$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/304D6C7E24C211EBAC07F90DC4F9AE02.roa File: 304D6C7E24C211EBAC07F90DC4F9AE02.roa (raw, json) Hash identifier: RopP9bCjnaxwbQMfD3uls170c24lrepvVAUEUJQ1Ffk= Subject key identifier: 9B:88:02:00:EF:AB:BB:00:28:36:C5:09:D6:63:4D:FF:CE:80:1D:C1 Certificate issuer: /CN=A91BFD87/serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F Certificate serial: 07A5 Authority key identifier: AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/304D6C7E24C211EBAC07F90DC4F9AE02.roa Signing time: Sun 26 Oct 2025 22:40:38 +0000 ROA not before: Sun 26 Oct 2025 22:40:38 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141194 IP address blocks: 103.156.56.0/24 maxlen: 24 103.161.226.0/24 maxlen: 24 2001:df5:5a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFD87, serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F Validity Not Before: Oct 26 22:40:38 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68fea365-bf33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:c3:1d:10:a1:63:03:8c:84:2e:9a:fa:fa: d6:b1:14:f2:cf:63:db:69:2a:f0:19:3e:45:36:d3: 74:18:61:ca:9d:78:41:93:e4:a4:17:da:6b:ac:98: 58:81:0f:9e:29:41:c6:98:8d:30:79:cc:ff:7b:5d: 4d:96:48:c4:70:db:1e:9b:1c:30:9e:1c:c8:f4:d9: 6e:65:3b:aa:af:1a:d9:fa:b9:11:d1:42:2e:2f:49: 99:b5:8c:6a:ae:06:33:26:b2:fc:1f:b9:5b:17:d6: ae:3d:e1:6e:71:ce:98:69:d7:bb:aa:96:61:a3:2d: 6d:3c:fa:13:47:7b:cb:81:0a:ee:ea:39:9c:71:7c: 74:0f:fb:ea:35:cc:3f:b2:ce:f3:02:2d:ae:e7:e2: 8d:1e:a7:b8:c2:8f:f7:25:ea:11:ba:86:2b:81:19: 7f:e7:75:fd:84:1a:8c:81:d5:77:6a:c9:d9:25:8c: d5:97:43:3f:e5:5a:6f:9c:f2:e1:b4:d1:4e:4e:ab: ac:68:4e:1b:e1:65:91:35:95:5d:b0:9d:6c:a3:06: 8c:36:a6:81:6a:43:c5:79:e0:26:6d:fe:4c:00:08: 7c:ce:23:a7:8e:f9:61:b8:dc:03:6f:a5:98:fb:5e: 0f:e6:63:b1:5c:0d:83:bd:bd:de:f6:e5:33:17:ad: 05:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:88:02:00:EF:AB:BB:00:28:36:C5:09:D6:63:4D:FF:CE:80:1D:C1 X509v3 Authority Key Identifier: keyid:AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/304D6C7E24C211EBAC07F90DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.56.0/24 103.161.226.0/24 IPv6: 2001:df5:5a80::/48 Signature Algorithm: sha256WithRSAEncryption 7c:dd:5d:2a:f8:fe:bd:35:38:29:e6:34:7d:a5:01:75:37:8f: 96:20:d9:54:ba:b2:94:30:a8:43:b5:47:5e:74:fa:07:2b:a0: a9:b1:74:cb:0d:d1:be:0e:dc:34:d6:0c:8b:26:a6:02:1a:61: 41:f6:ad:13:01:f4:13:d3:a8:21:84:04:2d:f9:32:30:dd:f1: eb:4a:0c:f8:f6:8c:00:16:3c:78:09:e1:1f:92:9c:c7:ee:59: 25:06:6a:7f:c9:0a:29:ab:38:3b:7b:6d:a9:de:80:b8:64:46: 8b:81:a3:75:47:d0:0b:1f:b8:02:62:a7:88:c2:1b:07:7b:ef: b5:ee:23:86:b3:83:51:a0:71:5f:30:4d:dc:c4:a6:06:02:f3: 77:fb:6e:86:98:ae:8c:b1:3f:e0:7e:8f:02:6b:14:3f:6a:6d: b3:c4:be:0f:ef:ba:f2:1c:49:8d:2a:1b:4a:83:bb:d0:86:05: 4f:c0:28:9e:66:72:42:96:f8:e0:38:aa:28:2a:61:8d:8c:8f: 18:34:6e:d4:bc:32:e7:30:e9:23:b7:a6:ed:03:bd:04:10:f4: 2e:3f:a7:a5:f2:d3:f8:83:94:5c:e8:72:56:60:f0:7a:26:4c: 6b:7e:cc:49:48:01:4f:36:db:be:7f:e2:3a:9d:2b:3e:fa:66: ef:be:1c:f4 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZEODcxMTAvBgNVBAUTKEFDOUY5NUI3RDQ3OEU5ODI4NUNGNDRCRkM1N0Q4MTU5 NTUzNDU2NkYwHhcNMjUxMDI2MjI0MDM4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZlYTM2NS1iZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBfDHRChYwOMhC6a+vrWsRTyz2PbaSrwGT5FNtN0GGHKnXhBk+SkF9prrJhY gQ+eKUHGmI0wecz/e11NlkjEcNsemxwwnhzI9NluZTuqrxrZ+rkR0UIuL0mZtYxq rgYzJrL8H7lbF9auPeFucc6Yade7qpZhoy1tPPoTR3vLgQru6jmccXx0D/vqNcw/ ss7zAi2u5+KNHqe4wo/3JeoRuoYrgRl/53X9hBqMgdV3asnZJYzVl0M/5VpvnPLh tNFOTqusaE4b4WWRNZVdsJ1sowaMNqaBakPFeeAmbf5MAAh8ziOnjvlhuNwDb6WY +14P5mOxXA2Dvb3e9uUzF60FGQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJuIAgDv q7sAKDbFCdZjTf/OgB3BMB8GA1UdIwQYMBaAFKyflbfUeOmChc9Ev8V9gVlVNFZv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkQ4Ny9EREU3M0IyODI0 QzAxMUVCQkQ0NzA1MERDNEY5QUUwMi9ySi1WdDlSNDZZS0Z6MFNfeFgyQldWVTBW bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKLVZ0OVI0NllLRnowU194WDJCV1ZVMFZtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkZEODcvRERFNzNCMjgyNEMwMTFFQkJENDcwNTBEQzRGOUFFMDIvMzA0RDZDN0Uy NEMyMTFFQkFDMDdGOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnnDgDBABnoeIwDwQCAAIwCQMHACABDfVagDANBgkqhkiG 9w0BAQsFAAOCAQEAfN1dKvj+vTU4KeY0faUBdTePliDZVLqylDCoQ7VHXnT6Byug qbF0yw3Rvg7cNNYMiyamAhphQfatEwH0E9OoIYQELfkyMN3x60oM+PaMABY8eAnh H5Kcx+5ZJQZqf8kKKas4O3ttqd6AuGRGi4GjdUfQCx+4AmKniMIbB3vvte4jhrOD UaBxXzBN3MSmBgLzd/tuhpiujLE/4H6PAmsUP2pts8S+D++68hxJjSobSoO70IYF T8AonmZyQpb44DiqKCphjYyPGDRu1Lwy5zDpI7em7QO9BBD0Lj+npfLT+IOUXOhy VmDweiZMa37MSUgBTzbbvn/iOp0rPvpm774c9A== -----END CERTIFICATE-----Generated at Tue Nov 4 21:19:26 2025 by rpki-client