$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa File: 94B101721B8B11EEACEA736AC4F9AE02.roa (raw, json) Hash identifier: l3BnPkx3AD0+V1TVm9PvDdFXvv/NHwdEm5t8UJry1xU= Subject key identifier: 13:90:B5:2F:93:B6:87:18:D1:0A:BF:27:F5:58:02:3E:F6:60:15:A9 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 08AE Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa Signing time: Sun 02 Nov 2025 20:40:15 +0000 ROA not before: Sun 02 Nov 2025 20:40:15 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134555 IP address blocks: 43.247.80.0/22 maxlen: 24 103.23.174.0/24 maxlen: 24 103.87.38.0/23 maxlen: 24 103.235.188.0/22 maxlen: 24 103.236.203.0/24 maxlen: 24 202.52.54.0/23 maxlen: 24 203.25.32.0/22 maxlen: 24 2402:d840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: Nov 2 20:40:15 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6907c1af-8f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:cf:30:3a:ce:24:39:bf:9a:fb:8c:88:e8: 63:ff:48:f6:7b:20:49:16:cf:3f:4c:99:b3:a8:31: cf:2d:87:0f:f7:51:74:eb:0e:84:2a:04:9c:e5:0e: 7b:c5:63:2f:5c:06:b8:34:33:56:97:cd:df:02:c2: fc:68:a8:75:9e:11:26:92:0d:9d:5a:2f:cc:67:88: e2:b2:f6:2e:cc:d0:7a:82:c0:0e:6a:bc:94:02:a8: ed:0c:b4:82:42:f6:d4:4b:30:fe:eb:8b:8f:b7:28: 81:aa:0c:f2:df:e1:b9:fd:2a:ae:54:a5:ca:2c:b9: cc:bd:dc:47:72:50:2d:97:e9:7b:f2:cf:39:2f:54: 09:29:a6:ab:c5:19:d3:70:d7:a4:10:f3:ab:33:2e: 84:a9:03:17:62:c7:d3:82:55:7d:ba:3e:12:b4:52: 18:bd:28:90:63:1b:37:cd:eb:70:e8:61:7b:89:31: e4:75:a4:f4:cf:c6:3f:5d:ac:81:2a:de:19:e4:3e: 79:a4:39:2a:14:34:80:06:31:38:bd:cf:00:82:6a: c1:e9:a0:73:b7:57:f3:b8:bf:56:f9:3b:be:3c:5d: ee:37:43:3a:73:f5:29:dc:02:06:99:e6:24:95:25: 65:56:31:b0:97:78:b2:cd:fb:7f:8f:6d:56:a5:67: 93:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:90:B5:2F:93:B6:87:18:D1:0A:BF:27:F5:58:02:3E:F6:60:15:A9 X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/94B101721B8B11EEACEA736AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.80.0/22 103.23.174.0/24 103.87.38.0/23 103.235.188.0/22 103.236.203.0/24 202.52.54.0/23 203.25.32.0/22 IPv6: 2402:d840::/32 Signature Algorithm: sha256WithRSAEncryption 12:72:ef:7d:cc:bc:e8:a8:6e:52:5d:15:7e:6e:d0:01:b7:73: 2e:bc:4f:43:05:cb:80:b5:66:fa:3d:60:97:d7:45:7b:b8:69: 4e:a2:7c:70:6d:39:82:8b:ab:9d:48:af:41:21:de:bd:98:87: 27:93:14:72:59:0e:10:83:2a:b8:3f:42:a0:8e:7a:ca:63:ee: ac:e8:b6:6e:6e:35:a3:24:10:cb:cf:5c:be:87:ec:53:e8:02: e1:50:c3:ec:18:0f:19:f9:b3:19:f3:ac:b0:ea:ce:72:9b:fa: 9a:2c:21:d6:d8:f5:b5:0c:c1:94:56:65:8e:7c:ca:71:19:9b: 81:91:13:fb:6c:91:e3:f1:3a:65:cb:bb:0a:59:6f:a0:43:00: e4:23:ba:82:f9:cc:d0:20:d6:e3:6e:8b:52:05:85:eb:51:90: 33:6f:18:fb:ab:62:b0:fa:8d:f7:cd:94:e9:f6:a0:a7:13:4f: a3:50:b3:ec:d3:72:4a:5c:7b:a3:e9:d8:1a:e7:10:e4:e7:7c: 18:c6:ac:1a:61:aa:84:6d:33:d3:06:ae:04:65:47:a3:db:99: 9c:48:5b:48:db:b9:c0:61:11:46:fa:8a:95:81:97:d2:c6:f7: c3:92:ea:97:e9:34:bc:80:3d:4a:b7:0a:e4:6c:88:3f:e0:98: 9c:24:07:91 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjUxMTAyMjA0MDE1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3YzFhZi04ZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0H7PMDrOJDm/mvuMiOhj/0j2eyBJFs8/TJmzqDHPLYcP91F06w6EKgSc5Q57 xWMvXAa4NDNWl83fAsL8aKh1nhEmkg2dWi/MZ4jisvYuzNB6gsAOaryUAqjtDLSC QvbUSzD+64uPtyiBqgzy3+G5/SquVKXKLLnMvdxHclAtl+l78s85L1QJKaarxRnT cNekEPOrMy6EqQMXYsfTglV9uj4StFIYvSiQYxs3zetw6GF7iTHkdaT0z8Y/XayB Kt4Z5D55pDkqFDSABjE4vc8AgmrB6aBzt1fzuL9W+Tu+PF3uN0M6c/Up3AIGmeYk lSVlVjGwl3iyzft/j21WpWeTUwIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFBOQtS+T tocY0Qq/J/VYAj72YBWpMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc2RTUvRTA4M0EwRUFDQjEyMTFFQTkyNTA3QTJCQzRGOUFFMDIvOTRCMTAxNzIx QjhCMTFFRUFDRUE3MzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMDAEAgABMCoDBAIr91ADBABnF64DBAFnVyYDBAJn67wDBABn7MsDBAHKNDYD BALLGSAwDQQCAAIwBwMFACQC2EAwDQYJKoZIhvcNAQELBQADggEBABJy733MvOio blJdFX5u0AG3cy68T0MFy4C1Zvo9YJfXRXu4aU6ifHBtOYKLq51Ir0Eh3r2YhyeT FHJZDhCDKrg/QqCOespj7qzotm5uNaMkEMvPXL6H7FPoAuFQw+wYDxn5sxnzrLDq znKb+posIdbY9bUMwZRWZY58ynEZm4GRE/tskePxOmXLuwpZb6BDAOQjuoL5zNAg 1uNui1IFhetRkDNvGPurYrD6jffNlOn2oKcTT6NQs+zTckpce6Pp2BrnEOTnfBjG rBphqoRtM9MGrgRlR6PbmZxIW0jbucBhEUb6ipWBl9LG98OS6pfpNLyAPUq3CuRs iD/gmJwkB5E= -----END CERTIFICATE-----Generated at Wed Nov 5 11:35:20 2025 by rpki-client