$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/4F2654ACACDB11F0A3F2FF3CC4F9AE02.roa File: 4F2654ACACDB11F0A3F2FF3CC4F9AE02.roa (raw, json) Hash identifier: ezSFE6z1AfPI1kfaZKGN0eX+4u/ZznyBrlMf93wLFII= Subject key identifier: 28:25:F5:24:5B:FF:44:DB:6D:A1:C4:09:AF:FD:8C:D4:48:5C:EB:90 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 119E Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/4F2654ACACDB11F0A3F2FF3CC4F9AE02.roa Signing time: Thu 30 Oct 2025 07:27:27 +0000 ROA not before: Thu 30 Oct 2025 07:27:27 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138998 IP address blocks: 103.86.194.0/24 maxlen: 24 220.152.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4510 (0x119e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Oct 30 07:27:27 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6903135f-221f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:aa:6f:21:38:f0:1c:95:7f:31:ce:11:4b:60: 5a:16:78:2e:12:5d:31:f0:37:86:a5:42:25:ad:9d: f2:86:70:b3:b4:fa:7d:c2:57:39:c2:82:a7:e3:34: f0:85:ff:8b:27:e1:27:82:11:37:88:0b:0a:04:ba: d2:17:9f:e1:68:48:48:db:7e:d6:8e:e5:fa:9b:b7: 78:0f:59:a5:63:d0:a8:12:bf:28:c8:6b:b9:16:ac: 59:a4:c6:de:23:a4:cf:fa:14:26:0b:07:f8:73:f2: ad:47:e9:62:e7:87:d1:f9:f9:8e:76:5d:cc:cf:a9: 16:36:c5:5f:4b:3f:9d:7f:0b:1c:b9:7e:6c:b9:89: 3c:90:9e:0c:6e:10:f1:8e:83:6b:2f:35:09:d5:7c: ea:47:22:6f:ba:04:20:2e:1b:a0:58:fb:31:6d:12: db:32:7b:09:62:76:01:1a:01:5b:78:db:ce:3e:29: 08:9e:90:6f:26:80:cc:fc:d4:72:6a:07:24:62:a5: 68:65:8c:60:de:a3:ef:a7:e4:93:0b:d8:8a:bf:a0: fe:4b:f9:49:6f:11:d1:d6:88:fc:83:8c:6b:18:8f: 3b:c1:83:ec:c2:a5:69:42:d7:60:32:cf:60:8c:13: a4:42:1a:c3:e5:d9:15:81:4e:e9:3e:ee:56:3e:e5: ae:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:25:F5:24:5B:FF:44:DB:6D:A1:C4:09:AF:FD:8C:D4:48:5C:EB:90 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/4F2654ACACDB11F0A3F2FF3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.194.0/24 220.152.115.0/24 Signature Algorithm: sha256WithRSAEncryption 31:19:71:73:59:52:26:c4:c4:54:54:d3:b0:38:62:9c:c3:ff: 48:ae:96:ba:97:b2:1c:87:ab:10:6b:88:d4:0a:78:8d:dd:ed: 70:37:fb:25:f5:ec:d8:62:33:a5:16:2b:6f:23:ff:44:5d:be: 69:ce:6b:b0:b2:f3:d0:13:c6:1b:76:da:c6:f1:4d:e9:bf:8c: 6a:89:85:ba:d1:db:91:a2:c7:05:1f:bd:32:7a:4c:4a:dd:c2: 74:93:9e:41:30:0e:31:7d:a9:08:6b:1b:f5:62:41:be:79:8f: 30:0d:95:2d:8c:2c:c3:55:09:1f:9b:08:ea:ad:59:41:9e:fe: 15:12:a9:ec:b8:4f:16:b0:6e:b2:2f:ce:8d:32:93:bb:94:75: c2:5b:66:86:96:a7:84:9e:82:38:4a:1c:fa:27:ba:3c:be:51: 64:1d:05:27:62:d6:1f:cf:c6:2c:86:c5:aa:3b:04:3c:2e:e0: 8e:75:ce:d0:fc:4e:86:e9:7d:9c:d4:e0:66:cf:f9:3c:64:9a: a0:be:4d:97:06:e6:03:9b:55:25:72:1f:70:2f:d7:14:7a:8a: ce:25:79:b0:91:4e:90:37:91:0a:66:ec:c5:87:bb:b7:77:0c: 88:d1:4f:6b:c2:60:70:0d:51:8c:1d:5c:dc:e9:0f:3e:13:22: e4:93:54:9b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICEZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUxMDMwMDcyNzI3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzMTM1Zi0yMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16pvITjwHJV/Mc4RS2BaFnguEl0x8DeGpUIlrZ3yhnCztPp9wlc5woKn4zTw hf+LJ+EnghE3iAsKBLrSF5/haEhI237WjuX6m7d4D1mlY9CoEr8oyGu5FqxZpMbe I6TP+hQmCwf4c/KtR+li54fR+fmOdl3Mz6kWNsVfSz+dfwscuX5suYk8kJ4MbhDx joNrLzUJ1XzqRyJvugQgLhugWPsxbRLbMnsJYnYBGgFbeNvOPikInpBvJoDM/NRy agckYqVoZYxg3qPvp+STC9iKv6D+S/lJbxHR1oj8g4xrGI87wYPswqVpQtdgMs9g jBOkQhrD5dkVgU7pPu5WPuWu4wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCgl9SRb /0TbbaHECa/9jNRIXOuQMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvNEYyNjU0QUNB Q0RCMTFGMEEzRjJGRjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnVsIDBADcmHMwDQYJKoZIhvcNAQELBQADggEBADEZcXNZ UibExFRU07A4YpzD/0iulrqXshyHqxBriNQKeI3d7XA3+yX17NhiM6UWK28j/0Rd vmnOa7Cy89ATxht22sbxTem/jGqJhbrR25GixwUfvTJ6TErdwnSTnkEwDjF9qQhr G/ViQb55jzANlS2MLMNVCR+bCOqtWUGe/hUSqey4TxawbrIvzo0yk7uUdcJbZoaW p4SegjhKHPonujy+UWQdBSdi1h/PxiyGxao7BDwu4I51ztD8TobpfZzU4GbP+Txk mqC+TZcG5gObVSVyH3Av1xR6is4lebCRTpA3kQpm7MWHu7d3DIjRT2vCYHANUYwd XNzpDz4TIuSTVJs= -----END CERTIFICATE-----Generated at Wed Nov 5 17:28:34 2025 by rpki-client