$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/E7BAB834B5F511F0B410AD78C4F9AE02.roa File: E7BAB834B5F511F0B410AD78C4F9AE02.roa (raw, json) Hash identifier: fxQZfbaLKR/d/fZu/fhyY8IFle3U5GHLuzj+qPAQsuQ= Subject key identifier: 7E:7E:02:04:CE:5A:6C:ED:AA:D1:C4:61:9A:BC:96:B4:31:C9:C4:B0 Certificate issuer: /CN=A91F4F00/serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4 Certificate serial: 07D8 Authority key identifier: 2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/E7BAB834B5F511F0B410AD78C4F9AE02.roa Signing time: Fri 31 Oct 2025 01:07:01 +0000 ROA not before: Fri 31 Oct 2025 01:07:01 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138214 IP address blocks: 103.122.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4F00, serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4 Validity Not Before: Oct 31 01:07:01 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69040bb5-e0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:84:5c:01:fb:e5:30:20:c0:f8:e7:75:f3:b3: e2:1b:a4:74:8a:55:b2:65:e2:73:14:55:64:df:31: 3a:ff:d2:e5:2f:07:50:92:f8:ff:ca:2b:8c:0a:7b: 0a:06:48:85:b8:d3:cf:45:27:21:57:58:b1:91:dc: e1:52:89:37:50:1a:bc:93:b5:59:0e:56:cc:41:75: cd:7a:d6:5a:46:e1:23:a4:c9:41:a8:62:90:6e:a9: ed:80:c9:15:23:72:43:93:30:c8:ef:11:ce:5c:4f: cc:23:c9:6f:6b:5c:47:d3:7e:bd:f1:0b:02:0c:99: eb:30:28:da:e3:0d:7d:09:ff:3e:79:da:18:e0:27: 42:fc:89:4c:9f:ef:9b:70:45:af:d4:9d:87:78:fa: b6:55:ec:84:e4:17:ec:5c:2a:5a:c4:28:86:25:bc: e2:83:87:00:1d:e0:c8:a4:2b:0f:28:7a:5d:d4:98: 00:c4:ee:73:94:96:f7:81:90:a7:7e:90:e6:71:2f: 83:e8:9c:32:d5:a3:11:ec:41:7a:fa:4f:1e:e6:e9: 10:3f:34:b2:08:fe:d3:49:59:f0:8d:5f:ee:b3:bf: e4:ba:9c:bf:e2:24:59:7c:2a:e6:f2:a4:a9:9e:58: 7e:26:41:04:de:b1:37:c9:63:39:d7:04:ea:55:7c: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7E:02:04:CE:5A:6C:ED:AA:D1:C4:61:9A:BC:96:B4:31:C9:C4:B0 X509v3 Authority Key Identifier: keyid:2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/E7BAB834B5F511F0B410AD78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.88.0/23 Signature Algorithm: sha256WithRSAEncryption 71:a2:be:78:5d:b9:70:5d:73:1b:98:8f:e6:2d:3d:ea:f0:e6: 2a:62:56:46:50:67:90:db:65:c4:dd:c8:4f:45:cb:86:f5:ed: 39:55:0d:78:93:0b:08:6c:5a:93:70:55:16:7e:8b:40:fe:ca: 59:ab:b0:15:bb:10:e2:3e:82:b6:1c:33:2f:d6:b8:da:e7:69: 07:09:e1:6f:2c:42:ae:9e:ad:ed:d7:c1:70:24:a7:b0:81:93: 2e:b3:89:92:61:4a:01:9b:0c:e2:5b:3c:77:12:05:55:2c:c3: 54:b3:76:20:8d:6e:0d:85:6c:98:81:69:f5:cc:7a:d0:26:5c: 2f:ed:43:1c:79:10:82:01:ca:5e:10:9f:7d:36:7f:3b:26:1a: 14:8c:47:cd:53:99:5e:34:93:8f:fd:6a:60:1a:72:3a:bc:94: 7a:46:55:ec:2c:8a:94:25:c3:70:30:ca:34:56:3d:b1:88:d6: 3c:1a:e6:f5:df:17:d7:13:19:e3:cd:e3:31:3c:66:b1:86:18: 8c:08:64:a9:57:a4:18:d2:b9:1e:50:a1:ba:6a:6d:5e:42:26: 75:a4:40:5a:fa:cf:be:b1:2c:f0:4a:6b:db:19:c0:30:b4:7d: 2b:de:4d:9f:25:91:05:b4:24:a2:af:e9:03:29:22:33:0f:16: f0:d3:6d:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGMDAxMTAvBgNVBAUTKDJCM0VFNDRFQTlDQjVCODEyOTZCQjY3REYwRjU0NkY4 QUFDOEE0QjQwHhcNMjUxMDMxMDEwNzAxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0MGJiNS1lMGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IRcAfvlMCDA+Od187PiG6R0ilWyZeJzFFVk3zE6/9LlLwdQkvj/yiuMCnsK BkiFuNPPRSchV1ixkdzhUok3UBq8k7VZDlbMQXXNetZaRuEjpMlBqGKQbqntgMkV I3JDkzDI7xHOXE/MI8lva1xH03698QsCDJnrMCja4w19Cf8+edoY4CdC/IlMn++b cEWv1J2HePq2VeyE5BfsXCpaxCiGJbzig4cAHeDIpCsPKHpd1JgAxO5zlJb3gZCn fpDmcS+D6Jwy1aMR7EF6+k8e5ukQPzSyCP7TSVnwjV/us7/kupy/4iRZfCrm8qSp nlh+JkEE3rE3yWM51wTqVXzKfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFH5+AgTO WmztqtHEYZq8lrQxycSwMB8GA1UdIwQYMBaAFCs+5E6py1uBKWu2ffD1RviqyKS0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEYwMC8zREE2OTAxNjEz NTcxMUVCQTIzREE3MTRDNEY5QUUwMi9LejdrVHFuTFc0RXBhN1o5OFBWRy1Lcklw TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t6N2tUcW5MVzRFcGE3Wjk4UFZHLUtySXBMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjRGMDAvM0RBNjkwMTYxMzU3MTFFQkEyM0RBNzE0QzRGOUFFMDIvRTdCQUI4MzRC NUY1MTFGMEI0MTBBRDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnelgwDQYJKoZIhvcNAQELBQADggEBAHGivnhduXBdcxuY j+YtPerw5ipiVkZQZ5DbZcTdyE9Fy4b17TlVDXiTCwhsWpNwVRZ+i0D+ylmrsBW7 EOI+grYcMy/WuNrnaQcJ4W8sQq6ere3XwXAkp7CBky6ziZJhSgGbDOJbPHcSBVUs w1SzdiCNbg2FbJiBafXMetAmXC/tQxx5EIIByl4Qn302fzsmGhSMR81TmV40k4/9 amAacjq8lHpGVewsipQlw3AwyjRWPbGI1jwa5vXfF9cTGePN4zE8ZrGGGIwIZKlX pBjSuR5QobpqbV5CJnWkQFr6z76xLPBKa9sZwDC0fSveTZ8lkQW0JKKv6QMpIjMP FvDTbfg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:47:37 2025 by rpki-client