$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/F18DB130603911EF930C0567C4F9AE02.roa File: F18DB130603911EF930C0567C4F9AE02.roa (raw, json) Hash identifier: qmLSTL1wvxJ3Xrfha1oWGF4hujLBIbfMxUdEAe6twrY= Subject key identifier: C8:35:FE:67:E5:5B:24:F2:9D:F6:D9:07:3C:07:4D:BE:0F:B9:21:33 Certificate issuer: /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B Certificate serial: 057B Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/F18DB130603911EF930C0567C4F9AE02.roa Signing time: Sun 07 Sep 2025 00:04:48 +0000 ROA not before: Sun 07 Sep 2025 00:04:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 142629 IP address blocks: 103.171.89.0/24 maxlen: 24 2001:df7:4280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1403 (0x57b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056, serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B Validity Not Before: Sep 7 00:04:48 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68bccc1f-9fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7f:93:f9:8d:8f:05:11:bd:eb:eb:02:fb:d0: e6:f4:97:41:ff:4b:dc:cb:32:ff:73:87:5e:36:22: dc:30:39:37:35:ec:27:ea:bb:18:ab:d0:26:2d:97: db:03:f6:cb:cc:4e:78:4f:9a:de:7f:ff:10:25:41: 27:4b:e9:cd:dc:b4:30:48:38:de:47:3a:83:d4:cb: 02:04:6f:67:d2:94:93:be:24:56:fa:16:27:6b:69: 05:a5:56:81:40:ae:90:68:98:55:84:3d:52:3d:41: 6d:d4:0d:83:4c:2e:95:76:f2:38:dc:df:ee:39:e2: fb:15:7d:62:bd:9b:37:61:ff:cc:6e:66:85:1c:d7: ac:ed:ab:07:f1:fe:c7:fd:73:29:47:d1:e9:56:70: 75:66:2d:2f:bd:8b:a3:69:cf:6f:64:0b:b6:67:1c: 81:a8:13:09:26:88:9d:7d:8d:f1:3c:3f:5c:37:02: 94:56:3e:88:89:65:f1:07:4b:45:fe:3c:16:0a:fe: ef:88:ef:02:db:18:af:1c:a9:fb:03:92:1e:17:c3: 1c:5e:ea:4d:7e:81:a6:da:d2:97:98:a6:42:01:eb: 7b:c7:c3:b1:b0:a4:68:b8:8c:c2:2e:33:24:e5:fe: cb:57:28:cf:7c:dd:b2:35:75:87:12:c9:07:6f:98: 81:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:35:FE:67:E5:5B:24:F2:9D:F6:D9:07:3C:07:4D:BE:0F:B9:21:33 X509v3 Authority Key Identifier: keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/F18DB130603911EF930C0567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.89.0/24 IPv6: 2001:df7:4280::/48 Signature Algorithm: sha256WithRSAEncryption b7:42:b1:3f:b1:f2:ed:30:eb:2e:51:19:59:0c:0e:66:93:f2: db:2d:10:ad:9a:c2:30:5e:0e:40:bc:06:e7:46:d7:af:e3:98: f6:ad:e1:8b:fd:d2:8b:d4:d1:31:a0:af:69:53:97:34:6e:c3: 31:0f:12:8b:f5:8e:95:13:31:9c:f9:11:18:dc:1d:ec:3d:ae: 94:36:5d:be:f7:2b:af:12:86:a4:14:5f:a9:36:af:d0:71:96: 6a:76:94:44:a8:85:96:a8:b8:ef:1a:94:2f:25:45:93:2e:9e: 7e:86:cb:36:51:c1:ec:d6:28:30:38:1d:c2:e1:1a:14:25:bb: 9b:5c:aa:14:ae:dc:76:90:5c:5a:11:85:a9:3b:bc:98:59:7b: a6:b9:9b:cf:fa:ce:3c:74:3b:4e:dd:d1:e4:33:90:50:a1:18: 0e:2d:0e:68:a0:4f:d0:18:48:8a:c3:80:c5:4c:43:7b:ed:6c: a7:e9:b5:85:cc:d5:3a:71:eb:51:18:db:85:1b:1f:1e:4a:14: b7:c5:c0:89:96:e3:1a:d5:16:ce:50:b4:24:21:cf:76:09:f9: 51:91:83:c0:42:36:18:1d:53:c4:10:1f:a4:43:d6:43:20:f9: 3b:7f:83:7f:f8:2e:56:ee:aa:86:50:d0:5c:62:76:94:11:75: 0e:21:58:fd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDhCQzAxQ0VBNDREM0VEODhGNDE1MzE3MkI3OTI0NTY3 MTVDNTI2MEIwHhcNMjUwOTA3MDAwNDQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJjY2MxZi05ZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0X+T+Y2PBRG96+sC+9Dm9JdB/0vcyzL/c4deNiLcMDk3Newn6rsYq9AmLZfb A/bLzE54T5ref/8QJUEnS+nN3LQwSDjeRzqD1MsCBG9n0pSTviRW+hYna2kFpVaB QK6QaJhVhD1SPUFt1A2DTC6VdvI43N/uOeL7FX1ivZs3Yf/MbmaFHNes7asH8f7H /XMpR9HpVnB1Zi0vvYujac9vZAu2ZxyBqBMJJoidfY3xPD9cNwKUVj6IiWXxB0tF /jwWCv7viO8C2xivHKn7A5IeF8McXupNfoGm2tKXmKZCAet7x8OxsKRouIzCLjMk 5f7LVyjPfN2yNXWHEskHb5iBxQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMg1/mfl WyTynfbZBzwHTb4PuSEzMB8GA1UdIwQYMBaAFIvAHOpE0+2I9BUxcreSRWcVxSYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni9GQjU5MzQ0RUZC MUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZajBGVEZ5dDVKRlp4WEZK Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k4QWM2a1RUN1lqMEZURnl0NUpGWnhYRkpncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUwNTYvRkI1OTM0NEVGQjFDMTFFQkI1NDY0RjY0QzRGOUFFMDIvRjE4REIxMzA2 MDM5MTFFRjkzMEMwNTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnq1kwDwQCAAIwCQMHACABDfdCgDANBgkqhkiG9w0BAQsF AAOCAQEAt0KxP7Hy7TDrLlEZWQwOZpPy2y0QrZrCMF4OQLwG50bXr+OY9q3hi/3S i9TRMaCvaVOXNG7DMQ8Si/WOlRMxnPkRGNwd7D2ulDZdvvcrrxKGpBRfqTav0HGW anaURKiFlqi47xqULyVFky6efobLNlHB7NYoMDgdwuEaFCW7m1yqFK7cdpBcWhGF qTu8mFl7prmbz/rOPHQ7Tt3R5DOQUKEYDi0OaKBP0BhIisOAxUxDe+1sp+m1hczV OnHrURjbhRsfHkoUt8XAiZbjGtUWzlC0JCHPdgn5UZGDwEI2GB1TxBAfpEPWQyD5 O3+Df/guVu6qhlDQXGJ2lBF1DiFY/Q== -----END CERTIFICATE-----Generated at Sun Oct 19 14:10:59 2025 by rpki-client