$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/86BBD3DE994C11EC82BA3978C4F9AE02.roa File: 86BBD3DE994C11EC82BA3978C4F9AE02.roa (raw, json) Hash identifier: ttMgb6ONjjqlxH7NcYS6FYVe7vqQ8UVMk9Tx3etFzQ0= Subject key identifier: 8F:33:15:DB:7C:02:19:D9:6F:2C:C7:AD:B3:43:58:A7:9E:6E:1A:1E Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 16C2 Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/86BBD3DE994C11EC82BA3978C4F9AE02.roa Signing time: Tue 04 Nov 2025 09:53:53 +0000 ROA not before: Tue 04 Nov 2025 09:53:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206283 IP address blocks: 103.27.20.0/24 maxlen: 24 175.111.1.0/24 maxlen: 24 175.111.6.0/24 maxlen: 24 2001:fe8:8f00::/40 maxlen: 40 2001:fe8:8f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 10:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5826 (0x16c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Nov 4 09:53:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6909cd30-adbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:c7:53:d4:ef:47:7f:27:cb:c7:fc:58:c9: 3c:6f:b2:f5:93:fb:d6:b8:b8:09:3d:81:99:83:22: f0:b3:71:25:0e:4d:ca:e7:43:be:5a:06:43:d3:c8: 37:13:38:8f:c6:23:58:ff:b4:11:5c:63:54:b4:9b: e7:ca:be:01:12:b1:ba:35:f2:3e:b3:a3:bf:f9:d4: c3:3c:d7:63:6c:a0:34:57:84:e6:a8:40:96:f0:50: 7f:ed:aa:00:76:99:52:bf:67:11:79:23:0f:48:9d: e6:6d:70:24:b9:96:00:97:4c:53:bb:eb:3a:3d:31: 08:36:3b:38:8a:1a:b2:a1:a5:ec:69:70:8e:a8:31: 10:b0:56:c1:9d:57:db:7e:56:2a:56:d0:38:6e:90: e9:1b:ed:66:d9:e8:3b:ae:32:10:d7:d1:0e:85:62: 18:3b:f8:02:05:6b:6c:95:f6:af:ac:a2:fc:ae:a7: f3:3d:ca:c1:27:e3:3d:fd:50:64:7e:d2:28:97:56: 55:99:e6:33:18:90:9e:ee:c1:53:b0:2a:0f:c1:65: 04:40:59:ef:bd:52:57:a3:1d:26:6f:93:ad:d9:f4: b0:d1:6c:a0:02:7e:0e:de:e1:13:e2:2b:cb:69:b9: a4:85:60:74:c6:35:55:74:e5:9e:93:2b:5b:a5:aa: 02:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:33:15:DB:7C:02:19:D9:6F:2C:C7:AD:B3:43:58:A7:9E:6E:1A:1E X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/86BBD3DE994C11EC82BA3978C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.27.20.0/24 175.111.1.0/24 175.111.6.0/24 IPv6: 2001:fe8:8f00::/40 Signature Algorithm: sha256WithRSAEncryption 26:11:46:98:6b:1c:d3:fc:76:30:62:54:af:ff:8f:80:e7:2c: f1:d2:1e:62:88:76:04:e9:1d:49:a4:73:51:9b:39:ba:4a:fd: db:7f:63:ab:cb:53:ec:c8:5e:d5:45:8a:b0:51:2a:93:51:93: 8d:5f:b8:e2:fd:cd:aa:7b:b1:89:c4:a4:95:80:92:72:81:60: 13:88:f8:81:92:11:1e:e1:1f:84:13:e1:5d:34:18:d0:93:d2: eb:66:c7:1a:9e:c5:45:3a:e9:9f:18:03:a4:bd:4c:f4:61:2c: ab:c0:09:ec:f8:71:8c:1f:bd:e7:6a:31:a8:42:b8:fa:6e:10: 15:58:6b:01:f2:d0:70:18:c0:ef:99:e4:13:44:63:8c:d2:09: 6b:92:ee:7c:c1:3d:87:7b:06:8b:13:32:28:9e:2b:9c:c3:92: 54:8e:34:00:8a:86:24:17:f8:99:d8:b7:99:eb:ba:80:87:8e: d4:8d:56:58:9c:cc:2a:d7:10:36:91:1b:b2:76:61:35:35:bb: 35:78:e0:82:8f:ed:fb:c7:1d:12:44:0b:cf:fa:9a:32:0b:d0: f6:f1:d0:2e:94:bc:6a:3a:20:e8:56:4c:d7:65:cc:2f:6e:ae: 7b:75:5b:6f:8b:0f:1d:5c:7f:58:48:6e:32:ed:ff:58:a5:d4: 69:15:a5:61 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICFsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjUxMTA0MDk1MzUzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA5Y2QzMC1hZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEfHU9TvR38ny8f8WMk8b7L1k/vWuLgJPYGZgyLws3ElDk3K50O+WgZD08g3 EziPxiNY/7QRXGNUtJvnyr4BErG6NfI+s6O/+dTDPNdjbKA0V4TmqECW8FB/7aoA dplSv2cReSMPSJ3mbXAkuZYAl0xTu+s6PTEINjs4ihqyoaXsaXCOqDEQsFbBnVfb flYqVtA4bpDpG+1m2eg7rjIQ19EOhWIYO/gCBWtslfavrKL8rqfzPcrBJ+M9/VBk ftIol1ZVmeYzGJCe7sFTsCoPwWUEQFnvvVJXox0mb5Ot2fSw0WygAn4O3uET4ivL abmkhWB0xjVVdOWekytbpaoCyQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFI8zFdt8 AhnZbyzHrbNDWKeebhoeMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjExODUvM0VBOUREM0ExNjIzMTFFODkyQzRBOTQwQzRGOUFFMDIvODZCQkQzREU5 OTRDMTFFQzgyQkEzOTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMBgEAgABMBIDBABnGxQDBACvbwEDBACvbwYwDgQCAAIwCAMGACABD+iPMA0G CSqGSIb3DQEBCwUAA4IBAQAmEUaYaxzT/HYwYlSv/4+A5yzx0h5iiHYE6R1JpHNR mzm6Sv3bf2Ory1PsyF7VRYqwUSqTUZONX7ji/c2qe7GJxKSVgJJygWATiPiBkhEe 4R+EE+FdNBjQk9LrZscansVFOumfGAOkvUz0YSyrwAns+HGMH73najGoQrj6bhAV WGsB8tBwGMDvmeQTRGOM0glrku58wT2HewaLEzIoniucw5JUjjQAioYkF/iZ2LeZ 67qAh47UjVZYnMwq1xA2kRuydmE1Nbs1eOCCj+37xx0SRAvP+poyC9D28dAulLxq OiDoVkzXZcwvbq57dVtviw8dXH9YSG4y7f9YpdRpFaVh -----END CERTIFICATE-----Generated at Tue Nov 4 17:18:42 2025 by rpki-client