$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa File: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (raw, json) Hash identifier: /IGLzAXuXU/u4IPTCqQf/9lVNO8RLs7YLaM82Km8Ccw= Subject key identifier: A4:7D:F8:22:69:69:E9:30:B3:9C:A4:8B:95:BF:7D:0F:C2:57:8B:FB Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Certificate serial: 053B Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa Signing time: Wed 03 Sep 2025 00:15:16 +0000 ROA not before: Wed 03 Sep 2025 00:15:16 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139484 IP address blocks: 103.172.104.0/23 maxlen: 23 103.172.104.0/24 maxlen: 24 103.172.105.0/24 maxlen: 24 2001:df7:6d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Validity Not Before: Sep 3 00:15:16 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b78894-f997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:60:bd:e6:54:a3:06:bc:d9:3e:14:40:d5:b2: 5f:db:2d:27:d7:b7:4d:72:1e:62:f5:23:af:74:26: cd:8b:c0:d3:17:3d:0c:ec:10:d3:19:ea:f2:c8:82: 3c:89:a9:6d:36:95:c7:01:d8:1f:f3:c2:3a:f3:d9: 1f:b8:93:9d:ff:f2:9f:86:30:dc:24:35:52:db:ed: be:a8:64:ba:d9:47:81:c7:e3:83:80:00:57:8e:69: 04:c5:b0:9a:89:d1:42:1e:ac:f8:e2:b3:75:3d:f0: 14:92:bc:46:58:e2:17:c0:98:ab:71:32:56:f0:23: 1c:a4:ac:34:19:16:72:ee:8c:55:a6:15:73:14:30: 2a:5b:91:f6:4e:f1:0e:7c:1e:20:c6:0b:68:5a:4e: f4:fc:b6:9e:c2:e7:16:84:ee:3d:37:e9:27:d8:92: 44:95:e3:a7:99:f1:53:6b:d0:56:fe:55:7c:af:52: d6:a0:f9:b5:fd:3e:d1:aa:98:aa:26:1a:f8:cf:bc: f0:8f:ab:1d:c0:0b:37:0c:68:ae:4a:ac:40:47:ef: 62:71:b5:be:3b:48:f6:31:de:a2:b0:a8:a1:c7:90: d6:73:b7:fb:0d:67:0d:aa:0a:2a:f3:7e:9c:53:37: 16:55:7f:d6:e7:b9:56:1a:c3:57:28:dc:6a:1b:b3: d2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7D:F8:22:69:69:E9:30:B3:9C:A4:8B:95:BF:7D:0F:C2:57:8B:FB X509v3 Authority Key Identifier: keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.104.0/23 IPv6: 2001:df7:6d80::/48 Signature Algorithm: sha256WithRSAEncryption 79:45:3a:b8:ce:0d:77:3f:36:a8:8e:c5:ab:dc:1c:6a:88:f2: 6b:5c:6f:2e:65:66:ff:22:03:81:b4:44:e1:21:93:35:3c:4b: 3f:90:f3:8c:bb:d0:44:d1:20:81:e5:c2:9e:ce:ae:99:d9:b6: a5:60:90:1e:36:c4:74:50:0f:86:d0:8c:26:0a:26:78:e3:cd: a5:60:e3:22:c0:15:5d:1b:a3:b8:57:82:df:ab:fd:26:04:c7: 1f:d7:79:14:7e:5b:9c:ac:f5:65:18:33:e3:96:6f:36:2b:e6: 1c:d8:5c:d9:30:3d:3a:19:cf:ed:75:e1:e1:80:05:72:b9:98: 73:c3:da:0e:74:92:58:ae:4b:89:c3:b2:53:47:7e:fc:e4:02: 33:6f:4f:e8:26:a2:fc:58:ef:a4:61:4a:16:d0:5a:74:ad:7a: a7:95:f8:4d:44:15:e6:a8:0a:f2:f5:a6:96:2b:2e:14:21:e3: 20:86:72:38:ed:7d:70:b2:55:f0:73:95:1b:20:8d:fc:0d:f3: 3d:52:28:75:69:3f:d1:a2:55:e6:c8:90:de:50:03:59:3b:26: ef:da:80:ae:b6:bb:86:88:82:f0:82:6c:e1:32:07:22:59:d8: 0b:68:86:36:13:bd:55:96:c5:74:41:d1:07:1d:54:95:4b:4e: b5:bc:75:79 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMDQxMTAvBgNVBAUTKDFGNkZCQTNGQkY3QzRFNzUxMDgwRDY3NDNFMkZDRTAw RDI5NERCNDEwHhcNMjUwOTAzMDAxNTE2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3ODg5NC1mOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGC95lSjBrzZPhRA1bJf2y0n17dNch5i9SOvdCbNi8DTFz0M7BDTGeryyII8 ialtNpXHAdgf88I689kfuJOd//KfhjDcJDVS2+2+qGS62UeBx+ODgABXjmkExbCa idFCHqz44rN1PfAUkrxGWOIXwJircTJW8CMcpKw0GRZy7oxVphVzFDAqW5H2TvEO fB4gxgtoWk70/LaewucWhO49N+kn2JJEleOnmfFTa9BW/lV8r1LWoPm1/T7Rqpiq Jhr4z7zwj6sdwAs3DGiuSqxAR+9icbW+O0j2Md6isKihx5DWc7f7DWcNqgoq836c UzcWVX/W57lWGsNXKNxqG7PSLQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKR9+CJp aekws5yki5W/fQ/CV4v7MB8GA1UdIwQYMBaAFB9vuj+/fE51EIDWdD4vzgDSlNtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIwNC84MzBBM0EyODEy MDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRuVVFnTlowUGlfT0FOS1Uy MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyLTZQNzk4VG5VUWdOWjBQaV9PQU5LVTIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTYyMDQvODMwQTNBMjgxMjA2MTFFQ0FFQ0VENDc3QzRGOUFFMDIvODFBOUFBMkEz MEEwMTFFQzk2MTNBODJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrGgwDwQCAAIwCQMHACABDfdtgDANBgkqhkiG9w0BAQsF AAOCAQEAeUU6uM4Ndz82qI7Fq9wcaojya1xvLmVm/yIDgbRE4SGTNTxLP5DzjLvQ RNEggeXCns6umdm2pWCQHjbEdFAPhtCMJgomeOPNpWDjIsAVXRujuFeC36v9JgTH H9d5FH5bnKz1ZRgz45ZvNivmHNhc2TA9OhnP7XXh4YAFcrmYc8PaDnSSWK5LicOy U0d+/OQCM29P6Cai/FjvpGFKFtBadK16p5X4TUQV5qgK8vWmlisuFCHjIIZyOO19 cLJV8HOVGyCN/A3zPVIodWk/0aJV5siQ3lADWTsm79qArra7hoiC8IJs4TIHIlnY C2iGNhO9VZbFdEHRBx1UlUtOtbx1eQ== -----END CERTIFICATE-----Generated at Tue Sep 9 03:40:14 2025 by rpki-client