$ rpki-client -vvf rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/E035CD6ECC8B11EA9169032FC4F9AE02.roa File: E035CD6ECC8B11EA9169032FC4F9AE02.roa (raw, json) Hash identifier: pUsh+6S57xp5nL/7m4FxpFU2vx4rg/sAXSHOWQqoveM= Subject key identifier: 6D:DD:3C:B4:C9:10:E8:E5:49:C1:E4:7A:3C:98:6A:B2:A9:4C:D1:0E Certificate issuer: /CN=A91821EE/serialNumber=6BA8BEC06CA0B4075335EDA6A9263884D5AE032B Certificate serial: 087A Authority key identifier: 6B:A8:BE:C0:6C:A0:B4:07:53:35:ED:A6:A9:26:38:84:D5:AE:03:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/E035CD6ECC8B11EA9169032FC4F9AE02.roa Signing time: Tue 02 Sep 2025 21:12:16 +0000 ROA not before: Tue 02 Sep 2025 21:12:16 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 64010 IP address blocks: 103.239.220.0/22 maxlen: 22 103.239.220.0/24 maxlen: 24 103.239.221.0/24 maxlen: 24 103.239.222.0/24 maxlen: 24 103.239.223.0/24 maxlen: 24 2001:df0:1400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.crl rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2170 (0x87a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91821EE, serialNumber=6BA8BEC06CA0B4075335EDA6A9263884D5AE032B Validity Not Before: Sep 2 21:12:16 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b75db0-1f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9e:bd:9d:91:41:49:d6:f6:a1:9c:28:0e:63: 0e:20:c6:e1:da:81:c0:bd:d7:5c:32:46:71:7f:2c: e9:3b:34:24:1a:a4:fc:80:41:58:9c:37:e5:ea:52: 50:62:6c:a6:2c:cb:1d:5b:21:be:a5:d4:97:34:62: 60:0b:c7:89:bc:5e:ba:09:74:e1:42:6d:67:1d:67: cd:d6:71:74:18:66:e0:a9:11:f2:dc:1e:f8:05:0b: d4:2f:18:5e:91:ad:5e:25:6d:21:d3:13:12:61:57: ef:40:b2:b9:61:3f:dd:82:d3:f0:9c:56:ca:a2:ba: ec:0e:14:26:74:98:3a:19:a8:8b:1f:7f:be:32:7d: 5a:a4:28:f4:79:92:3a:71:68:d4:30:96:ab:9b:bd: a6:34:d3:ac:26:4e:ac:49:89:a3:41:a1:8d:65:0f: 44:5d:0b:ac:63:76:23:0f:92:18:b2:fe:d1:00:94: ca:12:ae:0d:80:98:71:7b:40:f0:91:cd:35:bb:7d: 33:51:07:aa:41:89:f7:93:ba:e1:be:e8:4e:d2:12: 1a:76:cf:a1:68:61:64:06:04:8a:38:96:25:a4:7b: 87:4c:21:5a:7d:cb:d2:5d:27:54:14:d8:34:bc:a6: a9:25:83:77:b2:f9:08:07:0b:20:32:cf:3e:3c:3c: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DD:3C:B4:C9:10:E8:E5:49:C1:E4:7A:3C:98:6A:B2:A9:4C:D1:0E X509v3 Authority Key Identifier: keyid:6B:A8:BE:C0:6C:A0:B4:07:53:35:ED:A6:A9:26:38:84:D5:AE:03:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/a6i-wGygtAdTNe2mqSY4hNWuAys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6i-wGygtAdTNe2mqSY4hNWuAys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91821EE/F6CAA0AACC8A11EA9AEFCE2EC4F9AE02/E035CD6ECC8B11EA9169032FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.239.220.0/22 IPv6: 2001:df0:1400::/48 Signature Algorithm: sha256WithRSAEncryption 57:54:70:cb:2d:ad:ef:83:45:8d:d1:15:e4:01:de:71:25:0e: 89:7d:58:6d:bb:56:ad:b3:f8:e4:07:d2:05:63:51:ac:1e:da: 57:48:09:92:c9:99:c6:62:18:36:0b:6b:37:dd:fc:81:b1:79: 1e:3e:0a:d1:99:1e:09:89:da:25:3a:da:7a:73:77:14:f1:86: 3a:e8:b8:58:f8:b9:b2:16:6b:60:a7:2c:d2:77:78:1d:e5:6e: 0b:2e:8f:ca:2b:38:01:58:5d:2e:17:dd:fd:72:42:26:81:97: 42:08:9d:ac:ab:28:57:36:55:e6:9d:0c:75:03:c8:63:87:3d: 78:71:be:0b:1d:c9:7d:f8:78:1f:05:03:c3:9f:db:65:cc:82: ea:98:46:9f:12:92:68:ea:b7:5b:99:27:dc:c2:d0:5c:aa:e9: 80:e2:69:e3:67:3b:f5:59:87:fe:7b:79:09:d0:8c:5c:6e:d2: fb:e1:cd:56:fb:ca:e8:d1:d5:4d:fb:2f:28:32:2d:45:bb:41: 5a:e9:8e:cb:11:df:3f:d6:e1:81:14:0a:a2:d7:93:df:19:5d: a0:a3:48:e0:98:cd:5b:79:bc:e3:9e:d9:f6:a0:6f:ee:34:dd: ee:93:f9:ca:ee:0a:05:4a:88:6c:30:8d:5e:6c:d7:68:f4:e1: 7e:2c:35:9c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxRUUxMTAvBgNVBAUTKDZCQThCRUMwNkNBMEI0MDc1MzM1RURBNkE5MjYzODg0 RDVBRTAzMkIwHhcNMjUwOTAyMjExMjE2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NWRiMC0xZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4569nZFBSdb2oZwoDmMOIMbh2oHAvddcMkZxfyzpOzQkGqT8gEFYnDfl6lJQ YmymLMsdWyG+pdSXNGJgC8eJvF66CXThQm1nHWfN1nF0GGbgqRHy3B74BQvULxhe ka1eJW0h0xMSYVfvQLK5YT/dgtPwnFbKorrsDhQmdJg6GaiLH3++Mn1apCj0eZI6 cWjUMJarm72mNNOsJk6sSYmjQaGNZQ9EXQusY3YjD5IYsv7RAJTKEq4NgJhxe0Dw kc01u30zUQeqQYn3k7rhvuhO0hIads+haGFkBgSKOJYlpHuHTCFafcvSXSdUFNg0 vKapJYN3svkIBwsgMs8+PDybFwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG3dPLTJ EOjlScHkejyYarKpTNEOMB8GA1UdIwQYMBaAFGuovsBsoLQHUzXtpqkmOITVrgMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjFFRS9GNkNBQTBBQUND OEExMUVBOUFFRkNFMkVDNEY5QUUwMi9hNmktd0d5Z3RBZFROZTJtcVNZNGhOV3VB eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2aS13R3lndEFkVE5lMm1xU1k0aE5XdUF5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIxRUUvRjZDQUEwQUFDQzhBMTFFQTlBRUZDRTJFQzRGOUFFMDIvRTAzNUNENkVD QzhCMTFFQTkxNjkwMzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJn79wwDwQCAAIwCQMHACABDfAUADANBgkqhkiG9w0BAQsF AAOCAQEAV1Rwyy2t74NFjdEV5AHecSUOiX1YbbtWrbP45AfSBWNRrB7aV0gJksmZ xmIYNgtrN938gbF5Hj4K0ZkeCYnaJTraenN3FPGGOui4WPi5shZrYKcs0nd4HeVu Cy6Pyis4AVhdLhfd/XJCJoGXQgidrKsoVzZV5p0MdQPIY4c9eHG+Cx3Jffh4HwUD w5/bZcyC6phGnxKSaOq3W5kn3MLQXKrpgOJp42c79VmH/nt5CdCMXG7S++HNVvvK 6NHVTfsvKDItRbtBWumOyxHfP9bhgRQKoteT3xldoKNI4JjNW3m8457Z9qBv7jTd 7pP5yu4KBUqIbDCNXmzXaPThfiw1nA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:29 2025 by rpki-client