$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/281169C4A73611F0A0612258C4F9AE02.roa File: 281169C4A73611F0A0612258C4F9AE02.roa (raw, json) Hash identifier: JxAee0u2+/ORag8Ub3d+619mOFxoeciDSE1YdK1uC+k= Subject key identifier: 85:8C:31:D3:A1:29:F4:67:19:EC:69:71:80:8B:09:73:08:46:DE:7A Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0553 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/281169C4A73611F0A0612258C4F9AE02.roa Signing time: Sun 12 Oct 2025 06:39:09 +0000 ROA not before: Sun 12 Oct 2025 06:39:09 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 20473 IP address blocks: 103.204.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 01:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Oct 12 06:39:09 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68eb4d0d-e9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:a2:77:9f:12:06:07:ce:cf:91:6c:b4:ae: 3b:e0:af:59:63:6a:22:e4:6e:2a:5b:11:e2:72:6f: d7:79:09:f3:b3:8a:70:2e:81:a3:fe:8d:c1:17:53: 2f:86:66:67:df:39:01:4a:3d:de:5b:70:d6:5e:66: d5:1c:54:98:bc:85:93:6e:b2:a3:f9:db:1c:f3:7f: af:84:af:3c:ee:80:08:a3:88:fa:0a:2a:9d:a3:4e: 7f:c1:88:33:51:ce:11:6e:e5:f8:23:86:2b:10:9b: 28:c2:f8:6a:e5:d8:f9:c9:4f:4a:58:1b:de:b4:4f: e2:a7:76:ac:08:90:39:72:4e:74:d1:ab:1c:57:12: ad:21:40:db:d7:89:09:c6:cd:d2:a5:7b:72:99:16: 36:f9:fb:a6:c6:bb:82:af:52:0d:07:ff:46:df:9e: c2:4d:01:9d:6c:4c:1b:20:b5:95:83:af:14:ba:d5: 30:20:cb:12:74:91:0d:b2:71:f6:e2:c9:3f:b1:11: 1f:c7:49:5a:ce:d8:e4:3f:9b:ac:2b:6f:35:9f:f7: 2d:4e:37:72:77:d6:b0:0d:f9:d1:75:a1:1d:07:95: ea:e2:84:e5:af:7a:15:68:7c:c8:81:fb:b0:88:3d: 4f:04:f8:1a:c2:23:17:90:dc:a1:85:ac:f0:44:d7: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8C:31:D3:A1:29:F4:67:19:EC:69:71:80:8B:09:73:08:46:DE:7A X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/281169C4A73611F0A0612258C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.20.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:18:1d:8b:82:77:24:02:35:f2:13:73:f7:b6:8b:71:31:9d: 47:f9:d8:ad:e2:bc:61:b7:29:0e:b2:13:34:19:50:da:74:76: 9e:51:1d:b5:8c:3b:0a:fe:ef:fd:7a:62:a2:6f:b4:90:d4:98: f9:5e:b1:1b:e5:d6:6b:90:e7:39:48:55:d0:5b:48:49:cb:3e: d5:d8:d9:97:40:3c:e6:dd:ec:db:3f:34:07:47:c2:b7:b0:2a: 2c:2f:8b:04:33:50:f0:ec:db:41:92:de:e7:21:37:ab:dc:83: ce:fe:14:02:09:fe:41:9d:b2:b8:b1:ca:c0:1d:eb:f4:fa:0d: 12:fe:09:fa:45:98:78:5c:47:bd:4c:3d:11:0b:0b:df:d3:16: f2:49:0a:33:d2:ad:1d:dd:83:13:ea:99:9f:21:f6:12:9f:45: 57:59:9f:94:3b:6d:ca:61:69:35:e9:e1:d3:a5:75:bb:c4:87: 9e:7d:1c:db:d2:6c:c8:59:43:25:7d:39:bb:5f:02:32:c2:d8: 6e:6b:fe:2e:39:a5:98:5e:90:36:b9:fa:32:4d:0e:21:60:31: 29:b9:24:0f:d4:bf:02:74:f0:c4:12:15:9b:67:33:63:34:88: 87:4e:0e:a7:5d:b4:07:61:cf:20:4f:9f:68:cf:fa:8e:3b:45: 42:37:32:a9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUxMDEyMDYzOTA5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGViNGQwZC1lOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGuid58SBgfOz5FstK474K9ZY2oi5G4qWxHicm/XeQnzs4pwLoGj/o3BF1Mv hmZn3zkBSj3eW3DWXmbVHFSYvIWTbrKj+dsc83+vhK887oAIo4j6Ciqdo05/wYgz Uc4RbuX4I4YrEJsowvhq5dj5yU9KWBvetE/ip3asCJA5ck500ascVxKtIUDb14kJ xs3SpXtymRY2+fumxruCr1INB/9G357CTQGdbEwbILWVg68UutUwIMsSdJENsnH2 4sk/sREfx0laztjkP5usK281n/ctTjdyd9awDfnRdaEdB5Xq4oTlr3oVaHzIgfuw iD1PBPgawiMXkNyhhazwRNeimQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIWMMdOh KfRnGexpcYCLCXMIRt56MB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBEODcvRjY4M0NFRjIyMUVCMTFFQzkyNTAxODE5QzRGOUFFMDIvMjgxMTY5QzRB NzM2MTFGMEEwNjEyMjU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnzBQwDQYJKoZIhvcNAQELBQADggEBADoYHYuCdyQCNfIT c/e2i3ExnUf52K3ivGG3KQ6yEzQZUNp0dp5RHbWMOwr+7/16YqJvtJDUmPlesRvl 1muQ5zlIVdBbSEnLPtXY2ZdAPObd7Ns/NAdHwrewKiwviwQzUPDs20GS3uchN6vc g87+FAIJ/kGdsrixysAd6/T6DRL+CfpFmHhcR71MPRELC9/TFvJJCjPSrR3dgxPq mZ8h9hKfRVdZn5Q7bcphaTXp4dOldbvEh559HNvSbMhZQyV9ObtfAjLC2G5r/i45 pZhekDa5+jJNDiFgMSm5JA/UvwJ08MQSFZtnM2M0iIdODqddtAdhzyBPn2jP+o47 RUI3Mqk= -----END CERTIFICATE-----Generated at Mon Oct 13 22:06:45 2025 by rpki-client