$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/E2CCAD50B3BB11F08D544F2FC4F9AE02.roa File: E2CCAD50B3BB11F08D544F2FC4F9AE02.roa (raw, json) Hash identifier: FAKsbhQXL8EIzyeaf7SAPzJQoDlYwpJTySFWs6Gy75Q= Subject key identifier: 7E:EC:9E:E4:DF:06:7A:32:C4:66:BA:78:DE:B1:48:A5:E9:D0:A7:18 Certificate issuer: /CN=A91E4700/serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38 Certificate serial: 02 Authority key identifier: 40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/E2CCAD50B3BB11F08D544F2FC4F9AE02.roa Signing time: Tue 28 Oct 2025 05:06:39 +0000 ROA not before: Tue 28 Oct 2025 05:06:39 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 63850 IP address blocks: 103.234.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4700, serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38 Validity Not Before: Oct 28 05:06:39 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=69004f5f-42a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:08:df:83:b7:11:ac:ce:95:a1:57:c3:7e: bd:ed:88:4a:cb:d3:25:4d:21:c8:35:9c:b0:64:d9: f3:93:7e:8a:49:69:87:f8:10:eb:66:61:2b:58:8b: a2:ef:61:d2:51:33:72:a7:57:ea:e7:11:cd:16:2f: 4a:95:2b:eb:d5:44:17:91:bf:58:0b:d0:88:46:11: 9f:30:14:2d:da:e2:a7:95:5f:36:6e:27:46:c1:00: de:33:99:b4:93:78:83:6e:12:41:67:3f:4b:e3:f9: f2:af:12:9d:a2:9f:d1:f8:f7:5d:71:f4:51:4e:5c: 79:82:48:cc:1f:d8:db:de:fb:3e:80:28:7e:b5:c3: da:a8:ca:9c:5c:28:8c:aa:da:71:2e:ca:3b:c4:a5: e7:a6:39:58:95:18:11:22:c8:e1:e1:8a:8d:f2:df: b1:3a:c3:bb:1e:66:ef:72:c3:d9:8b:52:39:45:9e: 78:2a:09:3b:4d:a9:27:a0:41:e0:33:c7:61:5a:26: ff:c3:dc:44:04:3b:9d:bb:4f:99:e6:f4:0b:fc:d7: 07:1b:ef:0c:5e:72:f4:6e:e9:2a:49:be:f2:8c:de: 52:77:ba:40:ee:6b:b3:7e:3f:86:80:08:77:29:e3: 04:97:93:1e:2d:ff:d8:52:35:32:70:a9:d5:b6:cd: e0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EC:9E:E4:DF:06:7A:32:C4:66:BA:78:DE:B1:48:A5:E9:D0:A7:18 X509v3 Authority Key Identifier: keyid:40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/E2CCAD50B3BB11F08D544F2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.14.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:b2:5e:b4:24:90:7f:34:5b:ae:ea:78:4f:6b:15:73:a7:5b: 0c:95:62:d2:9d:a0:3c:bf:50:5b:f5:49:7d:c0:bb:8c:b9:03: a7:5c:8d:88:58:d4:c5:ad:eb:6e:64:49:c1:18:79:93:d3:37: 77:d4:58:32:8a:67:e9:b4:df:0f:bd:d5:26:65:19:59:60:13: 6f:a7:5c:e3:f6:6e:92:be:05:7d:29:5d:ad:34:21:3f:37:96: 5f:65:c8:56:34:eb:aa:0a:b6:46:75:4d:b4:4b:72:38:e2:51: e9:1d:9a:64:c0:09:57:d6:f2:b0:2b:55:32:80:12:2e:b6:9a: fe:64:3f:62:ef:cd:49:7c:7d:ce:0b:6c:aa:1b:0c:f4:da:6a: 98:a8:bb:0d:8c:0e:44:79:d5:43:cd:78:53:06:63:0d:9b:5d: 32:36:e9:76:fc:87:ff:1d:ba:d4:0e:fd:85:e0:15:a5:78:55: 96:b5:0f:da:e2:d3:65:dc:c6:10:d2:47:54:04:d0:ba:9c:b3: ef:7f:0b:6b:00:5c:f2:65:42:63:31:64:6f:b2:9b:ac:67:67: bb:83:d5:91:83:4f:f6:91:ee:bb:dc:2f:25:03:71:d1:38:00: 4b:b5:34:f7:5c:a9:6a:7c:81:50:b4:0c:41:bf:67:b3:62:db: 5f:60:a2:2d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDcwMDExMC8GA1UEBRMoNDA2Mzk0MUYyOUE0NzE3OUVFOEZGNTFGMzAxREYxRUE0 MTFGQkQzODAeFw0yNTEwMjgwNTA2MzlaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDA0ZjVmLTQyYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTQwjfg7cRrM6VoVfDfr3tiErL0yVNIcg1nLBk2fOTfopJaYf4EOtmYStYi6Lv YdJRM3KnV+rnEc0WL0qVK+vVRBeRv1gL0IhGEZ8wFC3a4qeVXzZuJ0bBAN4zmbST eINuEkFnP0vj+fKvEp2in9H4911x9FFOXHmCSMwf2Nve+z6AKH61w9qoypxcKIyq 2nEuyjvEpeemOViVGBEiyOHhio3y37E6w7seZu9yw9mLUjlFnngqCTtNqSegQeAz x2FaJv/D3EQEO527T5nm9Av81wcb7wxecvRu6SpJvvKM3lJ3ukDua7N+P4aACHcp 4wSXkx4t/9hSNTJwqdW2zeDrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUfuye5N8G ejLEZrp43rFIpenQpxgwHwYDVR0jBBgwFoAUQGOUHymkcXnuj/UfMB3x6kEfvTgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0NzAwLzQyQ0MwRDUwQjNC QjExRjBBOTMxQkE2RkM0RjlBRTAyL1FHT1VIeW1rY1hudWpfVWZNQjN4NmtFZnZU Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUdPVUh5bWtjWG51al9VZk1CM3g2a0VmdlRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDcwMC80MkNDMEQ1MEIzQkIxMUYwQTkzMUJBNkZDNEY5QUUwMi9FMkNDQUQ1MEIz QkIxMUYwOEQ1NDRGMkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfqDjANBgkqhkiG9w0BAQsFAAOCAQEAfrJetCSQfzRbrup4 T2sVc6dbDJVi0p2gPL9QW/VJfcC7jLkDp1yNiFjUxa3rbmRJwRh5k9M3d9RYMopn 6bTfD73VJmUZWWATb6dc4/Zukr4FfSldrTQhPzeWX2XIVjTrqgq2RnVNtEtyOOJR 6R2aZMAJV9bysCtVMoASLraa/mQ/Yu/NSXx9zgtsqhsM9NpqmKi7DYwORHnVQ814 UwZjDZtdMjbpdvyH/x261A79heAVpXhVlrUP2uLTZdzGENJHVATQupyz738LawBc 8mVCYzFkb7KbrGdnu4PVkYNP9pHuu9wvJQNx0TgAS7U091ypanyBULQMQb9ns2Lb X2CiLQ== -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:58 2025 by rpki-client