$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BE243D98CCE311EAA397205EC4F9AE02.roa File: BE243D98CCE311EAA397205EC4F9AE02.roa (raw, json) Hash identifier: rDQvy+rn0SobEFslboEMqv4jyHrKq9kLuJT6gHMmCJY= Subject key identifier: 8F:D3:2C:29:8E:8A:85:69:BC:1A:21:38:DF:3C:27:EC:5A:F9:BC:F0 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 0868 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BE243D98CCE311EAA397205EC4F9AE02.roa Signing time: Wed 30 Jul 2025 21:01:57 +0000 ROA not before: Wed 30 Jul 2025 21:01:57 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134179 IP address blocks: 103.57.0.0/22 maxlen: 22 103.57.0.0/24 maxlen: 24 103.57.1.0/24 maxlen: 24 103.57.2.0/24 maxlen: 24 103.57.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Jul 30 21:01:57 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=688a8845-4dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:09:a7:38:43:9f:85:82:36:cc:79:f8:75:71: 8a:bf:7b:72:c2:58:d5:05:3e:84:04:84:b8:4c:e8: 78:55:bd:19:36:d8:69:06:34:ac:a1:ac:5f:de:f9: 27:aa:c8:ed:5c:a1:f6:38:f6:49:b6:14:0e:79:b1: d4:1d:84:9f:06:e6:4d:21:51:8c:c2:46:22:f3:26: a7:e5:4f:60:0c:78:9f:00:1d:01:c2:4a:7b:a2:2f: 9f:9c:4f:c0:e5:88:a7:9d:81:71:1d:b4:9d:73:af: 2f:ce:28:00:8f:c6:2c:64:ec:72:7c:7a:18:29:97: f7:01:43:c2:e9:a1:bc:29:e9:7d:73:27:0c:44:a8: 1e:6a:5f:85:f2:f0:0f:86:68:52:1b:99:a5:66:53: 2e:8f:97:04:af:69:a8:ca:8e:c9:79:35:5b:8a:e2: 3e:a7:70:04:e7:c3:4a:0c:c7:c0:3b:7c:37:5c:16: 72:06:c0:32:8c:c6:b6:7d:ab:5f:b1:2c:54:54:c9: 15:04:10:2f:fe:ef:2e:4d:5b:06:91:bf:dc:75:ed: 5c:13:50:68:5f:cf:e5:b9:0e:ac:5d:1c:7d:d1:5a: 17:8b:aa:e2:17:d8:c2:8b:0e:7d:08:0d:8e:4f:3e: a9:bd:21:32:69:f0:f2:2e:95:98:8f:6f:6a:89:02: d6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D3:2C:29:8E:8A:85:69:BC:1A:21:38:DF:3C:27:EC:5A:F9:BC:F0 X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BE243D98CCE311EAA397205EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.57.0.0/22 Signature Algorithm: sha256WithRSAEncryption c0:b0:b2:63:3d:0b:16:f3:8f:9f:fe:7b:00:5c:1f:95:84:f7: 46:99:10:b9:c2:d6:18:9a:68:4d:ef:c1:c3:fb:ee:c1:a3:1f: 14:2f:ef:23:f9:ec:cf:81:16:4c:d3:c3:ef:01:40:71:db:e8: 73:83:e5:61:00:a5:d4:1f:02:fa:71:ed:f1:b5:14:90:93:21: b6:4e:0e:2f:83:30:c0:77:5e:43:7d:4b:59:cc:05:30:c8:39: 12:e7:68:8f:42:a2:10:53:68:12:37:b0:57:ca:db:5a:b0:ac: 60:22:39:ca:73:0f:de:7e:a7:b0:42:d8:4e:02:9b:55:27:91: 57:ba:7c:95:1d:4a:61:8e:51:bf:69:50:e1:be:44:46:47:ab: ac:a7:b6:4e:95:9e:41:6d:d2:3e:9f:bd:16:ea:2e:4f:5e:ee: bf:3b:d6:1f:25:58:a7:db:50:ca:30:f9:26:2b:6c:7a:c2:29: 91:4e:3c:bd:be:94:11:b6:96:5d:d9:08:3f:a8:86:61:aa:b2: 0a:48:82:4b:a0:67:58:d7:52:ff:0c:97:51:52:7e:ef:b7:66: a5:c7:13:8e:05:03:ac:3e:fc:6e:c5:f3:74:94:1e:df:69:b3: d1:19:d2:2e:c8:32:73:89:40:23:26:18:e6:87:b0:c8:51:a1: f2:9e:fb:38 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjUwNzMwMjEwMTU3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhODg0NS00ZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwmnOEOfhYI2zHn4dXGKv3tywljVBT6EBIS4TOh4Vb0ZNthpBjSsoaxf3vkn qsjtXKH2OPZJthQOebHUHYSfBuZNIVGMwkYi8yan5U9gDHifAB0Bwkp7oi+fnE/A 5YinnYFxHbSdc68vzigAj8YsZOxyfHoYKZf3AUPC6aG8Kel9cycMRKgeal+F8vAP hmhSG5mlZlMuj5cEr2moyo7JeTVbiuI+p3AE58NKDMfAO3w3XBZyBsAyjMa2fatf sSxUVMkVBBAv/u8uTVsGkb/cde1cE1BoX8/luQ6sXRx90VoXi6riF9jCiw59CA2O Tz6pvSEyafDyLpWYj29qiQLWrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI/TLCmO ioVpvBohON88J+xa+bzwMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwQzAvMDIyREJDQTRDQ0UzMTFFQUFGNzNGQzVEQzRGOUFFMDIvQkUyNDNEOThD Q0UzMTFFQUEzOTcyMDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnOQAwDQYJKoZIhvcNAQELBQADggEBAMCwsmM9Cxbzj5/+ ewBcH5WE90aZELnC1hiaaE3vwcP77sGjHxQv7yP57M+BFkzTw+8BQHHb6HOD5WEA pdQfAvpx7fG1FJCTIbZODi+DMMB3XkN9S1nMBTDIORLnaI9CohBTaBI3sFfK21qw rGAiOcpzD95+p7BC2E4Cm1UnkVe6fJUdSmGOUb9pUOG+REZHq6yntk6VnkFt0j6f vRbqLk9e7r871h8lWKfbUMow+SYrbHrCKZFOPL2+lBG2ll3ZCD+ohmGqsgpIgkug Z1jXUv8Ml1FSfu+3ZqXHE44FA6w+/G7F83SUHt9ps9EZ0i7IMnOJQCMmGOaHsMhR ofKe+zg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:27 2025 by rpki-client