$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/27E42824621B11ECB96F443FC4F9AE02.roa File: 27E42824621B11ECB96F443FC4F9AE02.roa (raw, json) Hash identifier: +odywDquwxeF6SYI69k239OrBCZD98jk7qEP7myd7ZI= Subject key identifier: 8E:4D:6F:82:53:CA:EC:45:B4:FD:54:6B:E5:CD:B8:57:BF:55:89:37 Certificate issuer: /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Certificate serial: 04A0 Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/27E42824621B11ECB96F443FC4F9AE02.roa Signing time: Sun 05 Oct 2025 00:26:53 +0000 ROA not before: Sun 05 Oct 2025 00:26:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136788 IP address blocks: 103.96.24.0/22 maxlen: 22 103.96.24.0/23 maxlen: 23 103.96.26.0/24 maxlen: 24 123.253.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2A1F, serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Validity Not Before: Oct 5 00:26:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68e1bb4d-02d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:aa:05:2f:8d:56:06:d4:a2:96:a8:0f:f9: cf:02:94:e6:13:fc:de:b0:ae:37:95:96:3e:09:72: 54:41:3b:29:41:fe:be:46:8a:54:ab:5b:e6:e4:27: ff:86:4a:87:3a:51:d6:f1:24:54:9b:13:66:fb:c0: 90:0b:dc:ff:5b:a6:ec:30:38:53:cc:43:bc:3c:6c: 53:03:b2:c2:18:c8:77:6f:db:12:73:e7:d9:3e:c8: 24:c6:3c:19:6f:ac:bc:09:55:2d:e0:74:5f:66:ab: 0f:27:08:fa:2f:09:0d:74:0b:22:83:2d:a0:5f:bf: fb:72:c4:2e:a9:ef:0b:59:21:a0:0b:b3:5b:b3:33: dd:7d:47:f7:36:76:4d:cf:d1:63:ac:0c:f7:42:8c: 62:c1:47:68:86:99:c2:c1:d1:cb:67:39:0c:67:80: ff:96:be:8b:ec:6a:db:b5:cd:d5:65:c7:bb:c0:96: ac:d2:e7:b4:10:6b:1c:32:fd:2b:e1:f6:d8:4b:64: 64:9e:99:55:1f:18:c9:96:48:45:62:9d:71:11:29: 43:52:ae:69:ac:30:42:ff:a5:96:a1:3a:bb:d0:85: f7:c7:f3:5c:d2:9b:78:18:04:da:c3:27:ff:8f:f7: 2b:60:fc:f4:87:a6:1c:ef:e7:64:64:6a:62:90:93: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4D:6F:82:53:CA:EC:45:B4:FD:54:6B:E5:CD:B8:57:BF:55:89:37 X509v3 Authority Key Identifier: keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/27E42824621B11ECB96F443FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.24.0/22 123.253.192.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:00:82:36:60:a5:35:9d:53:50:bb:1d:0f:39:ed:2c:1b:79: d9:20:96:90:78:4e:72:ca:01:b7:8a:03:0b:e5:3d:42:89:ec: de:c9:b3:bf:5e:6e:01:a8:87:66:90:6d:72:b3:3d:80:b2:ae: c1:bf:42:89:f8:31:7a:1c:59:d4:00:19:cc:26:3f:d8:b8:a4: 8f:a6:22:cb:4d:de:8c:b7:eb:97:77:d8:f2:01:8b:bf:bd:b3: 79:0f:ae:fc:f1:6c:e6:7f:d1:9b:8b:a6:6d:da:db:47:02:17: cf:85:63:79:28:33:3d:13:59:1f:6f:e8:cf:f5:a0:ce:22:e3: 7f:2e:39:b4:e1:e3:b1:d6:c0:dd:56:0c:e2:fa:a0:c5:4f:84: 4c:7d:cd:fb:e6:81:c7:68:8f:23:40:5f:b8:d1:bf:ce:32:2b: 1b:bc:a2:13:22:6c:bc:5a:b3:92:6c:3a:ab:65:29:02:86:1b: 20:95:a4:2a:4d:33:43:e5:e7:11:26:a3:c8:fb:52:31:de:a6: f6:9c:45:ee:22:84:fc:54:47:71:64:fb:0f:52:34:a8:6d:93: 7c:7c:25:de:5e:ef:ef:f9:d5:20:5e:27:c0:f0:af:78:68:b3: 84:5d:be:c7:06:0c:19:e9:d2:13:74:dc:05:e2:bf:4c:67:e5: a6:d7:d9:44 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJBMUYxMTAvBgNVBAUTKDY5MzlGQzA0MERBNUMzMEI3NjZEQzc5NEY5Q0E0QzJG NDFBQ0FFRUEwHhcNMjUxMDA1MDAyNjUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxYmI0ZC0wMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqN6qBS+NVgbUopaoD/nPApTmE/zesK43lZY+CXJUQTspQf6+RopUq1vm5Cf/ hkqHOlHW8SRUmxNm+8CQC9z/W6bsMDhTzEO8PGxTA7LCGMh3b9sSc+fZPsgkxjwZ b6y8CVUt4HRfZqsPJwj6LwkNdAsigy2gX7/7csQuqe8LWSGgC7NbszPdfUf3NnZN z9FjrAz3QoxiwUdohpnCwdHLZzkMZ4D/lr6L7Grbtc3VZce7wJas0ue0EGscMv0r 4fbYS2RknplVHxjJlkhFYp1xESlDUq5prDBC/6WWoTq70IX3x/Nc0pt4GATawyf/ j/crYPz0h6Yc7+dkZGpikJObbwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFI5Nb4JT yuxFtP1Ua+XNuFe/VYk3MB8GA1UdIwQYMBaAFGk5/AQNpcMLdm3HlPnKTC9BrK7q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkExRi8xRUNGRkM0QzYy MTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3dDJiY2VVLWNwTUwwR3Ny dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUbjhCQTJsd3d0MmJjZVUtY3BNTDBHc3J1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTJBMUYvMUVDRkZDNEM2MjE5MTFFQzk5QTU1RjNFQzRGOUFFMDIvMjdFNDI4MjQ2 MjFCMTFFQ0I5NkY0NDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnYBgDBAJ7/cAwDQYJKoZIhvcNAQELBQADggEBAD4AgjZg pTWdU1C7HQ857SwbedkglpB4TnLKAbeKAwvlPUKJ7N7Js79ebgGoh2aQbXKzPYCy rsG/Qon4MXocWdQAGcwmP9i4pI+mIstN3oy365d32PIBi7+9s3kPrvzxbOZ/0ZuL pm3a20cCF8+FY3koMz0TWR9v6M/1oM4i438uObTh47HWwN1WDOL6oMVPhEx9zfvm gcdojyNAX7jRv84yKxu8ohMibLxas5JsOqtlKQKGGyCVpCpNM0Pl5xEmo8j7UjHe pvacRe4ihPxUR3Fk+w9SNKhtk3x8Jd5e7+/51SBeJ8Dwr3hos4RdvscGDBnp0hN0 3AXiv0xn5abX2UQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:01 2025 by rpki-client