$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa File: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (raw, json) Hash identifier: rLm77yyO5DoBFV+guuBfejob2y9icJNI0289dxVOxYk= Subject key identifier: 83:7D:0E:B0:FE:3E:A5:5B:D6:4A:85:F8:F3:51:D6:EC:49:DF:6D:0A Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 0787 Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa Signing time: Wed 22 Oct 2025 22:40:57 +0000 ROA not before: Wed 22 Oct 2025 22:40:57 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139270 IP address blocks: 103.140.166.0/23 maxlen: 23 103.140.167.0/24 maxlen: 24 2001:df0:ca80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: Oct 22 22:40:57 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68f95d79-e1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:b9:c9:af:a2:5f:62:be:07:13:a7:e2:42: ff:07:44:16:63:27:09:a1:62:0b:5b:7e:98:bc:55: 2d:c9:c7:b7:b2:3e:f3:d8:a2:51:b9:61:d5:e9:2d: 38:4c:ca:cf:76:5a:8a:3a:d8:0d:a8:e0:bf:00:98: c9:6b:31:7b:32:f9:35:52:a1:cd:db:23:63:8a:5b: eb:c9:f8:24:86:85:ab:e9:21:9d:d7:9f:38:89:21: 33:5f:60:4e:cb:18:96:c3:c9:75:5b:c1:92:23:6f: f8:af:82:e4:d1:b4:72:3c:9c:9f:c8:6c:6f:ba:ea: 26:64:f9:22:51:6c:d8:6c:d4:1c:9b:80:38:b5:77: 28:46:2a:5f:c4:0f:91:76:e8:a1:37:d0:d8:24:16: f2:4c:61:83:8c:9e:44:c0:57:38:13:64:ca:7f:73: 41:fd:5f:da:4c:0d:6f:7e:c3:d0:1c:23:21:c4:e3: 2c:d5:21:83:96:cb:4d:f2:81:5d:b9:34:fe:80:3b: da:a8:e6:59:db:d0:d5:3d:31:e2:25:ed:48:f2:e3: b9:6b:d9:f9:6f:88:1a:d5:05:39:ae:3f:d5:f3:2d: fe:7d:21:d2:14:31:d9:03:d9:4b:d2:b0:77:7c:f6: 23:ab:a3:4b:cf:27:1f:76:2d:46:fb:71:83:82:7c: e6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7D:0E:B0:FE:3E:A5:5B:D6:4A:85:F8:F3:51:D6:EC:49:DF:6D:0A X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/910A49AAB5CC11ECAE337E78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.166.0/23 IPv6: 2001:df0:ca80::/48 Signature Algorithm: sha256WithRSAEncryption 2c:3c:ed:e2:60:4c:9b:f8:1a:5c:08:66:f3:49:15:ec:5f:c9: 0f:20:78:95:f0:6f:74:67:0d:fb:f2:1d:04:34:15:d7:d7:db: 5f:55:9e:52:01:0b:55:76:4d:d3:c1:0e:13:85:a0:49:37:35: 72:31:0f:84:74:45:2e:8a:8b:37:ca:e3:1f:fe:b0:67:e7:eb: 8a:57:26:39:91:38:55:ab:69:21:6e:65:63:b7:f0:ca:26:aa: 6a:7c:a6:54:66:60:47:74:d4:5c:11:69:99:f5:b7:ad:46:ec: de:59:d3:70:bc:da:10:07:cf:ab:1d:e7:aa:31:d3:fc:5f:59: 04:26:db:66:ea:49:c7:a3:99:2e:d8:3c:3f:40:73:f3:4e:5f: c7:24:cf:52:2a:4f:d7:93:a7:aa:13:ab:f9:7e:6c:aa:13:0e: af:f4:63:b5:79:a9:d4:6d:18:f4:23:70:7d:a6:ba:66:6e:bb: 81:fe:64:f2:85:ca:6b:d9:7d:e0:a6:01:71:5f:79:14:84:6d: 30:c1:d5:8d:64:4c:d9:89:f3:5e:20:65:d2:ae:bb:6c:45:de: 54:18:f5:16:39:1a:c1:37:5e:98:b2:de:b3:cb:6f:01:9b:76: 0a:76:90:e2:2e:35:cc:0a:cd:79:40:95:09:bc:86:7c:09:eb: 39:bc:a3:cf -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjUxMDIyMjI0MDU3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5NWQ3OS1lMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIK5ya+iX2K+BxOn4kL/B0QWYycJoWILW36YvFUtyce3sj7z2KJRuWHV6S04 TMrPdlqKOtgNqOC/AJjJazF7Mvk1UqHN2yNjilvryfgkhoWr6SGd1584iSEzX2BO yxiWw8l1W8GSI2/4r4Lk0bRyPJyfyGxvuuomZPkiUWzYbNQcm4A4tXcoRipfxA+R duihN9DYJBbyTGGDjJ5EwFc4E2TKf3NB/V/aTA1vfsPQHCMhxOMs1SGDlstN8oFd uTT+gDvaqOZZ29DVPTHiJe1I8uO5a9n5b4ga1QU5rj/V8y3+fSHSFDHZA9lL0rB3 fPYjq6NLzycfdi1G+3GDgnzm9QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIN9DrD+ PqVb1kqF+PNR1uxJ320KMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ExQTYvMzhEOTNFMUUzRDMwMTFFQkIzQjJENjZFQzRGOUFFMDIvOTEwQTQ5QUFC NUNDMTFFQ0FFMzM3RTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjKYwDwQCAAIwCQMHACABDfDKgDANBgkqhkiG9w0BAQsF AAOCAQEALDzt4mBMm/gaXAhm80kV7F/JDyB4lfBvdGcN+/IdBDQV19fbX1WeUgEL VXZN08EOE4WgSTc1cjEPhHRFLoqLN8rjH/6wZ+frilcmOZE4VatpIW5lY7fwyiaq anymVGZgR3TUXBFpmfW3rUbs3lnTcLzaEAfPqx3nqjHT/F9ZBCbbZupJx6OZLtg8 P0Bz805fxyTPUipP15OnqhOr+X5sqhMOr/RjtXmp1G0Y9CNwfaa6Zm67gf5k8oXK a9l94KYBcV95FIRtMMHVjWRM2YnzXiBl0q67bEXeVBj1FjkawTdemLLes8tvAZt2 CnaQ4i41zArNeUCVCbyGfAnrObyjzw== -----END CERTIFICATE-----Generated at Tue Nov 4 07:17:13 2025 by rpki-client