$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2DAD33AC31211ED86F35C63C4F9AE02.roa File: A2DAD33AC31211ED86F35C63C4F9AE02.roa (raw, json) Hash identifier: jU7ud5icqacAJXTRkneoZhRmYPojZa+bVmFBvNNrjx4= Subject key identifier: F2:CB:CD:D0:2F:CB:FB:FD:67:45:1C:72:00:6E:5F:2D:79:9C:59:AF Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CF5 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2DAD33AC31211ED86F35C63C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:53:16 +0000 ROA not before: Thu 28 Aug 2025 14:53:16 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135923 IP address blocks: 103.99.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19701 (0x4cf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:53:16 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d5c-e2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:a8:60:b2:7a:45:a9:69:ea:f2:40:58:bb: 24:b9:34:c7:6f:84:40:79:86:d5:a7:35:6f:c5:46: cc:02:aa:2b:9e:d0:1c:1e:0e:8c:09:19:da:59:af: 52:6e:78:82:4e:46:4d:d1:f9:fe:1b:24:c9:0f:73: d2:ed:80:31:86:e1:f9:c8:9e:cc:b2:59:1f:0d:85: b7:5f:a0:7c:a6:0d:85:35:3e:51:f7:64:ef:1f:81: d2:f0:e6:8e:72:4f:e9:20:43:a0:e9:49:84:f3:f0: 8e:7a:e8:a9:02:99:06:f3:fa:46:1c:2c:07:4c:06: d5:c1:ca:69:b4:93:2d:88:fd:9b:a3:ef:c7:4b:89: 01:6b:51:31:0b:05:ed:e7:eb:ae:21:22:33:0c:a5: 2f:3d:2d:2f:d0:5d:99:ff:23:0e:c8:48:8a:3c:4b: 84:1f:11:8a:d5:6a:18:2f:ab:48:80:04:a4:10:a5: d7:d8:50:33:33:86:e6:8e:fc:ba:a9:7e:58:ba:d0: d1:82:71:f4:df:60:d6:11:0c:2f:65:87:72:9f:44: fd:67:fb:0c:5a:d3:32:7c:22:68:ce:e1:af:f1:38: b0:3a:63:11:48:de:18:c5:73:64:a4:7d:bd:fb:b3: 6a:c7:aa:4a:4d:12:9e:a0:27:0e:75:7c:e2:1d:c1: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CB:CD:D0:2F:CB:FB:FD:67:45:1C:72:00:6E:5F:2D:79:9C:59:AF X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2DAD33AC31211ED86F35C63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.244.0/22 Signature Algorithm: sha256WithRSAEncryption 51:d3:eb:d0:40:72:b7:e4:8e:b5:ea:b4:60:73:3d:87:e1:31: d4:6b:24:70:7e:c7:41:f0:09:79:81:f6:31:6c:12:79:31:2a: 18:22:fb:f1:71:8d:29:fc:70:8d:91:9b:20:30:91:e1:f5:4f: f0:80:2c:6d:4c:c7:48:49:d5:5c:ae:f9:36:01:99:80:1f:33: 04:6f:b0:71:ed:4d:c5:6c:1e:36:2d:1f:d0:f2:70:a9:03:39: b2:23:bf:96:31:10:4c:47:fb:0e:05:01:f7:af:0a:e1:b1:7d: 3d:7c:05:e3:04:c7:a3:db:96:b2:8e:60:30:8c:66:90:72:ac: 1c:03:ab:30:f0:f9:1e:b8:fa:8c:8c:4f:1a:73:f0:53:8c:ab: 8b:e5:d7:fc:30:d4:56:44:c7:2f:7e:ef:f3:59:36:5c:56:b9: 8a:67:c5:bf:ed:26:e9:80:f9:f4:10:89:aa:29:80:63:af:04: 7a:a6:22:86:7b:4f:99:93:77:56:25:b8:d1:c7:25:00:da:ef: 5d:90:29:f2:e8:d6:1c:a1:d8:e5:18:fd:8a:0c:66:0b:43:64: 29:47:fe:ea:94:34:f6:53:26:bf:3b:a7:82:96:aa:58:8c:fe: 61:b2:37:f1:5d:ad:5a:99:09:67:b1:89:98:3f:95:68:57:25: d1:e2:20:89 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICTPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzE2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQ1Yy1lMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1P2oYLJ6Ralp6vJAWLskuTTHb4RAeYbVpzVvxUbMAqorntAcHg6MCRnaWa9S bniCTkZN0fn+GyTJD3PS7YAxhuH5yJ7MslkfDYW3X6B8pg2FNT5R92TvH4HS8OaO ck/pIEOg6UmE8/COeuipApkG8/pGHCwHTAbVwcpptJMtiP2bo+/HS4kBa1ExCwXt 5+uuISIzDKUvPS0v0F2Z/yMOyEiKPEuEHxGK1WoYL6tIgASkEKXX2FAzM4bmjvy6 qX5YutDRgnH032DWEQwvZYdyn0T9Z/sMWtMyfCJozuGv8TiwOmMRSN4YxXNkpH29 +7Nqx6pKTRKeoCcOdXziHcF2xwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPLLzdAv y/v9Z0UccgBuXy15nFmvMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTJEQUQzM0FD MzEyMTFFRDg2RjM1QzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnY/QwDQYJKoZIhvcNAQELBQADggEBAFHT69BAcrfkjrXq tGBzPYfhMdRrJHB+x0HwCXmB9jFsEnkxKhgi+/FxjSn8cI2RmyAwkeH1T/CALG1M x0hJ1Vyu+TYBmYAfMwRvsHHtTcVsHjYtH9DycKkDObIjv5YxEExH+w4FAfevCuGx fT18BeMEx6PblrKOYDCMZpByrBwDqzDw+R64+oyMTxpz8FOMq4vl1/ww1FZExy9+ 7/NZNlxWuYpnxb/tJumA+fQQiaopgGOvBHqmIoZ7T5mTd1YluNHHJQDa712QKfLo 1hyh2OUY/YoMZgtDZClH/uqUNPZTJr87p4KWqliM/mGyN/FdrVqZCWexiZg/lWhX JdHiIIk= -----END CERTIFICATE-----Generated at Mon Sep 8 05:35:19 2025 by rpki-client