$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/CDC4A66EB5D311F097B6F31AC4F9AE02.roa File: CDC4A66EB5D311F097B6F31AC4F9AE02.roa (raw, json) Hash identifier: 0U2UzSeX+8X8p0vtFdtnhJYB/u+V+ECpwF6fLjeJjJM= Subject key identifier: 91:EA:06:33:F7:C3:77:BE:85:E5:A5:70:F8:C5:BA:45:F6:D2:5C:50 Certificate issuer: /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Certificate serial: 08A3 Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/CDC4A66EB5D311F097B6F31AC4F9AE02.roa Signing time: Thu 30 Oct 2025 21:02:54 +0000 ROA not before: Thu 30 Oct 2025 21:02:54 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9304 IP address blocks: 103.94.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01C6, serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Validity Not Before: Oct 30 21:02:54 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6903d27e-815c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ba:77:9a:24:6e:04:97:06:a6:3e:90:24:a3: cb:64:a4:24:be:62:b0:62:b4:73:0d:9d:3d:d3:1b: bd:2e:9f:36:5f:8f:f2:20:29:f3:25:0f:ed:ba:b2: d2:ff:ea:c4:15:1a:2f:68:3b:70:b3:0c:7f:35:50: ff:fd:eb:33:22:3e:6d:85:26:c3:5d:1f:37:b3:7b: c4:ed:d3:9d:4f:f4:81:3c:03:33:52:44:8b:3a:3c: 26:4e:a4:10:b2:c9:13:51:dd:4a:94:86:50:20:5e: 74:9d:13:4d:9a:26:52:6c:3b:ea:8e:e3:e4:8d:a1: ef:a0:cd:51:e9:86:42:e4:3f:4d:c5:e0:ab:7c:47: 35:58:7e:e5:df:75:e5:6f:62:0f:fc:03:e6:37:cb: 6b:83:35:a5:f6:22:f1:33:4f:9f:0c:09:ed:23:73: 8d:9c:e4:ad:78:39:ef:e5:1f:68:20:dd:a0:44:50: 88:7d:c7:a5:60:91:47:ca:f1:c3:d7:f2:5b:72:d3: 37:28:cf:bd:43:f1:d1:3c:41:3a:dc:de:5a:a8:c7: 39:e0:c7:5a:be:4d:0d:77:3f:3d:b9:d1:a3:74:ba: ca:3b:73:70:a1:a1:77:ea:c4:db:72:8a:38:90:f6: 36:35:14:14:67:63:15:66:a9:32:60:d7:7b:59:c7: d6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EA:06:33:F7:C3:77:BE:85:E5:A5:70:F8:C5:BA:45:F6:D2:5C:50 X509v3 Authority Key Identifier: keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/CDC4A66EB5D311F097B6F31AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.76.0/23 Signature Algorithm: sha256WithRSAEncryption 52:9c:ca:60:15:88:82:d7:ed:1f:55:6b:c2:3a:03:33:34:73: 7d:97:ec:ec:57:e2:fe:bd:4f:67:03:bc:54:58:f6:e2:4d:bd: c1:82:5c:33:c5:33:93:16:0e:44:30:d4:33:b0:07:e4:94:1e: c1:d6:96:3e:e9:27:28:32:c9:79:34:76:9a:27:df:e1:af:03: f1:10:d3:83:20:7a:01:be:9c:0c:80:00:90:40:b1:fd:b0:02: 71:54:13:87:0b:8a:04:f1:29:1b:85:2d:0c:14:ce:ba:34:db: c7:52:31:cb:90:4a:79:e3:50:86:87:da:2f:b3:eb:4a:31:b2: 27:6a:c4:2f:fb:3d:83:26:98:62:7c:a4:58:cb:bf:2b:2e:2d: e6:f7:00:6d:1d:ab:53:b2:1b:2d:5d:40:3c:5d:b5:ac:67:f3: 53:06:6b:6a:74:18:8c:3e:6e:28:d8:3b:d8:f2:24:ab:41:a7: 32:80:02:1a:fa:61:5d:ff:d0:5b:0e:9a:4b:e3:9c:d3:32:c9: 3a:92:2c:e3:ba:5e:e7:c8:45:e4:b2:f1:b8:8d:a2:e8:79:f7: 9b:92:95:2c:b4:4f:d1:5e:f1:2a:07:69:fb:b5:14:cd:8f:84: b9:f7:b7:16:9c:1c:b5:c0:47:92:7f:6b:01:ba:e6:3a:27:04: 0f:31:16:ac -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQzYxMTAvBgNVBAUTKDhBMUI4QkNENUVEN0NENzIyQzUzMDA0OThFNEE5MzY1 RDA0NkEzNEUwHhcNMjUxMDMwMjEwMjU0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzZDI3ZS04MTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7p3miRuBJcGpj6QJKPLZKQkvmKwYrRzDZ090xu9Lp82X4/yICnzJQ/turLS /+rEFRovaDtwswx/NVD//eszIj5thSbDXR83s3vE7dOdT/SBPAMzUkSLOjwmTqQQ sskTUd1KlIZQIF50nRNNmiZSbDvqjuPkjaHvoM1R6YZC5D9NxeCrfEc1WH7l33Xl b2IP/APmN8trgzWl9iLxM0+fDAntI3ONnOSteDnv5R9oIN2gRFCIfcelYJFHyvHD 1/JbctM3KM+9Q/HRPEE63N5aqMc54Mdavk0Ndz89udGjdLrKO3NwoaF36sTbcoo4 kPY2NRQUZ2MVZqkyYNd7WcfWSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJHqBjP3 w3e+heWlcPjFukX20lxQMB8GA1UdIwQYMBaAFIobi81e181yLFMASY5Kk2XQRqNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFDNi80OTFDOENFNkND OTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpYSXNVd0JKamtxVFpkQkdv MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lodUx6VjdYelhJc1V3Qkpqa3FUWmRCR28wNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTAxQzYvNDkxQzhDRTZDQzkxMTFFQThBNTlFRjQ2QzRGOUFFMDIvQ0RDNEE2NkVC NUQzMTFGMDk3QjZGMzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnXkwwDQYJKoZIhvcNAQELBQADggEBAFKcymAViILX7R9V a8I6AzM0c32X7OxX4v69T2cDvFRY9uJNvcGCXDPFM5MWDkQw1DOwB+SUHsHWlj7p JygyyXk0dpon3+GvA/EQ04MgegG+nAyAAJBAsf2wAnFUE4cLigTxKRuFLQwUzro0 28dSMcuQSnnjUIaH2i+z60oxsidqxC/7PYMmmGJ8pFjLvysuLeb3AG0dq1OyGy1d QDxdtaxn81MGa2p0GIw+bijYO9jyJKtBpzKAAhr6YV3/0FsOmkvjnNMyyTqSLOO6 XufIReSy8biNouh595uSlSy0T9Fe8SoHafu1FM2PhLn3txacHLXAR5J/awG65jon BA8xFqw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:46:53 2025 by rpki-client