$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/CD2AE9AE71B611F0A1F6DD29C4F9AE02.roa File: CD2AE9AE71B611F0A1F6DD29C4F9AE02.roa (raw, json) Hash identifier: V4fGvQxawrO0GIrbZluiaRPHvMfeQYeoae8AjpWNDHM= Subject key identifier: 7E:BB:73:C6:DB:42:B9:24:20:E1:58:6F:E9:75:DF:35:E0:BC:7A:E9 Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: 0117 Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/CD2AE9AE71B611F0A1F6DD29C4F9AE02.roa Signing time: Tue 05 Aug 2025 04:43:59 +0000 ROA not before: Tue 05 Aug 2025 04:43:59 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 401371 IP address blocks: 103.67.52.0/23 maxlen: 23 103.67.52.0/24 maxlen: 24 103.67.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Validity Not Before: Aug 5 04:43:59 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68918c0f-592f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d9:ce:32:af:4c:15:78:f3:b1:2e:ce:52:8e: 30:ed:15:3f:45:8b:60:ad:43:ac:84:cb:75:48:c8: c1:a2:d1:d3:5d:03:fa:28:f0:46:cb:fb:68:69:f0: d7:94:4f:00:d5:2c:8e:81:6e:6a:ec:77:7d:d4:2e: 3f:01:76:4a:09:b9:d8:41:b3:8d:79:5d:35:20:30: 67:b5:d6:a6:50:ce:dd:08:03:9c:10:af:0c:d9:50: e5:5c:19:c4:36:5a:32:32:db:5d:35:f7:4e:66:a0: 00:1d:f8:94:75:3c:7a:4a:0c:cd:f3:31:71:de:08: ff:86:48:b3:51:e2:18:12:09:5d:9b:e8:a5:44:10: be:9d:95:7f:17:18:12:24:5d:5f:27:55:6f:00:de: 6f:26:6d:92:e3:f2:57:7c:e2:1e:b2:71:1b:bb:df: 20:d4:b7:4f:af:06:0b:30:33:23:44:80:ff:ed:1d: 8a:a1:0a:62:20:c2:a5:61:b5:bc:b1:dc:27:f6:c7: 27:0f:eb:58:74:e8:0f:0c:4e:c8:57:b6:6c:08:a0: 14:45:81:44:56:74:68:9c:1c:76:8c:4a:ca:27:b1: d1:9b:92:00:68:4e:62:26:1c:20:61:a6:ce:4b:d4: 31:6d:b9:b7:a6:6b:24:ce:e5:4f:42:b9:f4:f4:a0: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BB:73:C6:DB:42:B9:24:20:E1:58:6F:E9:75:DF:35:E0:BC:7A:E9 X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/CD2AE9AE71B611F0A1F6DD29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.52.0/23 Signature Algorithm: sha256WithRSAEncryption 68:c6:98:59:6f:59:69:8d:11:60:4a:a5:20:ef:e3:0f:d4:e8: 6b:8a:91:1b:f5:06:69:af:40:cc:15:9d:74:c2:5d:f8:9f:7e: 9e:7b:ca:56:38:85:c1:14:85:59:fe:36:1a:a0:f7:eb:e1:8b: 05:ca:52:a3:43:73:23:35:83:99:ad:09:92:1e:5b:b5:96:23: f7:9d:09:bf:2b:81:ac:56:ba:12:d7:df:aa:db:b2:5b:d1:4c: b2:96:24:63:f1:d9:30:3f:6c:df:c0:7a:2e:e9:f3:30:87:b8: eb:94:86:9a:03:21:ab:5a:49:51:2a:c4:85:fa:70:55:ad:79: be:5e:0e:0c:52:30:c8:ad:a0:ef:1c:d2:d2:1d:52:d5:29:87: d8:ca:3e:f2:6f:1d:9d:c0:ca:bd:5e:44:01:38:eb:ae:83:bb: d8:d7:43:bf:85:4f:56:c0:fb:aa:95:3b:46:d0:0e:5d:04:60: 21:68:a0:9f:10:5f:df:bf:28:d1:b9:78:4d:24:50:fe:d7:a7: 34:53:82:d4:51:0b:a8:c6:12:ff:0a:fa:cc:70:69:ae:b8:8d: eb:2e:23:5f:d0:60:59:66:33:ac:30:e1:6f:89:f0:2e:b3:92: c3:8f:dc:63:a1:43:ea:14:a7:19:ac:64:37:07:ba:c0:73:b4: 55:c9:ef:81 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD MThBQkYzM0IwHhcNMjUwODA1MDQ0MzU5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxOGMwZi01OTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NnOMq9MFXjzsS7OUo4w7RU/RYtgrUOshMt1SMjBotHTXQP6KPBGy/toafDX lE8A1SyOgW5q7Hd91C4/AXZKCbnYQbONeV01IDBntdamUM7dCAOcEK8M2VDlXBnE NloyMttdNfdOZqAAHfiUdTx6SgzN8zFx3gj/hkizUeIYEgldm+ilRBC+nZV/FxgS JF1fJ1VvAN5vJm2S4/JXfOIesnEbu98g1LdPrwYLMDMjRID/7R2KoQpiIMKlYbW8 sdwn9scnD+tYdOgPDE7IV7ZsCKAURYFEVnRonBx2jErKJ7HRm5IAaE5iJhwgYabO S9Qxbbm3pmskzuVPQrn09KBn6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFH67c8bb QrkkIOFYb+l13zXgvHrpMB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0 NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg4Q0EvNTY5NkU3NDYzNDY1MTFFRkFGNkRFQjRFQzRGOUFFMDIvQ0QyQUU5QUU3 MUI2MTFGMEExRjZERDI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnQzQwDQYJKoZIhvcNAQELBQADggEBAGjGmFlvWWmNEWBK pSDv4w/U6GuKkRv1BmmvQMwVnXTCXfiffp57ylY4hcEUhVn+Nhqg9+vhiwXKUqND cyM1g5mtCZIeW7WWI/edCb8rgaxWuhLX36rbslvRTLKWJGPx2TA/bN/Aei7p8zCH uOuUhpoDIataSVEqxIX6cFWteb5eDgxSMMitoO8c0tIdUtUph9jKPvJvHZ3Ayr1e RAE4666Du9jXQ7+FT1bA+6qVO0bQDl0EYCFooJ8QX9+/KNG5eE0kUP7XpzRTgtRR C6jGEv8K+sxwaa64jesuI1/QYFlmM6ww4W+J8C6zksOP3GOhQ+oUpxmsZDcHusBz tFXJ74E= -----END CERTIFICATE-----Generated at Tue Oct 28 23:10:18 2025 by rpki-client