$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/6920E4D8D0F411EC8DAD6D11C4F9AE02.roa File: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (raw, json) Hash identifier: RP0USEP4cmm5/rPyavYfSImz5bM19LFBMACm4cna7sk= Subject key identifier: 28:75:4D:4D:C2:7A:45:F0:C8:75:C9:3F:9B:20:1A:38:7F:14:5D:F1 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 0364 Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/6920E4D8D0F411EC8DAD6D11C4F9AE02.roa Signing time: Sun 31 Aug 2025 02:18:38 +0000 ROA not before: Sun 31 Aug 2025 02:18:38 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134414 IP address blocks: 103.42.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Aug 31 02:18:38 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68b3b0fe-04ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:f3:12:93:3f:64:76:40:6d:52:f8:43:4b: 9d:ba:70:cf:3a:61:75:91:c0:b5:53:03:87:ae:b9: 82:b5:79:d7:7f:b3:ad:83:17:25:32:28:1d:eb:a9: ed:12:28:8c:46:e4:f3:38:5c:52:54:60:82:5a:ca: 50:21:16:a5:51:a5:d1:3d:c5:42:6b:b6:7c:11:ff: 8e:c4:3a:26:76:26:41:46:21:5b:53:b3:46:71:a2: fb:2c:ba:10:8e:07:fc:a9:3f:10:1f:82:99:64:3f: ff:55:a4:1a:6f:7a:18:81:d5:fb:bb:3e:6b:03:0f: 96:d2:0c:b0:62:f9:bd:6f:9f:f6:87:1b:15:cd:93: b7:d4:5a:c0:74:d3:3e:7c:a1:42:19:6d:19:d5:6b: a5:b8:7c:ac:33:e9:6e:fa:d9:2d:81:db:d3:6a:7d: aa:b2:93:70:29:56:57:1e:c0:21:95:17:1c:e7:2a: e1:d8:95:42:e9:c5:08:10:b5:f1:8a:b5:0d:6d:3f: 4a:b5:f0:7e:5d:d9:42:f4:93:25:4a:85:54:7e:b4: b2:02:40:41:b1:af:49:7a:be:e2:86:a7:a8:68:b7: 9d:1a:89:a7:72:6d:eb:d1:79:82:8d:f1:18:32:bf: 1a:e1:f1:d0:e2:e5:d6:e5:d7:1c:44:2a:ff:e4:9e: 1e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:4D:4D:C2:7A:45:F0:C8:75:C9:3F:9B:20:1A:38:7F:14:5D:F1 X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/6920E4D8D0F411EC8DAD6D11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.99.0/24 Signature Algorithm: sha256WithRSAEncryption 62:52:9b:d5:db:d5:9f:d2:cc:82:72:98:0a:b8:ec:11:b3:0d: e8:d0:aa:c6:88:a5:30:49:21:d5:ce:3a:da:1f:37:9e:d3:ad: 31:76:fd:e8:dd:9b:4c:fc:59:36:7e:b9:26:5c:e1:3e:b5:22: 42:6a:8b:8b:c4:fd:33:2f:4c:73:a8:6a:7e:e3:cb:a7:3b:10: b3:08:7f:ca:87:21:57:b5:a4:d3:71:26:09:06:7b:e2:e0:73: 87:99:54:19:6a:b5:e9:93:fa:3c:e1:56:32:c5:26:36:e3:0d: 0f:07:03:d5:26:b4:06:63:0e:2d:89:c1:76:61:c3:8c:b9:8d: 7c:d6:89:32:aa:a7:57:65:6b:a9:14:b2:96:92:cb:a5:6d:6f: a5:a6:d0:83:84:5a:e8:2a:28:17:55:c4:39:6c:4d:10:b9:95: 0e:9a:c4:85:07:f2:e3:77:98:1b:0c:6c:38:4c:4e:9a:9c:f0: 65:a8:c3:8e:49:8e:f7:fe:17:63:36:fc:7a:34:84:1a:d7:3e: 54:a1:69:1a:65:0c:41:9d:76:65:21:39:b0:f9:d6:cb:14:e0: d4:28:0a:2e:d6:ba:3d:da:92:bb:e0:08:c4:2f:44:d9:d7:e4: 0f:a1:72:7f:00:d5:f3:dc:52:76:f9:ee:a6:41:4a:3a:9b:ac: 2e:03:be:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjUwODMxMDIxODM4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzYjBmZS0wNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLDzEpM/ZHZAbVL4Q0udunDPOmF1kcC1UwOHrrmCtXnXf7OtgxclMigd66nt EiiMRuTzOFxSVGCCWspQIRalUaXRPcVCa7Z8Ef+OxDomdiZBRiFbU7NGcaL7LLoQ jgf8qT8QH4KZZD//VaQab3oYgdX7uz5rAw+W0gywYvm9b5/2hxsVzZO31FrAdNM+ fKFCGW0Z1WuluHysM+lu+tktgdvTan2qspNwKVZXHsAhlRcc5yrh2JVC6cUIELXx irUNbT9KtfB+XdlC9JMlSoVUfrSyAkBBsa9Jer7ihqeoaLedGomncm3r0XmCjfEY Mr8a4fHQ4uXW5dccRCr/5J4eOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCh1TU3C ekXwyHXJP5sgGjh/FF3xMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQ2QjEvOUEwRUNFMTBEMEYwMTFFQzhFQ0RCRjYzQzRGOUFFMDIvNjkyMEU0RDhE MEY0MTFFQzhEQUQ2RDExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnKmMwDQYJKoZIhvcNAQELBQADggEBAGJSm9Xb1Z/SzIJy mAq47BGzDejQqsaIpTBJIdXOOtofN57TrTF2/ejdm0z8WTZ+uSZc4T61IkJqi4vE /TMvTHOoan7jy6c7ELMIf8qHIVe1pNNxJgkGe+Lgc4eZVBlqtemT+jzhVjLFJjbj DQ8HA9UmtAZjDi2JwXZhw4y5jXzWiTKqp1dla6kUspaSy6Vtb6Wm0IOEWugqKBdV xDlsTRC5lQ6axIUH8uN3mBsMbDhMTpqc8GWow45Jjvf+F2M2/Ho0hBrXPlShaRpl DEGddmUhObD51ssU4NQoCi7Wuj3akrvgCMQvRNnX5A+hcn8A1fPcUnb57qZBSjqb rC4Dvm8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:27:13 2025 by rpki-client