$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/D78EA2DE44ED11EEA6685324C4F9AE02.roa File: D78EA2DE44ED11EEA6685324C4F9AE02.roa (raw, json) Hash identifier: gvjJNiO9vqYIhsYjJBaQQlt1G1Z/kYCgfliXikgsWHQ= Subject key identifier: 75:12:44:A5:A2:C1:00:D9:58:55:A1:B3:58:28:92:7E:41:E8:05:8B Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 01DA Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/D78EA2DE44ED11EEA6685324C4F9AE02.roa Signing time: Fri 17 Oct 2025 13:39:08 +0000 ROA not before: Fri 17 Oct 2025 13:39:08 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 140443 IP address blocks: 103.215.228.0/23 maxlen: 24 2401:920:123::/48 maxlen: 48 2401:920:a31::/48 maxlen: 48 2401:920:1001::/48 maxlen: 48 2401:920:1002::/48 maxlen: 48 2401:920:1003::/48 maxlen: 48 2401:920:1004::/48 maxlen: 48 2401:920:1005::/48 maxlen: 48 2401:920:1006::/48 maxlen: 48 2401:920:1007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: Oct 17 13:39:08 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68f246fc-1818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:91:8b:10:83:c7:4e:34:3a:31:a2:b2:e4: 07:7b:6d:90:a2:06:c6:9b:6b:14:19:b5:25:3c:f5: 8c:1c:47:74:ea:ff:44:97:f7:41:05:00:cb:41:49: ab:31:5f:17:ab:ef:15:8f:3d:cb:cd:63:5f:3b:57: 82:c4:75:45:4e:e1:9f:2a:bf:21:79:92:f6:a5:83: 8c:17:66:a0:ab:0b:f8:43:80:c2:fb:f9:fa:56:15: a2:d8:00:df:b9:ef:5f:63:d4:5c:41:7f:09:b5:c4: f1:e9:17:7c:a7:81:02:97:9a:40:4a:68:22:45:90: 5d:32:5b:02:b5:8d:c6:80:22:29:d0:6c:57:e3:2c: aa:1c:c5:ac:d9:ac:0b:4f:38:df:e9:a5:a8:ad:9e: 6d:92:78:b9:c5:47:a7:5f:12:2c:ee:85:e7:04:e6: eb:64:b9:e9:42:00:f5:3b:40:0c:fd:66:ce:6b:50: cb:85:19:65:88:2f:8a:c5:6e:6e:28:26:97:a2:30: b0:52:e7:a6:a9:08:21:04:39:3b:6f:08:db:78:81: 3c:28:d3:d5:ba:af:66:13:d7:d4:0c:c1:7b:b4:b5: 97:52:95:fb:97:97:4d:69:23:82:51:e9:4e:74:c2: 8a:f4:f9:ec:f4:2c:51:d7:c9:70:50:33:40:d4:4f: 0f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:12:44:A5:A2:C1:00:D9:58:55:A1:B3:58:28:92:7E:41:E8:05:8B X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/D78EA2DE44ED11EEA6685324C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.215.228.0/23 IPv6: 2401:920:123::/48 2401:920:a31::/48 2401:920:1001::-2401:920:1007:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 34:1e:04:f6:39:16:d7:b9:c9:bd:bf:78:ce:a4:8c:a3:61:e5: 00:28:92:af:61:df:20:c2:a7:74:7e:4f:66:e8:5e:55:84:dd: 60:23:e4:fe:4f:10:00:00:15:63:48:be:3f:40:31:9b:cb:86: 08:c7:c5:1c:58:9b:0b:0c:08:b5:58:08:f5:c4:c9:d6:77:50: e9:4e:d0:39:98:da:59:ae:d3:e0:35:87:32:fe:7b:34:fc:22: 27:26:96:71:13:c2:24:06:0c:36:17:d2:2b:23:1e:e9:bf:0d: d3:ef:84:e7:66:f4:53:81:da:b5:f3:bc:ce:0e:29:26:b3:35: 1d:37:48:d2:75:81:87:cb:0d:a8:d6:03:61:8e:f7:25:fa:67: 93:60:58:97:bb:e7:84:c4:7b:2e:65:d4:2f:6e:a0:29:5c:47: 72:4c:76:02:b4:5d:6e:b4:ef:d4:b4:0f:04:8a:3f:7b:a4:5f: 31:ea:48:be:09:bb:ee:a6:2d:00:2f:21:bd:ae:b4:e5:0c:1a: ab:28:83:c7:b8:01:db:9e:47:24:2d:91:4d:7b:87:f5:4c:ec: 1f:72:28:5d:e5:81:a7:d9:95:09:8f:d5:b5:7f:79:ba:97:42: 50:d1:67:ec:99:c9:4d:1e:b3:0b:5a:fb:ab:62:3f:d6:0a:7d: 64:8e:5a:40 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjUxMDE3MTMzOTA4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYyNDZmYy0xODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGKRixCDx040OjGisuQHe22QogbGm2sUGbUlPPWMHEd06v9El/dBBQDLQUmr MV8Xq+8Vjz3LzWNfO1eCxHVFTuGfKr8heZL2pYOMF2agqwv4Q4DC+/n6VhWi2ADf ue9fY9RcQX8JtcTx6Rd8p4ECl5pASmgiRZBdMlsCtY3GgCIp0GxX4yyqHMWs2awL Tzjf6aWorZ5tkni5xUenXxIs7oXnBObrZLnpQgD1O0AM/WbOa1DLhRlliC+KxW5u KCaXojCwUuemqQghBDk7bwjbeIE8KNPVuq9mE9fUDMF7tLWXUpX7l5dNaSOCUelO dMKK9Pns9CxR18lwUDNA1E8PWQIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFHUSRKWi wQDZWFWhs1gokn5B6AWLMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTJFOTIvMTg4NUE2RDIwNkNGMTFFRTlDOTcxMjdCQzRGOUFFMDIvRDc4RUEyREU0 NEVEMTFFRUE2Njg1MzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MAwEAgABMAYDBAFn1+QwLAQCAAIwJgMHACQBCSABIwMHACQBCSAKMTASAwcA JAEJIBABAwcDJAEJIBAAMA0GCSqGSIb3DQEBCwUAA4IBAQA0HgT2ORbXucm9v3jO pIyjYeUAKJKvYd8gwqd0fk9m6F5VhN1gI+T+TxAAABVjSL4/QDGby4YIx8UcWJsL DAi1WAj1xMnWd1DpTtA5mNpZrtPgNYcy/ns0/CInJpZxE8IkBgw2F9IrIx7pvw3T 74TnZvRTgdq187zODikmszUdN0jSdYGHyw2o1gNhjvcl+meTYFiXu+eExHsuZdQv bqApXEdyTHYCtF1utO/UtA8Eij97pF8x6ki+Cbvupi0ALyG9rrTlDBqrKIPHuAHb nkckLZFNe4f1TOwfcihd5YGn2ZUJj9W1f3m6l0JQ0WfsmclNHrMLWvurYj/WCn1k jlpA -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:24 2025 by rpki-client