$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/AD27F510895E11F0AF42FE0EC4F9AE02.roa File: AD27F510895E11F0AF42FE0EC4F9AE02.roa (raw, json) Hash identifier: 8JiU8Oos87rOfxfxW5raSyPKQ8t3Ze/tzK20sDot2kI= Subject key identifier: 41:23:70:4C:A7:A3:53:EF:98:6B:A1:61:D8:B8:D7:F6:28:2F:F8:1A Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 07C0 Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/AD27F510895E11F0AF42FE0EC4F9AE02.roa Signing time: Thu 04 Sep 2025 07:13:37 +0000 ROA not before: Thu 04 Sep 2025 07:13:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55720 IP address blocks: 103.85.108.0/24 maxlen: 24 103.85.109.0/24 maxlen: 24 103.85.110.0/24 maxlen: 24 119.160.232.0/24 maxlen: 24 119.160.233.0/24 maxlen: 24 119.160.234.0/24 maxlen: 24 119.160.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: Sep 4 07:13:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68b93c21-02f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:39:9f:a1:bb:a5:fb:c6:3b:25:1d:6d:0d:43: fb:38:e4:6b:11:4e:b6:f9:17:7c:dd:f1:e4:c4:e1: a7:da:c4:21:aa:90:34:f1:4c:f0:33:5a:a5:c1:77: f3:ee:88:9a:fa:b9:65:bc:47:4d:0d:87:09:18:90: 57:20:c3:41:bb:98:17:1b:fb:7b:65:17:cf:32:fe: fd:a0:95:55:12:26:b0:4a:de:90:e8:c2:48:ab:0b: 7e:04:19:56:2d:78:b5:21:b9:3a:0e:e9:68:54:79: 90:b0:ab:7d:ff:a9:48:0a:e8:8e:cc:27:8c:ea:59: 35:6c:b4:8a:e2:02:c8:c5:7f:42:6c:53:a3:e5:e0: fc:a8:96:b6:ac:b1:40:1e:62:cf:3a:ca:10:80:05: 1b:8e:67:fd:f7:22:0b:6b:e3:44:1c:ac:fb:19:cc: 54:59:f6:f7:40:66:90:07:2d:e0:ec:4e:25:93:8b: 93:7a:26:92:37:27:98:f8:5c:74:7c:80:8a:f4:9f: 73:f1:e4:10:0e:94:62:f6:dc:7b:48:eb:11:82:b1: 1f:81:6d:00:fe:2c:9f:2f:ac:78:6c:d4:53:5c:78: a1:83:d6:13:b6:0f:9c:cb:0c:d0:ae:fc:d8:e8:a9: 1d:fa:33:bb:45:8a:81:23:69:1f:c8:da:10:c8:e4: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:23:70:4C:A7:A3:53:EF:98:6B:A1:61:D8:B8:D7:F6:28:2F:F8:1A X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/AD27F510895E11F0AF42FE0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.108.0-103.85.110.255 119.160.232.0/22 Signature Algorithm: sha256WithRSAEncryption 32:c3:89:44:00:7c:f1:7a:cc:0a:58:c7:91:33:53:39:c5:a4: 75:b7:c3:41:e4:c8:01:36:1c:61:a0:77:32:f7:fd:b7:1c:81: 21:51:a8:26:56:35:97:6a:e1:2a:fe:82:68:72:00:cd:00:c6: 9a:95:be:e9:ce:e4:46:49:3e:d8:ff:08:db:4b:56:ef:2b:8d: 1a:56:68:a9:62:bc:09:ca:7e:96:e1:c8:22:2b:d2:8e:37:e9: be:98:c8:34:18:86:38:51:b5:15:92:ef:c7:ef:b4:8d:bb:f3: c9:d3:32:a4:48:f5:ba:43:4b:4d:36:b0:69:87:06:e1:d0:0d: 0a:db:46:a3:93:66:61:06:5a:5d:54:67:25:7e:f8:a1:52:77: 6f:28:5c:cb:c0:66:fd:38:2b:8d:d9:eb:11:3f:dc:82:23:95: 0d:3e:df:43:b7:bd:b0:65:ea:59:ad:e5:9a:83:7a:b7:e4:5a: 30:cd:26:63:06:f4:b7:b4:2c:b8:52:fa:9c:d7:c1:e0:23:59: 8a:24:26:fc:64:df:6f:2e:dc:2a:5a:92:39:cc:e6:dc:c2:c6: a7:ac:b7:7c:e1:07:6b:ba:d6:9d:6f:a4:66:be:21:d0:12:66: a1:61:88:ce:6e:06:1d:29:53:2a:11:52:84:19:95:96:c3:48: 65:55:ae:50 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjUwOTA0MDcxMzM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGI5M2MyMS0wMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8zmfobul+8Y7JR1tDUP7OORrEU62+Rd83fHkxOGn2sQhqpA08UzwM1qlwXfz 7oia+rllvEdNDYcJGJBXIMNBu5gXG/t7ZRfPMv79oJVVEiawSt6Q6MJIqwt+BBlW LXi1Ibk6DuloVHmQsKt9/6lICuiOzCeM6lk1bLSK4gLIxX9CbFOj5eD8qJa2rLFA HmLPOsoQgAUbjmf99yILa+NEHKz7GcxUWfb3QGaQBy3g7E4lk4uTeiaSNyeY+Fx0 fICK9J9z8eQQDpRi9tx7SOsRgrEfgW0A/iyfL6x4bNRTXHihg9YTtg+cywzQrvzY 6Kkd+jO7RYqBI2kfyNoQyORDRQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFEEjcEyn o1PvmGuhYdi41/YoL/gaMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzczMUEvQzlGODNBRUUwRUMzMTFFQkFDOTc5MTE4QzRGOUFFMDIvQUQyN0Y1MTA4 OTVFMTFGMEFGNDJGRTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEAmdVbAMEAGdVbgMEAneg6DANBgkqhkiG9w0BAQsFAAOC AQEAMsOJRAB88XrMCljHkTNTOcWkdbfDQeTIATYcYaB3Mvf9txyBIVGoJlY1l2rh Kv6CaHIAzQDGmpW+6c7kRkk+2P8I20tW7yuNGlZoqWK8Ccp+luHIIivSjjfpvpjI NBiGOFG1FZLvx++0jbvzydMypEj1ukNLTTawaYcG4dANCttGo5NmYQZaXVRnJX74 oVJ3byhcy8Bm/TgrjdnrET/cgiOVDT7fQ7e9sGXqWa3lmoN6t+RaMM0mYwb0t7Qs uFL6nNfB4CNZiiQm/GTfby7cKlqSOczm3MLGp6y3fOEHa7rWnW+kZr4h0BJmoWGI zm4GHSlTKhFShBmVlsNIZVWuUA== -----END CERTIFICATE-----Generated at Tue Nov 4 16:34:19 2025 by rpki-client