$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa File: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (raw, json) Hash identifier: 3IMIlDIIJ2OW6DDbM2+fc2GlxtLv0j04UxGtHanf/68= Subject key identifier: 7E:DF:85:03:63:07:A3:05:6F:1E:FE:0F:9A:18:3B:60:E2:C6:FF:44 Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Certificate serial: 03CB Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa Signing time: Tue 27 May 2025 03:28:01 +0000 ROA not before: Tue 27 May 2025 03:28:01 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132584 IP address blocks: 103.142.38.0/24 maxlen: 24 103.176.216.0/24 maxlen: 24 103.176.217.0/24 maxlen: 24 202.20.69.0/24 maxlen: 24 203.56.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Validity Not Before: May 27 03:28:01 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68353141-bdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d8:d3:b5:c5:45:cc:ff:13:08:ab:1c:48:f6: 43:d5:1a:22:f5:1d:5d:5c:63:24:8c:16:6b:a4:6d: 29:fe:56:c4:48:4d:9a:20:28:8b:a9:2d:34:e4:2e: 24:00:61:3e:49:4c:2e:d6:ff:61:7f:21:c6:40:c7: 27:60:7e:6a:33:08:9d:21:74:9c:42:f4:5c:92:7f: 79:87:7f:0a:7a:1b:66:b9:32:3b:56:55:e2:62:69: e7:d5:6a:6c:47:89:16:32:37:c2:ef:d7:71:9a:9f: af:c3:60:2f:b6:04:c0:67:8d:f3:0d:d0:15:13:10: 15:86:7a:65:54:5e:a6:37:7f:50:bd:ff:53:8a:c0: 45:24:54:f0:c0:96:66:0e:78:6d:0a:a3:a7:8d:5c: cb:f0:66:8b:5f:68:98:6e:ce:9b:4a:e6:f7:75:c4: 19:11:4c:3d:2c:8e:a6:a8:38:2a:f7:23:90:65:9d: 5f:02:84:7e:1d:27:75:a7:ed:52:69:c6:63:60:d6: fd:cc:9a:31:94:64:86:a8:b7:30:7d:33:6c:51:07: 8c:8f:03:5c:e1:ac:0c:40:ef:e8:01:17:c6:a3:3a: d3:db:2e:e4:13:e4:e3:ae:6b:c8:80:f7:fc:1e:b2: e5:2a:2c:59:09:c3:f0:82:cb:7f:09:f1:12:3a:f4: 18:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DF:85:03:63:07:A3:05:6F:1E:FE:0F:9A:18:3B:60:E2:C6:FF:44 X509v3 Authority Key Identifier: keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.38.0/24 103.176.216.0/23 202.20.69.0/24 203.56.80.0/24 Signature Algorithm: sha256WithRSAEncryption 36:1f:21:b4:a9:ad:25:6e:cb:26:e6:e4:e0:6f:07:80:d9:96: 17:0a:7b:64:7b:ef:09:38:8e:b8:e8:de:94:c7:a7:9d:44:98: 16:32:77:83:a5:f6:39:d4:1e:76:31:66:af:55:24:e4:83:26: 33:6e:c8:8e:f2:b8:a0:80:3f:0a:c1:8d:59:12:36:7e:5b:f1: 96:f5:8c:d0:41:dd:b0:8d:00:f3:0a:b0:46:7b:bc:18:8d:89: 60:01:a6:ef:26:e2:38:96:ce:27:cc:f0:16:87:df:b0:df:23: 79:55:56:ba:96:fc:01:c7:7b:01:0c:31:00:95:d0:6e:2c:d2: 43:51:8c:4f:7f:ff:66:a3:bc:c5:62:e1:ad:22:06:80:ed:b4: 54:72:59:f9:4f:e2:33:6f:56:27:42:01:53:59:5f:b0:63:11: b8:db:0d:f9:0f:77:c1:cd:84:89:ef:41:e8:ba:92:6a:22:51: a1:e0:ed:ef:9c:53:7a:c2:60:a2:bd:2d:3b:4f:4c:46:72:90: 1a:7a:bd:a6:7a:d0:29:57:8a:e0:51:07:99:30:0f:c5:9b:dc: 8a:0f:5f:b1:0b:49:3c:39:4e:50:64:ae:05:6f:34:d1:ce:9f: 54:5c:22:77:fa:d9:c5:f9:45:cc:bc:05:73:2c:14:1c:0b:ea: 1d:5a:05:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB MUE2RkVBM0EwHhcNMjUwNTI3MDMyODAxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM1MzE0MS1iZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9djTtcVFzP8TCKscSPZD1Roi9R1dXGMkjBZrpG0p/lbESE2aICiLqS005C4k AGE+SUwu1v9hfyHGQMcnYH5qMwidIXScQvRckn95h38KehtmuTI7VlXiYmnn1Wps R4kWMjfC79dxmp+vw2AvtgTAZ43zDdAVExAVhnplVF6mN39Qvf9TisBFJFTwwJZm DnhtCqOnjVzL8GaLX2iYbs6bSub3dcQZEUw9LI6mqDgq9yOQZZ1fAoR+HSd1p+1S acZjYNb9zJoxlGSGqLcwfTNsUQeMjwNc4awMQO/oARfGozrT2y7kE+TjrmvIgPf8 HrLlKixZCcPwgst/CfESOvQYoQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFH7fhQNj B6MFbx7+D5oYO2Dixv9EMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg5QTIvRkI1MkY2NEU4RTYzMTFFQzlFMDE1RDZEQzRGOUFFMDIvOTdFOEFDRDY4 RTY2MTFFQzlFQkU2MjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnjiYDBAFnsNgDBADKFEUDBADLOFAwDQYJKoZIhvcNAQEL BQADggEBADYfIbSprSVuyybm5OBvB4DZlhcKe2R77wk4jrjo3pTHp51EmBYyd4Ol 9jnUHnYxZq9VJOSDJjNuyI7yuKCAPwrBjVkSNn5b8Zb1jNBB3bCNAPMKsEZ7vBiN iWABpu8m4jiWzifM8BaH37DfI3lVVrqW/AHHewEMMQCV0G4s0kNRjE9//2ajvMVi 4a0iBoDttFRyWflP4jNvVidCAVNZX7BjEbjbDfkPd8HNhInvQei6kmoiUaHg7e+c U3rCYKK9LTtPTEZykBp6vaZ60ClXiuBRB5kwD8Wb3IoPX7ELSTw5TlBkrgVvNNHO n1RcInf62cX5Rcy8BXMsFBwL6h1aBVM= -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:02 2025 by rpki-client