$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa File: 68EAE318D09411EA9D19403FC4F9AE02.roa (raw, json) Hash identifier: 36vsX/kRCXg+ogIu5Zo1EQtB8DOFdXEItLvHPcLnMbo= Subject key identifier: 80:79:6D:33:63:83:36:3E:E0:D1:0C:1B:D3:54:BE:2D:55:1E:4D:49 Certificate issuer: /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6 Certificate serial: 08A6 Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa Signing time: Thu 30 Oct 2025 20:40:21 +0000 ROA not before: Thu 30 Oct 2025 20:40:21 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 140947 IP address blocks: 103.153.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6 Validity Not Before: Oct 30 20:40:21 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6903cd35-41f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fa:99:cb:44:4a:4d:e2:1e:09:3b:13:78:4d: c4:3d:9f:5b:85:1f:81:af:79:da:a5:f3:5b:37:5f: 50:b2:cb:2c:41:af:71:4a:e3:aa:92:14:e6:2a:5f: c1:55:2e:b9:ca:b4:6a:ff:2e:92:f2:d1:20:d8:63: 3e:42:23:2e:2c:6c:a9:bd:38:2b:62:77:54:ef:83: 8b:d3:77:e6:62:5f:c8:ac:84:c2:20:b7:90:15:57: 53:7a:9c:cc:3e:f1:0d:b7:61:66:6a:34:53:45:fb: 1b:d2:0c:56:0f:c6:c4:a6:66:cb:02:6b:d8:26:15: 6d:90:36:15:d5:b8:f8:da:0c:c4:8b:f4:05:2e:95: 67:09:2a:90:da:21:6e:c0:a0:9c:2f:1e:db:b3:d3: 11:1c:87:a0:bc:de:2f:c3:b3:93:24:dd:1e:e8:59: ec:0b:d2:dd:fa:1f:70:22:8c:ce:1d:2a:41:eb:db: 4e:a8:ca:42:be:be:03:7f:c4:7f:b0:dc:03:f9:a5: 69:75:63:b5:b2:01:e4:3d:f3:f8:e1:fd:42:cf:ae: b4:ff:3b:96:ae:74:19:c5:71:bf:63:70:3b:7b:fb: c7:34:b6:c0:36:0f:51:fc:21:3e:bb:70:8d:c0:4f: 48:12:22:93:7d:14:41:8a:06:10:32:07:70:af:85: 6f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:6D:33:63:83:36:3E:E0:D1:0C:1B:D3:54:BE:2D:55:1E:4D:49 X509v3 Authority Key Identifier: keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.182.0/23 Signature Algorithm: sha256WithRSAEncryption 21:fd:2d:de:6a:ec:6a:79:42:ad:02:58:1f:0d:52:30:29:08: 8a:5d:24:69:31:60:26:bc:20:a8:17:9c:5d:b0:29:c3:1c:73: d7:ea:1b:af:5d:0f:65:fa:03:73:1e:e8:55:f5:ac:a2:a7:40: ad:7a:4f:5b:6d:3b:2c:6b:ae:cd:7e:58:0f:58:51:9e:42:2e: 25:89:c8:5e:a8:b3:1e:cf:d9:f0:f7:d0:5f:92:61:8a:be:b5: 4d:43:b6:16:21:e5:5f:d7:2b:85:46:1b:af:b5:c0:a8:af:df: 2f:89:68:45:f7:21:e5:1c:64:88:30:e2:11:90:1a:2a:b5:ae: d5:1f:0b:1a:13:74:68:58:31:bf:56:e3:c0:d2:f2:98:05:70: 7a:a9:24:04:22:44:4b:15:d6:34:87:03:be:89:79:0e:c9:bf: 74:48:0c:b4:1d:ae:08:3a:7e:ff:08:cb:fe:62:ec:10:d1:c1: 75:c5:a7:dc:96:27:55:44:41:b8:81:8a:9d:e0:f6:82:07:3b: ad:47:29:78:8f:c0:ec:f1:c5:77:03:b9:c4:82:1b:03:6e:c1: 45:02:2e:03:f0:e7:fb:a3:ec:d6:5c:d5:d7:64:15:18:87:84: 23:ba:50:28:bb:8b:3c:98:00:19:bd:2e:fe:8e:9e:a5:7b:e4: 13:3b:cb:c0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERDMxMTAvBgNVBAUTKEMyRTBCNTgzREE0MERCNkREODMzMDUxQzA1MjQ1OTlF MUE1OTAyQzYwHhcNMjUxMDMwMjA0MDIxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzY2QzNS00MWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/qZy0RKTeIeCTsTeE3EPZ9bhR+Br3napfNbN19QssssQa9xSuOqkhTmKl/B VS65yrRq/y6S8tEg2GM+QiMuLGypvTgrYndU74OL03fmYl/IrITCILeQFVdTepzM PvENt2FmajRTRfsb0gxWD8bEpmbLAmvYJhVtkDYV1bj42gzEi/QFLpVnCSqQ2iFu wKCcLx7bs9MRHIegvN4vw7OTJN0e6FnsC9Ld+h9wIozOHSpB69tOqMpCvr4Df8R/ sNwD+aVpdWO1sgHkPfP44f1Cz660/zuWrnQZxXG/Y3A7e/vHNLbANg9R/CE+u3CN wE9IEiKTfRRBigYQMgdwr4VvCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIB5bTNj gzY+4NEMG9NUvi1VHk1JMB8GA1UdIwQYMBaAFMLgtYPaQNtt2DMFHAUkWZ4aWQLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0REMy8wRDcxNTAzMkQw OTIxMUVBQTU3MTJBM0NDNEY5QUUwMi93dUMxZzlwQTIyM1lNd1VjQlNSWm5ocFpB c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d1QzFnOXBBMjIzWU13VWNCU1JabmhwWkFzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0NERDMvMEQ3MTUwMzJEMDkyMTFFQUE1NzEyQTNDQzRGOUFFMDIvNjhFQUUzMThE MDk0MTFFQTlEMTk0MDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmbYwDQYJKoZIhvcNAQELBQADggEBACH9Ld5q7Gp5Qq0C WB8NUjApCIpdJGkxYCa8IKgXnF2wKcMcc9fqG69dD2X6A3Me6FX1rKKnQK16T1tt Oyxrrs1+WA9YUZ5CLiWJyF6osx7P2fD30F+SYYq+tU1DthYh5V/XK4VGG6+1wKiv 3y+JaEX3IeUcZIgw4hGQGiq1rtUfCxoTdGhYMb9W48DS8pgFcHqpJAQiREsV1jSH A76JeQ7Jv3RIDLQdrgg6fv8Iy/5i7BDRwXXFp9yWJ1VEQbiBip3g9oIHO61HKXiP wOzxxXcDucSCGwNuwUUCLgPw5/uj7NZc1ddkFRiHhCO6UCi7izyYABm9Lv6OnqV7 5BM7y8A= -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:47 2025 by rpki-client