$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/975A513293B011EF9203EA6BC4F9AE02.roa File: 975A513293B011EF9203EA6BC4F9AE02.roa (raw, json) Hash identifier: 76T6waaCBWZUDZYyDyVRZsP5QTsxmG4f8kyM/bGetlE= Subject key identifier: 6E:EA:92:B3:EB:3A:EE:A5:AB:11:6C:17:19:47:58:F2:9C:EB:BC:F7 Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 01B0 Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/975A513293B011EF9203EA6BC4F9AE02.roa Signing time: Fri 31 Oct 2025 03:48:05 +0000 ROA not before: Fri 31 Oct 2025 03:48:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 140632 IP address blocks: 103.203.236.0/24 maxlen: 24 2001:df4:4cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: Oct 31 03:48:05 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69043175-b358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:1d:53:39:16:86:3d:ab:a3:68:08:92:34: 7d:0d:58:63:3c:34:3a:b1:aa:64:cf:95:31:2f:85: 1e:8b:f5:68:3f:c7:64:73:b8:86:a5:17:43:95:a3: 03:6a:df:a5:0d:7e:3f:94:ef:27:8b:0f:78:e9:c7: 84:49:af:da:9d:ef:65:6c:9a:a8:52:28:f3:e8:64: 71:d1:95:28:a8:09:c0:d7:16:57:9d:de:83:1d:b8: 03:90:81:35:4e:55:61:43:57:c9:65:f0:69:89:21: be:c2:99:3d:13:70:79:01:8f:58:6f:59:19:a6:9d: ab:c1:dc:4c:cf:91:2c:f6:78:34:ac:47:0c:a2:16: 15:77:fb:4e:16:48:59:fc:d8:58:3a:15:9e:5a:31: cd:1f:e2:08:f4:b1:6d:c4:5b:78:12:38:a7:f4:30: 10:7a:07:b2:47:f1:9b:c3:73:2c:02:9b:1c:dc:53: bb:4b:9e:4b:06:9d:e7:fe:36:52:65:20:33:36:f7: 2f:94:ff:c8:b8:cf:75:d9:91:19:aa:6f:62:e1:af: 92:92:d3:21:db:05:88:ec:cf:75:8d:b8:1d:d5:08: cd:cb:3b:3d:0a:fb:bc:f0:2e:08:c2:c6:92:8d:11: b6:c9:09:99:2e:e9:c3:4d:31:36:ce:df:2d:8d:cc: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EA:92:B3:EB:3A:EE:A5:AB:11:6C:17:19:47:58:F2:9C:EB:BC:F7 X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/975A513293B011EF9203EA6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.236.0/24 IPv6: 2001:df4:4cc0::/48 Signature Algorithm: sha256WithRSAEncryption 25:84:3e:07:fd:f5:90:44:a0:23:dc:ec:47:02:6f:12:1e:83: e3:6c:31:71:af:c9:a0:2a:4f:5d:e4:6a:a1:a7:ae:9e:b1:19: a6:df:ef:f8:5d:44:eb:58:7c:6f:17:c2:67:91:b5:0e:15:18: eb:f7:a2:6b:73:0f:8c:68:9c:f8:17:35:ed:40:84:92:9d:9b: 85:3f:13:5d:ed:9f:73:3b:2f:dc:03:23:cf:0e:1b:86:94:b8: 51:fe:df:e1:06:fd:d1:00:1f:ff:fe:5c:30:8d:69:8f:d6:a0: 11:ea:f7:b1:c0:40:e5:c6:51:14:f1:a4:25:b6:f1:b3:49:a1: c1:68:4c:49:dc:ad:c2:fe:a0:29:8b:41:f2:f4:16:f5:f0:fc: 99:3a:9b:48:2d:05:2c:51:6b:a7:83:6c:91:a3:17:d8:bf:30: 37:e6:a3:9d:22:28:b9:c0:32:4d:95:e1:3f:4b:96:9d:76:6f: a5:54:ad:3b:fc:53:41:86:a9:1a:07:e5:89:4b:f6:ac:0e:28: 3f:27:45:1e:7e:ae:08:6f:82:6f:21:7d:ef:c4:6c:f5:9b:1c: 5b:bb:c3:63:0a:c2:77:a6:dc:9f:fe:6f:60:b1:a3:ae:e8:d2: 35:57:d6:27:28:1a:88:47:16:c7:21:1d:9e:10:14:1c:cd:38: cf:b2:07:59 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjUxMDMxMDM0ODA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0MzE3NS1iMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxYdUzkWhj2ro2gIkjR9DVhjPDQ6sapkz5UxL4Uei/VoP8dkc7iGpRdDlaMD at+lDX4/lO8niw946ceESa/ane9lbJqoUijz6GRx0ZUoqAnA1xZXnd6DHbgDkIE1 TlVhQ1fJZfBpiSG+wpk9E3B5AY9Yb1kZpp2rwdxMz5Es9ng0rEcMohYVd/tOFkhZ /NhYOhWeWjHNH+II9LFtxFt4Ejin9DAQegeyR/Gbw3MsApsc3FO7S55LBp3n/jZS ZSAzNvcvlP/IuM912ZEZqm9i4a+SktMh2wWI7M91jbgd1QjNyzs9Cvu88C4IwsaS jRG2yQmZLunDTTE2zt8tjcxmeQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG7qkrPr Ou6lqxFsFxlHWPKc67z3MB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTVFOEIvREVDM0JEN0M1QUQzMTFFRUE5MkY5MzIwQzRGOUFFMDIvOTc1QTUxMzI5 M0IwMTFFRjkyMDNFQTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABny+wwDwQCAAIwCQMHACABDfRMwDANBgkqhkiG9w0BAQsF AAOCAQEAJYQ+B/31kESgI9zsRwJvEh6D42wxca/JoCpPXeRqoaeunrEZpt/v+F1E 61h8bxfCZ5G1DhUY6/eia3MPjGic+Bc17UCEkp2bhT8TXe2fczsv3AMjzw4bhpS4 Uf7f4Qb90QAf//5cMI1pj9agEer3scBA5cZRFPGkJbbxs0mhwWhMSdytwv6gKYtB 8vQW9fD8mTqbSC0FLFFrp4NskaMX2L8wN+ajnSIoucAyTZXhP0uWnXZvpVStO/xT QYapGgfliUv2rA4oPydFHn6uCG+CbyF978Rs9ZscW7vDYwrCd6bcn/5vYLGjrujS NVfWJygaiEcWxyEdnhAUHM04z7IHWQ== -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:59 2025 by rpki-client