$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa File: 9EA2D73236D311EF89295180C4F9AE02.roa (raw, json) Hash identifier: +9/yAjbYtByxr02PsszdU6WoEOBanUxI3XJ58Y32rUg= Subject key identifier: 7B:80:1F:CB:E9:3D:37:9C:70:01:99:12:FC:55:27:A6:3D:A1:3F:D6 Certificate issuer: /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Certificate serial: 06CE Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa Signing time: Sun 02 Nov 2025 22:42:00 +0000 ROA not before: Sun 02 Nov 2025 22:42:00 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151952 IP address blocks: 103.143.185.0/24 maxlen: 24 103.168.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Validity Not Before: Nov 2 22:42:00 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6907de38-b05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:db:d0:c5:5a:da:19:42:c7:26:3f:fc:f6: 09:2b:d9:a7:41:df:b8:6a:00:2c:a9:c5:34:3c:90: 58:6b:b6:3e:8a:6d:d7:d4:59:90:a5:cf:56:13:85: d0:66:64:61:36:84:51:ac:89:0f:09:57:a5:a5:21: c8:58:e5:e2:57:8f:07:0a:0a:39:3b:f3:87:32:8f: 5b:a3:b4:7a:5e:ea:8b:70:b2:7c:d3:11:0a:b1:08: 5e:80:2f:95:9e:05:e3:2b:71:18:73:64:35:1b:cf: 48:1f:f2:a2:e3:28:c1:b5:09:a2:c7:48:b9:fc:81: de:e1:89:dd:49:0f:50:8d:a3:31:1f:4b:2f:7b:72: 51:88:d6:65:5e:b3:78:9f:27:55:a1:ea:7b:19:02: 79:90:37:0a:87:48:17:5b:df:db:a1:8a:df:d0:5d: d4:b2:11:0f:df:14:d3:47:cd:50:75:79:98:3b:ff: 49:e4:32:a1:91:86:94:a0:a8:42:a5:06:2b:19:da: 97:a6:b1:f0:f4:37:5a:4c:4d:71:84:fc:b4:72:a1: 80:af:51:3a:22:b5:06:79:ed:8f:fc:2b:6f:0f:ea: ef:d5:76:6a:2f:b6:f6:4f:89:59:60:8e:c1:ec:ce: d8:e3:f4:3b:08:7c:cf:28:b3:61:9a:c9:13:af:09: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:80:1F:CB:E9:3D:37:9C:70:01:99:12:FC:55:27:A6:3D:A1:3F:D6 X509v3 Authority Key Identifier: keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/9EA2D73236D311EF89295180C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.185.0/24 103.168.45.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:9f:c6:5f:1c:10:c8:eb:18:f1:d5:ed:ae:30:81:88:f0:06: 30:db:2e:81:37:fd:a7:8c:f8:96:33:fc:1c:01:95:33:20:70: b2:1b:7b:57:bf:82:97:a8:9b:2d:18:d2:2d:0c:be:c7:42:af: 78:10:51:f2:16:1d:7e:70:32:93:c6:b6:4a:a6:59:8f:8b:88: ad:c8:77:9c:21:72:fe:02:18:ee:70:0e:47:5f:29:e0:87:67: c7:bc:92:ec:86:3a:28:e8:05:dd:b6:d6:27:bc:e8:34:6b:2b: c5:3f:aa:0d:1a:01:d1:65:1a:9a:12:04:cf:b7:b9:47:3b:48: 87:ca:7d:bf:24:6d:f3:2f:75:8f:c9:1e:02:d1:be:1f:81:c5: f6:dc:34:f3:36:fc:f5:eb:a8:53:4c:90:d4:8b:2f:25:52:dc: d6:72:7a:b5:b8:77:32:8e:ef:d4:3d:f5:dd:cd:09:35:dd:7b: 5e:cd:d7:a4:6b:a3:a1:d3:29:0b:60:aa:f1:6e:3f:79:0d:8a: 67:a1:7e:44:29:b1:e8:e8:7f:93:9e:2a:49:d1:f2:a2:23:8c: 78:df:57:f0:5c:84:9d:ea:a1:f7:e0:43:8b:da:0a:ab:0d:01: 5c:d8:8a:f5:98:ab:5a:f6:f5:66:0e:14:ae:42:99:ac:59:17: 11:fe:b7:0c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkwQzMxMTAvBgNVBAUTKDU0ODdCNjNGNDRENjkxRDQzNTY4OEFGRTNDOEFDMjdC RkQ5MTEyQUQwHhcNMjUxMTAyMjI0MjAwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ZGUzOC1iMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUPb0MVa2hlCxyY//PYJK9mnQd+4agAsqcU0PJBYa7Y+im3X1FmQpc9WE4XQ ZmRhNoRRrIkPCVelpSHIWOXiV48HCgo5O/OHMo9bo7R6XuqLcLJ80xEKsQhegC+V ngXjK3EYc2Q1G89IH/Ki4yjBtQmix0i5/IHe4YndSQ9QjaMxH0sve3JRiNZlXrN4 nydVoep7GQJ5kDcKh0gXW9/boYrf0F3UshEP3xTTR81QdXmYO/9J5DKhkYaUoKhC pQYrGdqXprHw9DdaTE1xhPy0cqGAr1E6IrUGee2P/CtvD+rv1XZqL7b2T4lZYI7B 7M7Y4/Q7CHzPKLNhmskTrwnG9QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHuAH8vp PTeccAGZEvxVJ6Y9oT/WMB8GA1UdIwQYMBaAFFSHtj9E1pHUNWiK/jyKwnv9kRKt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBDMy84NTUzMDVFMjgy QzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tkUTFhSXItUElyQ2VfMlJF cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJZTJQMFRXa2RRMWFJci1QSXJDZV8yUkVxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzkwQzMvODU1MzA1RTI4MkMwMTFFQkJBQ0UyQTdCQzRGOUFFMDIvOUVBMkQ3MzIz NkQzMTFFRjg5Mjk1MTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnj7kDBABnqC0wDQYJKoZIhvcNAQELBQADggEBAGufxl8c EMjrGPHV7a4wgYjwBjDbLoE3/aeM+JYz/BwBlTMgcLIbe1e/gpeomy0Y0i0MvsdC r3gQUfIWHX5wMpPGtkqmWY+LiK3Id5whcv4CGO5wDkdfKeCHZ8e8kuyGOijoBd22 1ie86DRrK8U/qg0aAdFlGpoSBM+3uUc7SIfKfb8kbfMvdY/JHgLRvh+BxfbcNPM2 /PXrqFNMkNSLLyVS3NZyerW4dzKO79Q99d3NCTXde17N16Rro6HTKQtgqvFuP3kN imehfkQpsejof5OeKknR8qIjjHjfV/BchJ3qoffgQ4vaCqsNAVzYivWYq1r29WYO FK5CmaxZFxH+tww= -----END CERTIFICATE-----Generated at Tue Nov 4 17:01:47 2025 by rpki-client