$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F19AE6C9DE311EBBFF9E749C4F9AE02.roa File: 8F19AE6C9DE311EBBFF9E749C4F9AE02.roa (raw, json) Hash identifier: RIGPnoF5sYTis3Er1OtXlpSKkPrNyv/xBRR3PWX1cwc= Subject key identifier: 04:4B:11:CF:E9:1A:00:B4:00:FF:97:B6:4C:2F:5B:57:30:4D:B2:6D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4D32 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F19AE6C9DE311EBBFF9E749C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:54:08 +0000 ROA not before: Thu 28 Aug 2025 14:54:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140796 IP address blocks: 103.164.34.0/24 maxlen: 24 103.164.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19762 (0x4d32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:54:08 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d8f-cf8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f3:43:bf:87:f4:3d:c5:ae:e9:d6:26:3c:e7: f6:30:ef:b4:33:e2:ba:cf:85:b0:11:6b:4c:70:e7: 53:8a:5e:e6:96:14:81:17:d6:04:50:87:16:78:f5: 59:c7:46:2d:57:f9:08:63:98:55:9d:ab:ce:72:b6: 00:8c:d3:39:b9:6d:c7:1e:16:84:80:6e:b8:d4:45: b2:e2:76:88:6d:a7:23:ea:1d:48:3f:fe:f6:58:ff: 71:1e:cb:33:e1:42:2d:7e:da:5f:4c:0e:0c:53:f6: a0:46:72:8d:a8:63:00:17:2d:87:73:f3:36:e9:f8: a7:41:15:bf:7b:b8:51:67:87:51:f2:a8:e8:91:92: f5:86:c2:cd:18:6f:93:ff:65:4a:c7:ba:f8:a5:e6: 55:c4:ed:9a:be:8c:a3:0f:b9:7c:c1:95:23:1b:84: 8a:c7:e5:eb:28:9d:d4:ed:43:26:12:a2:3d:3e:c3: ce:af:65:ea:25:33:fb:e6:7c:45:bb:2f:50:ba:95: 75:95:d5:f4:2e:ed:88:5e:40:30:dc:70:b3:13:64: 6f:a1:de:da:35:5b:27:85:38:29:30:65:30:31:9a: 53:bc:39:02:56:c1:75:d5:bc:b0:db:b5:82:bb:91: d3:41:b8:af:7f:c0:03:83:5f:ea:23:8a:2b:12:54: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4B:11:CF:E9:1A:00:B4:00:FF:97:B6:4C:2F:5B:57:30:4D:B2:6D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8F19AE6C9DE311EBBFF9E749C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.164.34.0/23 Signature Algorithm: sha256WithRSAEncryption a5:59:ba:a7:19:24:bd:80:fa:7f:1d:71:27:3f:e2:4d:62:96: 83:b9:35:90:10:55:6e:52:86:0d:55:7f:d7:04:16:71:fb:5c: d6:e4:0a:ed:b9:25:e5:01:f7:c1:11:9d:cd:8b:ae:b4:6f:4c: 64:28:84:54:0b:99:94:4f:55:c1:88:f3:5f:31:54:6e:3b:8d: 2c:83:a3:ff:8f:1d:05:a6:0a:a8:5b:5b:05:bc:75:02:c8:98: 6b:0b:65:7e:50:71:1a:b2:a8:e2:2b:e8:23:5a:91:df:8f:3c: 10:14:91:86:f4:46:ed:ab:04:0a:e0:31:77:f1:76:5e:de:26: 5a:d1:91:60:0e:eb:60:4d:35:6d:ae:13:13:3a:76:ed:3b:ef: 5a:be:8e:fd:c4:5c:af:62:71:8d:68:2c:af:01:97:00:4b:10: 1f:62:82:f3:9c:5b:03:10:32:a6:da:57:c2:3d:e2:a9:95:04: 17:72:69:03:73:08:97:ec:60:27:96:34:38:bb:40:49:41:58: 5c:9d:0f:dc:55:0e:24:31:60:ae:9f:55:45:cb:10:60:25:6f: a2:f6:78:1d:b8:b7:76:93:69:56:54:80:d5:33:16:1e:65:b1: 0b:4d:df:92:ca:d6:35:9a:07:37:01:c4:da:db:4f:74:a5:7b: 34:01:5a:36 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICTTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NDA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQ4Zi1jZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fNDv4f0PcWu6dYmPOf2MO+0M+K6z4WwEWtMcOdTil7mlhSBF9YEUIcWePVZ x0YtV/kIY5hVnavOcrYAjNM5uW3HHhaEgG641EWy4naIbacj6h1IP/72WP9xHssz 4UItftpfTA4MU/agRnKNqGMAFy2Hc/M26finQRW/e7hRZ4dR8qjokZL1hsLNGG+T /2VKx7r4peZVxO2avoyjD7l8wZUjG4SKx+XrKJ3U7UMmEqI9PsPOr2XqJTP75nxF uy9QupV1ldX0Lu2IXkAw3HCzE2Rvod7aNVsnhTgpMGUwMZpTvDkCVsF11byw27WC u5HTQbivf8ADg1/qI4orElRKCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFARLEc/p GgC0AP+XtkwvW1cwTbJtMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOEYxOUFFNkM5 REUzMTFFQkJGRjlFNzQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnpCIwDQYJKoZIhvcNAQELBQADggEBAKVZuqcZJL2A+n8d cSc/4k1iloO5NZAQVW5Shg1Vf9cEFnH7XNbkCu25JeUB98ERnc2LrrRvTGQohFQL mZRPVcGI818xVG47jSyDo/+PHQWmCqhbWwW8dQLImGsLZX5QcRqyqOIr6CNakd+P PBAUkYb0Ru2rBArgMXfxdl7eJlrRkWAO62BNNW2uExM6du0771q+jv3EXK9icY1o LK8BlwBLEB9igvOcWwMQMqbaV8I94qmVBBdyaQNzCJfsYCeWNDi7QElBWFydD9xV DiQxYK6fVUXLEGAlb6L2eB24t3aTaVZUgNUzFh5lsQtN35LK1jWaBzcBxNrbT3Sl ezQBWjY= -----END CERTIFICATE-----Generated at Mon Sep 8 05:39:21 2025 by rpki-client