$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa File: 1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa (raw, json) Hash identifier: LZTeBlzg8LIIGWYRTbkSXJOmZLTYgbOTP4Uq6deoib8= Subject key identifier: 07:F3:A5:C5:33:9C:6F:F5:36:E6:39:5A:AC:F7:CE:48:5A:75:C5:99 Certificate issuer: /CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Certificate serial: 168F Authority key identifier: 26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa Signing time: Fri 31 Oct 2025 17:04:53 +0000 ROA not before: Fri 31 Oct 2025 17:04:53 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 137080 IP address blocks: 103.104.28.0/22 maxlen: 24 103.106.146.0/23 maxlen: 24 2401:ff40::/32 maxlen: 32 2401:ff40:5000::/44 maxlen: 44 2401:ff40:5010::/44 maxlen: 44 2401:ff40:5020::/44 maxlen: 44 2401:ff40:5040::/44 maxlen: 44 2401:ff40:e000::/44 maxlen: 44 2401:ff40:e040::/44 maxlen: 44 2401:ff40:f000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5775 (0x168f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDE68, serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Validity Not Before: Oct 31 17:04:53 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6904ec35-fd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4e:58:c9:85:00:7a:98:a0:03:c5:0f:55:ff: cc:84:82:bf:99:bb:ad:dc:75:b2:6f:4f:c5:19:2e: fa:59:b6:f6:ac:33:4d:8c:91:b3:63:8b:73:3c:fc: d5:51:2c:9b:eb:29:57:ee:d1:ea:4c:3e:ce:58:9c: a3:d4:67:ac:d0:7a:a7:2e:7b:8c:00:25:61:36:97: ce:36:13:5f:b4:af:73:0c:8d:94:ae:6c:5a:63:f2: 11:5b:7e:d7:9a:6d:91:f3:88:ee:f3:ae:fd:d7:58: 9d:20:f3:2b:72:a8:d2:57:2e:ca:89:c4:e7:cf:1d: 35:e1:b0:fa:84:35:d8:c2:13:ab:92:2a:67:f2:aa: 38:e6:20:ed:95:18:9a:a4:47:d6:7b:90:22:6d:f0: 24:65:a6:dd:cd:92:63:40:65:e4:75:65:9b:6f:27: f2:f7:bd:d8:a4:95:3b:79:f0:95:5d:a0:0a:85:5e: 56:91:d0:b9:1b:4b:a0:b0:30:d4:24:b4:c2:53:97: 5c:72:87:19:0d:8f:82:58:c6:99:89:61:3a:e0:7c: 9f:06:c4:36:d6:f0:b8:71:42:98:3d:2a:53:af:47: 5f:45:d0:fd:6a:23:32:bf:1a:b8:51:c5:de:3d:cf: 5a:33:44:8b:aa:b6:21:45:10:97:ad:b6:24:64:c2: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F3:A5:C5:33:9C:6F:F5:36:E6:39:5A:AC:F7:CE:48:5A:75:C5:99 X509v3 Authority Key Identifier: keyid:26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.28.0/22 103.106.146.0/23 IPv6: 2401:ff40::/32 Signature Algorithm: sha256WithRSAEncryption 1b:2e:15:12:04:75:77:4b:f1:1f:75:50:d8:d1:f3:39:42:25: 20:48:9b:06:97:55:fd:78:20:61:a9:3e:42:61:c0:b4:e2:0e: 1e:1b:be:15:f4:02:75:e0:c0:ab:65:25:7e:f8:90:e0:c0:8c: cd:05:2c:7c:73:f9:e4:3d:85:32:d1:94:7f:40:d2:84:fa:51: ec:0a:32:21:de:10:dc:dc:a0:e2:eb:94:6f:97:02:78:1f:cb: f8:80:f5:ee:a3:ea:55:aa:bc:24:4c:d1:b1:48:54:6e:22:58: de:08:1f:bf:6b:64:fb:7c:e5:77:01:05:03:14:f3:86:bf:57: 72:04:38:cb:55:70:70:66:23:30:52:c5:7f:24:e6:63:4a:24: e2:c3:a1:df:3a:99:1f:fa:5c:f8:64:e2:0a:2c:3c:51:c0:17: 95:20:ea:d6:87:85:4b:f8:0d:fe:ca:5f:d3:45:c0:31:6e:65: d2:6c:2f:5d:f1:27:15:87:04:9c:56:73:05:61:d1:09:7b:80: 12:30:7b:d8:cd:b1:ea:db:aa:68:b7:2c:20:83:d1:54:66:96: 50:b5:54:54:f5:1e:59:5d:73:a9:ea:7f:4d:a8:db:8a:07:72: 3a:b0:ab:74:72:36:8f:c1:47:fc:60:c5:cb:e6:a2:ca:82:fa: ec:71:c9:bd -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICFo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFNjgxMTAvBgNVBAUTKDI2ODhENDhFMzQyMTkyQjVGREE4REI2REFENjJDQzE1 Qzg3NTAzRkEwHhcNMjUxMDMxMTcwNDUzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0ZWMzNS1mZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApU5YyYUAepigA8UPVf/MhIK/mbut3HWyb0/FGS76Wbb2rDNNjJGzY4tzPPzV USyb6ylX7tHqTD7OWJyj1Ges0HqnLnuMACVhNpfONhNftK9zDI2UrmxaY/IRW37X mm2R84ju867911idIPMrcqjSVy7KicTnzx014bD6hDXYwhOrkipn8qo45iDtlRia pEfWe5AibfAkZabdzZJjQGXkdWWbbyfy973YpJU7efCVXaAKhV5WkdC5G0ugsDDU JLTCU5dccocZDY+CWMaZiWE64HyfBsQ21vC4cUKYPSpTr0dfRdD9aiMyvxq4UcXe Pc9aM0SLqrYhRRCXrbYkZMJSbwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAfzpcUz nG/1NuY5Wqz3zkhadcWZMB8GA1UdIwQYMBaAFCaI1I40IZK1/ajbba1izBXIdQP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREU2OC84MEIyRjNGODE1 RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGtyWDlxTnR0cldMTUZjaDFB X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pvalVqalFoa3JYOXFOdHRyV0xNRmNoMUFfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkRFNjgvODBCMkYzRjgxNUVBMTFFOEE3MzUzNjEzQzRGOUFFMDIvMUY4QUVDQzZF Rjg0MTFFQkI0RTAwRDREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnaBwDBAFnapIwDQQCAAIwBwMFACQB/0AwDQYJKoZIhvcN AQELBQADggEBABsuFRIEdXdL8R91UNjR8zlCJSBImwaXVf14IGGpPkJhwLTiDh4b vhX0AnXgwKtlJX74kODAjM0FLHxz+eQ9hTLRlH9A0oT6UewKMiHeENzcoOLrlG+X Angfy/iA9e6j6lWqvCRM0bFIVG4iWN4IH79rZPt85XcBBQMU84a/V3IEOMtVcHBm IzBSxX8k5mNKJOLDod86mR/6XPhk4gosPFHAF5Ug6taHhUv4Df7KX9NFwDFuZdJs L13xJxWHBJxWcwVh0Ql7gBIwe9jNserbqmi3LCCD0VRmllC1VFT1Hlldc6nqf02o 24oHcjqwq3RyNo/BR/xgxcvmosqC+uxxyb0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:14 2025 by rpki-client