$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa File: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (raw, json) Hash identifier: clJzNQtpotr4QSXsgUT08usDpM+kRLKmxfMjpmGDJ6E= Subject key identifier: FA:0A:FC:6F:4E:F1:C5:05:24:F2:4F:4B:33:26:D5:36:B7:0A:BF:56 Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 0717 Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa Signing time: Tue 30 Sep 2025 22:24:48 +0000 ROA not before: Tue 30 Sep 2025 22:24:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 140220 IP address blocks: 103.192.152.0/22 maxlen: 24 103.196.80.0/22 maxlen: 24 202.182.80.0/20 maxlen: 24 2405:da40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Sep 30 22:24:48 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dc58b0-d9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:1b:44:67:f0:36:74:38:dc:da:f8:31:51: b0:d9:59:81:52:54:4e:00:eb:2e:4c:33:0b:a1:4c: 9c:6b:3e:53:49:c1:f9:a2:da:43:0b:7b:fe:72:35: b2:a4:9c:07:1d:5e:06:59:c0:9a:60:04:ac:31:ee: 4d:e4:3a:41:54:41:18:8d:cb:0c:3e:3a:7e:b6:f6: 8b:5e:dd:8a:07:58:51:99:5a:42:65:7d:e6:9d:1d: 87:4f:f2:0d:3a:95:a9:58:de:59:44:cd:85:63:4e: cb:04:3d:a5:4c:df:ec:35:f0:0f:1a:ae:5b:e6:17: 4e:36:ee:c8:e2:c4:3d:67:58:5f:63:0a:1b:2d:7c: c5:55:d9:1b:94:d8:c3:2e:47:ea:f4:26:85:a8:c9: 49:48:80:4f:fa:c1:fd:53:bc:e9:64:f6:7a:79:db: 30:bf:ad:bf:68:91:8b:99:6f:a7:b5:e7:74:31:43: 5f:e7:01:62:da:14:97:34:c8:8a:68:39:c1:35:69: 1f:6d:9b:cf:10:17:85:ca:78:b5:b5:dc:4c:6e:68: 19:e5:3a:87:74:f6:35:03:a3:06:2b:eb:e9:a2:37: ef:69:84:29:91:23:69:cd:7f:a7:dd:55:30:54:0a: 08:d5:40:c1:e4:eb:29:c6:a2:d8:c0:bf:57:13:6f: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0A:FC:6F:4E:F1:C5:05:24:F2:4F:4B:33:26:D5:36:B7:0A:BF:56 X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.192.152.0/22 103.196.80.0/22 202.182.80.0/20 IPv6: 2405:da40::/32 Signature Algorithm: sha256WithRSAEncryption 62:93:34:65:5f:ed:a2:8f:5b:ed:84:91:5c:14:e6:72:e6:de: ff:20:84:c5:9d:3d:a4:a8:b4:18:d2:43:21:de:a5:27:4d:d0: bd:d6:dc:67:0d:08:ad:d5:8c:1f:af:c9:7e:f4:e7:f3:9f:6b: ed:0c:a9:d0:14:1b:7c:40:ea:e8:0e:b8:c7:45:0a:27:73:64: 56:92:aa:0c:01:c0:00:52:d8:f1:5d:3e:f2:bf:8c:53:ef:41: 56:06:1d:a0:0e:58:c8:3d:49:c5:e8:c7:f8:e0:86:bd:4a:7d: 32:70:ad:dc:4a:f3:e7:c3:26:ca:8c:bc:46:b6:88:ff:af:17: 94:d3:9b:b8:a4:8f:88:55:11:17:bc:d7:fe:59:b8:56:db:f2: 1c:b8:f4:30:05:52:38:38:e9:cc:67:3e:a4:ac:97:d8:2b:7b: 8d:4f:db:90:5d:3e:16:d1:f6:8c:fb:7b:7f:c7:61:bb:96:94: 74:41:b9:64:93:7c:65:7b:14:5c:69:1f:6a:0d:21:c5:fd:53: 66:d8:0e:f0:b5:67:2a:05:df:78:04:b4:ac:eb:c1:0d:bc:97: c2:9c:87:e2:69:b8:8c:ca:e8:64:6a:7a:f3:ac:68:cf:a8:79: 05:ee:d5:e4:d8:e8:7b:ca:85:4d:60:33:37:9a:8c:c0:d7:e7: da:fe:04:a9 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUwOTMwMjIyNDQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjNThiMC1kOWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwYbRGfwNnQ43Nr4MVGw2VmBUlROAOsuTDMLoUycaz5TScH5otpDC3v+cjWy pJwHHV4GWcCaYASsMe5N5DpBVEEYjcsMPjp+tvaLXt2KB1hRmVpCZX3mnR2HT/IN OpWpWN5ZRM2FY07LBD2lTN/sNfAPGq5b5hdONu7I4sQ9Z1hfYwobLXzFVdkblNjD Lkfq9CaFqMlJSIBP+sH9U7zpZPZ6edswv62/aJGLmW+nted0MUNf5wFi2hSXNMiK aDnBNWkfbZvPEBeFyni1tdxMbmgZ5TqHdPY1A6MGK+vpojfvaYQpkSNpzX+n3VUw VAoI1UDB5OspxqLYwL9XE2+o2wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPoK/G9O 8cUFJPJPSzMm1Ta3Cr9WMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ2NDMvRUZCRTZFQjI1Qjg4MTFFQkJENUYzMDc2QzRGOUFFMDIvODFFOTY1M0U1 QjhBMTFFQjg1N0EzRjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJnwJgDBAJnxFADBATKtlAwDQQCAAIwBwMFACQF2kAwDQYJ KoZIhvcNAQELBQADggEBAGKTNGVf7aKPW+2EkVwU5nLm3v8ghMWdPaSotBjSQyHe pSdN0L3W3GcNCK3VjB+vyX705/Ofa+0MqdAUG3xA6ugOuMdFCidzZFaSqgwBwABS 2PFdPvK/jFPvQVYGHaAOWMg9ScXox/jghr1KfTJwrdxK8+fDJsqMvEa2iP+vF5TT m7ikj4hVERe81/5ZuFbb8hy49DAFUjg46cxnPqSsl9gre41P25BdPhbR9oz7e3/H YbuWlHRBuWSTfGV7FFxpH2oNIcX9U2bYDvC1ZyoF33gEtKzrwQ28l8Kch+JpuIzK 6GRqevOsaM+oeQXu1eTY6HvKhU1gMzeajMDX59r+BKk= -----END CERTIFICATE-----Generated at Wed Nov 5 19:50:23 2025 by rpki-client