$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/8AEE4940EAB511ECBBDE3C50C4F9AE02.roa File: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (raw, json) Hash identifier: Da11y9sKk3+3GED3RWDHgx+o3Zp2BSYGO+0sW2aJMEM= Subject key identifier: B3:53:C1:57:7A:7F:0A:86:B9:0D:98:A5:BE:90:96:C9:6F:CC:86:C1 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 043B Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/8AEE4940EAB511ECBBDE3C50C4F9AE02.roa Signing time: Wed 03 Sep 2025 00:45:39 +0000 ROA not before: Wed 03 Sep 2025 00:45:39 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 205960 IP address blocks: 103.91.217.0/24 maxlen: 24 103.99.208.0/24 maxlen: 24 103.99.209.0/24 maxlen: 24 103.99.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 03:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Sep 3 00:45:39 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b78fb3-b6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:5b:6d:35:8f:7f:c8:ae:e0:93:44:b7:6e: c7:cd:e9:1d:07:dc:5c:3f:ee:56:99:a2:30:10:87: 02:39:fd:af:95:c3:8c:da:15:f1:7b:16:88:11:2a: 92:7a:df:16:10:f3:8c:b9:20:29:b9:6a:0f:5c:4c: 10:7e:87:d8:61:d4:67:fc:02:4b:2d:06:4f:c3:2a: ce:f1:86:3c:84:53:f9:0b:e4:ad:bb:e7:17:49:4d: cf:0b:84:d0:e9:9f:b7:1b:41:19:fb:10:35:5f:e9: 6f:b9:85:16:9f:67:c3:2c:6e:6e:32:78:a9:da:e8: 9c:1c:fa:75:bd:84:58:90:74:f0:38:f1:f7:a4:dd: 31:b1:5f:88:c8:83:99:f5:e7:48:be:73:e7:2c:a0: 7b:03:b1:81:10:6e:a8:53:c4:3c:b6:f5:af:9c:67: 84:82:9f:3d:f6:8b:94:a6:1d:d7:92:24:ba:26:9a: 34:20:96:52:69:ea:8c:f0:5c:86:31:0a:d5:64:48: 27:75:c8:99:7b:61:69:82:a0:b4:2f:9f:22:c8:b3: 32:82:6c:67:ed:c9:99:1a:1c:1e:89:b5:9c:8c:10: 93:13:52:13:eb:1a:15:44:7e:fe:e3:a1:46:cc:9e: ba:94:e6:e4:89:8e:f5:c8:42:36:74:8c:45:70:f5: a0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:53:C1:57:7A:7F:0A:86:B9:0D:98:A5:BE:90:96:C9:6F:CC:86:C1 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/8AEE4940EAB511ECBBDE3C50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.217.0/24 103.99.208.0-103.99.210.255 Signature Algorithm: sha256WithRSAEncryption 21:10:02:19:be:e3:79:05:63:37:95:5b:e0:aa:70:81:b5:8a: 4d:58:c5:8e:eb:cc:c2:a1:a3:fa:31:68:2f:d9:65:e1:4a:c0: e9:3b:84:6f:8d:ca:2e:6d:75:a9:47:12:5e:72:e7:b7:44:75: 77:e7:c6:90:98:a6:d3:0b:28:d7:1a:fe:86:78:94:9a:bb:48: 1c:f1:53:e6:3d:3a:c3:38:f9:c3:ce:14:03:8c:41:c9:fb:46: 8b:fc:c7:ad:c4:6f:d7:a0:3d:dd:2f:65:81:47:28:0a:08:0e: 99:a0:4c:6c:79:4a:f7:c2:d6:7f:c2:9c:30:6a:f6:78:eb:d5: 8a:3f:11:72:1c:4d:1d:2e:72:6e:fc:53:9f:20:68:ac:6f:c1: 2e:2b:44:2c:4b:03:34:be:f4:1c:43:fa:90:e9:22:cd:5d:5a: 77:59:cb:68:b1:66:96:78:c2:81:f0:40:4a:52:ac:ec:e7:3a: 28:ad:b0:49:96:bd:c4:36:ee:e8:b0:62:36:18:e7:bf:75:9d: 87:21:28:33:66:c6:e7:9e:e4:9a:a3:30:e3:48:e9:f1:8b:23: 96:14:97:37:f6:f1:26:c0:4c:d6:a0:ad:fa:75:c8:7d:14:ad: 49:05:69:61:f4:de:46:53:53:5c:63:84:a4:18:94:ef:1b:6b: 3c:e0:03:c4 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjUwOTAzMDA0NTM5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3OGZiMy1iNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzxbbTWPf8iu4JNEt27HzekdB9xcP+5WmaIwEIcCOf2vlcOM2hXxexaIESqS et8WEPOMuSApuWoPXEwQfofYYdRn/AJLLQZPwyrO8YY8hFP5C+Stu+cXSU3PC4TQ 6Z+3G0EZ+xA1X+lvuYUWn2fDLG5uMnip2uicHPp1vYRYkHTwOPH3pN0xsV+IyIOZ 9edIvnPnLKB7A7GBEG6oU8Q8tvWvnGeEgp899ouUph3XkiS6Jpo0IJZSaeqM8FyG MQrVZEgndciZe2FpgqC0L58iyLMygmxn7cmZGhweibWcjBCTE1IT6xoVRH7+46FG zJ66lObkiY71yEI2dIxFcPWg4QIDAQABo4ICozCCAp8wHQYDVR0OBBYEFLNTwVd6 fwqGuQ2Ypb6QlslvzIbBMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU5QzEvRUU3MDJGNDQ3QUM5MTFFQzlEQTU1QjQ2QzRGOUFFMDIvOEFFRTQ5NDBF QUI1MTFFQ0JCREUzQzUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBABnW9kwDAMEBGdj0AMEAGdj0jANBgkqhkiG9w0BAQsFAAOC AQEAIRACGb7jeQVjN5Vb4KpwgbWKTVjFjuvMwqGj+jFoL9ll4UrA6TuEb43KLm11 qUcSXnLnt0R1d+fGkJim0wso1xr+hniUmrtIHPFT5j06wzj5w84UA4xByftGi/zH rcRv16A93S9lgUcoCggOmaBMbHlK98LWf8KcMGr2eOvVij8RchxNHS5ybvxTnyBo rG/BLitELEsDNL70HEP6kOkizV1ad1nLaLFmlnjCgfBASlKs7Oc6KK2wSZa9xDbu 6LBiNhjnv3WdhyEoM2bG557kmqMw40jp8YsjlhSXN/bxJsBM1qCt+nXIfRStSQVp YfTeRlNTXGOEpBiU7xtrPOADxA== -----END CERTIFICATE-----Generated at Sat Oct 25 20:03:05 2025 by rpki-client