$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/5382BB6AA5C611F0900E7F3EC4F9AE02.roa File: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (raw, json) Hash identifier: +F3Yx2THIPF6j23PtMP7M18kfvkZfsgfMjQvz9d74hQ= Subject key identifier: 19:F2:4D:3C:DE:E2:BE:8D:DC:B6:C3:5A:66:14:DE:FF:5A:27:8B:87 Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 023D Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/5382BB6AA5C611F0900E7F3EC4F9AE02.roa Signing time: Thu 23 Oct 2025 03:45:43 +0000 ROA not before: Thu 23 Oct 2025 03:45:43 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150352 IP address blocks: 103.17.176.0/24 maxlen: 24 2400:b5e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Validity Not Before: Oct 23 03:45:43 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f9a4e6-f789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:db:f9:37:4e:29:6e:bc:96:1b:70:28:5b: 75:6e:db:1d:2f:34:87:98:07:53:9b:6d:38:15:8d: a5:55:8b:6f:4b:2b:96:20:b7:18:5b:da:93:96:76: 2f:01:05:79:86:99:68:ea:11:29:69:a1:cb:c1:b7: da:b0:24:67:4f:e7:60:5c:0c:bd:3f:8b:b0:cd:1a: 5c:69:da:f7:43:de:31:c5:6d:86:97:de:94:c5:d5: db:9a:12:b4:4e:3d:8e:b9:14:9a:61:d7:0a:9d:34: 39:ea:5e:4b:35:1f:ee:e8:5d:4b:e5:49:64:93:7a: 74:4c:75:80:d2:c3:ef:35:d9:99:1d:9a:78:24:a4: d1:17:28:86:a1:f0:64:62:1a:5e:5e:93:f1:0a:7f: 2f:60:18:54:69:5c:dc:7b:88:16:57:86:73:d2:38: eb:b2:36:18:1a:93:fb:ad:e5:61:d2:76:d4:8f:36: d4:96:71:84:e4:f8:a7:d0:4e:02:cc:88:42:ca:97: ad:1b:fd:3a:ab:44:09:4f:7d:89:8d:d3:e4:7f:e0: c8:78:2c:17:12:ea:c7:55:69:d2:a4:da:e3:46:a6: c6:1a:7c:13:bf:3b:d3:39:7f:24:36:d9:ab:32:ec: 7e:96:5d:d5:16:32:98:69:e6:31:83:7d:6e:8c:20: 43:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F2:4D:3C:DE:E2:BE:8D:DC:B6:C3:5A:66:14:DE:FF:5A:27:8B:87 X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/5382BB6AA5C611F0900E7F3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.176.0/24 IPv6: 2400:b5e0::/32 Signature Algorithm: sha256WithRSAEncryption 39:0e:cc:69:95:68:0f:56:32:31:df:f3:ef:87:8f:dc:c3:cb: 46:9d:0f:1a:6b:3c:9f:6a:8f:9e:b0:1c:c5:86:c2:53:80:e3: 6e:b5:52:0f:b1:62:57:97:89:eb:14:17:93:ad:de:6c:05:b0: 69:33:0c:e7:66:74:fb:b6:cc:95:8f:aa:24:6d:03:0d:0f:ad: 72:8b:a7:09:0a:86:1f:e9:35:f8:6d:b5:4b:91:03:e4:2e:d6: 74:6c:00:14:f7:9e:03:9a:12:d2:b4:1a:5d:a2:b0:0f:52:89: 31:c6:41:0e:ac:60:5e:28:03:bb:8c:22:08:82:36:9d:45:ce: 0b:f2:ec:17:19:0e:93:7e:aa:d1:a5:c5:42:60:10:bc:8f:93: a8:75:92:8c:cc:4a:11:6d:89:b0:9f:ca:f7:21:00:45:05:63: 79:24:c3:15:e5:10:ad:a6:2f:5e:94:8e:af:e9:dd:dc:a9:99: 07:75:30:f8:62:c2:d8:0e:ef:b1:fe:f2:ef:7e:51:6a:90:19: e2:ba:c1:85:6a:23:8b:2d:f5:94:9f:41:48:b8:eb:07:07:bc: 32:30:b8:63:ae:6b:c8:1d:cd:0e:b9:aa:3e:0e:25:21:7c:33: 5d:df:4c:ef:d0:c6:16:9e:41:87:70:4d:a9:09:f4:eb:12:f5: 9a:54:43:c3 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjUxMDIzMDM0NTQzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5YTRlNi1mNzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSTb+TdOKW68lhtwKFt1btsdLzSHmAdTm204FY2lVYtvSyuWILcYW9qTlnYv AQV5hplo6hEpaaHLwbfasCRnT+dgXAy9P4uwzRpcadr3Q94xxW2Gl96UxdXbmhK0 Tj2OuRSaYdcKnTQ56l5LNR/u6F1L5Ulkk3p0THWA0sPvNdmZHZp4JKTRFyiGofBk YhpeXpPxCn8vYBhUaVzce4gWV4Zz0jjrsjYYGpP7reVh0nbUjzbUlnGE5Pin0E4C zIhCypetG/06q0QJT32JjdPkf+DIeCwXEurHVWnSpNrjRqbGGnwTvzvTOX8kNtmr Mux+ll3VFjKYaeYxg31ujCBDCQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBnyTTze 4r6N3LbDWmYU3v9aJ4uHMB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA1MTQvRUYwQTM1MkU0QzUzMTFFRDhBQzA1MDcwQzRGOUFFMDIvNTM4MkJCNkFB NUM2MTFGMDkwMEU3RjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnEbAwDQQCAAIwBwMFACQAteAwDQYJKoZIhvcNAQELBQAD ggEBADkOzGmVaA9WMjHf8++Hj9zDy0adDxprPJ9qj56wHMWGwlOA4261Ug+xYleX iesUF5Ot3mwFsGkzDOdmdPu2zJWPqiRtAw0PrXKLpwkKhh/pNfhttUuRA+Qu1nRs ABT3ngOaEtK0Gl2isA9SiTHGQQ6sYF4oA7uMIgiCNp1Fzgvy7BcZDpN+qtGlxUJg ELyPk6h1kozMShFtibCfyvchAEUFY3kkwxXlEK2mL16Ujq/p3dypmQd1MPhiwtgO 77H+8u9+UWqQGeK6wYVqI4st9ZSfQUi46wcHvDIwuGOua8gdzQ65qj4OJSF8M13f TO/QxhaeQYdwTakJ9OsS9ZpUQ8M= -----END CERTIFICATE-----Generated at Wed Nov 5 17:28:07 2025 by rpki-client