$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/C7C714A2B19D11F0AB4AC87EC4F9AE02.roa File: C7C714A2B19D11F0AB4AC87EC4F9AE02.roa (raw, json) Hash identifier: xVfI/UuhEZlLBdOOX14MKLf7WRwvv4GN5zS12Efh5N8= Subject key identifier: 93:B4:FD:E5:95:1A:1A:85:9F:43:20:8A:87:B7:9E:17:11:EC:AB:CE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 03BC Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/C7C714A2B19D11F0AB4AC87EC4F9AE02.roa Signing time: Sat 25 Oct 2025 12:26:08 +0000 ROA not before: Sat 25 Oct 2025 12:26:08 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 137034 IP address blocks: 103.102.204.0/22 maxlen: 22 103.102.204.0/24 maxlen: 24 103.102.205.0/24 maxlen: 24 103.102.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Oct 25 12:26:08 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68fcc1df-f048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:fd:3b:c3:6d:a4:f1:55:b4:8c:7a:ab:77: 3e:77:8c:58:72:46:75:d4:96:38:09:e3:e3:5d:51: 5d:5b:48:ae:42:28:60:04:b3:54:2c:81:7f:b9:02: db:63:ee:6c:11:6b:08:a6:87:18:aa:f8:79:c5:3d: ed:35:65:4f:ba:8e:80:f3:0c:03:e7:1e:89:dd:12: 3c:a6:c2:1b:6f:a5:58:1f:83:db:f6:34:22:c9:a2: be:5b:4f:f3:79:db:cf:5a:53:de:e5:37:8b:db:b8: 35:c8:4e:18:4e:53:0f:db:a8:30:f9:4e:76:73:82: 5f:30:84:80:21:4b:d0:fa:25:d0:42:a9:86:de:d0: 4d:0f:50:2e:f0:54:d7:e4:21:7a:7a:f7:02:64:ec: d5:79:b3:3b:6b:5c:d7:4f:bc:32:a7:74:07:9a:9a: 83:08:fc:23:2a:b4:03:f5:e3:61:73:61:fc:6c:54: 48:02:2a:4a:91:ce:20:fd:9e:b6:89:88:7c:35:95: d7:de:15:b8:78:eb:09:83:6a:24:68:f6:c2:71:08: 15:7e:92:a5:65:f0:9f:d4:8e:d1:16:4b:81:e4:e2: fb:7b:d2:6e:53:04:81:e5:19:e0:bc:dc:36:89:32: d5:fe:24:26:a5:1f:df:52:58:ff:2b:d7:bd:3e:c7: 4a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B4:FD:E5:95:1A:1A:85:9F:43:20:8A:87:B7:9E:17:11:EC:AB:CE X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/C7C714A2B19D11F0AB4AC87EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.102.204.0/22 Signature Algorithm: sha256WithRSAEncryption 95:34:0c:89:a2:91:5d:fd:8f:91:f0:7c:63:c4:33:92:22:31: 88:f4:52:be:62:c6:2b:28:82:c9:71:c1:40:d0:26:28:97:5e: 4d:81:bc:c2:8a:57:88:5e:be:ed:a9:4c:78:fc:01:61:fe:85: c1:52:b7:89:66:25:e0:20:7e:de:8c:18:77:8e:03:c1:e3:bc: 44:bf:b5:1c:fd:66:80:4e:0e:10:89:bb:1f:69:93:27:44:1b: 63:c2:8d:2c:bd:28:cb:c8:27:0d:f5:f0:f8:90:5e:c8:36:37: b8:10:22:f5:28:ab:11:dd:7c:47:58:3c:09:56:65:e0:a7:e7: a7:c4:86:e7:f0:28:80:ff:42:ea:2a:36:19:31:d4:83:a9:a8: 59:73:a2:45:17:ca:33:ee:b5:26:e2:e0:46:11:a6:db:6b:40: 74:ad:25:70:8b:c2:1e:fd:7f:bc:ae:8a:30:b1:7b:bd:da:11: a1:25:9f:0c:fd:bc:e2:6a:49:f3:d8:9e:49:25:a7:d8:c7:dc: 87:b4:49:1a:b9:5c:68:59:7f:03:0c:51:fe:2c:4a:0a:16:51: 66:e8:53:36:3c:6d:69:5b:e7:3d:32:17:0c:33:4b:e9:e3:9c: 79:43:d5:fe:b8:70:e8:a7:b1:9c:75:7d:67:9c:07:23:98:7c: c4:2e:94:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjUxMDI1MTIyNjA4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZjYzFkZi1mMDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWf9O8NtpPFVtIx6q3c+d4xYckZ11JY4CePjXVFdW0iuQihgBLNULIF/uQLb Y+5sEWsIpocYqvh5xT3tNWVPuo6A8wwD5x6J3RI8psIbb6VYH4Pb9jQiyaK+W0/z edvPWlPe5TeL27g1yE4YTlMP26gw+U52c4JfMISAIUvQ+iXQQqmG3tBND1Au8FTX 5CF6evcCZOzVebM7a1zXT7wyp3QHmpqDCPwjKrQD9eNhc2H8bFRIAipKkc4g/Z62 iYh8NZXX3hW4eOsJg2okaPbCcQgVfpKlZfCf1I7RFkuB5OL7e9JuUwSB5RngvNw2 iTLV/iQmpR/fUlj/K9e9PsdKtQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJO0/eWV GhqFn0Mgioe3nhcR7KvOMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYwMzgvOTFFMEM4NTJBRkZDMTFFQ0IwQzM4ODVEQzRGOUFFMDIvQzdDNzE0QTJC MTlEMTFGMEFCNEFDODdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnZswwDQYJKoZIhvcNAQELBQADggEBAJU0DImikV39j5Hw fGPEM5IiMYj0Ur5ixisogslxwUDQJiiXXk2BvMKKV4hevu2pTHj8AWH+hcFSt4lm JeAgft6MGHeOA8HjvES/tRz9ZoBODhCJux9pkydEG2PCjSy9KMvIJw318PiQXsg2 N7gQIvUoqxHdfEdYPAlWZeCn56fEhufwKID/QuoqNhkx1IOpqFlzokUXyjPutSbi 4EYRpttrQHStJXCLwh79f7yuijCxe73aEaElnwz9vOJqSfPYnkklp9jH3Ie0SRq5 XGhZfwMMUf4sSgoWUWboUzY8bWlb5z0yFwwzS+njnHlD1f64cOinsZx1fWecByOY fMQulHA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:12:04 2025 by rpki-client