$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/5B4A5E7EB7CF11EF860F535AC4F9AE02.roa File: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (raw, json) Hash identifier: Z9DYBfabGIxHjUBLevu5KvPw0ydtYOqQMGpRrWOIWpg= Subject key identifier: 5D:DF:CF:1B:84:BD:83:84:A5:53:8E:0E:F5:27:19:B1:C8:76:54:50 Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 71 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/5B4A5E7EB7CF11EF860F535AC4F9AE02.roa Signing time: Tue 01 Jul 2025 07:43:39 +0000 ROA not before: Tue 01 Jul 2025 07:43:39 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 7155 IP address blocks: 103.217.100.0/24 maxlen: 24 103.217.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 10:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Jul 1 07:43:39 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686391ab-d003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:d9:75:e4:60:14:12:7f:47:b9:9b:d5:44: 89:01:9c:f8:63:b2:bb:05:08:21:3a:74:6d:54:69: 53:0e:88:bb:a1:25:a2:7b:04:f6:f6:af:09:56:b7: 3a:c5:40:95:72:fb:cb:d7:2a:2e:a7:e8:06:c3:c8: b8:f3:ed:e3:ab:d7:b8:c2:59:a3:a9:cb:ea:d7:06: 10:03:a3:0f:6f:2f:85:65:e3:6e:8e:f6:dd:9d:47: c8:47:26:89:9d:db:2f:38:51:92:c9:7a:9d:43:fa: 1d:e4:4e:f6:89:3b:cc:7d:13:ab:24:02:96:a5:a1: 4a:62:68:e3:ac:f6:dc:2e:5b:9c:37:bd:ae:09:92: fe:d7:42:89:38:70:ef:5a:5b:2c:f2:56:42:e6:4a: 01:0b:5c:dd:63:73:40:9b:1d:ac:3f:72:05:b6:5a: f5:a7:e3:56:7e:3d:d4:9b:1d:46:20:c6:4b:5f:a7: df:44:65:54:51:ea:69:09:14:d0:06:37:fc:c4:2e: 5c:59:4a:97:9d:34:ba:43:a4:04:69:59:26:4b:c4: 90:e2:7b:7f:8d:6d:d5:c0:0a:44:22:73:b3:1e:0b: 33:69:4e:e7:a9:d6:80:01:7f:ef:d1:b4:48:1e:61: ba:9a:bb:94:91:42:f4:47:a7:15:c0:04:41:2f:6f: 27:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DF:CF:1B:84:BD:83:84:A5:53:8E:0E:F5:27:19:B1:C8:76:54:50 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/5B4A5E7EB7CF11EF860F535AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.217.100.0/24 103.217.102.0/24 Signature Algorithm: sha256WithRSAEncryption 61:51:f2:63:f4:da:06:c7:b4:8d:d2:f7:f3:6c:43:c4:27:af: 46:af:f0:31:e2:5d:5d:1d:1e:7b:9a:24:1a:32:e7:5e:ba:02: e1:d6:ff:7d:a8:ef:ff:fd:91:25:15:e9:5a:e1:85:e4:91:96: 12:0f:95:93:2b:0f:ca:5a:f3:fa:38:0a:e9:95:97:c7:ac:09: 47:43:21:ca:a7:af:a1:00:8d:83:ae:e9:8f:ab:fe:4f:b8:cf: 98:49:86:19:6f:2e:16:81:4e:f4:48:2f:c9:09:e7:1f:cc:19: 45:49:c1:55:78:04:92:3a:b6:0e:bf:fc:42:0e:c6:3a:59:1e: d5:01:07:94:c2:7c:93:a7:b4:4a:fe:63:d5:fc:d6:a8:6e:25: 3e:a1:60:33:34:cf:46:70:8f:64:e1:f3:68:08:e5:91:f8:8d: 2a:58:15:bb:4f:00:22:96:c2:8b:80:00:18:6d:3e:ab:df:9a: ed:99:8c:1c:19:61:7a:93:85:13:0f:e2:05:b7:6c:83:b1:85: c2:77:42:fa:4b:db:68:a0:b1:48:cf:6d:50:64:90:04:be:91: db:84:8c:d9:6e:b2:96:44:c4:1f:e2:7b:aa:e6:31:f5:9c:df: 2e:3b:ea:dc:d4:9f:c0:91:89:3d:85:97:ee:92:bb:64:82:0e: e3:31:2e:31 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODQ4NTExMC8GA1UEBRMoQTU4ODc4NkUyRkQ4OENGQUFGNTNBQUEyOTZDMzY0NDYw RUU2RUE2RDAeFw0yNTA3MDEwNzQzMzlaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NjM5MWFiLWQwMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI9Nl15GAUEn9HuZvVRIkBnPhjsrsFCCE6dG1UaVMOiLuhJaJ7BPb2rwlWtzrF QJVy+8vXKi6n6AbDyLjz7eOr17jCWaOpy+rXBhADow9vL4Vl426O9t2dR8hHJomd 2y84UZLJep1D+h3kTvaJO8x9E6skApaloUpiaOOs9twuW5w3va4Jkv7XQok4cO9a WyzyVkLmSgELXN1jc0CbHaw/cgW2WvWn41Z+PdSbHUYgxktfp99EZVRR6mkJFNAG N/zELlxZSpedNLpDpARpWSZLxJDie3+NbdXACkQic7MeCzNpTuep1oABf+/RtEge Ybqau5SRQvRHpxXABEEvbydPAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUXd/PG4S9 g4SlU44O9ScZsch2VFAwHwYDVR0jBBgwFoAUpYh4bi/YjPqvU6qilsNkRg7m6m0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NDg1LzJEQkNFRjQ2QjQx MjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFloNGJpX1lqUHF2VTZxaWxzTmtSZzdtNm0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi81QjRBNUU3RUI3 Q0YxMUVGODYwRjUzNUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGfZZAMEAGfZZjANBgkqhkiG9w0BAQsFAAOCAQEAYVHyY/Ta Bse0jdL382xDxCevRq/wMeJdXR0ee5okGjLnXroC4db/fajv//2RJRXpWuGF5JGW Eg+VkysPylrz+jgK6ZWXx6wJR0MhyqevoQCNg67pj6v+T7jPmEmGGW8uFoFO9Egv yQnnH8wZRUnBVXgEkjq2Dr/8Qg7GOlke1QEHlMJ8k6e0Sv5j1fzWqG4lPqFgMzTP RnCPZOHzaAjlkfiNKlgVu08AIpbCi4AAGG0+q9+a7ZmMHBlhepOFEw/iBbdsg7GF wndC+kvbaKCxSM9tUGSQBL6R24SM2W6ylkTEH+J7quYx9ZzfLjvq3NSfwJGJPYWX 7pK7ZIIO4zEuMQ== -----END CERTIFICATE-----Generated at Sun Oct 26 10:03:15 2025 by rpki-client