$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/98DC875C050111EA9BDD372BC4F9AE02.roa File: 98DC875C050111EA9BDD372BC4F9AE02.roa (raw, json) Hash identifier: yDcvIxrioePtxpeJhvFLHJCVBxiycv8OBxChNhzEutw= Subject key identifier: C9:D2:09:00:C8:EB:65:20:DE:4C:20:C4:88:8B:FF:75:EF:4E:91:7C Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0C8E Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/98DC875C050111EA9BDD372BC4F9AE02.roa Signing time: Sun 28 Sep 2025 18:49:05 +0000 ROA not before: Sun 28 Sep 2025 18:49:05 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 136813 IP address blocks: 103.97.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3214 (0xc8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: Sep 28 18:49:05 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68d98321-8883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:de:b7:c5:79:7d:09:c8:e6:7f:b3:69:3c:5f: b9:eb:fe:f3:03:c1:4c:58:fa:55:d3:85:29:3c:cb: cc:52:9f:67:bc:6c:b3:3c:8d:5e:f5:9d:2f:d3:8a: ed:a3:4d:c0:93:6b:ab:b0:e4:27:81:0c:75:55:25: 64:a0:d5:bf:04:c4:10:a8:2d:fa:7f:d8:82:64:03: 1b:6a:76:9c:32:b6:6d:f8:1c:33:12:c1:71:bb:68: 45:a7:54:8c:f6:43:f4:33:b3:2b:4f:0f:4e:77:03: 5f:67:2a:19:65:ae:db:6e:62:4d:ae:b5:20:5b:77: ad:07:02:fb:a0:ff:6a:68:eb:7a:68:e0:f2:4a:b2: c4:92:6f:dc:2d:b7:22:40:00:c0:b1:b7:a8:2c:f5: 86:a3:8b:07:b5:cb:09:0b:21:31:ea:01:3d:da:1b: 50:c8:68:d9:01:99:96:13:5b:7d:0a:e6:e0:ac:a4: de:fa:93:88:6f:9e:10:bf:fd:85:10:25:ee:f9:47: 01:ff:c5:69:50:db:54:8c:00:f8:23:3f:b3:d6:1e: 82:53:98:7d:12:45:70:c2:bf:81:c0:46:75:9c:7d: 56:4b:4d:84:88:31:9a:06:c8:ed:40:37:00:56:5f: f7:f5:b1:e1:15:09:a4:c3:fd:8b:26:9c:8c:27:79: ff:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D2:09:00:C8:EB:65:20:DE:4C:20:C4:88:8B:FF:75:EF:4E:91:7C X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/98DC875C050111EA9BDD372BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.120.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:f2:03:16:23:31:3c:cc:b6:a3:2e:f9:af:30:95:e2:37:82: 35:60:90:0c:fb:17:bf:96:8c:5d:90:43:20:4c:d4:6f:df:e4: 0a:a3:65:2a:8f:78:c6:2b:bb:1f:f4:48:66:fa:2f:23:19:35: 1d:72:21:2e:18:69:d2:66:59:fb:2b:c1:30:e8:18:f1:12:6e: 21:dc:cb:6a:95:60:3a:98:94:29:1a:cd:2a:a0:cc:82:68:04: dc:ef:6f:49:ce:b0:68:8c:3f:17:bf:e0:f5:2e:d4:e6:a7:16: bb:a0:e2:d8:b9:18:f8:b0:11:6f:47:4a:7c:14:b0:49:68:c2: 60:0f:49:25:f7:cf:9f:e7:1c:58:6b:4a:f7:9e:95:07:da:eb: 61:36:01:24:e1:61:de:9a:32:2b:c9:04:70:66:d0:03:dd:13: 94:0e:97:8b:0b:81:53:65:31:2d:e3:a9:ef:06:14:d3:fc:a8: b1:8d:0e:b7:87:f8:83:85:7d:af:10:bb:bb:35:35:1a:9e:0e: 6f:76:96:6d:c8:fd:87:5b:d2:73:1c:0a:d4:a8:b6:a6:4e:c4: c4:c4:75:11:1e:4a:3e:5f:73:be:c4:9d:6a:e1:7a:59:86:66: c4:b6:21:28:ea:76:40:59:cc:e5:c0:f6:37:43:a3:53:64:97: 24:86:5b:55 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjUwOTI4MTg0OTA1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ5ODMyMS04ODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4963xXl9Ccjmf7NpPF+56/7zA8FMWPpV04UpPMvMUp9nvGyzPI1e9Z0v04rt o03Ak2ursOQngQx1VSVkoNW/BMQQqC36f9iCZAMbanacMrZt+BwzEsFxu2hFp1SM 9kP0M7MrTw9OdwNfZyoZZa7bbmJNrrUgW3etBwL7oP9qaOt6aODySrLEkm/cLbci QADAsbeoLPWGo4sHtcsJCyEx6gE92htQyGjZAZmWE1t9CubgrKTe+pOIb54Qv/2F ECXu+UcB/8VpUNtUjAD4Iz+z1h6CU5h9EkVwwr+BwEZ1nH1WS02EiDGaBsjtQDcA Vl/39bHhFQmkw/2LJpyMJ3n/NwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMnSCQDI 62Ug3kwgxIiL/3XvTpF8MB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODU2QzQvQTNCQUQ4RTIwNEZGMTFFQTkzRUU5QTIzQzRGOUFFMDIvOThEQzg3NUMw NTAxMTFFQTlCREQzNzJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnYXgwDQYJKoZIhvcNAQELBQADggEBAHzyAxYjMTzMtqMu +a8wleI3gjVgkAz7F7+WjF2QQyBM1G/f5AqjZSqPeMYrux/0SGb6LyMZNR1yIS4Y adJmWfsrwTDoGPESbiHcy2qVYDqYlCkazSqgzIJoBNzvb0nOsGiMPxe/4PUu1Oan Frug4ti5GPiwEW9HSnwUsElowmAPSSX3z5/nHFhrSveelQfa62E2ASThYd6aMivJ BHBm0APdE5QOl4sLgVNlMS3jqe8GFNP8qLGNDreH+IOFfa8Qu7s1NRqeDm92lm3I /Ydb0nMcCtSotqZOxMTEdREeSj5fc77EnWrhelmGZsS2ISjqdkBZzOXA9jdDo1Nk lySGW1U= -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:54 2025 by rpki-client