$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/C5FC427C5C1911E997A2ED42C4F9AE02.roa File: C5FC427C5C1911E997A2ED42C4F9AE02.roa (raw, json) Hash identifier: nXcUac3MS90vWtMTrdvd36wOBCE4zfd0e2DObXaS7L4= Subject key identifier: E9:44:81:6B:4D:C1:8C:C8:41:1B:18:C4:38:4D:C4:2A:34:DD:3D:EA Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0FEE Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/C5FC427C5C1911E997A2ED42C4F9AE02.roa Signing time: Wed 22 Oct 2025 04:05:59 +0000 ROA not before: Wed 22 Oct 2025 04:05:59 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 17547 IP address blocks: 103.14.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4078 (0xfee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Oct 22 04:05:59 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f85826-8b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:9f:ef:ae:11:9a:ff:fb:24:86:80:3c:4a: ff:85:e0:41:f4:8e:0a:a4:7e:21:37:f3:c3:61:96: 71:36:4c:05:b3:65:fb:47:d4:67:69:3e:a6:83:da: d9:01:4e:c8:09:bd:51:8e:76:f2:e9:10:45:fc:bb: b0:3d:ae:a7:85:79:7e:7b:96:48:01:d2:81:df:98: cc:68:0f:ea:56:bb:0d:24:65:c8:d0:0a:4d:6a:64: 58:51:8a:b1:e7:e0:7d:ee:3b:3c:f5:8e:5e:a0:87: e4:0c:d2:8e:8a:2c:05:b0:bb:ba:1e:1b:46:19:10: 78:cf:fd:7a:1c:50:4e:cc:67:a4:45:78:f4:d8:68: f3:aa:66:81:3f:3a:ac:80:c3:25:fe:40:4a:fe:02: dc:de:53:7a:01:9f:7b:3e:7b:58:8c:19:f7:39:16: 56:d4:43:ca:ff:36:c0:df:94:1d:cd:fd:f0:be:06: 02:94:98:97:0b:c5:0a:f5:26:07:88:6d:9f:ea:10: 34:03:57:08:d9:f8:97:d9:e2:d1:97:82:87:f4:63: d4:a6:79:fe:cb:a3:dd:5e:b5:83:11:61:52:24:31: 6d:1b:1e:8f:e3:59:2b:41:3e:f2:73:16:7f:d0:6d: e1:ca:c9:15:14:90:21:8d:27:42:24:5d:48:48:2a: 32:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:44:81:6B:4D:C1:8C:C8:41:1B:18:C4:38:4D:C4:2A:34:DD:3D:EA X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/C5FC427C5C1911E997A2ED42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.236.0/22 Signature Algorithm: sha256WithRSAEncryption 17:e5:42:9f:92:f2:e6:41:19:e0:b9:a6:80:e8:c8:5d:46:fb: 10:6a:22:6a:60:60:8c:5b:e4:dc:e1:23:6a:79:42:f7:f6:21: 24:0e:3d:18:35:60:76:95:df:23:1f:1c:36:57:6a:08:5c:fd: b0:6b:17:ac:e2:53:8b:94:37:fd:bb:d6:d1:36:64:78:13:29: 3c:8a:d8:4f:e4:22:38:21:98:9a:7d:e2:af:72:0e:35:9e:3c: 37:47:f7:6d:8f:9a:cf:b1:f2:c4:e7:96:76:3f:b5:e1:a9:4b: 08:f4:28:9b:64:59:35:f3:dd:d1:56:f7:f5:67:a9:84:f6:3c: 43:c2:28:59:15:06:31:59:ac:70:08:38:ab:09:d6:1b:4d:5f: 03:af:e6:e9:2e:24:cc:c9:96:fa:e2:7a:1d:5d:72:bc:f0:93: 44:be:ee:67:a6:64:5d:ac:2d:b6:23:11:75:57:e1:38:b9:4d: a6:5a:5e:32:96:a7:3a:12:36:b0:55:c6:c3:ac:69:27:de:55: fa:0f:4e:f1:17:a2:7f:d3:fa:a4:d2:b1:89:ec:35:c2:28:34: 1b:61:9a:b0:d1:d8:77:f8:eb:0b:79:71:a4:60:50:fa:93:6b: 37:d7:26:b9:f2:d0:9e:ee:d9:6c:5b:30:74:ca:4c:ea:68:a1: 93:b5:8d:0b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUxMDIyMDQwNTU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY4NTgyNi04YjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6Kf764Rmv/7JIaAPEr/heBB9I4KpH4hN/PDYZZxNkwFs2X7R9RnaT6mg9rZ AU7ICb1Rjnby6RBF/LuwPa6nhXl+e5ZIAdKB35jMaA/qVrsNJGXI0ApNamRYUYqx 5+B97js89Y5eoIfkDNKOiiwFsLu6HhtGGRB4z/16HFBOzGekRXj02GjzqmaBPzqs gMMl/kBK/gLc3lN6AZ97PntYjBn3ORZW1EPK/zbA35Qdzf3wvgYClJiXC8UK9SYH iG2f6hA0A1cI2fiX2eLRl4KH9GPUpnn+y6PdXrWDEWFSJDFtGx6P41krQT7ycxZ/ 0G3hyskVFJAhjSdCJF1ISCoyGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOlEgWtN wYzIQRsYxDhNxCo03T3qMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThBRjEvQ0ExQTAzQzI1QzE4MTFFOUIzMDc0MzQxQzRGOUFFMDIvQzVGQzQyN0M1 QzE5MTFFOTk3QTJFRDQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnDuwwDQYJKoZIhvcNAQELBQADggEBABflQp+S8uZBGeC5 poDoyF1G+xBqImpgYIxb5NzhI2p5Qvf2ISQOPRg1YHaV3yMfHDZXaghc/bBrF6zi U4uUN/271tE2ZHgTKTyK2E/kIjghmJp94q9yDjWePDdH922Pms+x8sTnlnY/teGp Swj0KJtkWTXz3dFW9/VnqYT2PEPCKFkVBjFZrHAIOKsJ1htNXwOv5ukuJMzJlvri eh1dcrzwk0S+7memZF2sLbYjEXVX4Ti5TaZaXjKWpzoSNrBVxsOsaSfeVfoPTvEX on/T+qTSsYnsNcIoNBthmrDR2Hf46wt5caRgUPqTazfXJrny0J7u2WxbMHTKTOpo oZO1jQs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:36 2025 by rpki-client