$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/7C39022AF67A11EC92B5670FC4F9AE02.roa File: 7C39022AF67A11EC92B5670FC4F9AE02.roa (raw, json) Hash identifier: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA= Subject key identifier: C1:EC:AD:16:AD:30:26:F6:94:BC:DE:47:DC:5F:C6:FD:88:89:0F:E1 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1129 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/7C39022AF67A11EC92B5670FC4F9AE02.roa Signing time: Wed 02 Apr 2025 17:46:37 +0000 ROA not before: Wed 02 Apr 2025 17:46:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 983 IP address blocks: 103.135.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4393 (0x1129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Apr 2 17:46:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ed77fc-93d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:6b:2f:9b:12:ca:a3:14:35:06:bb:3f:7c: dd:84:9d:dd:50:9d:3b:0e:aa:a8:3f:27:70:de:49: 7a:4c:90:16:b2:33:a0:4f:f5:39:6c:bf:2b:52:e0: 71:2b:bc:0a:7a:6c:80:5c:81:96:af:6e:41:e4:a6: bd:e6:07:8a:fd:fb:f3:e5:dd:09:6b:ea:15:d2:37: ca:7d:67:b5:52:e4:50:ba:a4:7d:3b:48:4f:17:74: 7e:48:0e:45:00:df:09:f7:5f:e7:b5:42:ec:bd:34: b8:99:ba:b2:17:38:7a:5a:1f:d2:2a:9a:03:aa:3d: b2:ec:9b:95:02:30:7c:49:cf:12:0d:39:2b:09:39: 54:29:a2:bf:bb:14:50:5e:55:22:7a:88:1d:e6:da: 19:51:a8:7c:8c:86:ad:68:2c:90:69:bf:9d:a9:3d: aa:99:37:fe:83:0c:cb:cb:5e:9a:79:ba:96:76:63: 3a:85:e5:f4:64:65:c3:0a:c6:94:f4:8d:a7:1c:c5: 0c:d5:f4:e2:5d:63:2d:7e:ab:44:82:29:11:ba:90: e6:56:ba:3d:01:8b:7a:92:79:de:4f:f0:09:04:c9: 05:27:88:ff:de:7b:8f:54:50:af:73:a2:ca:a0:31: 24:bc:d0:60:fb:92:59:a6:b4:a6:e2:ec:d3:7b:10: 7c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EC:AD:16:AD:30:26:F6:94:BC:DE:47:DC:5F:C6:FD:88:89:0F:E1 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/7C39022AF67A11EC92B5670FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.102.0/23 Signature Algorithm: sha256WithRSAEncryption a9:21:ef:c9:9f:41:0e:71:b7:8d:7f:9b:9b:8d:8a:f7:c5:8e: 29:06:77:9c:4a:0d:84:56:fa:96:46:09:ff:71:11:fb:74:a9: 41:a1:d5:d5:b6:0d:16:69:fb:3a:0d:17:08:d9:79:61:8d:bf: 1c:4e:c2:c2:2f:7e:5c:dc:73:80:5e:da:66:e0:c8:fe:34:24: 30:48:18:f5:00:20:d9:84:81:91:67:fb:ce:bf:af:a6:e2:95: 69:c1:72:17:9f:f4:50:ea:a2:05:be:d0:13:82:88:af:b9:4a: 9f:24:f2:7a:d2:8c:36:67:d3:34:69:4b:85:36:cc:f1:78:1c: aa:57:02:61:4d:48:dd:13:06:e2:b5:50:33:82:fa:9c:53:e9: fb:08:52:4e:94:99:ca:1a:38:20:55:35:8e:e4:a1:67:a2:61: b8:20:74:1e:16:63:4b:8d:89:95:44:98:14:b2:b3:10:18:0d: a3:5b:95:85:2b:c8:90:81:ec:80:81:5e:d7:c0:7b:63:89:f1: 25:73:33:7c:e0:6e:6f:db:e4:33:75:f4:1b:4d:6c:b1:5c:0e: 5b:d9:31:60:d0:ef:4b:1f:4e:20:dd:29:2d:15:53:7f:4a:b7: 7c:a5:fd:15:a2:65:ca:68:33:fd:5a:fd:98:4f:65:40:eb:13: 19:e7:67:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICESkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwNDAyMTc0NjM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkNzdmYy05M2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQtrL5sSyqMUNQa7P3zdhJ3dUJ07DqqoPydw3kl6TJAWsjOgT/U5bL8rUuBx K7wKemyAXIGWr25B5Ka95geK/fvz5d0Ja+oV0jfKfWe1UuRQuqR9O0hPF3R+SA5F AN8J91/ntULsvTS4mbqyFzh6Wh/SKpoDqj2y7JuVAjB8Sc8SDTkrCTlUKaK/uxRQ XlUieogd5toZUah8jIataCyQab+dqT2qmTf+gwzLy16aebqWdmM6heX0ZGXDCsaU 9I2nHMUM1fTiXWMtfqtEgikRupDmVro9AYt6knneT/AJBMkFJ4j/3nuPVFCvc6LK oDEkvNBg+5JZprSm4uzTexB8zQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMHsrRat MCb2lLzeR9xfxv2IiQ/hMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE2QTMvNzcyN0NFNUMzOEM3MTFFOUE3QjVDMjMzQzRGOUFFMDIvN0MzOTAyMkFG NjdBMTFFQzkyQjU2NzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnh2YwDQYJKoZIhvcNAQELBQADggEBAKkh78mfQQ5xt41/ m5uNivfFjikGd5xKDYRW+pZGCf9xEft0qUGh1dW2DRZp+zoNFwjZeWGNvxxOwsIv flzcc4Be2mbgyP40JDBIGPUAINmEgZFn+86/r6bilWnBchef9FDqogW+0BOCiK+5 Sp8k8nrSjDZn0zRpS4U2zPF4HKpXAmFNSN0TBuK1UDOC+pxT6fsIUk6UmcoaOCBV NY7koWeiYbggdB4WY0uNiZVEmBSysxAYDaNblYUryJCB7ICBXtfAe2OJ8SVzM3zg bm/b5DN19BtNbLFcDlvZMWDQ70sfTiDdKS0VU39Kt3yl/RWiZcpoM/1a/ZhPZUDr ExnnZ3k= -----END CERTIFICATE-----Generated at Wed Nov 5 07:51:45 2025 by rpki-client