$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa File: F4D295243FDA11EFAF5E676AC4F9AE02.roa (raw, json) Hash identifier: aj4Q4SeRE+NI4REEKNFbR+3ayDuDtlipzDAl7u7My1E= Subject key identifier: 98:72:9F:7E:D4:D0:E5:75:CA:67:8D:71:3C:30:A4:92:B8:AF:C3:E7 Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0472 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa Signing time: Sat 27 Sep 2025 15:14:35 +0000 ROA not before: Sat 27 Sep 2025 15:14:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133894 IP address blocks: 103.88.192.0/22 maxlen: 22 103.88.192.0/24 maxlen: 24 103.88.193.0/24 maxlen: 24 103.88.194.0/24 maxlen: 24 103.88.195.0/24 maxlen: 24 116.204.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Sep 27 15:14:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68d7ff5b-b8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:94:eb:23:6d:f2:2f:33:73:12:65:7f:fb: 4c:3e:0d:e8:25:78:89:2c:d2:27:cf:ef:a8:f2:ed: ff:6e:f3:b7:eb:2b:3e:de:95:05:a1:92:c9:20:a9: 83:5b:eb:6d:f2:f7:0f:72:cf:e4:2b:19:1e:7d:4b: 20:05:25:e4:70:ac:01:33:ea:6f:5f:20:1e:b4:71: fc:c5:d0:c8:dc:0b:60:35:51:49:32:ff:22:1f:c2: c4:2d:8c:ef:3c:eb:c2:e0:00:1c:d7:68:c6:74:94: 8a:83:88:ac:1d:30:60:b1:ff:5b:cf:d3:7c:17:c2: d1:8e:d8:ab:23:7f:b0:44:a3:32:ca:8a:c8:6e:ed: 21:ec:bc:24:0c:0c:d4:d2:64:ee:79:80:c6:9f:10: c4:b7:02:61:0f:a3:d3:de:cc:97:28:1b:17:19:2e: 38:74:ea:b9:33:b4:9d:fc:63:9f:25:40:da:d4:de: 9b:0f:6d:85:10:f5:79:5a:24:12:b7:8a:c4:90:5c: 71:58:57:00:f4:19:b2:15:ff:14:3d:fa:04:24:97: bd:cf:b1:ad:f1:b9:d4:d2:00:8e:7d:9b:a3:62:7b: 86:ad:35:35:84:f0:b0:1f:c1:1d:1c:84:41:18:ed: 56:9c:ea:e8:2d:37:3b:9e:b3:26:3d:b7:35:c6:3d: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:72:9F:7E:D4:D0:E5:75:CA:67:8D:71:3C:30:A4:92:B8:AF:C3:E7 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/F4D295243FDA11EFAF5E676AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.192.0/22 116.204.240.0/24 Signature Algorithm: sha256WithRSAEncryption 63:08:90:61:58:6f:02:7d:84:c9:9c:59:01:26:70:75:50:90: 78:df:fd:f7:8f:05:44:9e:31:65:02:cc:4d:f3:46:cb:52:90: bb:6b:05:13:c7:db:76:93:b8:b8:7c:43:80:2c:cf:4f:24:88: 07:9e:52:8f:de:9e:ae:ef:ce:06:a8:a0:25:e9:5a:b8:d6:f4: ad:2d:30:0d:36:be:00:45:a5:b0:96:00:41:c2:66:b8:63:2f: 91:b5:c7:44:20:b8:ed:41:83:41:60:66:97:9a:71:96:e1:b8: 50:60:1d:fb:eb:b3:ad:e9:ae:79:95:2d:db:14:a9:47:1b:86: 67:99:7e:b5:bb:d4:5d:df:d1:23:e2:d5:40:aa:9f:61:98:57: bd:b3:90:5a:a3:e8:03:b5:6f:40:1e:7e:07:41:74:1d:41:bd: 49:c4:2b:4a:22:c5:c7:37:b7:b5:f8:49:ab:c6:bf:ec:1d:24: 69:4b:9c:25:6f:95:7a:75:be:35:77:79:e6:b3:67:f4:24:30: 65:6c:10:7d:24:16:c1:41:fe:2a:78:7a:49:28:8b:45:ab:3c: ef:33:a9:e0:57:a3:26:6e:1f:e1:4e:22:ed:f9:ea:b7:b5:16: 02:8b:af:cb:91:6a:26:99:7a:51:35:8f:dc:49:f1:13:e8:e0: 4a:2f:a4:99 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjUwOTI3MTUxNDM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ3ZmY1Yi1iOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRKU6yNt8i8zcxJlf/tMPg3oJXiJLNInz++o8u3/bvO36ys+3pUFoZLJIKmD W+tt8vcPcs/kKxkefUsgBSXkcKwBM+pvXyAetHH8xdDI3AtgNVFJMv8iH8LELYzv POvC4AAc12jGdJSKg4isHTBgsf9bz9N8F8LRjtirI3+wRKMyyorIbu0h7LwkDAzU 0mTueYDGnxDEtwJhD6PT3syXKBsXGS44dOq5M7Sd/GOfJUDa1N6bD22FEPV5WiQS t4rEkFxxWFcA9BmyFf8UPfoEJJe9z7Gt8bnU0gCOfZujYnuGrTU1hPCwH8EdHIRB GO1WnOroLTc7nrMmPbc1xj2jNQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJhyn37U 0OV1ymeNcTwwpJK4r8PnMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDBDOEUvMDMyRTU3Qjg3NDM5MTFFQ0I1NTcyMzZGQzRGOUFFMDIvRjREMjk1MjQz RkRBMTFFRkFGNUU2NzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnWMADBAB0zPAwDQYJKoZIhvcNAQELBQADggEBAGMIkGFY bwJ9hMmcWQEmcHVQkHjf/fePBUSeMWUCzE3zRstSkLtrBRPH23aTuLh8Q4Asz08k iAeeUo/enq7vzgaooCXpWrjW9K0tMA02vgBFpbCWAEHCZrhjL5G1x0QguO1Bg0Fg ZpeacZbhuFBgHfvrs63prnmVLdsUqUcbhmeZfrW71F3f0SPi1UCqn2GYV72zkFqj 6AO1b0AefgdBdB1BvUnEK0oixcc3t7X4SavGv+wdJGlLnCVvlXp1vjV3eeazZ/Qk MGVsEH0kFsFB/ip4ekkoi0WrPO8zqeBXoyZuH+FOIu356re1FgKLr8uRaiaZelE1 j9xJ8RPo4EovpJk= -----END CERTIFICATE-----Generated at Fri Oct 24 18:52:59 2025 by rpki-client