$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/76DB2480090511EA8FFC6812C4F9AE02.roa File: 76DB2480090511EA8FFC6812C4F9AE02.roa (raw, json) Hash identifier: tGg2gZvvqmK1MXVY5rUGUJI2gxizSYf5OdYwsS9Mmfo= Subject key identifier: 92:37:89:8A:BF:A3:CE:13:45:CF:CC:EC:07:AD:D8:73:D0:06:0C:49 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0C64 Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/76DB2480090511EA8FFC6812C4F9AE02.roa Signing time: Thu 14 Aug 2025 18:58:44 +0000 ROA not before: Thu 14 Aug 2025 18:58:44 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137987 IP address blocks: 103.119.94.0/23 maxlen: 23 103.119.94.0/24 maxlen: 24 103.119.95.0/24 maxlen: 24 2405:db40::/32 maxlen: 32 2405:db40::/48 maxlen: 48 2405:db40:1::/48 maxlen: 48 2405:db40:2::/48 maxlen: 48 2405:db40:3::/48 maxlen: 48 2405:db40:4::/48 maxlen: 48 2405:db40:5::/48 maxlen: 48 2405:db40:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Aug 14 18:58:44 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689e31e3-67c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e6:dd:32:ab:7f:b4:0b:11:b4:6f:8a:f6:ab: 48:e2:7a:eb:65:b7:ef:cf:19:97:0a:bd:b9:b1:7c: 5c:69:2a:cf:26:63:4a:bf:7d:86:50:b9:1e:91:c0: 26:ba:dd:a5:d0:51:a2:ac:7c:60:57:a5:4f:47:ca: 0b:c2:dd:7f:1d:e8:a0:2a:60:a3:5b:2a:eb:42:b0: 61:64:59:71:d5:1a:8e:88:3a:9a:00:af:bb:4d:46: 6f:3d:17:f4:a3:de:1a:f7:46:cd:0c:48:49:13:10: 4e:6a:4f:da:0e:4b:cb:c1:49:f2:24:e6:20:9c:e1: ef:90:6b:9e:ff:ac:6a:99:3e:b6:97:cd:0f:5f:16: 33:7f:bf:21:ac:92:ce:a1:20:67:79:0d:bb:6e:6c: 3e:1c:ac:48:59:7d:46:3a:ca:56:77:13:a8:de:61: 6c:55:62:1e:3f:2f:a3:9b:96:30:45:ba:b3:83:19: a2:57:7d:30:4f:8c:de:b9:25:7d:1b:2f:40:41:02: d1:8c:ba:c9:7b:4b:d9:ad:9f:0b:75:1c:34:b2:2b: 23:e4:93:02:83:f7:c2:9c:3d:d3:91:00:a5:84:3d: db:0d:72:8a:79:a1:dc:55:41:29:35:e9:cf:73:c6: ae:49:ff:3e:22:63:2d:2a:1b:7c:77:77:90:11:0e: 9b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:37:89:8A:BF:A3:CE:13:45:CF:CC:EC:07:AD:D8:73:D0:06:0C:49 X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/76DB2480090511EA8FFC6812C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.94.0/23 IPv6: 2405:db40::/32 Signature Algorithm: sha256WithRSAEncryption a0:88:7c:71:04:78:d9:c0:fd:69:42:95:6c:c7:1a:5f:51:8b: d3:dd:9f:02:19:24:e8:26:77:dc:4b:14:7c:96:70:12:5e:bf: e7:e8:79:19:58:ad:fd:2e:7c:78:8b:87:c9:49:64:22:ff:45: 23:d5:4e:d3:e9:f9:37:04:3e:7b:3c:c1:6e:58:3f:a1:0a:54: 62:f4:e6:11:62:9c:c5:f8:c1:28:73:d2:3a:37:80:dd:8b:6b: f7:b6:68:26:e5:55:9f:89:ba:99:c6:a6:60:11:d4:8a:db:b4: 29:5a:33:95:d0:0a:c9:2a:7c:25:73:b7:e2:2e:87:8a:01:35: 6a:b7:d3:a9:d3:eb:73:49:b9:ac:1c:ae:cc:5d:7a:c5:52:82: 22:74:4a:91:ad:2d:8f:22:26:cb:7b:59:de:a8:bb:1c:27:27: 38:76:f0:02:6a:f2:82:ee:ed:22:78:68:1c:15:63:14:5b:61: 58:9b:b1:0d:8a:8f:f7:6c:92:35:ec:1b:3f:56:41:70:75:c7: 69:c3:9d:b5:bb:c7:da:98:0f:09:81:ec:ad:22:b9:e9:be:1d: 58:0a:2d:77:0e:4f:71:83:9e:1c:1e:e2:0b:c4:64:3c:c1:02: a3:d6:37:d7:8d:99:16:24:85:66:24:de:aa:a4:35:0d:c6:25: f3:8c:07:23 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjUwODE0MTg1ODQ0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODllMzFlMy02N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ebdMqt/tAsRtG+K9qtI4nrrZbfvzxmXCr25sXxcaSrPJmNKv32GULkekcAm ut2l0FGirHxgV6VPR8oLwt1/HeigKmCjWyrrQrBhZFlx1RqOiDqaAK+7TUZvPRf0 o94a90bNDEhJExBOak/aDkvLwUnyJOYgnOHvkGue/6xqmT62l80PXxYzf78hrJLO oSBneQ27bmw+HKxIWX1GOspWdxOo3mFsVWIePy+jm5YwRbqzgxmiV30wT4zeuSV9 Gy9AQQLRjLrJe0vZrZ8LdRw0sisj5JMCg/fCnD3TkQClhD3bDXKKeaHcVUEpNenP c8auSf8+ImMtKht8d3eQEQ6b/wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJI3iYq/ o84TRc/M7Aet2HPQBgxJMB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQwMjYvQkM3NEMxMEEwOTA0MTFFQUIyMEQ1OTExQzRGOUFFMDIvNzZEQjI0ODAw OTA1MTFFQThGRkM2ODEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnd14wDQQCAAIwBwMFACQF20AwDQYJKoZIhvcNAQELBQAD ggEBAKCIfHEEeNnA/WlClWzHGl9Ri9PdnwIZJOgmd9xLFHyWcBJev+foeRlYrf0u fHiLh8lJZCL/RSPVTtPp+TcEPns8wW5YP6EKVGL05hFinMX4wShz0jo3gN2La/e2 aCblVZ+JupnGpmAR1IrbtClaM5XQCskqfCVzt+Iuh4oBNWq306nT63NJuawcrsxd esVSgiJ0SpGtLY8iJst7Wd6ouxwnJzh28AJq8oLu7SJ4aBwVYxRbYVibsQ2Kj/ds kjXsGz9WQXB1x2nDnbW7x9qYDwmB7K0iuem+HVgKLXcOT3GDnhwe4gvEZDzBAqPW N9eNmRYkhWYk3qqkNQ3GJfOMByM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:04 2025 by rpki-client