$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5D58A6368CBD11EFBA479615C4F9AE02.roa File: 5D58A6368CBD11EFBA479615C4F9AE02.roa (raw, json) Hash identifier: k2dEAv933yKqFgM4NCZBdb4Xn5r7WtBWqggONtm/gBQ= Subject key identifier: 32:BD:86:C2:7E:81:AD:2A:AA:7F:32:A3:DA:11:86:0E:D9:3A:92:42 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: 8E Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5D58A6368CBD11EFBA479615C4F9AE02.roa Signing time: Tue 01 Jul 2025 07:43:04 +0000 ROA not before: Tue 01 Jul 2025 07:43:04 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132804 IP address blocks: 27.109.104.0/22 maxlen: 22 103.2.105.0/24 maxlen: 24 103.2.106.0/24 maxlen: 24 2404:e600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Jul 1 07:43:04 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68639188-fa8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:2b:6a:ce:c9:fb:7c:d7:52:41:86:11:76: 46:7d:30:7e:45:b2:f8:c4:82:42:ad:9e:90:6f:21: 3c:47:ed:a3:7d:d7:e5:32:10:7a:9e:9c:fd:45:63: 95:db:c6:4f:10:ba:78:39:2c:29:88:6d:50:e1:6e: bf:f6:5d:f0:d8:29:80:56:a4:2f:c0:7f:03:0a:5d: 01:ce:15:eb:36:56:65:84:c0:8b:6b:f1:2d:c2:73: 0e:d8:1a:b9:77:81:da:fd:54:2c:67:70:43:61:13: 0c:69:3d:ed:0b:99:93:1a:e2:e2:45:80:09:e3:00: bb:70:2f:2f:10:58:86:ba:a2:fa:9b:bc:28:37:14: 62:8e:55:21:66:95:5b:db:cd:85:0a:22:02:cf:c5: 6e:53:c3:e7:7b:96:82:e7:c0:16:70:a9:aa:ed:4e: 1c:41:e7:b4:70:40:3a:79:87:04:6e:8b:d5:94:d5: 42:1f:c5:d5:f6:db:eb:bb:a0:a6:bb:6e:05:8d:e9: fc:0b:a0:ee:86:55:7c:70:74:af:71:35:96:a2:e4: 1e:58:f5:85:cf:f5:07:da:78:fd:33:b4:88:19:2d: e2:83:ce:2d:4a:0d:70:13:d3:41:64:87:ed:21:40: 79:4e:ed:2c:d9:a8:4f:cc:f3:a3:20:0a:e9:fd:c0: 3f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BD:86:C2:7E:81:AD:2A:AA:7F:32:A3:DA:11:86:0E:D9:3A:92:42 X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/5D58A6368CBD11EFBA479615C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.109.104.0/22 103.2.105.0-103.2.106.255 IPv6: 2404:e600::/48 Signature Algorithm: sha256WithRSAEncryption 87:4e:1b:1b:b9:62:99:42:e5:d8:6a:a7:86:60:28:81:5c:b8: b4:13:94:6b:31:7f:f3:e9:6f:71:43:e1:3b:8e:1c:61:cc:e6: ce:bf:8d:64:05:76:16:38:c7:dd:b4:01:ae:f2:b5:ef:5c:89: 3c:d9:79:05:db:68:f2:b1:ca:2b:6e:f0:3c:aa:5e:09:8e:c1: 7b:60:97:a1:52:cc:74:19:26:9d:51:dd:9a:81:3b:71:9a:59: 90:51:a0:b5:f7:95:2c:32:5c:11:ed:02:8b:33:20:cb:f7:7c: 66:3e:8a:7f:d2:49:3d:ed:b7:61:c5:96:94:3f:de:0b:46:87: 2e:61:62:8a:53:73:7c:65:78:d4:1e:8a:57:bf:dd:cb:32:48: 81:26:a2:ca:2d:ef:87:29:b8:a5:76:2b:b4:13:bc:ad:79:b3: 6b:01:9e:a1:56:6c:4d:99:3b:ba:42:65:2e:77:89:89:2b:7d: 36:b6:f8:be:0c:1c:ad:95:10:51:34:76:c9:0d:58:3b:5c:5a: 26:b2:dc:00:90:b7:b3:c9:7e:83:3f:18:fa:74:b1:10:ef:c9: d6:5f:1f:c4:f7:be:ec:76:84:b2:7f:d9:33:dc:5a:a3:06:1d: cb:d7:84:a7:a3:89:23:27:e5:75:c6:34:5c:5a:b2:c3:23:dd: 14:ee:5d:51 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz QUI5RjRDNDAwHhcNMjUwNzAxMDc0MzA0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzOTE4OC1mYThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx0ras7J+3zXUkGGEXZGfTB+RbL4xIJCrZ6QbyE8R+2jfdflMhB6npz9RWOV 28ZPELp4OSwpiG1Q4W6/9l3w2CmAVqQvwH8DCl0BzhXrNlZlhMCLa/EtwnMO2Bq5 d4Ha/VQsZ3BDYRMMaT3tC5mTGuLiRYAJ4wC7cC8vEFiGuqL6m7woNxRijlUhZpVb 282FCiICz8VuU8Pne5aC58AWcKmq7U4cQee0cEA6eYcEbovVlNVCH8XV9tvru6Cm u24Fjen8C6DuhlV8cHSvcTWWouQeWPWFz/UH2nj9M7SIGS3ig84tSg1wE9NBZIft IUB5Tu0s2ahPzPOjIArp/cA/awIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDK9hsJ+ ga0qqn8yo9oRhg7ZOpJCMB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURGQUYvOTdCRTkzMEU4Q0JDMTFFRkJGMjIwMDEyQzRGOUFFMDIvNUQ1OEE2MzY4 Q0JEMTFFRkJBNDc5NjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPgYIKwYBBQUHAQcBAf8E LzAtMBoEAgABMBQDBAIbbWgwDAMEAGcCaQMEAGcCajAPBAIAAjAJAwcAJATmAAAA MA0GCSqGSIb3DQEBCwUAA4IBAQCHThsbuWKZQuXYaqeGYCiBXLi0E5RrMX/z6W9x Q+E7jhxhzObOv41kBXYWOMfdtAGu8rXvXIk82XkF22jyscorbvA8ql4JjsF7YJeh Usx0GSadUd2agTtxmlmQUaC195UsMlwR7QKLMyDL93xmPop/0kk97bdhxZaUP94L RocuYWKKU3N8ZXjUHopXv93LMkiBJqLKLe+HKbildiu0E7ytebNrAZ6hVmxNmTu6 QmUud4mJK302tvi+DBytlRBRNHbJDVg7XFomstwAkLezyX6DPxj6dLEQ78nWXx/E 977sdoSyf9kz3FqjBh3L14Sno4kjJ+V1xjRcWrLDI90U7l1R -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:25 2025 by rpki-client