$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/32DDB7DA368B11EA9713E971C4F9AE02.roa File: 32DDB7DA368B11EA9713E971C4F9AE02.roa (raw, json) Hash identifier: sug/yLBQ+OjqkHil53A1fXubXeb6H+1TbTT+YvNP/YQ= Subject key identifier: C6:BF:FA:C5:4A:57:9E:B7:90:0A:19:17:B8:CC:5A:CA:06:FF:0C:9E Certificate issuer: /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Certificate serial: 0B9D Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/32DDB7DA368B11EA9713E971C4F9AE02.roa Signing time: Wed 22 Oct 2025 19:38:03 +0000 ROA not before: Wed 22 Oct 2025 19:38:03 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134714 IP address blocks: 103.197.196.0/24 maxlen: 24 103.197.197.0/24 maxlen: 24 103.197.198.0/24 maxlen: 24 103.197.199.0/24 maxlen: 24 2404:1780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2973 (0xb9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Validity Not Before: Oct 22 19:38:03 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f9329b-ecf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:be:b0:6d:fd:28:ae:54:76:86:9d:bd:08: ed:fc:51:ac:dd:11:c1:a8:ac:d5:4a:a4:79:21:ff: 56:9f:94:e5:1a:5b:e0:4b:a1:f0:00:fc:43:7a:66: e9:5e:94:69:42:5b:1b:17:fc:c4:67:52:13:b0:1f: ec:65:36:60:21:4c:bc:4b:3c:63:7a:f1:18:84:16: 2f:24:13:f2:3e:c6:9c:b8:45:f2:61:d7:70:55:e3: 27:ab:7a:30:b3:af:65:89:e7:eb:c4:53:48:9d:a8: 61:56:e2:ab:36:04:1c:8a:22:34:c2:cd:c9:e6:38: 9f:ec:a6:ff:48:ca:16:8c:14:e0:d1:b6:94:6c:dc: fe:22:98:c9:2e:f9:29:21:dd:91:dd:d6:b4:37:45: 7e:39:75:90:a6:61:ad:44:3c:a7:c0:8d:10:51:70: f3:3d:5d:ad:b2:d5:58:f4:f7:21:07:ca:db:83:37: c5:0f:e6:25:7f:e8:b0:67:7c:18:a1:08:a1:d5:de: f0:0d:a4:f9:05:63:82:4e:a3:b8:ef:05:cf:68:6c: 2c:ed:b2:f0:f3:0d:2c:c8:42:ec:3c:ea:d7:69:5c: b1:a9:e8:3a:15:a4:aa:20:d5:8a:6b:2a:18:0b:5a: 4b:d5:8c:ee:14:a3:d4:76:f7:6f:f0:f8:8c:84:46: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BF:FA:C5:4A:57:9E:B7:90:0A:19:17:B8:CC:5A:CA:06:FF:0C:9E X509v3 Authority Key Identifier: keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/32DDB7DA368B11EA9713E971C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.196.0/22 IPv6: 2404:1780::/32 Signature Algorithm: sha256WithRSAEncryption 37:28:48:df:18:f0:bf:32:2d:04:35:63:07:e3:b6:ad:c5:aa: 5d:1c:fb:06:0c:39:23:f6:5c:0d:57:da:fa:ef:eb:88:b5:b1: 43:b4:b0:28:e1:91:53:70:90:c4:48:dc:6e:3b:3c:22:e1:82: 83:3f:61:71:1f:00:5b:f8:93:cc:9d:da:58:c3:04:fd:e7:9f: cf:85:10:8e:6b:60:8f:6b:19:04:73:7d:f3:83:8a:0d:41:1e: f2:7e:16:52:24:a8:ad:36:3e:a0:66:84:66:b2:62:b0:32:83: 23:66:db:7f:3b:de:fa:f0:6d:38:a3:cc:63:63:64:fb:4b:5a: 00:01:83:5d:60:92:36:50:bf:cf:fc:b7:7b:47:b4:39:10:5e: 31:d5:f7:72:74:21:02:dd:16:ff:13:dd:91:83:14:46:ac:d7: 40:10:c9:e4:46:84:7d:38:03:19:c4:73:71:88:91:2a:04:c1: e6:42:01:25:a0:31:81:0b:35:e7:0e:c6:03:1c:db:ff:d9:ea: 98:0f:f2:14:49:bb:5c:08:d5:9a:33:b1:2f:15:d8:4a:da:05: af:51:da:b8:2f:d3:02:27:bf:5d:b9:79:35:7f:a7:3b:30:e0: ae:19:ad:56:01:ef:6d:d6:58:b2:1a:02:52:c7:b6:fc:9d:15: c9:40:d5:17 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1QzkxMTAvBgNVBAUTKDAwNjMyM0E4REQwMURFQTk1QkQxQUU0NEM5RkZDNDUz NDA0NDI1Q0IwHhcNMjUxMDIyMTkzODAzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5MzI5Yi1lY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjq+sG39KK5UdoadvQjt/FGs3RHBqKzVSqR5If9Wn5TlGlvgS6HwAPxDembp XpRpQlsbF/zEZ1ITsB/sZTZgIUy8SzxjevEYhBYvJBPyPsacuEXyYddwVeMnq3ow s69liefrxFNInahhVuKrNgQciiI0ws3J5jif7Kb/SMoWjBTg0baUbNz+IpjJLvkp Id2R3da0N0V+OXWQpmGtRDynwI0QUXDzPV2tstVY9PchB8rbgzfFD+Ylf+iwZ3wY oQih1d7wDaT5BWOCTqO47wXPaGws7bLw8w0syELsPOrXaVyxqeg6FaSqINWKayoY C1pL1YzuFKPUdvdv8PiMhEa35QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMa/+sVK V563kAoZF7jMWsoG/wyeMB8GA1UdIwQYMBaAFABjI6jdAd6pW9GuRMn/xFNARCXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzVDOS9FQTk2RTZENDM1 QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNxbGIwYTVFeWZfRVUwQkVK Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FHTWpxTjBCM3FsYjBhNUV5Zl9FVTBCRUpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzM1QzkvRUE5NkU2RDQzNUM5MTFFQThFNUEyRjE2QzRGOUFFMDIvMzJEREI3REEz NjhCMTFFQTk3MTNFOTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnxcQwDQQCAAIwBwMFACQEF4AwDQYJKoZIhvcNAQELBQAD ggEBADcoSN8Y8L8yLQQ1Ywfjtq3Fql0c+wYMOSP2XA1X2vrv64i1sUO0sCjhkVNw kMRI3G47PCLhgoM/YXEfAFv4k8yd2ljDBP3nn8+FEI5rYI9rGQRzffODig1BHvJ+ FlIkqK02PqBmhGayYrAygyNm23873vrwbTijzGNjZPtLWgABg11gkjZQv8/8t3tH tDkQXjHV93J0IQLdFv8T3ZGDFEas10AQyeRGhH04AxnEc3GIkSoEweZCASWgMYEL NecOxgMc2//Z6pgP8hRJu1wI1ZozsS8V2EraBa9R2rgv0wInv125eTV/pzsw4K4Z rVYB723WWLIaAlLHtvydFclA1Rc= -----END CERTIFICATE-----Generated at Wed Nov 5 14:36:02 2025 by rpki-client