$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/F3E1B79CB8F811F08ABED010C4F9AE02.roa File: F3E1B79CB8F811F08ABED010C4F9AE02.roa (raw, json) Hash identifier: qTLM8eG8Thxnpxo0s7eJeNTTRZyeyHiU6+kqq9/Mj1A= Subject key identifier: B2:8C:77:BE:F3:F0:ED:11:DD:A6:D2:B1:43:F7:F2:5D:9E:51:32:EB Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 3501 Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/F3E1B79CB8F811F08ABED010C4F9AE02.roa Signing time: Mon 03 Nov 2025 21:07:35 +0000 ROA not before: Mon 03 Nov 2025 21:07:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18159 IP address blocks: 103.26.16.0/23 maxlen: 23 103.233.20.0/22 maxlen: 24 110.92.16.0/22 maxlen: 24 112.213.40.0/21 maxlen: 24 202.9.116.0/22 maxlen: 24 202.27.108.0/24 maxlen: 24 202.27.109.0/24 maxlen: 24 202.49.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Nov 3 21:07:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69091997-a627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:4b:64:d6:b1:e4:91:b5:6e:9a:59:36:5a: c4:ff:04:e4:b4:03:38:4c:e3:8e:79:bd:07:ad:e2: 0b:c2:11:93:53:46:0a:2d:f1:a8:2d:98:6c:38:80: f9:d8:7c:97:7e:2b:0b:fd:2b:9d:52:91:0b:7a:2b: 56:3e:2b:c5:75:7a:96:86:ec:0f:82:91:59:a1:6d: ca:c0:f4:02:db:1c:a7:63:9e:ce:53:81:9e:d3:7c: cc:a0:ac:ae:12:dc:ca:ca:7b:19:8d:ec:36:d9:d8: 2d:fa:13:e4:e5:d5:7c:6e:7a:0b:f1:27:4a:3b:79: 78:7e:05:39:12:14:71:ce:77:57:a4:97:10:77:fc: ce:b3:8b:8d:d8:43:36:06:76:7b:a8:fd:88:c3:3a: 4b:d1:34:de:4f:19:e8:10:38:c7:6e:ff:e9:f5:e6: 06:5a:48:38:3b:cd:a9:94:e4:52:a1:49:a0:fd:54: 21:fe:38:e4:d6:09:73:c5:7b:e7:e6:7d:54:74:d1: 65:77:5a:cc:6e:e7:2d:3f:04:6e:99:eb:6e:9b:a8: 7b:8a:6a:01:9b:da:0a:80:99:d1:c1:8c:9a:dd:0d: 2e:de:f7:44:66:f4:db:8b:02:95:6d:84:15:b0:0d: d2:99:f0:f2:29:45:49:05:5c:08:91:b2:71:b8:e6: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8C:77:BE:F3:F0:ED:11:DD:A6:D2:B1:43:F7:F2:5D:9E:51:32:EB X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/F3E1B79CB8F811F08ABED010C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.16.0/23 103.233.20.0/22 110.92.16.0/22 112.213.40.0/21 202.9.116.0/22 202.27.108.0/23 202.49.123.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:11:5d:82:25:9a:b2:00:24:fb:ad:47:7f:ab:48:8c:47:97: dd:f3:b5:ee:2f:e5:fe:34:50:fe:77:aa:27:20:3b:c1:6b:a3: ca:2e:da:ea:95:78:7f:88:3d:ee:b4:09:d2:66:55:52:9f:62: 34:2c:74:2d:58:b8:b8:94:4b:ef:ee:34:ae:06:08:13:d7:8f: 64:84:20:9c:38:e8:ab:2a:f8:4a:ae:b0:5e:f9:06:9d:eb:b9: 8a:b0:e4:6b:f6:1e:de:da:13:b6:20:37:1f:38:f8:c8:16:8c: f0:88:33:22:91:dd:f4:2c:e0:0f:08:f2:07:7d:60:e3:d2:c8: 72:a5:dd:40:fe:a8:a0:bd:c0:d6:3c:74:bb:9c:e3:b9:26:e7: 89:97:fc:34:b0:de:3b:53:b4:c7:ce:bb:41:00:16:49:17:d9: 54:ef:29:d7:ed:b2:49:34:ab:0f:92:b3:ec:6d:5b:91:49:7d: 8d:ab:f3:44:52:1f:54:f9:3c:24:25:c9:21:f9:40:ad:e9:45: 8f:61:77:8b:f4:ed:5a:ba:43:ae:84:ac:77:df:ae:df:63:ef: b6:da:6c:31:e3:de:48:6e:98:50:39:6e:56:91:86:25:f3:a7: da:59:1f:19:25:0b:5f:a5:2e:49:95:05:ae:ae:e2:e9:ec:4d: 7c:93:a4:7d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjUxMTAzMjEwNzM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA5MTk5Ny1hNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp9LZNax5JG1bppZNlrE/wTktAM4TOOOeb0HreILwhGTU0YKLfGoLZhsOID5 2HyXfisL/SudUpELeitWPivFdXqWhuwPgpFZoW3KwPQC2xynY57OU4Ge03zMoKyu EtzKynsZjew22dgt+hPk5dV8bnoL8SdKO3l4fgU5EhRxzndXpJcQd/zOs4uN2EM2 BnZ7qP2IwzpL0TTeTxnoEDjHbv/p9eYGWkg4O82plORSoUmg/VQh/jjk1glzxXvn 5n1UdNFld1rMbuctPwRumetum6h7imoBm9oKgJnRwYya3Q0u3vdEZvTbiwKVbYQV sA3SmfDyKUVJBVwIkbJxuOaBgQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFLKMd77z 8O0R3abSsUP38l2eUTLrMB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTFDMDYvNkRFQUUyMUMxRDlEMTFFMjhCMUZBNzhDMDhCMDJDRDIvRjNFMUI3OUNC OEY4MTFGMDhBQkVEMDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCoDBAFnGhADBAJn6RQDBAJuXBADBANw1SgDBALKCXQDBAHKG2wD BADKMXswDQYJKoZIhvcNAQELBQADggEBAH0RXYIlmrIAJPutR3+rSIxHl93zte4v 5f40UP53qicgO8Fro8ou2uqVeH+IPe60CdJmVVKfYjQsdC1YuLiUS+/uNK4GCBPX j2SEIJw46Ksq+EqusF75Bp3ruYqw5Gv2Ht7aE7YgNx84+MgWjPCIMyKR3fQs4A8I 8gd9YOPSyHKl3UD+qKC9wNY8dLuc47km54mX/DSw3jtTtMfOu0EAFkkX2VTvKdft skk0qw+Ss+xtW5FJfY2r80RSH1T5PCQlySH5QK3pRY9hd4v07Vq6Q66ErHffrt9j 77babDHj3khumFA5blaRhiXzp9pZHxklC1+lLkmVBa6u4unsTXyTpH0= -----END CERTIFICATE-----Generated at Wed Nov 5 17:35:37 2025 by rpki-client