$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/84210E0A9AAB11F0AFE54B2AC4F9AE02.roa File: 84210E0A9AAB11F0AFE54B2AC4F9AE02.roa (raw, json) Hash identifier: Bv2IplNL1D5PujypOS2WcUekz015LvYisApNXIOts/U= Subject key identifier: F5:6C:C6:B7:8A:61:17:35:7E:8F:6A:BD:FB:F3:60:C9:43:23:FF:99 Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Certificate serial: 0B95 Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/84210E0A9AAB11F0AFE54B2AC4F9AE02.roa Signing time: Sun 02 Nov 2025 19:08:55 +0000 ROA not before: Sun 02 Nov 2025 19:08:55 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 23532 IP address blocks: 103.245.234.0/24 maxlen: 24 103.245.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2965 (0xb95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Validity Not Before: Nov 2 19:08:55 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6907ac47-0cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:77:c1:5e:1d:65:93:d6:bf:cb:34:63:71: 3f:96:de:20:87:0c:e5:35:58:d8:1b:98:a1:e5:73: 59:4c:40:b2:07:f0:db:c7:29:15:f6:17:b5:ce:c0: 87:17:04:4f:45:84:64:8a:1d:0d:45:83:73:94:9e: 0d:a9:94:9f:4d:46:01:f0:ba:5e:bc:ec:5e:3d:92: d8:25:c4:10:4a:6c:ee:0e:97:62:2c:e1:dd:f5:ed: 92:0e:ff:bd:b9:9e:e8:ea:84:39:f7:e6:23:61:19: 66:ba:b8:5a:7c:52:f2:1f:0b:d8:5e:36:4d:8e:dc: 79:51:30:76:4c:fd:42:0e:9b:14:da:3f:68:42:dc: bd:19:b4:31:ec:3e:78:d5:99:f7:e9:61:52:f1:3f: c8:81:5f:75:a7:04:94:3d:3a:32:6f:8f:08:13:d5: fc:5d:5d:df:42:71:2f:41:f8:47:82:ca:4b:69:38: da:92:04:98:b9:5c:e6:34:eb:a0:54:d3:d9:27:cd: 6e:a7:63:e0:02:95:28:bb:d9:99:8d:89:e8:ad:3d: 61:db:98:1f:12:3a:fb:cf:a9:6e:21:86:88:49:60: 7c:55:0b:5b:27:93:3d:bd:7e:86:f1:4b:dd:05:f6: 21:27:24:10:03:1b:7c:12:45:c5:7f:b4:d1:f9:d9: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6C:C6:B7:8A:61:17:35:7E:8F:6A:BD:FB:F3:60:C9:43:23:FF:99 X509v3 Authority Key Identifier: keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/84210E0A9AAB11F0AFE54B2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.245.234.0/23 Signature Algorithm: sha256WithRSAEncryption 99:a8:04:be:09:65:26:b8:c2:ee:b9:22:38:5c:eb:de:db:7f: 3e:6c:73:98:85:13:2c:58:31:ee:95:d4:4e:22:3c:06:b0:0f: 53:56:94:30:c9:2a:fd:6f:ad:5a:63:a4:3e:b6:35:bb:0b:76: 47:1d:08:a7:18:80:37:2b:12:04:42:c3:91:2c:15:b7:33:b7: df:1a:62:0d:83:d0:1b:46:00:c7:de:cb:fb:9d:dc:a1:dc:e0: 82:b2:23:6c:a5:c4:76:0d:6b:03:ad:4f:91:1e:14:db:bc:f5: 01:23:81:09:01:b5:d1:04:89:06:fe:b3:0a:5b:df:67:83:61: d1:b3:aa:ae:6d:2e:80:5a:9e:20:cc:32:80:16:6b:c2:5d:3f: 41:65:b5:89:a9:32:cb:e8:e2:1c:fa:b0:8d:0d:03:3d:8c:91: f5:12:f2:07:8c:f1:60:cf:b4:c7:32:62:ea:2a:49:22:a3:6e: 2b:ca:a4:ca:74:14:d4:95:43:fd:75:94:94:2d:b9:43:4c:39: ac:0a:84:30:98:84:46:80:66:94:9a:26:52:3e:0d:9a:c8:7a: 38:04:9f:45:79:c0:9a:6e:3f:02:76:33:fc:49:52:90:53:97: 66:91:ef:82:59:08:31:57:2d:e7:1a:61:f2:56:6f:ad:52:5e: 10:83:37:a8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF MUNCOEZFRTUwHhcNMjUxMTAyMTkwODU1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3YWM0Ny0wY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq13wV4dZZPWv8s0Y3E/lt4ghwzlNVjYG5ih5XNZTECyB/DbxykV9he1zsCH FwRPRYRkih0NRYNzlJ4NqZSfTUYB8LpevOxePZLYJcQQSmzuDpdiLOHd9e2SDv+9 uZ7o6oQ59+YjYRlmurhafFLyHwvYXjZNjtx5UTB2TP1CDpsU2j9oQty9GbQx7D54 1Zn36WFS8T/IgV91pwSUPToyb48IE9X8XV3fQnEvQfhHgspLaTjakgSYuVzmNOug VNPZJ81up2PgApUou9mZjYnorT1h25gfEjr7z6luIYaISWB8VQtbJ5M9vX6G8Uvd BfYhJyQQAxt8EkXFf7TR+dnp9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFPVsxreK YRc1fo9qvfvzYMlDI/+ZMB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTIzNTkvRkMyOThERUE0MTcwMTFFQTk4REU2NTZBQzRGOUFFMDIvODQyMTBFMEE5 QUFCMTFGMEFGRTU0QjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn9eowDQYJKoZIhvcNAQELBQADggEBAJmoBL4JZSa4wu65 Ijhc697bfz5sc5iFEyxYMe6V1E4iPAawD1NWlDDJKv1vrVpjpD62NbsLdkcdCKcY gDcrEgRCw5EsFbczt98aYg2D0BtGAMfey/ud3KHc4IKyI2ylxHYNawOtT5EeFNu8 9QEjgQkBtdEEiQb+swpb32eDYdGzqq5tLoBaniDMMoAWa8JdP0FltYmpMsvo4hz6 sI0NAz2MkfUS8geM8WDPtMcyYuoqSSKjbivKpMp0FNSVQ/11lJQtuUNMOawKhDCY hEaAZpSaJlI+DZrIejgEn0V5wJpuPwJ2M/xJUpBTl2aR74JZCDFXLecaYfJWb61S XhCDN6g= -----END CERTIFICATE-----Generated at Tue Nov 4 21:45:39 2025 by rpki-client