$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/B2790B3C2FB111EB89A04D37C4F9AE02.roa File: B2790B3C2FB111EB89A04D37C4F9AE02.roa (raw, json) Hash identifier: jGskcZGy9vnjki4o/Q8sg1yCepo5qIlcHl7YuqfUnlw= Subject key identifier: 3D:DA:D1:09:17:77:9B:FD:9D:7F:D8:70:5D:3B:EC:7B:E3:82:D5:3E Certificate issuer: /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B Certificate serial: 0787 Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/B2790B3C2FB111EB89A04D37C4F9AE02.roa Signing time: Fri 31 Oct 2025 22:12:20 +0000 ROA not before: Fri 31 Oct 2025 22:12:20 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 136977 IP address blocks: 103.141.210.0/24 maxlen: 24 2001:df1:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1029, serialNumber=832CC056E23E388AE3781A520BDD91169636E59B Validity Not Before: Oct 31 22:12:20 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=69053444-8314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:df:08:9e:9e:89:c2:90:d6:45:a4:fe:88: 07:35:fb:43:50:6b:d8:25:f4:ce:6a:c3:ad:0d:40: 0c:e1:38:af:f2:21:32:73:a8:f4:c7:2c:90:31:83: 39:52:3a:7c:c6:60:be:8a:5d:bc:42:2b:fc:7d:7f: bb:8d:35:19:c3:79:84:47:b3:d5:bb:08:aa:00:bd: 98:86:27:74:d0:0f:bc:44:10:7f:1b:60:92:db:e3: 76:4e:f5:d6:ed:7d:4e:6e:5b:74:d4:fc:81:3d:72: 52:32:31:69:aa:a3:a2:ea:1e:12:92:b8:49:a3:4c: 84:b0:c4:64:d3:ee:69:9a:0e:48:92:d4:63:3e:57: 1a:0c:c6:b2:82:2f:29:6c:ac:14:f2:c8:66:7f:b7: 12:85:3d:10:a0:64:56:a3:a5:28:6b:e7:f4:31:c5: 06:1e:f7:96:a0:21:7d:93:48:b6:b0:c1:72:8b:7d: 29:39:23:0e:38:bc:c9:8e:62:bd:3a:b7:50:54:c8: 24:26:cd:32:55:b2:86:f3:b2:17:97:d8:96:a7:13: 04:90:50:6a:0f:44:50:16:46:c9:1b:0b:3a:7f:e5: 82:01:64:f9:f3:f9:2f:cb:95:e3:18:18:5a:5c:74: 22:ee:02:95:77:c5:a4:9e:e4:11:b1:ea:be:48:2f: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DA:D1:09:17:77:9B:FD:9D:7F:D8:70:5D:3B:EC:7B:E3:82:D5:3E X509v3 Authority Key Identifier: keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/B2790B3C2FB111EB89A04D37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.210.0/24 IPv6: 2001:df1:1080::/48 Signature Algorithm: sha256WithRSAEncryption 8a:44:e1:91:65:cd:e7:b3:f8:43:35:63:2d:e4:01:fb:31:37: f2:36:e5:21:46:96:ee:23:7e:3b:3c:ea:b4:10:eb:cc:ed:9b: d5:41:e1:aa:2a:88:15:7f:02:c7:68:b2:03:da:c2:51:4d:b2: f4:2d:05:f3:a6:f0:15:8b:b5:19:2d:fb:8c:66:1b:81:a1:47: c3:9f:9c:82:f9:cc:0b:39:00:6f:89:ce:fe:fd:c1:5c:a4:7f: 35:78:85:0a:c3:8a:eb:f0:c2:7c:b3:70:55:36:aa:d1:78:65: 3c:71:9f:86:45:aa:f2:80:f8:06:dc:a2:c2:79:9e:7f:24:4f: 09:8c:2e:20:05:37:a4:b1:fd:17:bb:af:bc:16:c3:f9:fa:5a: 5b:42:9f:57:be:fd:76:eb:8a:e7:90:9b:4f:8d:3e:ac:00:74: e4:f7:81:e4:22:40:bc:e3:a6:58:d3:a4:3c:e0:94:a2:49:9a: 9c:a9:19:0c:cc:ec:57:6c:2c:5e:d5:05:8c:24:47:f5:b3:3f: 47:de:41:f9:7b:d9:c2:d2:5c:36:3b:21:f5:e9:1f:94:0b:3e: 63:cf:e3:8b:96:8c:86:7a:35:aa:4f:8b:12:17:21:a1:6f:53: 06:a9:f0:d4:a4:ff:4f:eb:5b:1a:7d:4a:eb:1c:40:d6:12:a5: f5:63:f2:02 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEwMjkxMTAvBgNVBAUTKDgzMkNDMDU2RTIzRTM4OEFFMzc4MUE1MjBCREQ5MTE2 OTYzNkU1OUIwHhcNMjUxMDMxMjIxMjIwWhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1MzQ0NC04MzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLnfCJ6eicKQ1kWk/ogHNftDUGvYJfTOasOtDUAM4Tiv8iEyc6j0xyyQMYM5 Ujp8xmC+il28Qiv8fX+7jTUZw3mER7PVuwiqAL2Yhid00A+8RBB/G2CS2+N2TvXW 7X1Oblt01PyBPXJSMjFpqqOi6h4SkrhJo0yEsMRk0+5pmg5IktRjPlcaDMaygi8p bKwU8shmf7cShT0QoGRWo6Uoa+f0McUGHveWoCF9k0i2sMFyi30pOSMOOLzJjmK9 OrdQVMgkJs0yVbKG87IXl9iWpxMEkFBqD0RQFkbJGws6f+WCAWT58/kvy5XjGBha XHQi7gKVd8WknuQRseq+SC+tywIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFD3a0QkX d5v9nX/YcF077HvjgtU+MB8GA1UdIwQYMBaAFIMswFbiPjiK43gaUgvdkRaWNuWb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTAyOS8xMDg5N0IzMjJG QjAxMUVCQTg2NkNGMzRDNEY5QUUwMi9neXpBVnVJLU9JcmplQnBTQzkyUkZwWTI1 WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5ekFWdUktT0lyamVCcFNDOTJSRnBZMjVacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjEwMjkvMTA4OTdCMzIyRkIwMTFFQkE4NjZDRjM0QzRGOUFFMDIvQjI3OTBCM0My RkIxMTFFQjg5QTA0RDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnjdIwDwQCAAIwCQMHACABDfEQgDANBgkqhkiG9w0BAQsF AAOCAQEAikThkWXN57P4QzVjLeQB+zE38jblIUaW7iN+OzzqtBDrzO2b1UHhqiqI FX8Cx2iyA9rCUU2y9C0F86bwFYu1GS37jGYbgaFHw5+cgvnMCzkAb4nO/v3BXKR/ NXiFCsOK6/DCfLNwVTaq0XhlPHGfhkWq8oD4BtyiwnmefyRPCYwuIAU3pLH9F7uv vBbD+fpaW0KfV779duuK55CbT40+rAB05PeB5CJAvOOmWNOkPOCUokmanKkZDMzs V2wsXtUFjCRH9bM/R95B+XvZwtJcNjsh9ekflAs+Y8/ji5aMhno1qk+LEhchoW9T Bqnw1KT/T+tbGn1K6xxA1hKl9WPyAg== -----END CERTIFICATE-----Generated at Wed Nov 5 22:44:56 2025 by rpki-client