$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0A02E45FAA11EF87B18D31C4F9AE02.roa File: AF0A02E45FAA11EF87B18D31C4F9AE02.roa (raw, json) Hash identifier: amnupWeIr6sdC4nrsofcJ4ZIGc1+aI7UUShkANdCFKE= Subject key identifier: 60:FC:74:14:A0:30:8A:C0:AB:25:46:E9:51:8F:CF:75:34:A3:C6:B8 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CE5 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0A02E45FAA11EF87B18D31C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:53:01 +0000 ROA not before: Thu 28 Aug 2025 14:53:01 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135900 IP address blocks: 103.205.100.0/22 maxlen: 22 2001:df3:a980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19685 (0x4ce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:53:01 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d4d-2c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:c7:a6:18:1d:30:60:a7:3b:cb:e0:94:a3: d7:8b:3e:ef:52:8a:46:6d:04:43:4c:b9:46:64:58: f3:e6:ba:c5:b8:17:b9:b7:f5:5f:46:59:22:08:e0: 54:58:80:d9:b9:02:9d:65:d4:f4:62:46:0f:62:26: 5a:63:f3:2b:10:5c:bf:ac:53:f0:5d:c5:cf:c2:e0: b1:23:08:e9:19:76:6f:a5:1b:18:ba:fb:2e:f4:33: 8d:1f:ab:c0:3d:3f:55:60:99:70:67:69:45:80:b9: 56:09:96:62:3f:ca:c3:50:3f:c1:83:59:54:f6:f6: 23:20:59:80:d1:f9:3f:17:96:ef:be:3b:c7:b4:8d: a4:10:70:a6:a0:1b:86:50:0c:d0:4b:21:0c:0f:ec: 80:af:0f:e0:85:6e:be:d9:ff:9d:4c:d6:f3:10:47: 0d:a4:ac:cc:f9:39:e5:86:05:3e:96:74:f5:b6:5d: c4:bc:f8:27:2b:f9:3b:ac:5f:cc:92:3e:b3:4c:b5: bc:c3:8c:11:ec:b2:76:45:09:bc:f3:f1:03:ad:9f: 7e:a0:3e:cb:41:49:e7:f8:67:06:12:85:ab:41:9e: 3e:ce:d0:28:af:c5:f8:99:d8:62:51:d9:f6:b4:81: de:60:d3:ee:27:c1:a8:dc:ff:8a:6f:95:1d:bd:be: 42:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FC:74:14:A0:30:8A:C0:AB:25:46:E9:51:8F:CF:75:34:A3:C6:B8 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0A02E45FAA11EF87B18D31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.205.100.0/22 IPv6: 2001:df3:a980::/48 Signature Algorithm: sha256WithRSAEncryption 0e:9d:60:43:ce:a3:03:02:d9:df:a8:de:a2:2a:e3:e0:f9:b3: fb:08:34:77:69:e8:5a:a9:29:00:51:d7:1f:df:0c:d3:bb:5e: 24:08:bb:c3:e8:6e:20:5b:7f:ff:ca:e6:46:cd:dd:79:db:a1: 99:4f:93:ae:b3:ab:c7:5e:8e:04:d3:0d:52:bb:b6:f6:07:75: a4:a7:d9:98:6c:c5:4c:ed:45:4c:45:22:ea:32:bb:c5:26:25: 2e:fd:d3:15:87:58:c3:a5:44:8c:8b:ba:1a:c6:c5:d8:f1:cd: 35:02:4a:ad:bb:e5:e9:a7:10:a2:fa:2b:a5:21:80:13:5b:5d: 20:22:e1:57:ec:ae:fe:79:cb:7e:24:c0:53:63:01:87:aa:06: d3:20:44:38:4a:ed:3d:b9:a7:4c:d2:a3:d0:30:a5:d8:ff:6b: d7:72:87:ca:40:b9:d4:14:1d:f8:e0:45:83:0c:bd:ef:2c:bb: 80:ea:f4:85:c9:37:a4:13:68:57:3c:09:d7:d6:29:0a:c0:90: a4:ea:2d:dd:87:a3:83:93:01:e7:cd:f9:30:63:25:f5:a3:8d: 7c:c2:05:f6:35:ca:be:a2:67:5e:e6:ed:fd:f2:86:4c:e9:bb: bd:97:b9:93:27:8e:90:67:aa:21:16:81:2c:56:c0:70:18:de: cd:d6:4c:cf -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICTOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzAxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQ0ZC0yYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtK/HphgdMGCnO8vglKPXiz7vUopGbQRDTLlGZFjz5rrFuBe5t/VfRlkiCOBU WIDZuQKdZdT0YkYPYiZaY/MrEFy/rFPwXcXPwuCxIwjpGXZvpRsYuvsu9DONH6vA PT9VYJlwZ2lFgLlWCZZiP8rDUD/Bg1lU9vYjIFmA0fk/F5bvvjvHtI2kEHCmoBuG UAzQSyEMD+yArw/ghW6+2f+dTNbzEEcNpKzM+TnlhgU+lnT1tl3EvPgnK/k7rF/M kj6zTLW8w4wR7LJ2RQm88/EDrZ9+oD7LQUnn+GcGEoWrQZ4+ztAor8X4mdhiUdn2 tIHeYNPuJ8Go3P+Kb5Udvb5C4wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGD8dBSg MIrAqyVG6VGPz3U0o8a4MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUYwQTAyRTQ1 RkFBMTFFRjg3QjE4RDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJnzWQwDwQCAAIwCQMHACABDfOpgDANBgkqhkiG9w0BAQsF AAOCAQEADp1gQ86jAwLZ36jeoirj4Pmz+wg0d2noWqkpAFHXH98M07teJAi7w+hu IFt//8rmRs3deduhmU+TrrOrx16OBNMNUru29gd1pKfZmGzFTO1FTEUi6jK7xSYl Lv3TFYdYw6VEjIu6GsbF2PHNNQJKrbvl6acQovorpSGAE1tdICLhV+yu/nnLfiTA U2MBh6oG0yBEOErtPbmnTNKj0DCl2P9r13KHykC51BQd+OBFgwy97yy7gOr0hck3 pBNoVzwJ19YpCsCQpOot3Yejg5MB5835MGMl9aONfMIF9jXKvqJnXubt/fKGTOm7 vZe5kyeOkGeqIRaBLFbAcBjezdZMzw== -----END CERTIFICATE-----Generated at Mon Sep 8 05:39:24 2025 by rpki-client