$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/43E43270A27D11F0862ABC17C4F9AE02.roa File: 43E43270A27D11F0862ABC17C4F9AE02.roa (raw, json) Hash identifier: Qyc81RIKSdu+FLrquo5aMNKuhSqU44VyZkyWHyn1G+w= Subject key identifier: A5:8B:7C:0E:32:8F:E1:72:EA:46:3C:14:00:28:8A:A1:DB:A0:08:F6 Certificate issuer: /CN=A91DD25E/serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Certificate serial: 03 Authority key identifier: F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/43E43270A27D11F0862ABC17C4F9AE02.roa Signing time: Mon 06 Oct 2025 06:25:35 +0000 ROA not before: Mon 06 Oct 2025 06:25:35 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 134349 IP address blocks: 103.95.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=F2617A554157CE99209E39FDFB53D516DDDE78F8 Validity Not Before: Oct 6 06:25:35 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68e360de-0396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:6f:f3:9f:8e:09:3b:ed:f1:72:91:ac:0e: 1c:88:f8:70:7d:c7:f2:a8:38:b3:3a:f8:4d:4c:fe: 56:a5:1d:d3:24:aa:88:79:be:40:e2:86:7e:58:da: 17:37:a5:da:24:ad:26:ad:74:4a:56:d7:eb:c0:c6: 91:c8:b9:65:33:b2:d0:b2:f1:8d:d5:2d:32:30:df: 58:e5:5b:11:2c:93:88:0f:7e:ed:77:74:50:bd:f4: 0c:4b:c8:2c:57:15:f7:d6:7f:51:f5:52:93:c5:7b: b7:9c:df:f2:8a:1c:bf:db:4d:68:2b:89:a2:21:f2: 24:2f:80:6a:27:6b:6e:7f:29:fd:0c:49:b1:e2:7a: 6e:41:7e:99:1d:0e:cf:a1:99:f5:fe:17:d5:97:51: 16:62:a0:b4:5a:fd:89:2e:74:c1:75:45:c6:cb:6f: de:f1:80:60:ec:97:9f:39:d8:fa:9f:4b:ec:7e:22: 18:c4:b0:70:5e:42:18:9e:6b:08:54:8c:45:21:0a: 0b:8d:00:ff:74:a0:b0:4c:35:7c:88:90:18:85:30: d2:06:6d:21:75:64:b3:2d:a3:50:26:7e:25:82:8e: 9d:be:22:b3:a5:bb:cd:c6:48:de:f0:69:7d:33:6f: 8d:de:84:b3:fc:e5:3a:39:d8:d7:75:21:98:3d:23: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8B:7C:0E:32:8F:E1:72:EA:46:3C:14:00:28:8A:A1:DB:A0:08:F6 X509v3 Authority Key Identifier: keyid:F2:61:7A:55:41:57:CE:99:20:9E:39:FD:FB:53:D5:16:DD:DE:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/8mF6VUFXzpkgnjn9-1PVFt3eePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mF6VUFXzpkgnjn9-1PVFt3eePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/3F375D26A27B11F0980FD04AC4F9AE02/43E43270A27D11F0862ABC17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.95.76.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:1e:bb:b5:d0:7c:3f:0e:b6:3c:7a:20:97:69:56:ad:f6:69: f5:9d:ef:aa:02:db:7a:91:04:e0:d9:be:12:43:99:c1:9f:d6: 1a:ba:2b:37:52:84:57:6b:78:6b:67:29:5c:7c:41:75:75:91: d5:29:37:ba:c8:50:31:00:01:71:be:2c:89:e8:b1:9c:1b:35: 4f:09:75:c5:7c:be:5c:6f:e1:17:4a:6d:be:6d:e7:48:b8:1b: 76:d4:13:c1:ef:96:8f:7d:f7:da:4b:07:fb:11:88:c9:fb:9a: ef:77:6d:46:c8:7c:7e:9a:aa:11:bd:35:c5:17:68:b1:e8:60: 55:ca:79:e6:19:09:7c:0e:b4:c2:7e:7f:66:93:46:22:40:39: 3b:b4:fe:24:f1:e3:57:43:7b:8a:34:8c:f0:05:6f:cf:bf:09: 64:1f:ee:01:e4:2b:5e:31:6e:42:68:44:07:54:e1:b8:88:a5: 35:c2:03:1f:59:80:7f:7b:15:5f:4d:20:c7:87:66:71:f8:c2: 54:1b:d6:d8:e0:6a:df:47:e1:34:92:c2:f7:92:f3:84:04:30: 99:22:3d:59:29:83:23:dc:89:44:b2:0e:69:9b:0f:03:93:2c: 61:01:56:48:7e:26:52:32:15:3e:13:31:e2:c0:f5:eb:d9:23: ba:33:ef:67 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoRjI2MTdBNTU0MTU3Q0U5OTIwOUUzOUZERkI1M0Q1MTZE RERFNzhGODAeFw0yNTEwMDYwNjI1MzVaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTM2MGRlLTAzOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBBm/zn44JO+3xcpGsDhyI+HB9x/KoOLM6+E1M/lalHdMkqoh5vkDihn5Y2hc3 pdokrSatdEpW1+vAxpHIuWUzstCy8Y3VLTIw31jlWxEsk4gPfu13dFC99AxLyCxX FffWf1H1UpPFe7ec3/KKHL/bTWgriaIh8iQvgGona25/Kf0MSbHiem5BfpkdDs+h mfX+F9WXURZioLRa/YkudMF1RcbLb97xgGDsl5852PqfS+x+IhjEsHBeQhieawhU jEUhCguNAP90oLBMNXyIkBiFMNIGbSF1ZLMto1AmfiWCjp2+IrOlu83GSN7waX0z b43ehLP85To52Nd1IZg9I1/LAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUpYt8DjKP 4XLqRjwUACiKodugCPYwHwYDVR0jBBgwFoAU8mF6VUFXzpkgnjn9+1PVFt3eePgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzNGMzc1RDI2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyLzhtRjZWVUZYenBrZ25qbjktMVBWRnQzZWVQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOG1GNlZVRlh6cGtnbmpuOS0xUFZGdDNlZVBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDI1RS8zRjM3NUQyNkEyN0IxMUYwOTgwRkQwNEFDNEY5QUUwMi80M0U0MzI3MEEy N0QxMUYwODYyQUJDMTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGdfTDANBgkqhkiG9w0BAQsFAAOCAQEAWh67tdB8Pw62PHog l2lWrfZp9Z3vqgLbepEE4Nm+EkOZwZ/WGrorN1KEV2t4a2cpXHxBdXWR1Sk3ushQ MQABcb4sieixnBs1Twl1xXy+XG/hF0ptvm3nSLgbdtQTwe+Wj3332ksH+xGIyfua 73dtRsh8fpqqEb01xRdosehgVcp55hkJfA60wn5/ZpNGIkA5O7T+JPHjV0N7ijSM 8AVvz78JZB/uAeQrXjFuQmhEB1ThuIilNcIDH1mAf3sVX00gx4dmcfjCVBvW2OBq 30fhNJLC95LzhAQwmSI9WSmDI9yJRLIOaZsPA5MsYQFWSH4mUjIVPhMx4sD169kj ujPvZw== -----END CERTIFICATE-----Generated at Sun Oct 19 11:48:24 2025 by rpki-client