$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/5A0EECF4B0CC11F08F8E932CC4F9AE02.roa File: 5A0EECF4B0CC11F08F8E932CC4F9AE02.roa (raw, json) Hash identifier: TR2sbaJKnc/SEaXKQ1o7lEeyXHgsYm5mtCELfAe/UxA= Subject key identifier: 8B:E9:5C:C9:E7:7C:F9:35:99:88:EB:40:F9:13:C2:3C:F4:67:93:78 Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 08F2 Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/5A0EECF4B0CC11F08F8E932CC4F9AE02.roa Signing time: Fri 24 Oct 2025 11:26:58 +0000 ROA not before: Fri 24 Oct 2025 11:26:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147314 IP address blocks: 103.111.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 19:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Oct 24 11:26:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68fb6282-eda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c2:fd:6a:37:f6:60:7f:91:ce:30:fd:9d:7c: 22:09:44:86:7d:30:80:e7:80:ae:14:89:85:b8:24: f0:44:89:af:bb:05:9a:48:b3:19:89:aa:76:17:ae: 92:d8:24:3f:af:5f:61:3b:32:f4:d3:2a:7f:5c:e5: cf:b1:2a:ef:cd:fc:75:f5:29:a6:cb:58:0e:ed:fd: d2:73:92:1c:92:e2:87:35:27:88:61:56:8a:b5:a9: 32:b4:03:eb:1f:9a:15:f1:d9:66:2b:47:a4:98:8a: 42:87:2b:eb:3c:28:e3:79:d6:f8:d6:ff:ae:8f:84: f4:88:51:aa:1f:8f:0a:ca:7e:d7:1c:e1:4e:ca:89: 18:e6:92:1f:f7:69:eb:95:2f:47:50:a9:2c:a7:81: fa:f6:c0:0c:06:e3:f8:1f:9f:86:0a:34:67:e3:e1: 7b:b7:36:34:e4:2b:83:98:8a:51:af:c2:61:e2:69: 56:31:6d:fd:d9:12:a1:3d:aa:a6:f7:ed:51:7f:f9: d0:40:71:3a:c0:b7:ee:9f:59:c6:23:c6:dc:1f:9a: a6:51:21:d6:e3:c8:10:07:27:54:3c:6d:a4:54:e8: ca:03:c6:8b:7d:b2:86:5c:c0:5f:df:06:1e:51:5e: b1:4f:5e:28:55:a4:57:f8:b4:ed:86:5a:77:28:06: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E9:5C:C9:E7:7C:F9:35:99:88:EB:40:F9:13:C2:3C:F4:67:93:78 X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/5A0EECF4B0CC11F08F8E932CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.167.0/24 Signature Algorithm: sha256WithRSAEncryption 77:b6:d6:88:d1:e9:a1:fd:46:85:61:1b:0f:44:d7:cf:67:c8: 4a:eb:5a:18:9f:72:27:0d:c8:8c:9b:c0:0c:2f:5f:9c:37:88: a8:4c:ca:a5:aa:2c:c2:27:15:42:fb:35:d4:45:74:bd:c5:21: db:1f:36:95:13:f3:c4:a2:06:41:72:b6:50:0e:8b:67:af:eb: 00:9d:e6:51:f0:69:c1:03:a7:b4:ae:95:df:9c:7e:fe:3d:c8: c4:34:3c:d1:df:22:ad:e2:97:f6:04:ac:8a:64:05:de:70:5d: 99:a6:59:47:3e:9d:42:da:42:d8:10:ae:38:13:98:f5:a0:ae: bb:0d:d8:82:b5:3e:06:aa:10:58:08:80:1f:d3:77:9a:e7:29: cb:77:71:c3:25:a6:e2:8a:41:a2:9a:05:18:f0:01:68:7f:b9: 33:52:76:f5:43:39:6a:7f:7d:c6:5d:3a:f8:e8:9f:11:d9:31: 5a:bb:40:0e:86:96:1b:a7:99:ae:c2:e3:12:b6:3d:38:5e:d8: 17:d3:84:e1:06:ba:10:be:85:82:65:fd:77:83:b0:ef:67:8d: 9b:de:98:c1:cc:e2:e7:9c:28:1e:d5:68:84:ff:4c:53:3d:0f: 3c:69:6c:de:94:c0:8f:39:b2:85:25:3d:90:74:e9:e0:dd:e3: 8e:64:49:26 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUxMDI0MTEyNjU4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZiNjI4Mi1lZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8sL9ajf2YH+RzjD9nXwiCUSGfTCA54CuFImFuCTwRImvuwWaSLMZiap2F66S 2CQ/r19hOzL00yp/XOXPsSrvzfx19Smmy1gO7f3Sc5IckuKHNSeIYVaKtakytAPr H5oV8dlmK0ekmIpChyvrPCjjedb41v+uj4T0iFGqH48Kyn7XHOFOyokY5pIf92nr lS9HUKksp4H69sAMBuP4H5+GCjRn4+F7tzY05CuDmIpRr8Jh4mlWMW392RKhPaqm 9+1Rf/nQQHE6wLfun1nGI8bcH5qmUSHW48gQBydUPG2kVOjKA8aLfbKGXMBf3wYe UV6xT14oVaRX+LTthlp3KAZJnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIvpXMnn fPk1mYjrQPkTwjz0Z5N4MB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU2MEQvNjhDM0Y0OUE0MUVFMTFFQTlDRUExRjc1QzRGOUFFMDIvNUEwRUVDRjRC MENDMTFGMDhGOEU5MzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnb6cwDQYJKoZIhvcNAQELBQADggEBAHe21ojR6aH9RoVh Gw9E189nyErrWhifcicNyIybwAwvX5w3iKhMyqWqLMInFUL7NdRFdL3FIdsfNpUT 88SiBkFytlAOi2ev6wCd5lHwacEDp7Suld+cfv49yMQ0PNHfIq3il/YErIpkBd5w XZmmWUc+nULaQtgQrjgTmPWgrrsN2IK1PgaqEFgIgB/Td5rnKct3ccMlpuKKQaKa BRjwAWh/uTNSdvVDOWp/fcZdOvjonxHZMVq7QA6Glhunma7C4xK2PThe2BfThOEG uhC+hYJl/XeDsO9njZvemMHM4uecKB7VaIT/TFM9DzxpbN6UwI85soUlPZB06eDd 445kSSY= -----END CERTIFICATE-----Generated at Mon Oct 27 01:27:41 2025 by rpki-client