$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa File: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (raw, json) Hash identifier: bgNv+IqWCSXLvojk2Z7PhxXcctTDA8/7IvD4X7CUQGs= Subject key identifier: C5:2C:61:6E:88:21:1D:FA:92:D2:1D:8A:20:BC:40:1D:37:2C:91:88 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 08FB Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa Signing time: Sun 02 Nov 2025 20:39:40 +0000 ROA not before: Sun 02 Nov 2025 20:39:40 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132827 IP address blocks: 103.6.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Nov 2 20:39:40 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6907c18c-7444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:f7:b8:5f:50:ac:48:50:cf:ed:7b:da:f0: 73:2d:c9:e6:0e:7a:ae:bc:57:51:60:cc:0e:b5:0c: 7e:d2:75:7c:6d:50:9a:61:4c:ec:6b:bb:d7:fb:7e: 3f:2c:1b:6d:8e:92:a9:94:8a:f9:f9:60:02:7b:1d: ba:e7:ab:ac:36:9b:24:0a:06:95:35:1f:c7:0c:a1: b6:95:14:b4:d6:46:5e:3f:59:1e:ad:16:df:ee:03: dd:d6:2f:ae:42:d5:f9:8b:1b:67:46:60:d2:14:20: af:07:b0:14:4e:e6:52:2f:5a:c2:91:f9:0f:bb:6c: ce:9a:16:7b:26:28:c0:5d:37:80:be:3b:1b:d3:e1: cb:d1:1c:b2:80:4b:2c:24:5d:a5:31:f5:78:d4:3b: b3:4d:47:e8:12:df:f0:0b:40:75:9a:ed:97:ca:b5: 72:49:01:b0:3a:01:6f:b6:3e:42:9c:f5:ed:45:25: 4b:3c:74:86:5a:b0:98:01:b2:98:4e:69:6d:3b:66: 92:d7:ac:b7:e1:05:e5:4e:a4:c6:a0:03:57:15:eb: bd:8d:8a:34:df:36:f9:16:b9:70:80:2d:0f:67:b4: 9b:e2:84:4a:ad:28:c2:a3:7b:1b:5e:8d:a0:3d:67: d9:18:0f:07:3f:a0:4d:51:68:42:c8:c1:19:b1:a2: f6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2C:61:6E:88:21:1D:FA:92:D2:1D:8A:20:BC:40:1D:37:2C:91:88 X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/A29A66FE2F1C11EDA3E29B09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.240.0/22 Signature Algorithm: sha256WithRSAEncryption 15:1c:4c:6c:78:a1:a2:19:76:2f:7d:ff:4d:6f:7e:44:92:72: 9e:4a:31:89:4c:20:dd:22:11:3c:fd:95:3d:f9:4e:24:02:aa: 00:95:3d:dd:17:25:11:b3:86:9a:9f:4f:b8:55:ef:a3:fa:ad: d8:f6:20:87:f9:62:cb:4e:f7:89:6c:a4:16:f8:b3:3a:f3:f7: 88:f7:b3:c7:7e:68:82:d2:1b:f1:b3:9d:9c:83:2b:64:bb:42: 91:00:84:ac:8c:55:2a:29:e4:72:b5:5c:02:d1:39:d3:c7:e3: 40:c0:64:23:32:6c:98:51:ee:72:b0:0a:48:68:f3:2c:71:a1: 55:61:5b:34:61:48:fa:36:71:9f:7f:61:34:14:e2:67:54:b3: c0:1c:a5:19:7f:13:c4:1d:ec:65:c3:1e:2b:32:b6:b9:51:68: 5f:8f:34:6a:b7:fd:39:b5:18:06:9a:7b:1c:9e:84:b2:5b:a6: 60:18:96:b8:23:82:63:d4:1e:38:be:40:3e:9c:7c:2b:9d:1e: 2c:c2:75:e0:bb:3e:31:9a:ed:02:73:bd:48:8d:e1:b8:ff:3f: 9f:99:69:d4:d9:56:d2:f1:db:f8:73:dc:5c:bf:d5:dc:b8:0d: 03:bc:7e:45:46:44:96:14:19:b3:3c:83:84:19:51:92:17:7f: e3:78:67:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUxMTAyMjAzOTQwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3YzE4Yy03NDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzL3uF9QrEhQz+172vBzLcnmDnquvFdRYMwOtQx+0nV8bVCaYUzsa7vX+34/ LBttjpKplIr5+WACex2656usNpskCgaVNR/HDKG2lRS01kZeP1kerRbf7gPd1i+u QtX5ixtnRmDSFCCvB7AUTuZSL1rCkfkPu2zOmhZ7JijAXTeAvjsb0+HL0RyygEss JF2lMfV41DuzTUfoEt/wC0B1mu2XyrVySQGwOgFvtj5CnPXtRSVLPHSGWrCYAbKY TmltO2aS16y34QXlTqTGoANXFeu9jYo03zb5FrlwgC0PZ7Sb4oRKrSjCo3sbXo2g PWfZGA8HP6BNUWhCyMEZsaL2yQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMUsYW6I IR36ktIdiiC8QB03LJGIMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUyRjcvN0NDNDVGQUVCQUFGMTFFQUE2REQxQTNEQzRGOUFFMDIvQTI5QTY2RkUy RjFDMTFFREEzRTI5QjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnBvAwDQYJKoZIhvcNAQELBQADggEBABUcTGx4oaIZdi99 /01vfkSScp5KMYlMIN0iETz9lT35TiQCqgCVPd0XJRGzhpqfT7hV76P6rdj2IIf5 YstO94lspBb4szrz94j3s8d+aILSG/GznZyDK2S7QpEAhKyMVSop5HK1XALROdPH 40DAZCMybJhR7nKwCkho8yxxoVVhWzRhSPo2cZ9/YTQU4mdUs8AcpRl/E8Qd7GXD HisytrlRaF+PNGq3/Tm1GAaaexyehLJbpmAYlrgjgmPUHji+QD6cfCudHizCdeC7 PjGa7QJzvUiN4bj/P5+ZadTZVtLx2/hz3Fy/1dy4DQO8fkVGRJYUGbM8g4QZUZIX f+N4Z88= -----END CERTIFICATE-----Generated at Wed Nov 5 23:48:16 2025 by rpki-client