$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/78CAEF00404711EEBE56794DC4F9AE02.roa File: 78CAEF00404711EEBE56794DC4F9AE02.roa (raw, json) Hash identifier: EmAKawPRD9Y+xPBVBiJFXDwiTWMv5dK0UXnPjSKdFbU= Subject key identifier: 18:20:A3:43:F9:4A:58:34:77:17:2F:5E:48:0C:94:BE:16:AF:37:71 Certificate issuer: /CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Certificate serial: 0182 Authority key identifier: 9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/78CAEF00404711EEBE56794DC4F9AE02.roa Signing time: Sun 31 Aug 2025 04:22:23 +0000 ROA not before: Sun 31 Aug 2025 04:22:23 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 151615 IP address blocks: 103.238.154.0/23 maxlen: 24 2401:1920::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A98E5, serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Validity Not Before: Aug 31 04:22:23 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68b3cdff-b9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:e9:6b:cb:96:8e:a4:c6:b7:7a:b9:7b:98: ed:18:70:47:f3:3e:51:6c:f7:08:4f:62:45:b1:8a: 5c:89:93:62:0c:8b:ea:97:65:df:60:8f:77:ea:13: fd:41:c3:42:a9:7b:58:bb:e9:a3:bb:a1:f9:74:32: be:a4:ac:09:38:e5:c6:88:bd:9b:a5:15:fc:6d:47: 91:a0:f8:ba:ac:2e:38:f7:00:57:a9:50:4d:4a:14: 19:32:7e:97:17:d2:a8:19:07:ad:04:83:28:45:15: 32:e5:39:5d:48:1b:06:32:63:66:a4:66:0d:84:73: a1:c5:b8:2c:e4:68:d4:6f:96:c3:bd:2d:d8:33:1d: 39:ad:52:5e:9c:f3:53:cc:eb:4c:77:7e:67:2f:3e: 13:4e:87:16:e7:b7:ff:de:74:4d:2d:25:06:ee:f9: 8e:f7:eb:38:75:19:ab:9d:c3:6a:c3:2b:2f:6e:94: 4d:70:53:7b:39:a2:fa:15:17:ba:8c:07:4e:90:e9: 03:8e:12:31:50:e6:34:99:00:31:bf:48:d8:ba:32: cc:1e:9d:76:73:57:f1:eb:48:0a:76:43:5e:ea:f6: 18:1b:00:5c:26:b9:d1:c0:ca:e1:02:97:7b:53:41: 0f:87:08:a3:84:9c:9c:6d:6a:37:90:3c:e9:fe:8b: 92:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:20:A3:43:F9:4A:58:34:77:17:2F:5E:48:0C:94:BE:16:AF:37:71 X509v3 Authority Key Identifier: keyid:9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/78CAEF00404711EEBE56794DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.238.154.0/23 IPv6: 2401:1920::/32 Signature Algorithm: sha256WithRSAEncryption 48:8a:01:4e:6a:87:b6:36:5b:94:02:6a:27:2b:28:de:7b:3e: 32:e8:ce:53:32:ac:10:b1:ef:8c:fb:96:08:c4:60:3d:02:d3: 12:ee:4e:3e:a2:96:ff:80:4c:b8:d1:39:c5:f1:23:13:bd:56: 47:d9:0b:7b:17:20:66:7e:39:e8:68:58:b1:6e:01:8e:c4:91: c1:6b:37:a1:e9:96:14:bf:70:3f:ef:5d:50:b2:bc:9e:1e:17: 5b:b5:7e:51:66:d0:13:58:eb:7c:0d:e6:ab:e5:da:28:35:96: 1d:63:7e:2d:35:21:cf:d0:bf:bb:1a:26:08:c4:72:ca:a3:c2: 85:88:5b:2e:cf:e1:49:0e:cd:9a:b8:5a:ec:e9:5d:1b:f3:8f: be:8b:08:b8:34:03:75:d7:48:cc:ea:96:82:be:ca:cb:a4:a5: 87:19:9d:3d:2c:d3:b8:03:2a:27:2f:18:f0:0e:96:42:40:3b: c2:81:d5:24:bd:ad:b3:4c:69:c6:5c:7d:74:29:1e:33:a4:24: 2b:2b:1e:a6:29:30:5b:7b:ce:e7:30:7c:51:35:53:3f:b4:ab: da:5c:a1:20:33:a6:33:4f:bc:ae:c6:8c:ec:33:45:48:67:31: d3:a7:0c:6e:3b:bf:4e:65:b3:9f:41:64:81:50:b9:f8:34:fb: 48:64:32:0b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk4RTUxMTAvBgNVBAUTKDlCMzBFNTUzMENFMTRDODJDQ0RGM0U3N0E1MzBFNzNG RDQxMEUzNzcwHhcNMjUwODMxMDQyMjIzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzY2RmZi1iOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc/pa8uWjqTGt3q5e5jtGHBH8z5RbPcIT2JFsYpciZNiDIvql2XfYI936hP9 QcNCqXtYu+mju6H5dDK+pKwJOOXGiL2bpRX8bUeRoPi6rC449wBXqVBNShQZMn6X F9KoGQetBIMoRRUy5TldSBsGMmNmpGYNhHOhxbgs5GjUb5bDvS3YMx05rVJenPNT zOtMd35nLz4TTocW57f/3nRNLSUG7vmO9+s4dRmrncNqwysvbpRNcFN7OaL6FRe6 jAdOkOkDjhIxUOY0mQAxv0jYujLMHp12c1fx60gKdkNe6vYYGwBcJrnRwMrhApd7 U0EPhwijhJycbWo3kDzp/ouSRQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBggo0P5 Slg0dxcvXkgMlL4WrzdxMB8GA1UdIwQYMBaAFJsw5VMM4UyCzN8+d6Uw5z/UEON3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOThFNS8xNjg0QzA3ODQw NDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJTE0zejUzcFREblA5UVE0 M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL216RGxVd3poVElMTTN6NTNwVERuUDlRUTQzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTk4RTUvMTY4NEMwNzg0MDQ3MTFFRUFCQzBFMjRDQzRGOUFFMDIvNzhDQUVGMDA0 MDQ3MTFFRUJFNTY3OTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFn7powDQQCAAIwBwMFACQBGSAwDQYJKoZIhvcNAQELBQAD ggEBAEiKAU5qh7Y2W5QCaicrKN57PjLozlMyrBCx74z7lgjEYD0C0xLuTj6ilv+A TLjROcXxIxO9VkfZC3sXIGZ+OehoWLFuAY7EkcFrN6HplhS/cD/vXVCyvJ4eF1u1 flFm0BNY63wN5qvl2ig1lh1jfi01Ic/Qv7saJgjEcsqjwoWIWy7P4UkOzZq4Wuzp XRvzj76LCLg0A3XXSMzqloK+ysukpYcZnT0s07gDKicvGPAOlkJAO8KB1SS9rbNM acZcfXQpHjOkJCsrHqYpMFt7zucwfFE1Uz+0q9pcoSAzpjNPvK7GjOwzRUhnMdOn DG47v05ls59BZIFQufg0+0hkMgs= -----END CERTIFICATE-----Generated at Fri Sep 19 21:29:08 2025 by rpki-client