$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/883D22EE9B3E11EE92E35D68C4F9AE02.roa File: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (raw, json) Hash identifier: MD/nzbD2nOVlPocaRCfyouATKmI9+KQw4/brLtSFFd0= Subject key identifier: FA:EE:2C:5B:60:DE:49:9A:56:41:78:D3:36:95:4C:FC:A6:D4:A2:72 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 015C Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/883D22EE9B3E11EE92E35D68C4F9AE02.roa Signing time: Sun 05 Oct 2025 04:30:54 +0000 ROA not before: Sun 05 Oct 2025 04:30:54 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136582 IP address blocks: 103.203.241.0/24 maxlen: 24 2001:df4:39c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: Oct 5 04:30:54 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e1f47d-aede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b4:70:b4:4e:98:8f:ab:59:e0:19:bd:d4:3c: dd:82:2d:eb:b9:59:51:68:04:27:6c:60:97:db:3d: 95:58:76:9e:74:e3:81:67:bb:8f:59:e1:06:d4:16: d5:fb:d9:ad:4f:cc:6a:95:17:98:0d:66:7c:b5:fb: b5:f0:42:2b:d4:44:b3:12:d2:e5:b2:3b:30:75:c4: 11:1c:72:a5:e8:8c:34:33:9b:da:77:1c:3f:c3:79: 1e:66:75:95:22:3c:f0:75:c6:29:38:c8:bd:cf:58: 25:ea:5f:59:e2:ac:ee:ea:e5:68:2d:55:3d:06:9d: 89:c2:c2:a2:fc:71:67:63:b9:c3:c5:b5:d0:31:e9: a1:f3:d0:0c:1e:13:71:d9:ff:f1:8b:db:c8:92:4b: 34:14:9b:c2:40:82:36:76:5e:42:33:e8:b7:8f:29: 12:33:c2:e2:d2:2f:71:53:c3:69:a7:ea:08:65:d8: fe:23:bd:7c:27:9c:94:38:24:11:04:df:e7:51:dd: 30:29:2a:67:d8:99:72:3e:6c:40:b5:ea:b3:2e:ff: 6a:49:8f:b7:c5:62:0b:9f:18:71:04:19:1e:b1:57: 9d:f4:c9:22:63:14:26:3e:f1:b4:fc:0b:07:16:05: a5:25:36:51:e4:a5:02:10:80:6e:28:b0:e0:ab:f7: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EE:2C:5B:60:DE:49:9A:56:41:78:D3:36:95:4C:FC:A6:D4:A2:72 X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/883D22EE9B3E11EE92E35D68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.241.0/24 IPv6: 2001:df4:39c0::/48 Signature Algorithm: sha256WithRSAEncryption 9c:09:26:bb:8a:0f:53:95:a4:33:be:85:98:4d:e7:cb:e5:f0: 6c:11:bf:7e:2d:89:cb:23:72:94:17:fa:8b:6e:db:ed:2c:73: 30:7a:80:25:fc:93:f8:a1:e7:57:0d:7f:aa:5e:23:5c:7a:68: 79:6d:fe:22:47:9f:16:b1:94:75:56:26:26:3a:9a:1a:98:52: 10:87:cd:b4:d7:d3:d3:6b:6e:04:64:70:ae:ad:ca:a5:f5:3d: c5:92:f1:f5:f5:ee:8a:94:f1:5c:2f:be:06:e1:9d:b7:f3:14: 89:79:11:57:64:bb:f5:58:f5:3f:d1:dc:ce:98:db:03:f6:72: 54:cf:da:8d:49:2a:8f:37:10:78:8a:2d:17:2f:72:3f:e2:2c: ab:7e:57:4d:00:00:df:ed:e1:6a:b8:bf:6d:92:d3:32:e7:b7: 57:5c:6b:22:b2:29:71:63:80:c2:70:36:c2:da:53:18:c0:cc: df:f0:bd:c6:64:61:f1:65:58:0b:9e:1d:39:d0:fb:a7:c1:45: 7d:66:59:aa:35:f2:ed:53:b0:5d:3c:57:c1:00:19:99:87:26: 8f:82:52:ba:dd:7e:6e:cf:57:2b:db:f1:4a:31:db:93:79:f3: 54:26:76:1e:78:8d:30:8f:e2:e8:33:22:99:46:de:af:eb:cb: 94:f0:01:95 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKDhGMDY4NjlDRUZDRDVDMjcyMzEzMkUzRUY5Q0RCN0E0 NjFEMDFCMTkwHhcNMjUxMDA1MDQzMDU0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxZjQ3ZC1hZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87RwtE6Yj6tZ4Bm91Dzdgi3ruVlRaAQnbGCX2z2VWHaedOOBZ7uPWeEG1BbV +9mtT8xqlReYDWZ8tfu18EIr1ESzEtLlsjswdcQRHHKl6Iw0M5vadxw/w3keZnWV IjzwdcYpOMi9z1gl6l9Z4qzu6uVoLVU9Bp2JwsKi/HFnY7nDxbXQMemh89AMHhNx 2f/xi9vIkks0FJvCQII2dl5CM+i3jykSM8Li0i9xU8Npp+oIZdj+I718J5yUOCQR BN/nUd0wKSpn2JlyPmxAteqzLv9qSY+3xWILnxhxBBkesVed9MkiYxQmPvG0/AsH FgWlJTZR5KUCEIBuKLDgq/fJjQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPruLFtg 3kmaVkF40zaVTPym1KJyMB8GA1UdIwQYMBaAFI8GhpzvzVwnIxMuPvnNt6Rh0BsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi9FRkUwNDA0QTlC M0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhDY2pFeTQtLWMyM3BHSFFH eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QxQTIvRUZFMDQwNEE5QjNDMTFFRUIzRkNBRDQ5QzRGOUFFMDIvODgzRDIyRUU5 QjNFMTFFRTkyRTM1RDY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABny/EwDwQCAAIwCQMHACABDfQ5wDANBgkqhkiG9w0BAQsF AAOCAQEAnAkmu4oPU5WkM76FmE3ny+XwbBG/fi2JyyNylBf6i27b7SxzMHqAJfyT +KHnVw1/ql4jXHpoeW3+IkefFrGUdVYmJjqaGphSEIfNtNfT02tuBGRwrq3KpfU9 xZLx9fXuipTxXC++BuGdt/MUiXkRV2S79Vj1P9HczpjbA/ZyVM/ajUkqjzcQeIot Fy9yP+Isq35XTQAA3+3hari/bZLTMue3V1xrIrIpcWOAwnA2wtpTGMDM3/C9xmRh 8WVYC54dOdD7p8FFfWZZqjXy7VOwXTxXwQAZmYcmj4JSut1+bs9XK9vxSjHbk3nz VCZ2HniNMI/i6DMimUber+vLlPABlQ== -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:48 2025 by rpki-client