$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/AAA33A7A74B011EF85E1C348C4F9AE02.roa File: AAA33A7A74B011EF85E1C348C4F9AE02.roa (raw, json) Hash identifier: Yfem0ULzhAFhugiZ6EqgmTLw2PppG/xG3d5GVT5T2K4= Subject key identifier: 76:27:AF:9C:58:04:EA:99:C7:E4:D8:F4:76:FC:C4:47:CD:D4:14:DC Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Certificate serial: C9 Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/AAA33A7A74B011EF85E1C348C4F9AE02.roa Signing time: Fri 03 Oct 2025 06:33:01 +0000 ROA not before: Fri 03 Oct 2025 06:33:01 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132300 IP address blocks: 103.74.252.0/22 maxlen: 22 103.74.252.0/24 maxlen: 24 103.74.253.0/24 maxlen: 24 103.74.254.0/24 maxlen: 24 103.74.255.0/24 maxlen: 24 202.94.168.0/22 maxlen: 22 202.94.168.0/24 maxlen: 24 202.94.169.0/24 maxlen: 24 202.94.170.0/24 maxlen: 24 202.94.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7D14, serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89 Validity Not Before: Oct 3 06:33:01 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68df6e1d-717c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:44:a7:96:ef:ea:f9:65:2b:56:a0:8c:37: cb:3e:b3:c2:34:45:78:0f:0a:c1:99:34:ec:80:b3: 72:48:87:f0:3e:d8:80:1e:68:d3:50:de:ed:e9:79: f7:cc:25:cf:d3:3b:4f:f2:a4:11:93:6a:83:6d:cd: 52:7f:22:44:d3:10:ee:b6:76:ef:e7:9e:4a:5b:ab: 6a:1f:10:ef:a5:7e:65:6d:84:7c:69:20:83:95:1c: 95:8c:ba:10:c0:92:24:b8:c6:20:a8:54:d9:0b:bf: 39:32:5f:c9:78:e2:b1:32:c6:f1:07:44:cd:3b:5f: 92:8c:90:8b:b8:ec:54:35:71:71:0a:f8:24:2b:1b: 5e:57:7e:40:6d:6b:2f:70:22:f2:5f:d9:8d:87:c5: d1:cd:c7:2d:33:28:e2:37:28:ff:50:b0:5e:4f:6c: d5:c2:ce:b1:57:ec:73:b4:dd:b2:d2:31:3d:45:47: 49:5c:13:3d:f8:09:84:0b:e9:20:cc:63:e2:dc:94: c2:95:20:0a:f7:30:56:5a:f1:fc:41:42:f4:89:dd: bd:9c:b0:86:d2:b8:86:25:6a:43:89:6f:04:a1:5b: 78:04:ee:6c:e9:a7:a1:4b:a5:02:40:d5:69:d5:c6: 80:a3:fe:1b:4b:31:1a:a9:ae:76:86:65:ac:98:c9: 1f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:27:AF:9C:58:04:EA:99:C7:E4:D8:F4:76:FC:C4:47:CD:D4:14:DC X509v3 Authority Key Identifier: keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/AAA33A7A74B011EF85E1C348C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.74.252.0/22 202.94.168.0/22 Signature Algorithm: sha256WithRSAEncryption ae:08:c3:a9:84:61:24:bc:94:37:51:88:98:2d:c0:1c:33:41: 3d:ca:1c:68:dd:0f:ef:08:ee:eb:14:f7:ef:dc:e2:a2:cb:a2: 7e:c4:a9:d8:16:04:12:46:c0:60:77:7a:cd:0c:3d:6d:6c:03: 3c:8e:da:07:27:82:5c:08:ea:05:31:6d:dd:d7:9b:aa:ff:2e: a9:af:e8:70:fc:3e:40:92:74:d1:28:39:6f:e9:7d:49:25:57: 51:a4:73:d6:d7:4f:30:01:ad:41:f1:c6:79:32:36:00:62:bb: 1a:92:22:1b:19:23:60:41:39:fe:ee:26:08:56:73:65:7b:9b: fa:4f:33:26:21:25:07:61:d2:c8:99:4e:18:fb:98:fd:d3:84: 25:b1:5f:23:b1:9e:35:9a:05:57:89:8b:12:0f:8f:3a:69:e6: 0e:b9:5f:b9:fd:90:7a:db:58:45:a8:1d:31:c8:2a:8b:f6:63: f2:47:3d:9e:d3:fc:7d:80:24:64:9a:92:af:a4:92:c2:5f:4f: 55:23:b2:c2:cb:67:5b:ee:c5:6c:28:77:fa:c2:24:86:3e:44: 12:13:0b:2b:34:43:b5:8b:a7:d7:31:86:6f:33:dd:d2:90:b8: 0c:e7:d9:16:3b:b0:d8:de:87:dc:5e:0c:c5:11:ee:b7:cd:c0: c6:16:fb:1b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEMTQxMTAvBgNVBAUTKEJDNDJDM0JDODc1QzA2NzZCMjlGRDdBQkM5RjgxQjRB OTFGRDhBODkwHhcNMjUxMDAzMDYzMzAxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRmNmUxZC03MTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv91Ep5bv6vllK1agjDfLPrPCNEV4DwrBmTTsgLNySIfwPtiAHmjTUN7t6Xn3 zCXP0ztP8qQRk2qDbc1SfyJE0xDutnbv555KW6tqHxDvpX5lbYR8aSCDlRyVjLoQ wJIkuMYgqFTZC785Ml/JeOKxMsbxB0TNO1+SjJCLuOxUNXFxCvgkKxteV35AbWsv cCLyX9mNh8XRzcctMyjiNyj/ULBeT2zVws6xV+xztN2y0jE9RUdJXBM9+AmEC+kg zGPi3JTClSAK9zBWWvH8QUL0id29nLCG0riGJWpDiW8EoVt4BO5s6aehS6UCQNVp 1caAo/4bSzEaqa52hmWsmMkfcQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHYnr5xY BOqZx+TY9Hb8xEfN1BTcMB8GA1UdIwQYMBaAFLxCw7yHXAZ2sp/Xq8n4G0qR/YqJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0QxNC9DREIzQjlBQTc0 QUYxMUVGOTFBNjYxNDZDNEY5QUUwMi92RUxEdklkY0JuYXluOWVyeWZnYlNwSDlp b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZFTER2SWRjQm5heW45ZXJ5ZmdiU3BIOWlvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdEMTQvQ0RCM0I5QUE3NEFGMTFFRjkxQTY2MTQ2QzRGOUFFMDIvQUFBMzNBN0E3 NEIwMTFFRjg1RTFDMzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnSvwDBALKXqgwDQYJKoZIhvcNAQELBQADggEBAK4Iw6mE YSS8lDdRiJgtwBwzQT3KHGjdD+8I7usU9+/c4qLLon7EqdgWBBJGwGB3es0MPW1s AzyO2gcnglwI6gUxbd3Xm6r/Lqmv6HD8PkCSdNEoOW/pfUklV1Gkc9bXTzABrUHx xnkyNgBiuxqSIhsZI2BBOf7uJghWc2V7m/pPMyYhJQdh0siZThj7mP3ThCWxXyOx njWaBVeJixIPjzpp5g65X7n9kHrbWEWoHTHIKov2Y/JHPZ7T/H2AJGSakq+kksJf T1UjssLLZ1vuxWwod/rCJIY+RBITCys0Q7WLp9cxhm8z3dKQuAzn2RY7sNjeh9xe DMUR7rfNwMYW+xs= -----END CERTIFICATE-----Generated at Wed Nov 5 22:44:46 2025 by rpki-client