$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/2B219CDC1FE811EF96F54D5AC4F9AE02.roa File: 2B219CDC1FE811EF96F54D5AC4F9AE02.roa (raw, json) Hash identifier: Sj5dG6gkaXT4SUEh6ZNnO+di4MLVli4VB7cBIKCvXJs= Subject key identifier: 0C:77:72:44:5F:97:D3:51:16:66:89:F6:2A:94:65:61:76:1C:42:4D Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Certificate serial: 0816 Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/2B219CDC1FE811EF96F54D5AC4F9AE02.roa Signing time: Wed 22 Oct 2025 22:10:21 +0000 ROA not before: Wed 22 Oct 2025 22:10:21 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141217 IP address blocks: 103.156.176.0/23 maxlen: 23 103.156.176.0/24 maxlen: 24 103.156.177.0/24 maxlen: 24 2001:df4:f180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Validity Not Before: Oct 22 22:10:21 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f9564d-54e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:39:28:04:96:f6:ed:1c:e3:5a:ce:77:2e: 9b:d9:4b:65:7c:a4:3f:f7:22:f9:89:51:22:d0:64: 64:9b:93:3d:17:96:a5:bd:a0:eb:46:3b:00:ca:76: 22:53:74:be:47:5d:be:2f:1c:21:1e:d0:fb:bb:70: 66:b0:3a:40:a6:67:68:5c:03:cc:54:6d:35:53:87: 1f:a1:42:f7:f5:16:31:11:8c:f3:c0:ea:d5:87:d2: 30:77:63:0d:74:0c:e2:61:f0:b9:78:91:07:89:d0: 7e:f7:4d:7c:c0:49:ff:ac:26:be:a2:86:76:0c:45: 9d:93:e7:51:44:c5:33:cc:bb:b1:10:83:d8:15:30: 8e:76:b8:9b:bf:98:ef:a1:c2:04:d9:4d:07:95:2b: 86:90:10:03:fe:34:c7:33:73:6f:99:ed:cf:7b:47: c3:d6:9b:ff:26:b8:54:97:d7:52:13:8f:c8:8c:9e: f7:50:5a:3f:fc:c6:7c:4c:6f:f0:1d:7f:35:4b:8b: 3e:af:3d:7e:af:3a:67:de:c2:a2:91:e4:d1:39:0e: b7:2e:18:4b:71:7a:28:eb:c9:29:2b:f8:f4:e7:99: 23:83:85:90:52:a4:ac:39:ef:6b:88:31:ac:b5:9a: 98:4c:66:70:55:21:1d:7e:95:21:ba:ba:8c:54:1f: 7e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:77:72:44:5F:97:D3:51:16:66:89:F6:2A:94:65:61:76:1C:42:4D X509v3 Authority Key Identifier: keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/2B219CDC1FE811EF96F54D5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.176.0/23 IPv6: 2001:df4:f180::/48 Signature Algorithm: sha256WithRSAEncryption 27:46:59:53:5e:4b:38:f1:9f:84:6f:e8:17:41:dc:d5:bc:38: b6:8e:b9:ff:92:c1:b7:3f:84:5f:f1:98:82:81:6b:a7:be:ce: e1:dc:b7:7d:6b:59:0f:e8:5d:ac:77:10:6d:4b:8d:91:8d:60: db:23:a5:90:06:2f:ad:96:28:46:ca:33:6e:d3:c9:18:4a:00: f9:76:4c:8a:9d:f0:9d:00:6b:b1:98:ce:2d:f3:58:cf:d0:a2: 66:3e:ff:52:fd:74:fd:1f:43:d2:51:83:4b:fb:5e:53:8c:8b: 4a:94:31:bf:5e:67:08:d5:31:61:09:24:25:13:11:21:a4:15: 7f:4c:76:1f:36:cf:35:76:06:c4:69:98:c1:1d:f1:4d:bd:c2: 75:30:1d:14:03:4a:fd:a2:fc:8f:19:6c:a8:64:06:87:22:61: 7e:13:c4:dd:ac:37:2e:27:d0:f3:ed:eb:ba:e1:0e:95:70:74: 2e:11:d3:fc:fc:b5:36:5c:09:dd:5d:14:51:7d:05:36:53:0c: 00:19:6e:b8:cb:84:b9:3c:0f:af:1c:8f:77:b2:a6:c8:85:b1: a6:d1:06:34:3e:fe:a3:d9:23:6f:3d:ff:99:b0:8a:01:6c:c0: 89:97:a0:49:e1:dd:f0:3d:71:b9:6d:bb:e0:e2:3f:21:82:fd: 90:fd:2a:36 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5QzgxMTAvBgNVBAUTKEZFRUE2MTQzOUEzMDk4Qjg1Q0NCMTgzQjVBNDFBQTEy QUY0NUNBMUUwHhcNMjUxMDIyMjIxMDIxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5NTY0ZC01NGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcc5KASW9u0c41rOdy6b2UtlfKQ/9yL5iVEi0GRkm5M9F5alvaDrRjsAynYi U3S+R12+LxwhHtD7u3BmsDpApmdoXAPMVG01U4cfoUL39RYxEYzzwOrVh9Iwd2MN dAziYfC5eJEHidB+9018wEn/rCa+ooZ2DEWdk+dRRMUzzLuxEIPYFTCOdribv5jv ocIE2U0HlSuGkBAD/jTHM3Nvme3Pe0fD1pv/JrhUl9dSE4/IjJ73UFo//MZ8TG/w HX81S4s+rz1+rzpn3sKikeTROQ63LhhLcXoo68kpK/j055kjg4WQUqSsOe9riDGs tZqYTGZwVSEdfpUhurqMVB9+5QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAx3ckRf l9NRFmaJ9iqUZWF2HEJNMB8GA1UdIwQYMBaAFP7qYUOaMJi4XMsYO1pBqhKvRcoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTlDOC9GNUE1RUVBQTAx NDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21MaGN5eGc3V2tHcUVxOUZ5 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191cGhRNW93bUxoY3l4ZzdXa0dxRXE5RnloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTE5QzgvRjVBNUVFQUEwMTQxMTFFQkEzM0Y4RTExQzRGOUFFMDIvMkIyMTlDREMx RkU4MTFFRjk2RjU0RDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnnLAwDwQCAAIwCQMHACABDfTxgDANBgkqhkiG9w0BAQsF AAOCAQEAJ0ZZU15LOPGfhG/oF0Hc1bw4to65/5LBtz+EX/GYgoFrp77O4dy3fWtZ D+hdrHcQbUuNkY1g2yOlkAYvrZYoRsozbtPJGEoA+XZMip3wnQBrsZjOLfNYz9Ci Zj7/Uv10/R9D0lGDS/teU4yLSpQxv15nCNUxYQkkJRMRIaQVf0x2HzbPNXYGxGmY wR3xTb3CdTAdFANK/aL8jxlsqGQGhyJhfhPE3aw3LifQ8+3ruuEOlXB0LhHT/Py1 NlwJ3V0UUX0FNlMMABluuMuEuTwPrxyPd7KmyIWxptEGND7+o9kjbz3/mbCKAWzA iZegSeHd8D1xuW274OI/IYL9kP0qNg== -----END CERTIFICATE-----Generated at Fri Oct 31 12:44:56 2025 by rpki-client