$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa File: 8320FBE8232B11EBB2348B23C4F9AE02.roa (raw, json) Hash identifier: lZu5pdaUasH8/fasxCeSUbAtaYZZr63nIN4QhjX8ELY= Subject key identifier: 7D:3A:37:80:E5:1B:92:31:3D:CF:78:D2:A1:68:42:C0:63:21:4D:D0 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 07A5 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa Signing time: Sat 30 Aug 2025 22:13:52 +0000 ROA not before: Sat 30 Aug 2025 22:13:52 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138538 IP address blocks: 103.153.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 22:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Aug 30 22:13:52 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b377a0-c0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ce:6b:8a:53:8f:d7:08:8c:b9:db:d7:a6:ff: 35:dd:60:4c:09:14:71:02:81:17:57:8a:13:b1:a4: 8f:bb:44:34:17:71:5e:f2:41:64:1c:a0:dd:cd:4e: a3:99:a7:d1:fa:21:0d:81:fa:c4:aa:eb:f3:c1:f6: 73:a3:fa:2b:63:59:85:81:11:d6:b3:60:45:f9:6f: cd:a2:2c:b0:b5:05:43:15:b3:86:9d:51:95:19:4b: 8e:f9:9e:9d:80:a9:26:20:32:10:91:34:8c:09:f9: 8f:fa:b5:1e:d7:64:ae:06:a1:25:3f:1a:f2:b4:73: 66:d4:67:7d:85:b3:90:04:61:11:99:f9:79:39:da: 96:d3:ae:60:a2:65:ec:fb:08:cc:59:38:b0:69:a3: e5:0a:a7:5d:4a:0b:2b:ec:ac:45:c6:9b:31:b5:3e: 61:f8:46:08:b8:d2:fd:24:d5:ee:bf:38:7b:04:59: 8d:d9:51:65:8d:c0:2d:c0:25:35:35:52:db:ce:86: 2c:fc:59:c5:a6:b9:c2:55:35:af:7f:f1:ef:4c:eb: 12:90:e4:03:3b:c5:e1:39:90:49:bc:e9:b5:6a:d7: 40:4a:ca:21:92:bf:dd:3e:ee:e4:c5:cf:cc:ec:79: f9:49:61:b9:8c:4d:a2:3d:34:24:ac:ec:d3:54:a7: 9b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3A:37:80:E5:1B:92:31:3D:CF:78:D2:A1:68:42:C0:63:21:4D:D0 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/8320FBE8232B11EBB2348B23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.100.0/23 Signature Algorithm: sha256WithRSAEncryption 92:cb:fc:c4:57:7b:1d:3d:57:52:4b:65:70:0d:ee:3e:19:db: 9a:75:80:87:cf:1c:11:7a:ae:c3:2f:b9:67:f3:b2:1e:e3:0f: c3:41:7f:3a:f2:99:a5:21:08:75:62:fa:fa:cb:df:c5:79:ad: 84:01:8d:d1:06:55:ee:f4:0a:38:6e:49:4e:d6:af:92:8d:24: c3:77:d1:38:75:c7:24:96:d3:91:4f:57:41:5f:48:0a:33:2a: 25:1d:31:cb:fb:45:14:4b:9e:1e:6e:86:0a:05:5a:a0:d0:9b: d4:83:75:b9:0b:3a:b0:fd:a6:4c:66:29:ec:31:68:02:a2:ff: 53:c1:2c:36:22:d4:a3:66:66:e0:4a:a1:c3:65:4c:e3:e3:28: 8a:82:f7:7b:df:59:c5:2a:04:2a:01:7a:18:e0:f6:7a:a5:9c: 95:2b:ed:21:dd:f1:60:c5:5d:2b:0a:ea:1d:8d:44:d3:22:3c: aa:dd:5d:06:13:a5:fd:c2:d8:46:ea:ca:89:5d:da:3e:ec:b9: 90:8d:4f:31:35:b9:7d:8c:27:d9:f6:63:f0:93:be:46:08:1b: 05:f0:bb:fe:f6:36:e2:8c:07:16:63:d5:8f:eb:ed:6a:f1:ef: 1d:2f:84:af:30:eb:2c:c1:df:9e:28:cf:29:99:01:3a:1d:0e: ee:a2:86:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjUwODMwMjIxMzUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzNzdhMC1jMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6c5rilOP1wiMudvXpv813WBMCRRxAoEXV4oTsaSPu0Q0F3Fe8kFkHKDdzU6j mafR+iENgfrEquvzwfZzo/orY1mFgRHWs2BF+W/NoiywtQVDFbOGnVGVGUuO+Z6d gKkmIDIQkTSMCfmP+rUe12SuBqElPxrytHNm1Gd9hbOQBGERmfl5OdqW065gomXs +wjMWTiwaaPlCqddSgsr7KxFxpsxtT5h+EYIuNL9JNXuvzh7BFmN2VFljcAtwCU1 NVLbzoYs/FnFprnCVTWvf/HvTOsSkOQDO8XhOZBJvOm1atdASsohkr/dPu7kxc/M 7Hn5SWG5jE2iPTQkrOzTVKebuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFH06N4Dl G5IxPc940qFoQsBjIU3QMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI5NEQvMkM3MTYyQ0MyMzI4MTFFQjlGRjZFOTFBQzRGOUFFMDIvODMyMEZCRTgy MzJCMTFFQkIyMzQ4QjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmWQwDQYJKoZIhvcNAQELBQADggEBAJLL/MRXex09V1JL ZXAN7j4Z25p1gIfPHBF6rsMvuWfzsh7jD8NBfzrymaUhCHVi+vrL38V5rYQBjdEG Ve70CjhuSU7Wr5KNJMN30Th1xySW05FPV0FfSAozKiUdMcv7RRRLnh5uhgoFWqDQ m9SDdbkLOrD9pkxmKewxaAKi/1PBLDYi1KNmZuBKocNlTOPjKIqC93vfWcUqBCoB ehjg9nqlnJUr7SHd8WDFXSsK6h2NRNMiPKrdXQYTpf3C2Ebqyold2j7suZCNTzE1 uX2MJ9n2Y/CTvkYIGwXwu/72NuKMBxZj1Y/r7Wrx7x0vhK8w6yzB354ozymZATod Du6ihnk= -----END CERTIFICATE-----Generated at Sat Oct 25 22:30:06 2025 by rpki-client