$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2EB4CB7A717E11EFB0C5E227C4F9AE02.roa File: 2EB4CB7A717E11EFB0C5E227C4F9AE02.roa (raw, json) Hash identifier: ZkSXwXCMzJOSaa3dvkiY5yzIGq0WwPEOE0Bf3RAPb1k= Subject key identifier: D4:32:F0:64:45:67:10:A0:81:A6:7B:84:FD:2E:3D:A3:79:51:D2:34 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4D18 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2EB4CB7A717E11EFB0C5E227C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:53:45 +0000 ROA not before: Thu 28 Aug 2025 14:53:45 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135987 IP address blocks: 103.127.196.0/24 maxlen: 24 103.127.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19736 (0x4d18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:53:45 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d79-094b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:ec:0b:8b:3c:2e:0c:c7:c1:dd:4c:3a:d7: b8:61:36:66:88:34:66:23:f7:40:eb:8b:64:59:eb: 26:9f:9a:0f:27:69:0a:9d:67:95:f1:28:ca:00:e4: c5:2c:f1:d5:87:d7:f1:7a:c8:e0:45:5a:89:a2:24: 6a:2f:00:93:9e:26:a9:4b:fc:a7:76:83:7e:a1:29: 17:8e:ef:df:35:68:cd:48:63:87:5d:94:49:78:9a: 0e:72:7e:a6:d0:ed:f7:2e:65:4d:fc:03:9b:33:f6: c9:4e:4e:da:49:c6:97:b7:c5:f0:3a:be:b7:57:30: f9:49:b7:5c:06:74:ff:19:4f:0a:90:d4:3a:46:f9: d1:05:57:bd:2b:cc:80:89:b9:72:a5:65:7e:b2:90: 8d:11:7c:51:03:f4:56:a1:ac:49:a1:4b:3a:53:4f: 03:ed:e1:71:75:bf:d0:32:d7:56:ab:f5:f5:d2:69: 51:1e:8f:0c:97:a9:7a:56:c5:35:a4:be:c7:96:a4: 92:b9:1f:eb:cd:ff:e8:fc:83:dc:a5:27:d9:9c:1e: 33:85:98:46:40:54:ed:5a:7d:01:36:6e:bc:cc:3a: 27:2a:af:20:7d:93:ad:ed:2a:90:b7:df:b3:c1:10: a5:9b:63:e5:c9:c8:42:6e:ae:54:00:52:5d:b7:09: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:32:F0:64:45:67:10:A0:81:A6:7B:84:FD:2E:3D:A3:79:51:D2:34 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2EB4CB7A717E11EFB0C5E227C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.196.0/23 Signature Algorithm: sha256WithRSAEncryption 17:83:27:36:04:f8:3c:8f:84:40:3b:f6:b2:12:e0:53:14:68: d0:29:e4:bc:3d:93:74:de:6c:00:d9:24:8f:e0:1c:dc:a2:9b: c5:93:39:de:98:55:9b:ce:40:97:81:6c:d5:b0:74:98:5f:4b: bd:49:dc:9d:54:c6:aa:49:ff:75:a7:12:c9:9e:15:22:7a:1c: 02:51:65:11:e6:d9:7e:0c:67:ee:e0:3f:3a:b7:f6:35:37:22: f6:45:c4:d5:a0:75:fb:84:1c:c8:31:6e:af:cb:ad:b4:9c:e0: de:5c:77:51:1f:c6:61:2c:f9:8c:77:55:80:41:59:08:5c:a1: f8:cd:c0:78:61:8f:b1:5d:76:2c:af:84:90:7c:73:ff:e8:f8: f7:3c:7e:2c:2d:48:72:3a:79:27:38:d8:6a:78:ee:6d:62:1e: 0a:21:58:48:06:01:ce:88:7a:b3:2d:91:2c:46:51:27:f2:81: 00:8d:bc:0d:7d:86:12:83:00:41:7c:62:ce:cc:41:cf:aa:1c: 15:08:52:47:e7:ea:6f:22:e8:94:a9:7a:b5:fa:11:c6:0c:08: 06:97:56:6d:d6:9d:64:37:c6:2f:f1:78:9b:53:92:c7:c2:6a: 3d:36:fa:8e:da:08:73:a3:8e:fd:4c:88:ec:93:7f:40:1b:2f: c7:99:e2:f0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICTRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQ3OS0wOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHDsC4s8LgzHwd1MOte4YTZmiDRmI/dA64tkWesmn5oPJ2kKnWeV8SjKAOTF LPHVh9fxesjgRVqJoiRqLwCTniapS/yndoN+oSkXju/fNWjNSGOHXZRJeJoOcn6m 0O33LmVN/AObM/bJTk7aScaXt8XwOr63VzD5SbdcBnT/GU8KkNQ6RvnRBVe9K8yA iblypWV+spCNEXxRA/RWoaxJoUs6U08D7eFxdb/QMtdWq/X10mlRHo8Ml6l6VsU1 pL7HlqSSuR/rzf/o/IPcpSfZnB4zhZhGQFTtWn0BNm68zDonKq8gfZOt7SqQt9+z wRClm2PlychCbq5UAFJdtwnIxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNQy8GRF ZxCggaZ7hP0uPaN5UdI0MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMkVCNENCN0E3 MTdFMTFFRkIwQzVFMjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnf8QwDQYJKoZIhvcNAQELBQADggEBABeDJzYE+DyPhEA7 9rIS4FMUaNAp5Lw9k3TebADZJI/gHNyim8WTOd6YVZvOQJeBbNWwdJhfS71J3J1U xqpJ/3WnEsmeFSJ6HAJRZRHm2X4MZ+7gPzq39jU3IvZFxNWgdfuEHMgxbq/LrbSc 4N5cd1EfxmEs+Yx3VYBBWQhcofjNwHhhj7FddiyvhJB8c//o+Pc8fiwtSHI6eSc4 2Gp47m1iHgohWEgGAc6IerMtkSxGUSfygQCNvA19hhKDAEF8Ys7MQc+qHBUIUkfn 6m8i6JSperX6EcYMCAaXVm3WnWQ3xi/xeJtTksfCaj02+o7aCHOjjv1MiOyTf0Ab L8eZ4vA= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:24 2025 by rpki-client