$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/C97A1A3EB41C11F0AFF91911C4F9AE02.roa File: C97A1A3EB41C11F0AFF91911C4F9AE02.roa (raw, json) Hash identifier: xcCQ983GyFPyaBhVSjqftGFct4u9tmz6aJ63T1WGRfA= Subject key identifier: C6:89:89:3F:E7:9E:95:20:FD:C9:54:14:E5:77:A9:C8:3C:36:E8:48 Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Certificate serial: 0D97 Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/C97A1A3EB41C11F0AFF91911C4F9AE02.roa Signing time: Tue 28 Oct 2025 16:45:22 +0000 ROA not before: Tue 28 Oct 2025 16:45:22 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 197450 IP address blocks: 59.152.60.0/24 maxlen: 24 59.152.61.0/24 maxlen: 24 59.152.62.0/24 maxlen: 24 59.152.63.0/24 maxlen: 24 103.205.180.0/24 maxlen: 24 103.205.181.0/24 maxlen: 24 103.205.182.0/24 maxlen: 24 103.205.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3479 (0xd97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Validity Not Before: Oct 28 16:45:22 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6900f322-8aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e3:1d:c0:d5:84:f3:1b:6a:5d:28:67:43:d5: 33:db:58:13:27:d6:ae:93:4f:a8:04:8a:d5:57:59: 21:3c:4e:c6:9c:87:68:d9:ad:6b:3c:82:42:ee:48: b9:c7:ac:7d:d0:e8:e5:1d:77:5e:8a:50:76:7d:ff: 13:b4:7c:df:5d:f5:94:27:65:1e:75:65:bf:64:33: d6:3e:4f:4b:7e:b4:56:9c:c7:57:44:2e:5b:5e:44: af:0a:52:98:77:47:60:39:35:6a:ab:d7:4d:da:f9: de:1d:78:a3:1a:f7:72:fe:23:9c:10:ca:89:3c:28: 7b:c9:8f:83:c4:12:8d:17:27:8a:36:92:09:43:91: 35:67:c7:01:eb:7f:64:72:55:18:01:94:07:d3:65: 80:1e:2c:ae:7c:10:6f:8c:0d:8b:ce:ec:1c:1f:ff: 08:d2:a2:4a:e8:45:58:f5:48:8b:98:9f:e4:63:54: 74:b1:62:a4:fe:d6:a3:ec:1d:15:e5:81:cc:0c:fd: 43:b7:ed:a5:32:04:f4:d1:39:d2:cd:c5:f8:50:8f: 4e:a0:97:16:29:85:ac:02:ca:ec:c0:c5:ec:5f:12: a2:3b:72:62:d8:c8:ed:57:71:54:38:2d:18:0f:7b: 01:9f:7d:37:00:ea:e6:f7:b8:26:45:f3:17:0b:48: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:89:89:3F:E7:9E:95:20:FD:C9:54:14:E5:77:A9:C8:3C:36:E8:48 X509v3 Authority Key Identifier: keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/C97A1A3EB41C11F0AFF91911C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.152.60.0/22 103.205.180.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:77:84:3f:fd:42:27:c1:54:ff:a5:0e:13:5e:fc:ab:d7:0f: 12:42:34:9b:ec:dd:33:bd:39:1e:81:cd:55:35:39:8f:06:2c: 0c:10:fb:fd:d2:ab:0d:6f:7e:0e:13:9d:9c:96:85:36:75:26: a3:86:29:fa:97:4f:2b:92:cb:77:3a:39:dd:b2:3d:58:e1:13: ac:c7:99:25:46:e1:93:23:4a:8f:15:94:18:7e:31:81:ce:f6: a8:df:b4:6f:a4:3c:8f:2e:5a:89:32:78:93:cc:8c:4c:03:0f: 7a:db:79:c4:f3:26:37:bb:94:f9:0e:d9:13:cb:d5:74:d7:d5: 23:7c:4b:87:4c:f9:0e:c4:8d:4e:41:ec:c5:c2:15:a4:7d:62: 33:a1:e4:8b:06:7d:d4:b4:f8:98:1f:68:18:de:f5:50:8e:35: a5:2e:89:7b:01:32:21:73:47:3f:4a:fb:5a:a3:3e:26:8c:8d: d7:5f:af:4b:4b:e5:a2:7d:aa:eb:de:1f:86:45:28:c9:5e:ca: 7a:49:27:db:52:1a:b8:38:ec:a8:9d:a8:40:66:99:e5:b3:ae: 23:fd:f1:10:5f:8b:13:9f:2b:a0:0f:58:d4:c7:1e:db:bc:d0: d7:56:5a:31:08:c8:e9:14:91:a8:11:74:14:99:45:d6:5b:31: 4d:0d:05:5c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RjIxMTAvBgNVBAUTKDU0ODYzNzZCMDVCOEEyNTUyMzI5RTM2MUJENzI1Qzc3 RTFGOEQwQzkwHhcNMjUxMDI4MTY0NTIyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAwZjMyMi04YWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OMdwNWE8xtqXShnQ9Uz21gTJ9auk0+oBIrVV1khPE7GnIdo2a1rPIJC7ki5 x6x90OjlHXdeilB2ff8TtHzfXfWUJ2UedWW/ZDPWPk9LfrRWnMdXRC5bXkSvClKY d0dgOTVqq9dN2vneHXijGvdy/iOcEMqJPCh7yY+DxBKNFyeKNpIJQ5E1Z8cB639k clUYAZQH02WAHiyufBBvjA2LzuwcH/8I0qJK6EVY9UiLmJ/kY1R0sWKk/taj7B0V 5YHMDP1Dt+2lMgT00TnSzcX4UI9OoJcWKYWsAsrswMXsXxKiO3Ji2MjtV3FUOC0Y D3sBn303AOrm97gmRfMXC0hV6QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMaJiT/n npUg/clUFOV3qcg8NuhIMB8GA1UdIwQYMBaAFFSGN2sFuKJVIynjYb1yXHfh+NDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdGMi80Qzg4QTdBMEZE RkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9sVWpLZU5odlhKY2QtSDQw TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJWTNhd1c0b2xVaktlTmh2WEpjZC1INDBNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE3RjIvNEM4OEE3QTBGREZFMTFFOUJENjY3RDFGQzRGOUFFMDIvQzk3QTFBM0VC NDFDMTFGMEFGRjkxOTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAI7mDwDBAJnzbQwDQYJKoZIhvcNAQELBQADggEBAIx3hD/9 QifBVP+lDhNe/KvXDxJCNJvs3TO9OR6BzVU1OY8GLAwQ+/3Sqw1vfg4TnZyWhTZ1 JqOGKfqXTyuSy3c6Od2yPVjhE6zHmSVG4ZMjSo8VlBh+MYHO9qjftG+kPI8uWoky eJPMjEwDD3rbecTzJje7lPkO2RPL1XTX1SN8S4dM+Q7EjU5B7MXCFaR9YjOh5IsG fdS0+JgfaBje9VCONaUuiXsBMiFzRz9K+1qjPiaMjddfr0tL5aJ9quveH4ZFKMle ynpJJ9tSGrg47KidqEBmmeWzriP98RBfixOfK6APWNTHHtu80NdWWjEIyOkUkagR dBSZRdZbMU0NBVw= -----END CERTIFICATE-----Generated at Wed Nov 5 00:09:27 2025 by rpki-client