$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/F93DE378B66911F09D7E8031C4F9AE02.roa File: F93DE378B66911F09D7E8031C4F9AE02.roa (raw, json) Hash identifier: JOJ1e7tHKR5cV+eVWRHszWJd1lpFfnDGTNadMINwq4M= Subject key identifier: A2:45:67:C6:29:6F:93:71:E9:F8:0D:82:E5:CC:8A:F0:8E:9D:06:7F Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 056B Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/F93DE378B66911F09D7E8031C4F9AE02.roa Signing time: Fri 31 Oct 2025 14:58:56 +0000 ROA not before: Fri 31 Oct 2025 14:58:56 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 8075 IP address blocks: 103.204.21.0/24 maxlen: 24 103.204.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1387 (0x56b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Oct 31 14:58:56 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6904ceaf-e30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:8d:f6:35:28:07:d3:f9:f3:9e:7f:f2:c4:fa: ee:b6:82:66:46:cd:7d:b0:78:85:3b:75:f9:ae:9a: b6:cc:be:25:cb:7b:ea:88:f2:3f:cd:b3:be:74:a3: 0c:52:a4:68:6e:09:4f:36:b3:66:1c:a4:32:01:46: 0e:eb:45:d8:af:00:1e:fa:5a:44:a1:b2:35:02:61: f9:25:ba:d8:76:a1:d4:e5:b7:9a:bf:a9:17:d6:fe: c6:b7:b3:7b:21:a4:b5:00:ac:ef:1e:90:f5:91:5f: 1d:a4:6d:a3:73:8d:af:14:1e:2e:33:24:31:47:8e: be:b3:9d:1f:b1:9f:ff:79:ab:6f:37:88:8d:8c:57: ef:4b:95:fe:a2:5f:e1:ba:13:84:81:c8:17:87:df: 78:c4:6e:7d:26:8f:35:e1:f8:1b:fa:43:fa:82:93: 05:70:9f:34:e6:67:ac:e9:22:08:df:08:0e:25:0f: 5a:26:f3:a5:d7:c8:42:2c:cb:a4:7d:21:e5:90:a6: 57:a5:d3:05:11:29:73:ff:fe:d2:49:2e:ee:51:48: 4e:d5:e4:e3:8b:ec:9f:0f:27:32:61:14:0d:d0:59: 0a:3e:3b:03:0c:e9:5d:19:83:5a:f0:5e:23:ff:dc: 30:ca:95:51:5a:a6:f8:75:83:56:ca:8f:96:5a:d4: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:45:67:C6:29:6F:93:71:E9:F8:0D:82:E5:CC:8A:F0:8E:9D:06:7F X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/F93DE378B66911F09D7E8031C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.21.0-103.204.22.255 Signature Algorithm: sha256WithRSAEncryption 4b:5a:c7:7e:20:14:11:f2:a6:7e:4a:e5:14:df:0b:13:72:a2: 3e:69:8d:54:8a:07:bd:38:55:28:e1:e2:eb:23:eb:9f:fc:46: 92:ff:d2:4b:53:28:2b:98:2a:6c:57:95:d9:e7:6b:99:d8:52: 48:35:94:e8:01:6e:9c:ce:b6:4f:a5:13:45:a9:4b:70:ba:a1: 8c:9e:83:be:4f:81:c8:a5:76:40:ca:f4:d2:50:a3:80:8b:22: a4:0d:a0:73:7f:c5:71:d4:72:07:86:47:53:06:82:33:2e:88: e9:e7:4d:81:f0:88:cf:50:52:51:ca:f4:9f:c4:ad:00:ec:ee: fe:e8:b2:44:27:5d:77:be:46:32:9e:64:20:bd:26:b9:a1:5b: 36:c7:90:09:52:ba:70:f6:03:32:22:62:62:df:8b:b8:5b:34: ab:9e:94:83:8a:85:c5:b3:ae:fa:42:23:52:15:39:9c:19:a9: f4:4b:45:40:fd:03:22:65:65:8d:0c:8c:03:3b:13:e2:1d:23: 3b:6e:61:04:2a:c0:26:cd:0e:e1:55:ef:23:c2:7b:83:99:1d: 8e:b2:0a:d4:38:e0:42:f2:0a:64:67:2f:c7:d7:75:38:38:76: f5:3e:15:8b:24:b4:aa:80:9c:8f:52:2c:97:14:5c:b8:6b:36: df:a0:25:1c -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUxMDMxMTQ1ODU2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0Y2VhZi1lMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+I32NSgH0/nznn/yxPrutoJmRs19sHiFO3X5rpq2zL4ly3vqiPI/zbO+dKMM UqRobglPNrNmHKQyAUYO60XYrwAe+lpEobI1AmH5JbrYdqHU5beav6kX1v7Gt7N7 IaS1AKzvHpD1kV8dpG2jc42vFB4uMyQxR46+s50fsZ//eatvN4iNjFfvS5X+ol/h uhOEgcgXh994xG59Jo814fgb+kP6gpMFcJ805mes6SII3wgOJQ9aJvOl18hCLMuk fSHlkKZXpdMFESlz//7SSS7uUUhO1eTji+yfDycyYRQN0FkKPjsDDOldGYNa8F4j /9wwypVRWqb4dYNWyo+WWtRF5QIDAQABo4ICnTCCApkwHQYDVR0OBBYEFKJFZ8Yp b5Nx6fgNguXMivCOnQZ/MB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBEODcvRjY4M0NFRjIyMUVCMTFFQzkyNTAxODE5QzRGOUFFMDIvRjkzREUzNzhC NjY5MTFGMDlEN0U4MDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGfMFQMEAGfMFjANBgkqhkiG9w0BAQsFAAOCAQEAS1rH fiAUEfKmfkrlFN8LE3KiPmmNVIoHvThVKOHi6yPrn/xGkv/SS1MoK5gqbFeV2edr mdhSSDWU6AFunM62T6UTRalLcLqhjJ6Dvk+ByKV2QMr00lCjgIsipA2gc3/FcdRy B4ZHUwaCMy6I6edNgfCIz1BSUcr0n8StAOzu/uiyRCddd75GMp5kIL0muaFbNseQ CVK6cPYDMiJiYt+LuFs0q56Ug4qFxbOu+kIjUhU5nBmp9EtFQP0DImVljQyMAzsT 4h0jO25hBCrAJs0O4VXvI8J7g5kdjrIK1DjgQvIKZGcvx9d1ODh29T4ViyS0qoCc j1IslxRcuGs236AlHA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:58:06 2025 by rpki-client