$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/08FFFEEAB4A811F0B6628E78C4F9AE02.roa File: 08FFFEEAB4A811F0B6628E78C4F9AE02.roa (raw, json) Hash identifier: JbWNNhA20d+dAoRyypjRFzGhqwrye4eeN4qT6OW5LWo= Subject key identifier: 44:6E:1C:58:5D:85:96:3E:84:45:0C:01:D9:80:D7:D8:69:C9:64:86 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0AEB Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/08FFFEEAB4A811F0B6628E78C4F9AE02.roa Signing time: Wed 29 Oct 2025 09:17:58 +0000 ROA not before: Wed 29 Oct 2025 09:17:58 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140228 IP address blocks: 103.148.212.0/23 maxlen: 23 103.148.212.0/24 maxlen: 24 103.148.213.0/24 maxlen: 24 2001:df2:ed80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2795 (0xaeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Oct 29 09:17:58 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6901dbc6-5cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:cf:ac:af:d6:46:79:92:9f:6f:62:68:5b: 0e:87:33:96:d3:8b:14:1a:bc:a4:22:93:0a:d8:b8: 0b:93:6d:75:7e:71:de:62:45:a1:f9:05:a6:66:5d: 64:f0:7c:11:7c:49:9e:e3:f9:0c:29:1a:e5:97:2d: e1:6d:98:f6:c4:17:41:9f:85:9a:b1:66:39:a0:64: fb:b9:69:48:bf:8c:23:c8:6c:fa:f2:73:80:a5:a1: e9:46:01:3c:b4:5e:84:48:a8:0a:c4:d9:fe:af:9c: e2:49:36:ac:ef:f0:97:0f:fb:f9:89:7c:4c:92:1d: 35:9d:b2:4c:70:f9:37:66:1b:f4:12:d6:47:18:c8: dd:3d:40:0b:92:76:8e:fa:23:e7:a1:cc:d9:18:fe: f0:00:17:a8:13:0f:aa:1b:77:a0:79:3e:06:c4:70: fd:b8:f5:aa:b7:c8:f6:f9:3d:34:dd:02:c8:36:70: 07:3b:ac:6f:07:05:60:5b:14:8a:9e:44:52:e7:bb: 27:b1:86:9c:cf:95:1e:ab:93:ed:30:59:dc:d4:f7: d6:1d:a2:e8:e0:65:72:98:8f:91:f6:83:68:22:4e: 0f:18:4b:3c:ca:2f:a0:da:54:9e:9d:01:16:f4:8e: 47:b0:91:13:78:93:e6:0f:a4:ad:a6:bc:80:93:e9: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6E:1C:58:5D:85:96:3E:84:45:0C:01:D9:80:D7:D8:69:C9:64:86 X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/08FFFEEAB4A811F0B6628E78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.212.0/23 IPv6: 2001:df2:ed80::/48 Signature Algorithm: sha256WithRSAEncryption 3e:87:fe:36:9b:88:ab:f7:08:e8:53:58:90:f8:f7:ae:56:8a: 07:97:6d:b0:0c:d8:0d:b1:7c:85:38:e7:07:fe:80:c5:71:32: 88:c1:c0:4b:05:61:e1:15:62:09:57:6b:03:d9:1a:ff:42:d5: 72:eb:c3:c8:fd:30:dd:c0:f3:97:b2:c2:4c:b2:d5:78:fb:d2: 3a:23:d2:0a:d5:86:1a:e0:15:da:01:90:b6:73:be:ab:7e:da: 2e:b7:e5:85:d5:d5:f0:de:fe:1b:7c:c7:bb:3c:9d:03:3c:0b: 57:27:64:9e:17:2b:e1:94:a7:51:dd:e7:f3:10:fe:8a:9c:5e: 34:e5:a2:71:c7:b1:ef:3c:ce:54:9d:4d:29:80:ab:60:e0:78: c9:12:0d:81:64:56:78:1a:8d:e4:c7:d9:ab:89:ab:2b:fb:15: 93:5a:24:e5:3c:23:2d:f1:5c:fb:a4:1b:fe:6f:12:f7:86:0f: 1e:3c:be:f1:19:84:1d:6e:36:f8:a3:d5:98:67:ab:c2:51:0c: 3c:22:2b:dc:98:4c:db:30:40:12:d3:1c:e1:18:ba:28:fb:81: cf:e4:b5:16:a1:c4:6b:06:0e:08:e9:8b:87:3e:1c:a0:4e:b7: 32:53:67:06:78:79:1e:85:83:40:31:28:3a:be:fb:58:5a:47: 75:47:cc:e8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUxMDI5MDkxNzU4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTAxZGJjNi01Y2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuijPrK/WRnmSn29iaFsOhzOW04sUGrykIpMK2LgLk211fnHeYkWh+QWmZl1k 8HwRfEme4/kMKRrlly3hbZj2xBdBn4WasWY5oGT7uWlIv4wjyGz68nOApaHpRgE8 tF6ESKgKxNn+r5ziSTas7/CXD/v5iXxMkh01nbJMcPk3Zhv0EtZHGMjdPUALknaO +iPnoczZGP7wABeoEw+qG3egeT4GxHD9uPWqt8j2+T003QLINnAHO6xvBwVgWxSK nkRS57snsYacz5Ueq5PtMFnc1PfWHaLo4GVymI+R9oNoIk4PGEs8yi+g2lSenQEW 9I5HsJETeJPmD6StpryAk+n0DwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFERuHFhd hZY+hEUMAdmA19hpyWSGMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThDQjYvNTZBNEE2NDA1QUU2MTFFQTlDODhDQjgyQzRGOUFFMDIvMDhGRkZFRUFC NEE4MTFGMEI2NjI4RTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlNQwDwQCAAIwCQMHACABDfLtgDANBgkqhkiG9w0BAQsF AAOCAQEAPof+NpuIq/cI6FNYkPj3rlaKB5dtsAzYDbF8hTjnB/6AxXEyiMHASwVh 4RViCVdrA9ka/0LVcuvDyP0w3cDzl7LCTLLVePvSOiPSCtWGGuAV2gGQtnO+q37a LrflhdXV8N7+G3zHuzydAzwLVydknhcr4ZSnUd3n8xD+ipxeNOWiccex7zzOVJ1N KYCrYOB4yRINgWRWeBqN5MfZq4mrK/sVk1ok5TwjLfFc+6Qb/m8S94YPHjy+8RmE HW42+KPVmGerwlEMPCIr3JhM2zBAEtMc4Ri6KPuBz+S1FqHEawYOCOmLhz4coE63 MlNnBnh5HoWDQDEoOr77WFpHdUfM6A== -----END CERTIFICATE-----Generated at Wed Nov 5 20:20:40 2025 by rpki-client