$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8B5ED70E821611F0B778F47DC4F9AE02.roa File: 8B5ED70E821611F0B778F47DC4F9AE02.roa (raw, json) Hash identifier: ec9OX9UoLwyn7wN5VObF9v2iz3RI0N5kTbWroMU/2/c= Subject key identifier: 0A:F4:F3:23:40:F8:ED:53:5E:26:F7:2F:A4:43:88:2F:DB:97:7E:B5 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C4B Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8B5ED70E821611F0B778F47DC4F9AE02.roa Signing time: Tue 26 Aug 2025 00:49:39 +0000 ROA not before: Tue 26 Aug 2025 00:49:39 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 15412 IP address blocks: 103.8.84.0/24 maxlen: 24 103.8.85.0/24 maxlen: 24 103.8.86.0/24 maxlen: 24 103.8.87.0/24 maxlen: 24 103.21.104.0/24 maxlen: 24 103.21.106.0/24 maxlen: 24 103.225.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Aug 26 00:49:39 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68ad04a3-8b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:a7:8f:ca:cd:21:00:b7:fe:e8:9b:dd:98: 48:a5:64:1d:97:c2:ff:14:f3:06:ea:3f:6c:5f:e0: 74:ff:a9:31:6a:65:d7:c1:96:f6:e4:02:be:69:5a: e4:69:3c:64:bd:b0:6c:ac:94:bf:3a:90:2c:2e:bf: c6:8c:f8:1c:fe:b6:4a:e5:56:eb:56:b6:05:dd:8f: 38:af:34:42:e4:8b:bf:f2:38:b2:45:ab:84:41:f8: 00:1d:f7:e7:6e:16:50:ec:7d:2a:3e:f0:12:2e:05: 29:75:f7:35:5d:28:50:cc:3f:6a:dd:d3:5f:dc:6e: b4:33:7c:32:19:fa:3b:35:84:26:ba:c5:88:b0:07: 0a:c9:f6:8b:24:5d:de:d1:b3:e9:71:b2:87:86:29: 35:27:58:fd:c9:c6:02:f5:dc:8b:b8:4f:e2:b9:f9: 89:97:71:38:4c:1a:a5:3f:6c:78:75:6b:70:50:f5: 73:02:63:40:a0:36:83:53:4f:28:01:67:9a:e6:67: 68:63:e7:ab:84:80:32:8b:2a:28:e4:9c:6f:7b:7a: 25:3e:5e:ca:36:20:b2:65:23:e3:36:36:8c:ca:3e: 36:a6:af:7e:cb:26:9d:dc:3b:4e:90:78:19:2b:9b: 42:55:fc:c3:65:96:c3:63:39:53:c4:8e:34:c9:c4: e5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F4:F3:23:40:F8:ED:53:5E:26:F7:2F:A4:43:88:2F:DB:97:7E:B5 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/8B5ED70E821611F0B778F47DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.8.84.0/22 103.21.104.0/24 103.21.106.0/24 103.225.192.0/22 Signature Algorithm: sha256WithRSAEncryption c6:34:57:08:0c:07:05:0d:79:ad:5f:d9:b6:ab:d8:8d:21:39: 93:1b:13:bc:fe:c0:eb:73:fe:f5:bf:56:2f:78:19:93:38:5a: 29:7a:77:dd:ff:03:b5:ff:f6:29:8e:00:cb:2e:87:5e:7f:6e: 84:21:f6:43:35:8d:92:91:15:04:69:3a:8b:46:70:ec:56:5f: 71:38:b1:c9:3b:84:38:1f:14:b0:b7:02:05:6d:16:70:35:2e: 42:47:39:0d:ad:f6:20:7a:c9:c4:6d:ba:b6:53:33:15:52:3b: bd:c2:8b:22:d0:56:34:50:0d:41:90:b2:93:87:2f:08:46:3a: 00:70:96:3a:36:b9:b5:32:a5:a5:80:2d:20:ff:f9:23:40:1c: 3f:26:39:e2:28:69:28:06:a8:01:a7:63:9d:8b:ed:57:4c:e7: eb:7f:35:15:09:10:bd:84:fb:6f:cf:0a:24:e3:fb:0b:bf:2d: de:c7:7f:e3:f9:a0:40:ee:c6:cd:fd:90:2c:33:8e:8a:dc:9b: ff:d8:e5:06:e7:52:48:b6:62:45:64:00:b8:e3:db:fd:90:fa: 8f:66:15:35:07:e2:10:57:26:b4:63:3a:09:68:5f:57:88:4c: d1:fa:38:8a:bc:17:72:da:5e:b8:2f:a2:f1:d8:97:7e:44:e9: af:36:61:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwODI2MDA0OTM5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGFkMDRhMy04YjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsU6nj8rNIQC3/uib3ZhIpWQdl8L/FPMG6j9sX+B0/6kxamXXwZb25AK+aVrk aTxkvbBsrJS/OpAsLr/GjPgc/rZK5VbrVrYF3Y84rzRC5Iu/8jiyRauEQfgAHffn bhZQ7H0qPvASLgUpdfc1XShQzD9q3dNf3G60M3wyGfo7NYQmusWIsAcKyfaLJF3e 0bPpcbKHhik1J1j9ycYC9dyLuE/iufmJl3E4TBqlP2x4dWtwUPVzAmNAoDaDU08o AWea5mdoY+erhIAyiyoo5Jxve3olPl7KNiCyZSPjNjaMyj42pq9+yyad3DtOkHgZ K5tCVfzDZZbDYzlTxI40ycTlkwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFAr08yNA +O1TXib3L6RDiC/bl361MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvOEI1RUQ3MEU4 MjE2MTFGMEI3NzhGNDdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJnCFQDBABnFWgDBABnFWoDBAJn4cAwDQYJKoZIhvcNAQEL BQADggEBAMY0VwgMBwUNea1f2bar2I0hOZMbE7z+wOtz/vW/Vi94GZM4Wil6d93/ A7X/9imOAMsuh15/boQh9kM1jZKRFQRpOotGcOxWX3E4sck7hDgfFLC3AgVtFnA1 LkJHOQ2t9iB6ycRturZTMxVSO73CiyLQVjRQDUGQspOHLwhGOgBwljo2ubUypaWA LSD/+SNAHD8mOeIoaSgGqAGnY52L7VdM5+t/NRUJEL2E+2/PCiTj+wu/Ld7Hf+P5 oEDuxs39kCwzjorcm//Y5QbnUki2YkVkALjj2/2Q+o9mFTUH4hBXJrRjOgloX1eI TNH6OIq8F3LaXrgvovHYl35E6a82Ybc= -----END CERTIFICATE-----Generated at Sat Sep 6 16:49:53 2025 by rpki-client