$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa File: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (raw, json) Hash identifier: TiDsN2FNPwgHeiELsvw5/2Nk6unCe1gkLq5nmI7beNI= Subject key identifier: 13:2E:EB:C9:0C:12:DA:7B:FB:DE:E4:5F:9F:33:AD:2C:64:95:FB:C8 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 014C Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa Signing time: Sat 01 Nov 2025 08:19:27 +0000 ROA not before: Sat 01 Nov 2025 08:19:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 213549 IP address blocks: 103.14.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Nov 1 08:19:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6905c28e-179e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:62:e3:e1:df:b6:1f:71:8b:79:65:eb:69: bc:fa:2d:5b:b2:1c:99:12:98:c0:0e:68:fb:1b:74: b4:f6:51:d0:9e:2b:a8:3e:e1:ce:da:ff:95:3a:3d: a0:3d:a4:64:40:fa:fe:21:7c:e2:bc:4b:ea:59:3d: d9:1e:be:b0:2f:0e:18:40:ac:37:fc:50:2d:31:40: fd:e2:e5:3c:73:ca:c5:b0:42:9d:39:06:52:43:45: c3:30:cf:67:c2:56:3f:fc:02:6d:03:6b:54:87:f7: 41:14:9c:83:65:e2:5c:26:db:3d:26:29:d4:f4:9c: 5c:6e:45:22:aa:6e:7d:b2:d4:a4:c3:a5:b1:e8:c8: f0:ef:91:c6:b4:86:d4:a4:26:4c:f6:84:31:6f:b5: c4:ee:1b:c4:ac:1e:d6:70:a5:bf:93:dc:48:cc:c6: ba:5d:5a:24:c0:9d:cc:43:43:b6:a6:a9:e2:e1:ca: c4:bb:4a:0c:40:51:6b:d8:f8:a1:e5:bd:cd:f3:a3: 67:87:80:7a:2d:1f:16:1b:79:ae:b3:9b:31:31:6f: 61:b0:e1:7b:0b:fb:f6:f8:7f:24:a0:4f:bd:11:3c: aa:c8:24:2f:56:93:70:fc:42:e0:b1:2c:b2:86:20: 53:3b:ac:50:ad:59:48:e4:7d:04:f8:62:ca:b6:e7: 99:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2E:EB:C9:0C:12:DA:7B:FB:DE:E4:5F:9F:33:AD:2C:64:95:FB:C8 X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.22.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:9f:04:cf:0d:b2:a1:3f:53:67:bb:c8:7d:d4:11:25:c0:35: 81:e6:8f:60:af:a6:4a:98:c9:1e:c4:fd:5a:14:52:b9:a8:75: 56:1f:ec:b1:f7:c2:5f:a3:a7:33:d0:5a:67:cf:de:fa:76:12: be:ec:ee:04:1f:37:65:bc:4a:61:48:c0:41:88:f3:07:e8:21: 3b:3a:b6:e8:38:3b:c6:bd:c2:57:4e:b1:3a:f9:73:29:28:3c: 83:17:db:86:9d:22:e9:56:bc:e8:e3:f1:58:62:b2:08:94:69: 12:4b:3e:2b:5b:c5:4d:55:48:08:73:8c:18:9c:ad:ca:db:dc: b2:f7:53:5c:c9:01:04:d0:74:31:ec:92:45:05:86:e0:28:83: 4c:47:de:6b:61:38:a6:c3:25:3e:1e:88:d8:10:49:d7:62:7c: 26:73:b0:92:87:5f:88:13:12:81:fb:3d:ec:74:a7:9b:fb:41: a9:c3:c3:ca:26:1e:f3:df:dc:cb:e1:e3:5e:0d:ca:05:c0:fe: 7b:89:0c:f9:bb:83:b9:1c:05:51:43:8a:65:2d:3c:73:4a:a2: 52:fd:e6:41:90:64:ca:ea:98:a7:33:10:f0:dc:2c:fd:9b:3e: d0:29:6f:e1:41:bf:47:2d:73:b0:9a:32:c3:51:bf:22:b9:15: 19:c8:ae:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUxMTAxMDgxOTI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1YzI4ZS0xNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXFi4+Hfth9xi3ll62m8+i1bshyZEpjADmj7G3S09lHQniuoPuHO2v+VOj2g PaRkQPr+IXzivEvqWT3ZHr6wLw4YQKw3/FAtMUD94uU8c8rFsEKdOQZSQ0XDMM9n wlY//AJtA2tUh/dBFJyDZeJcJts9JinU9JxcbkUiqm59stSkw6Wx6Mjw75HGtIbU pCZM9oQxb7XE7hvErB7WcKW/k9xIzMa6XVokwJ3MQ0O2pqni4crEu0oMQFFr2Pih 5b3N86Nnh4B6LR8WG3mus5sxMW9hsOF7C/v2+H8koE+9ETyqyCQvVpNw/ELgsSyy hiBTO6xQrVlI5H0E+GLKtueZtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBMu68kM Etp7+97kX58zrSxklfvIMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjkzNTMvMDg3NUU2NDgwNUM2MTFFRjg5NjIwQTI2QzRGOUFFMDIvN0IyMUVCRDJC NkZCMTFGMEFGREQ2MjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnDhYwDQYJKoZIhvcNAQELBQADggEBAFyfBM8NsqE/U2e7 yH3UESXANYHmj2CvpkqYyR7E/VoUUrmodVYf7LH3wl+jpzPQWmfP3vp2Er7s7gQf N2W8SmFIwEGI8wfoITs6tug4O8a9wldOsTr5cykoPIMX24adIulWvOjj8VhisgiU aRJLPitbxU1VSAhzjBicrcrb3LL3U1zJAQTQdDHskkUFhuAog0xH3mthOKbDJT4e iNgQSddifCZzsJKHX4gTEoH7Pex0p5v7QanDw8omHvPf3Mvh414NygXA/nuJDPm7 g7kcBVFDimUtPHNKolL95kGQZMrqmKczEPDcLP2bPtApb+FBv0ctc7CaMsNRvyK5 FRnIrp4= -----END CERTIFICATE-----Generated at Mon Nov 3 20:39:16 2025 by rpki-client