$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2C67264CFBA511ED96AF666CC4F9AE02.roa File: 2C67264CFBA511ED96AF666CC4F9AE02.roa (raw, json) Hash identifier: 8K9xEa3UT0DDGwO7/YOvY/TL1VYN/4EbHSNgpwgAtQ0= Subject key identifier: 29:D3:6F:0A:19:99:20:47:09:ED:25:3D:5E:CC:8F:6D:3F:B8:F1:FE Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4D83 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2C67264CFBA511ED96AF666CC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:55:15 +0000 ROA not before: Thu 28 Aug 2025 14:55:15 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150842 IP address blocks: 103.130.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19843 (0x4d83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:55:15 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06dd3-738f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:c3:98:fe:eb:52:c6:f6:4b:ce:50:07:00: 47:88:12:ce:01:8d:68:6d:7e:81:33:10:19:57:22: 8a:d6:3d:86:cf:82:80:bf:4b:50:7a:92:d7:3e:6c: 7f:aa:60:ac:83:22:0f:8a:de:37:00:67:11:6c:54: 68:30:2c:d4:9c:db:1e:40:2a:25:64:a6:e4:58:02: 65:13:d7:ee:df:c1:d4:9a:2c:d7:60:6d:68:73:72: 8f:d2:94:a5:1b:73:4c:d1:9d:05:3e:e6:43:67:b0: 62:42:65:5b:e7:41:4c:51:19:12:30:35:88:a3:38: 6a:1a:a6:66:df:16:e5:01:65:b3:58:ef:60:e4:93: fd:3b:99:1f:49:82:fd:37:7a:ec:7f:5f:92:f1:0d: 14:02:fc:f0:dc:4b:65:9c:f2:46:f7:ef:56:f6:5e: 84:fe:07:5e:00:ef:f2:9b:58:58:35:85:38:77:55: 5a:7c:35:41:85:24:2b:64:59:37:20:30:4e:2e:a7: 36:47:5b:ab:48:34:66:fe:60:b4:df:c5:eb:57:44: 3c:80:be:73:74:8a:a6:6b:30:b9:d8:f8:96:29:f7: e4:58:aa:2a:29:30:44:80:c2:9b:c4:86:98:36:48: 98:1d:56:bc:d3:99:d6:03:fd:d5:b4:d0:54:30:ce: a3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D3:6F:0A:19:99:20:47:09:ED:25:3D:5E:CC:8F:6D:3F:B8:F1:FE X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2C67264CFBA511ED96AF666CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.130.190.0/23 Signature Algorithm: sha256WithRSAEncryption 68:56:9a:2c:40:0d:40:eb:51:61:5c:d7:2c:28:77:c8:9a:f6: 25:4b:df:ba:6a:67:00:a7:94:50:a5:c8:19:63:66:27:56:5c: 79:53:bd:be:9d:b9:bc:44:d4:20:15:9b:ad:0f:06:09:3c:23: d0:91:c0:0a:f5:df:13:05:fc:77:ff:ab:ea:ab:5c:74:73:c4: b0:69:db:e8:49:a0:d9:fd:1e:f9:c7:48:d9:48:f5:92:41:68: 66:6c:da:6b:49:8b:a3:8a:13:e8:ca:60:7f:83:16:d0:85:80: 2c:36:91:d7:29:67:41:16:21:35:3b:0a:07:5f:ba:14:56:2f: e9:8d:86:44:e9:c0:68:68:32:16:d9:ae:5f:df:02:97:c2:92: 1f:69:9c:ba:32:07:23:78:57:87:7f:63:55:70:8c:57:36:b3: 78:55:8b:72:b0:b2:7d:3a:ca:b4:3c:f9:ec:48:60:38:54:ad: 66:7f:f8:77:69:7c:ce:be:9e:5d:0c:ac:78:a8:74:02:39:2b: a3:6a:d0:9c:6c:19:aa:8f:f3:e3:c1:44:de:26:70:23:f2:72: eb:13:0f:fb:12:26:8b:6c:89:8d:5c:5f:e8:71:45:e3:2b:1f: a6:27:c2:53:cc:c6:08:17:39:a4:2f:8d:7a:0b:ac:d0:8e:f0: 50:c2:e4:a3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICTYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NTE1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmRkMy03MzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzzDmP7rUsb2S85QBwBHiBLOAY1obX6BMxAZVyKK1j2Gz4KAv0tQepLXPmx/ qmCsgyIPit43AGcRbFRoMCzUnNseQColZKbkWAJlE9fu38HUmizXYG1oc3KP0pSl G3NM0Z0FPuZDZ7BiQmVb50FMURkSMDWIozhqGqZm3xblAWWzWO9g5JP9O5kfSYL9 N3rsf1+S8Q0UAvzw3EtlnPJG9+9W9l6E/gdeAO/ym1hYNYU4d1VafDVBhSQrZFk3 IDBOLqc2R1urSDRm/mC038XrV0Q8gL5zdIqmazC52PiWKffkWKoqKTBEgMKbxIaY NkiYHVa805nWA/3VtNBUMM6jnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCnTbwoZ mSBHCe0lPV7Mj20/uPH+MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMkM2NzI2NENG QkE1MTFFRDk2QUY2NjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFngr4wDQYJKoZIhvcNAQELBQADggEBAGhWmixADUDrUWFc 1ywod8ia9iVL37pqZwCnlFClyBljZidWXHlTvb6dubxE1CAVm60PBgk8I9CRwAr1 3xMF/Hf/q+qrXHRzxLBp2+hJoNn9HvnHSNlI9ZJBaGZs2mtJi6OKE+jKYH+DFtCF gCw2kdcpZ0EWITU7CgdfuhRWL+mNhkTpwGhoMhbZrl/fApfCkh9pnLoyByN4V4d/ Y1VwjFc2s3hVi3Kwsn06yrQ8+exIYDhUrWZ/+HdpfM6+nl0MrHiodAI5K6Nq0Jxs GaqP8+PBRN4mcCPycusTD/sSJotsiY1cX+hxReMrH6YnwlPMxggXOaQvjXoLrNCO 8FDC5KM= -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:55 2025 by rpki-client