$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa File: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (raw, json) Hash identifier: NyO/WjiaEa7cdOFl5O0R3ch16GCk/x68oKBSzQpBSAo= Subject key identifier: 5F:49:0D:F1:33:80:49:CC:4B:2A:CF:5E:EB:D5:A5:A3:BE:F5:B8:86 Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Certificate serial: 02AF Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa Signing time: Sat 25 Oct 2025 04:45:18 +0000 ROA not before: Sat 25 Oct 2025 04:45:18 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138213 IP address blocks: 103.122.100.0/23 maxlen: 23 103.122.100.0/24 maxlen: 24 103.122.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474 Validity Not Before: Oct 25 04:45:18 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68fc55de-08b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:36:a8:53:4f:14:eb:ec:31:69:74:1b:d3:65: 44:ca:cd:f1:61:15:79:99:36:21:14:b3:73:26:aa: 9b:fa:22:56:77:e1:5d:10:56:ad:2f:bb:f4:66:d8: 48:f7:68:d9:40:c8:fe:86:27:e9:80:ca:a2:8c:5d: f3:09:23:3c:22:e6:08:04:6b:76:1f:40:fb:2c:b1: 26:e5:eb:ba:16:f9:16:1f:a8:89:3a:57:45:d2:e1: 14:87:f7:a0:6e:ea:e9:52:00:4e:8f:44:ad:e4:42: c1:07:94:a7:db:96:3e:1c:cb:4b:43:27:ba:80:ca: b0:db:6b:84:93:1d:e5:e6:d4:c7:34:b7:15:05:97: 79:9c:57:3d:ae:d4:ef:2d:e3:90:79:c2:82:e8:6b: c2:fa:87:93:4b:09:c1:b8:59:f2:fd:74:4f:4d:c1: fa:7c:31:4a:b2:c0:22:cc:12:45:4e:ed:82:99:82: fa:f8:23:83:b1:53:ac:38:29:2d:33:b5:70:dc:49: 9f:13:13:44:eb:b5:7e:f3:55:d5:63:87:b7:21:f4: 9a:b6:4e:a3:93:d8:be:bb:cc:44:55:1e:01:a5:ca: 93:82:98:8c:84:7d:5d:d5:f1:0e:86:c3:97:57:81: 02:34:d6:ce:03:c0:fb:34:79:1f:41:58:01:aa:fe: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:49:0D:F1:33:80:49:CC:4B:2A:CF:5E:EB:D5:A5:A3:BE:F5:B8:86 X509v3 Authority Key Identifier: keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/F76D8A5C170D11EDA7EC2F87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.100.0/23 Signature Algorithm: sha256WithRSAEncryption 00:17:2e:e6:53:36:8b:fe:03:33:31:9c:33:58:bc:bf:f5:88: 34:15:e8:2c:5c:77:85:e2:0f:00:56:33:f2:29:22:21:b6:02: 87:84:33:79:4b:67:32:65:3c:6e:52:d7:bc:f6:74:bd:bf:2a: 2f:37:4e:3a:98:99:97:21:1c:dc:77:91:b5:b1:a7:5b:66:32: 89:97:d2:d0:df:9d:0a:72:4c:5e:73:20:64:5d:b8:6f:da:a6: 8e:c1:95:05:de:11:e9:51:f7:6f:bb:e8:2a:d9:14:30:22:e0: be:57:cc:ac:b2:e0:5d:86:45:88:5f:30:35:9d:84:ca:60:52: cc:77:e7:17:f4:b4:07:22:54:54:38:3b:18:13:93:09:7c:e7: dd:63:c1:b4:cf:9c:75:dd:b6:b1:cf:a6:12:92:5d:1a:39:52: 5d:f5:19:2a:29:c3:ae:60:4f:9f:61:9f:f8:94:6f:c9:8f:64: 13:48:71:d7:0a:18:ec:8a:76:75:18:89:d8:f9:36:b5:ea:9b: 67:88:4e:1e:e8:aa:53:a4:9d:21:0e:03:55:02:b6:bb:11:1b: f0:8e:97:91:61:19:76:7b:36:9b:c8:7d:dc:00:6d:1b:6e:00: 99:00:40:09:44:ec:b3:5f:a4:98:2b:8a:ee:32:94:53:84:22: ab:f8:85:b3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0MDYxMTAvBgNVBAUTKEUzNDM4NDA1NDc2NDAyQTNBQThGOTg3QzNBRkEwNjkw RDk2RUQ0NzQwHhcNMjUxMDI1MDQ0NTE4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZjNTVkZS0wOGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jaoU08U6+wxaXQb02VEys3xYRV5mTYhFLNzJqqb+iJWd+FdEFatL7v0ZthI 92jZQMj+hifpgMqijF3zCSM8IuYIBGt2H0D7LLEm5eu6FvkWH6iJOldF0uEUh/eg burpUgBOj0St5ELBB5Sn25Y+HMtLQye6gMqw22uEkx3l5tTHNLcVBZd5nFc9rtTv LeOQecKC6GvC+oeTSwnBuFny/XRPTcH6fDFKssAizBJFTu2CmYL6+CODsVOsOCkt M7Vw3EmfExNE67V+81XVY4e3IfSatk6jk9i+u8xEVR4BpcqTgpiMhH1d1fEOhsOX V4ECNNbOA8D7NHkfQVgBqv4d8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFF9JDfEz gEnMSyrPXuvVpaO+9biGMB8GA1UdIwQYMBaAFONDhAVHZAKjqo+YfDr6BpDZbtR0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQwNi85ODY4QTlGMDE3 MDkxMUVEQjZGODA4NjhDNEY5QUUwMi80ME9FQlVka0FxT3FqNWg4T3ZvR2tObHUx SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwT0VCVWRrQXFPcWo1aDhPdm9Ha05sdTFIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk0MDYvOTg2OEE5RjAxNzA5MTFFREI2RjgwODY4QzRGOUFFMDIvRjc2RDhBNUMx NzBEMTFFREE3RUMyRjg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnemQwDQYJKoZIhvcNAQELBQADggEBAAAXLuZTNov+AzMx nDNYvL/1iDQV6Cxcd4XiDwBWM/IpIiG2AoeEM3lLZzJlPG5S17z2dL2/Ki83TjqY mZchHNx3kbWxp1tmMomX0tDfnQpyTF5zIGRduG/apo7BlQXeEelR92+76CrZFDAi 4L5XzKyy4F2GRYhfMDWdhMpgUsx35xf0tAciVFQ4OxgTkwl8591jwbTPnHXdtrHP phKSXRo5Ul31GSopw65gT59hn/iUb8mPZBNIcdcKGOyKdnUYidj5NrXqm2eITh7o qlOknSEOA1UCtrsRG/COl5FhGXZ7NpvIfdwAbRtuAJkAQAlE7LNfpJgriu4ylFOE Iqv4hbM= -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:03 2025 by rpki-client