$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/F1D384D031D311E88735EA0AC4F9AE02.roa File: F1D384D031D311E88735EA0AC4F9AE02.roa (raw, json) Hash identifier: pa9Id+uvbnd/ZSHl6ghGn+/xg+nPKZEuerp9xTujE0M= Subject key identifier: D2:E5:F6:98:D1:DF:61:F8:1B:22:EF:A7:86:EE:29:47:5C:D6:F6:52 Certificate issuer: /CN=A91D8DCB/serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Certificate serial: 15F3 Authority key identifier: E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/F1D384D031D311E88735EA0AC4F9AE02.roa Signing time: Fri 31 Oct 2025 17:05:01 +0000 ROA not before: Fri 31 Oct 2025 17:05:01 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 135607 IP address blocks: 103.196.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5619 (0x15f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DCB, serialNumber=E9B7A1DF208C75B9EB303CF883CA128EA04FC50A Validity Not Before: Oct 31 17:05:01 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=6904ec3d-d1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:26:bb:46:13:22:f5:1f:a0:d1:ed:0c:56:23: e3:e7:86:86:1f:cb:0c:39:8b:4a:29:3e:68:2f:9b: e6:73:93:39:46:12:32:8b:3a:95:7e:98:77:30:ee: 78:38:d0:c5:35:73:af:22:64:cc:99:6e:e6:1e:b9: 05:16:2e:64:17:f0:8c:5b:c6:d6:14:00:c1:00:4d: 89:e6:ae:dc:e3:20:e1:9f:1d:14:3e:68:5f:5d:66: ce:b7:64:96:09:e0:b7:63:9b:3f:0c:b3:11:53:91: 72:4c:26:c1:0d:56:95:ac:34:56:01:fe:fb:98:f7: f1:8b:bb:e9:3a:0b:f0:c1:24:11:43:06:c1:7c:41: 30:44:ba:4b:aa:b7:ca:20:ee:43:7d:91:77:31:b1: 7f:ae:85:27:4a:da:bf:b3:41:3b:be:93:e5:25:e2: db:de:aa:ef:e0:e8:c4:a4:f8:96:65:2a:95:0d:79: 55:1f:72:eb:bf:88:dd:63:c8:66:6f:2f:85:c6:11: a5:6d:1c:95:02:bf:d3:d2:93:20:de:4f:b2:1b:0a: ec:1f:9a:53:21:02:33:28:29:31:ed:40:dd:d0:4e: 33:c3:3c:c7:29:65:3d:a6:a7:af:b8:de:7f:ef:ca: a3:17:41:6f:74:01:d3:b6:e9:6c:d8:75:de:64:80: 9c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E5:F6:98:D1:DF:61:F8:1B:22:EF:A7:86:EE:29:47:5C:D6:F6:52 X509v3 Authority Key Identifier: keyid:E9:B7:A1:DF:20:8C:75:B9:EB:30:3C:F8:83:CA:12:8E:A0:4F:C5:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/6beh3yCMdbnrMDz4g8oSjqBPxQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6beh3yCMdbnrMDz4g8oSjqBPxQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DCB/743F70C82F2C11E899D1E017C4F9AE02/F1D384D031D311E88735EA0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.196.56.0/22 Signature Algorithm: sha256WithRSAEncryption 58:b8:8f:c3:4c:00:88:b9:37:63:66:f1:34:1f:ad:25:77:36: 1f:ab:86:b6:16:75:11:7f:e7:04:c7:e0:0d:10:79:29:80:0b: f9:28:48:ff:51:97:3d:bf:2b:56:03:1f:88:48:7f:de:38:fe: 77:5a:57:00:c8:77:c2:a2:12:79:d5:4a:1f:9d:5e:a0:28:e1: 52:6c:ec:65:24:28:53:06:0b:e2:44:95:83:d6:9f:85:19:db: a1:23:b6:c8:5f:31:27:44:de:68:8a:a5:2c:2a:60:7e:44:ff: 2a:d5:64:14:af:aa:ab:9b:9c:27:fa:77:3d:89:54:72:37:7b: 02:64:70:e7:fc:fc:27:9a:58:63:01:43:8b:79:f1:2a:66:29: 59:f9:68:a9:03:d8:f4:a7:79:7c:6e:c9:14:4a:a1:86:6a:83: a2:eb:54:12:d6:b1:83:2a:01:af:3d:42:64:05:3d:a4:df:f4: 52:eb:6a:04:81:88:fd:f2:ff:a4:7b:b7:15:17:f2:c3:ac:a7: 0a:f0:57:7d:1a:94:04:b0:ec:27:6d:b0:4c:94:c2:cf:27:87: f1:aa:35:be:d5:01:bd:98:97:c1:72:c9:d0:97:88:55:47:7c: 87:84:4e:8b:e9:dd:6b:cf:7c:68:a3:e4:6f:e7:c1:02:6d:ae: 61:fe:d5:4e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhEQ0IxMTAvBgNVBAUTKEU5QjdBMURGMjA4Qzc1QjlFQjMwM0NGODgzQ0ExMjhF QTA0RkM1MEEwHhcNMjUxMDMxMTcwNTAxWhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0ZWMzZC1kMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ia7RhMi9R+g0e0MViPj54aGH8sMOYtKKT5oL5vmc5M5RhIyizqVfph3MO54 ONDFNXOvImTMmW7mHrkFFi5kF/CMW8bWFADBAE2J5q7c4yDhnx0UPmhfXWbOt2SW CeC3Y5s/DLMRU5FyTCbBDVaVrDRWAf77mPfxi7vpOgvwwSQRQwbBfEEwRLpLqrfK IO5DfZF3MbF/roUnStq/s0E7vpPlJeLb3qrv4OjEpPiWZSqVDXlVH3Lrv4jdY8hm by+FxhGlbRyVAr/T0pMg3k+yGwrsH5pTIQIzKCkx7UDd0E4zwzzHKWU9pqevuN5/ 78qjF0FvdAHTtuls2HXeZICcDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNLl9pjR 32H4GyLvp4buKUdc1vZSMB8GA1UdIwQYMBaAFOm3od8gjHW56zA8+IPKEo6gT8UK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOERDQi83NDNGNzBDODJG MkMxMUU4OTlEMUUwMTdDNEY5QUUwMi82YmVoM3lDTWRibnJNRHo0ZzhvU2pxQlB4 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZWgzeUNNZGJuck1EejRnOG9TanFCUHhRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhEQ0IvNzQzRjcwQzgyRjJDMTFFODk5RDFFMDE3QzRGOUFFMDIvRjFEMzg0RDAz MUQzMTFFODg3MzVFQTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnxDgwDQYJKoZIhvcNAQELBQADggEBAFi4j8NMAIi5N2Nm 8TQfrSV3Nh+rhrYWdRF/5wTH4A0QeSmAC/koSP9Rlz2/K1YDH4hIf944/ndaVwDI d8KiEnnVSh+dXqAo4VJs7GUkKFMGC+JElYPWn4UZ26EjtshfMSdE3miKpSwqYH5E /yrVZBSvqqubnCf6dz2JVHI3ewJkcOf8/CeaWGMBQ4t58SpmKVn5aKkD2PSneXxu yRRKoYZqg6LrVBLWsYMqAa89QmQFPaTf9FLragSBiP3y/6R7txUX8sOspwrwV30a lASw7CdtsEyUws8nh/GqNb7VAb2Yl8FyydCXiFVHfIeETovp3WvPfGij5G/nwQJt rmH+1U4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:19 2025 by rpki-client