$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa File: A99E5658488011EE8113A766C4F9AE02.roa (raw, json) Hash identifier: NccKQh/awErD0XICha+c3zCJvrDGH6h5P5yVRARZDuM= Subject key identifier: 51:72:F8:08:C9:5E:2C:9D:60:47:8A:20:12:72:79:99:74:4B:C3:58 Certificate issuer: /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1 Certificate serial: 0185 Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa Signing time: Fri 19 Sep 2025 04:11:15 +0000 ROA not before: Fri 19 Sep 2025 04:11:15 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141047 IP address blocks: 103.155.68.0/23 maxlen: 23 103.155.68.0/24 maxlen: 24 103.155.69.0/24 maxlen: 24 2406:6940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7369, serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1 Validity Not Before: Sep 19 04:11:15 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68ccd7e3-00c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:06:86:f9:4b:7d:45:b0:b2:92:e6:3d:4f:e3: 9c:31:0d:92:12:4c:09:72:f9:ca:4a:1c:7d:b9:c1: 24:a6:0b:04:97:bf:8a:8d:96:81:6f:47:aa:40:5a: e0:2f:4c:da:4e:c7:4c:77:17:d7:8f:37:12:f8:44: c6:45:c4:b8:fc:96:82:58:38:41:c3:65:b2:8c:15: 03:a0:70:2c:cb:f3:95:fe:c1:c4:60:81:3a:83:f7: 97:aa:fb:cf:1d:f1:79:1a:a7:f6:6f:6c:38:97:4f: 46:66:52:90:95:a4:e7:cb:8b:46:86:3d:35:e1:42: 39:b5:d1:8c:27:a1:28:91:0f:01:40:4b:51:63:8c: 68:d5:85:bd:4b:f8:b5:7d:ec:35:b2:e7:d2:e4:76: 39:f3:22:31:b8:4d:8c:5d:22:61:de:e9:92:46:4d: 52:cd:a9:3a:45:01:38:43:bb:ef:31:a9:ae:09:e3: 70:34:44:38:58:04:2c:de:a9:f8:a2:bd:46:18:f4: 18:34:dd:d8:90:02:de:9d:98:70:23:c9:fd:8f:bc: 27:56:c1:65:78:1b:6b:f0:6f:3a:25:d7:96:d9:88: ed:45:85:0b:da:5f:f4:b7:0d:69:34:6e:31:ef:1f: a9:85:2c:4e:5d:7b:df:7e:b8:37:97:51:74:50:b3: 1f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:72:F8:08:C9:5E:2C:9D:60:47:8A:20:12:72:79:99:74:4B:C3:58 X509v3 Authority Key Identifier: keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/A99E5658488011EE8113A766C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.68.0/23 IPv6: 2406:6940::/32 Signature Algorithm: sha256WithRSAEncryption 36:85:c2:1c:e6:cf:bc:2c:bd:00:18:c7:96:4e:89:39:1f:3c: 84:9a:97:74:59:9a:1a:e4:43:58:ab:ba:17:bd:be:f7:f7:c5: 57:33:4f:1d:a9:f2:d5:7d:0a:d7:d0:3c:b6:75:98:40:9a:50: 49:4a:45:ca:6b:dc:ea:69:89:c4:f5:05:8c:35:6e:0e:88:f8: 92:7d:1d:03:bb:f8:20:20:44:7b:19:67:f1:ce:94:fc:5c:b4: e1:bd:fa:70:9a:1e:f0:20:2e:ea:fd:36:7b:49:c8:94:fa:3c: 45:c9:6f:34:c6:23:02:e0:2c:58:29:91:7d:d0:ee:00:43:c9: f0:ef:f2:d9:b9:fc:cb:a4:18:d9:6c:a4:11:1f:6c:67:17:4c: 27:a1:25:ff:0f:d1:aa:c5:e1:67:65:05:86:e4:3f:4c:ab:22: 4b:a3:eb:96:18:54:39:6c:df:ca:64:0d:78:dd:3b:b6:e6:0f: 93:c8:27:95:b4:5b:cc:51:34:b0:5c:78:89:dc:2c:89:b3:5f: f8:94:fa:e3:c6:c5:a7:3e:c4:8b:5a:d7:5e:77:86:53:23:d0: dc:72:b1:61:16:2d:b9:42:40:d0:c5:60:69:50:77:8a:97:e1: 26:4a:60:21:4e:1f:22:30:90:bc:32:1d:dc:3a:79:e4:a3:a6: a2:7d:7a:d0 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTczNjkxMTAvBgNVBAUTKEY5MEUyMTBGQ0U3QzY3QTJGMkIzMkRFMTRFRUIwNUEw NEIwRDEwRTEwHhcNMjUwOTE5MDQxMTE1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNjZDdlMy0wMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5waG+Ut9RbCykuY9T+OcMQ2SEkwJcvnKShx9ucEkpgsEl7+KjZaBb0eqQFrg L0zaTsdMdxfXjzcS+ETGRcS4/JaCWDhBw2WyjBUDoHAsy/OV/sHEYIE6g/eXqvvP HfF5Gqf2b2w4l09GZlKQlaTny4tGhj014UI5tdGMJ6EokQ8BQEtRY4xo1YW9S/i1 few1sufS5HY58yIxuE2MXSJh3umSRk1Szak6RQE4Q7vvMamuCeNwNEQ4WAQs3qn4 or1GGPQYNN3YkALenZhwI8n9j7wnVsFleBtr8G86JdeW2YjtRYUL2l/0tw1pNG4x 7x+phSxOXXvffrg3l1F0ULMf7wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFFy+AjJ XiydYEeKIBJyeZl0S8NYMB8GA1UdIwQYMBaAFPkOIQ/OfGei8rMt4U7rBaBLDRDh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzM2OS9CMUQ2MTk0MjQ4 N0YxMUVFQTgwQTAyNENDNEY5QUUwMi8tUTRoRDg1OFo2THlzeTNoVHVzRm9Fc05F T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1RNGhEODU4WjZMeXN5M2hUdXNGb0VzTkVPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTczNjkvQjFENjE5NDI0ODdGMTFFRUE4MEEwMjRDQzRGOUFFMDIvQTk5RTU2NTg0 ODgwMTFFRTgxMTNBNzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnm0QwDQQCAAIwBwMFACQGaUAwDQYJKoZIhvcNAQELBQAD ggEBADaFwhzmz7wsvQAYx5ZOiTkfPISal3RZmhrkQ1iruhe9vvf3xVczTx2p8tV9 CtfQPLZ1mECaUElKRcpr3OppicT1BYw1bg6I+JJ9HQO7+CAgRHsZZ/HOlPxctOG9 +nCaHvAgLur9NntJyJT6PEXJbzTGIwLgLFgpkX3Q7gBDyfDv8tm5/MukGNlspBEf bGcXTCehJf8P0arF4WdlBYbkP0yrIkuj65YYVDls38pkDXjdO7bmD5PIJ5W0W8xR NLBceIncLImzX/iU+uPGxac+xIta1153hlMj0NxysWEWLblCQNDFYGlQd4qX4SZK YCFOHyIwkLwyHdw6eeSjpqJ9etA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:16:35 2025 by rpki-client