:71:64:9e:e0:f4:e2:bb:08:1e:a7:02:ab: 09:31:95:ef:8c:4f:39:29:41:1b:9c:67:32:2a:4d: 53:ee:75:99:97:55:8f:a8:f7:4c:f6:1c:b3:37:45: b2:e1:c4:f4:de:99:7b:89:47:6f:4a:aa:eb:7b:2f: 1c:f0:d5:6f:e6:7c:4d:bf:dc:e1:5c:fd:c2:5d:75: c1:5f:9a:fd:d0:47:22:31:44:ea:fb:68:67:02:0d: c5:aa:72:98:90:fc:77:fd:9c:73:14:0d:4b:57:12: bf:9c:e1:12:6c:67:ee:86:49:19:62:8f:8f:a1:31: 91:ee:2a:be:f2:00:c7:5d:84:7e:78:89:89:97:f5: a0:38:68:a2:16:2c:7a:79:40:b1:2c:d6:b6:2a:c4: 4b:fb:a1:58:fc:81:05:1d:e4:97:0e:f9:30:03:81: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:22:6E:19:AB:A1:15:FB:2B:EF:10:2F:87:A8:24:ED:FA:2B:E5:52 X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/E9C2CC6C29CC11F086897744C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.169.98.0/23 IPv6: 2001:df6:f580::/48 Signature Algorithm: sha256WithRSAEncryption 4a:9b:8e:e8:35:27:5d:e5:a2:0a:d8:fb:e9:dd:cd:7f:1f:57: c5:06:08:dd:b4:48:ad:f9:59:be:4b:91:88:a8:2b:04:c9:67: be:f4:ac:86:cf:b0:41:66:b1:78:3a:6c:fe:43:15:b0:f9:1b: 0d:b8:ab:f1:69:59:79:86:7f:ec:e9:34:9f:8c:0d:c3:59:88: 17:7e:c6:c5:74:57:1e:cc:f0:e8:74:e6:43:9c:40:df:8f:a3: 5c:be:f5:00:94:f6:cf:61:7c:f4:01:f4:a5:34:c4:ec:dc:a6: 7a:d4:e0:93:b7:d3:9f:1c:87:fa:60:3b:b3:25:2e:cf:e1:e0: 93:15:95:ea:73:58:d4:8e:42:1a:ba:60:8d:95:43:d2:c7:da: 4f:1e:c5:de:b6:6a:59:fc:25:6d:07:8f:e0:64:8a:36:3e:f5: 83:4c:a6:58:ef:c7:fd:f0:78:b5:5f:4d:0d:29:80:46:18:98: 8d:f1:b5:6c:9c:ec:28:4d:d8:d1:5d:25:fb:da:7d:f8:23:e7: b9:45:fb:10:55:36:02:92:fe:61:09:80:a9:d8:1e:b4:d1:30: 23:b3:23:db:29:e7:d6:f3:8d:3f:83:e8:2d:ad:70:04:7e:e9: dd:04:ef:06:98:7c:ba:e8:e2:e3:d6:6f:3f:f5:5b:eb:ff:9b: 7f:69:73:64 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjUwODEzMDAwNTU4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODliZDZlNi0wNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlxHJv/1FWg7cfbH9eYROohdmx+beNuad2JtFNWyyvgZiE4Z5KnT+NAVmp36 bVP+CcWPN7B6v8uv88YS14dglBI/qmjVh/hgkiOYv4k9UxDY8i0Ws/v6JtQLWTRx ZJ7g9OK7CB6nAqsJMZXvjE85KUEbnGcyKk1T7nWZl1WPqPdM9hyzN0Wy4cT03pl7 iUdvSqrrey8c8NVv5nxNv9zhXP3CXXXBX5r90EciMUTq+2hnAg3FqnKYkPx3/Zxz FA1LVxK/nOESbGfuhkkZYo+PoTGR7iq+8gDHXYR+eImJl/WgOGiiFix6eUCxLNa2 KsRL+6FY/IEFHeSXDvkwA4EZCwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPgibhmr oRX7K+8QL4eoJO36K+VSMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjI4QkMvMEU3RDY0RDZERjBEMTFFQkIxMTMwRDgxQzRGOUFFMDIvRTlDMkNDNkMy OUNDMTFGMDg2ODk3NzQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqWIwDwQCAAIwCQMHACABDfb1gDANBgkqhkiG9w0BAQsF AAOCAQEASpuO6DUnXeWiCtj76d3Nfx9XxQYI3bRIrflZvkuRiKgrBMlnvvSshs+w QWaxeDps/kMVsPkbDbir8WlZeYZ/7Ok0n4wNw1mIF37GxXRXHszw6HTmQ5xA34+j XL71AJT2z2F89AH0pTTE7NymetTgk7fTnxyH+mA7syUuz+HgkxWV6nNY1I5CGrpg jZVD0sfaTx7F3rZqWfwlbQeP4GSKNj71g0ymWO/H/fB4tV9NDSmARhiYjfG1bJzs KE3Y0V0l+9p9+CPnuUX7EFU2ApL+YQmAqdgetNEwI7Mj2ynn1vONP4PoLa1wBH7p 3QTvBph8uuji49ZvP/Vb6/+bf2lzZA== -----END CERTIFICATE-----Generated at Fri Oct 24 18:54:49 2025 by rpki-client