$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa File: 838096CA3BD311EE84056461C4F9AE02.roa (raw, json) Hash identifier: qPm/ufkdsJxNsrbbunXVlojDF60zf8kn3PrHeAe5mEc= Subject key identifier: BC:59:8E:AD:22:49:26:C9:85:E7:D7:26:E1:A4:DC:FA:41:CD:4B:97 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 01B5 Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa Signing time: Fri 31 Oct 2025 03:47:27 +0000 ROA not before: Fri 31 Oct 2025 03:47:27 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134688 IP address blocks: 103.126.80.0/24 maxlen: 24 103.243.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Oct 31 03:47:27 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6904314f-c90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:04:d1:eb:6d:f6:0c:40:4a:17:75:0a:6a: d5:61:49:1e:b0:f2:2a:8c:b3:e3:bf:b1:47:a3:38: 14:e7:2d:e9:1d:f4:de:b8:52:3d:a1:8d:ad:b2:5f: 48:a6:71:1c:81:01:c1:90:0b:f6:7d:ad:ad:d0:c5: c7:c8:fc:09:57:49:87:5a:53:43:f9:eb:8e:c6:c9: e2:b1:53:e3:1b:d9:12:63:fe:af:ed:3d:88:c2:87: f9:e4:6f:4b:fc:9c:e3:97:0f:b6:0f:ff:98:8a:91: 0a:44:54:81:58:77:3e:13:be:3e:7c:ba:2f:6b:c4: 5e:ca:bd:ab:49:ef:cf:10:55:4f:1a:10:61:21:49: 01:31:f2:b0:06:5d:bb:18:b5:a4:80:74:f5:f8:29: 3d:3d:48:07:ff:74:55:2e:ab:e0:82:6b:6d:43:94: c9:7c:2f:16:b6:a4:b2:92:6c:0c:90:5c:c0:61:38: ec:e8:30:33:16:d4:58:2b:49:91:da:b5:da:8f:c1: 8e:fc:18:f3:1b:b7:a8:fd:09:e7:42:a1:c1:1a:2c: 7c:0d:dc:3e:a7:0a:23:05:a6:1a:82:85:30:1a:72: 19:83:3e:b3:17:59:f5:8e:e3:33:57:9b:a8:f5:9c: 71:6d:4b:55:c4:8a:78:e7:37:34:f2:b4:44:8a:26: f6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:59:8E:AD:22:49:26:C9:85:E7:D7:26:E1:A4:DC:FA:41:CD:4B:97 X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/838096CA3BD311EE84056461C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.80.0/24 103.243.17.0/24 Signature Algorithm: sha256WithRSAEncryption 48:ee:dd:e0:f3:1a:29:eb:2b:1d:f8:1b:59:75:7d:d0:36:cf: 7b:f6:f5:66:ac:e8:a7:e2:41:15:32:a3:f0:12:38:ea:d0:e7: 76:38:0a:16:9f:d5:d2:c9:e0:ca:3e:02:de:b1:d1:b9:18:25: d1:5b:58:55:fd:c6:c0:dd:af:e8:a1:b1:9d:87:bf:26:8d:3b: 56:00:17:91:3f:86:05:b5:b9:68:19:11:28:83:e6:b4:14:2b: da:0c:cd:9c:fa:fb:bc:6e:b2:ea:92:ac:03:82:0e:ca:51:91: 25:b8:92:76:ae:41:aa:5a:38:40:11:87:e6:13:64:ff:23:e2: c6:ff:9c:2f:dd:b7:0c:4f:9f:87:48:c8:d3:25:03:a4:44:94: 69:c7:31:0a:ac:79:9f:57:db:ca:4f:13:e1:b6:8d:84:44:85: ed:af:88:ee:ec:18:f4:9d:3e:37:19:85:dc:43:38:b6:b2:43: ca:6a:14:39:7e:e4:3e:5e:80:32:0c:74:f2:b1:ab:96:95:53: fb:ac:ff:20:2b:72:56:f5:47:c8:22:02:84:7e:d8:f1:42:8f: b9:eb:cb:87:bc:e4:2a:f0:f3:e3:0b:9c:aa:07:4a:5c:44:15: 18:5c:fa:15:53:0d:28:37:e7:4d:ed:77:5c:99:55:8f:a8:ee: 88:f2:85:9d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjUxMDMxMDM0NzI3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0MzE0Zi1jOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/oE0ett9gxAShd1CmrVYUkesPIqjLPjv7FHozgU5y3pHfTeuFI9oY2tsl9I pnEcgQHBkAv2fa2t0MXHyPwJV0mHWlND+euOxsnisVPjG9kSY/6v7T2Iwof55G9L /Jzjlw+2D/+YipEKRFSBWHc+E74+fLova8Reyr2rSe/PEFVPGhBhIUkBMfKwBl27 GLWkgHT1+Ck9PUgH/3RVLqvggmttQ5TJfC8WtqSykmwMkFzAYTjs6DAzFtRYK0mR 2rXaj8GO/BjzG7eo/QnnQqHBGix8Ddw+pwojBaYagoUwGnIZgz6zF1n1juMzV5uo 9ZxxbUtVxIp45zc08rREiib2eQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLxZjq0i SSbJhefXJuGk3PpBzUuXMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRERDEvNjhDMUQ0OTYzQkQwMTFFRThCQUMzNTFBQzRGOUFFMDIvODM4MDk2Q0Ez QkQzMTFFRTg0MDU2NDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnflADBABn8xEwDQYJKoZIhvcNAQELBQADggEBAEju3eDz GinrKx34G1l1fdA2z3v29Was6KfiQRUyo/ASOOrQ53Y4Chaf1dLJ4Mo+At6x0bkY JdFbWFX9xsDdr+ihsZ2HvyaNO1YAF5E/hgW1uWgZESiD5rQUK9oMzZz6+7xusuqS rAOCDspRkSW4knauQapaOEARh+YTZP8j4sb/nC/dtwxPn4dIyNMlA6RElGnHMQqs eZ9X28pPE+G2jYREhe2viO7sGPSdPjcZhdxDOLayQ8pqFDl+5D5egDIMdPKxq5aV U/us/yArclb1R8giAoR+2PFCj7nry4e85Crw8+MLnKoHSlxEFRhc+hVTDSg3503t d1yZVY+o7ojyhZ0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:58 2025 by rpki-client