$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa File: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (raw, json) Hash identifier: ORDwcUk6C17rG0Rjjv65wOFUqorGmDWrJEH1nGvJDz0= Subject key identifier: 54:42:37:D0:99:5F:7F:59:CF:36:C9:6D:B0:AC:D4:D8:03:27:CB:80 Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0D0D Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa Signing time: Wed 30 Jul 2025 18:28:20 +0000 ROA not before: Wed 30 Jul 2025 18:28:20 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.80.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3341 (0xd0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: Jul 30 18:28:20 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688a6443-2532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7a:dd:3f:1a:d7:5c:bd:c6:6e:0b:3c:9a:f1: 3b:41:e0:94:db:0e:5e:46:d0:14:c8:c7:1c:e0:45: b2:d1:97:a4:3a:34:6d:71:af:4b:70:cc:c2:00:36: fa:26:66:ae:60:00:a1:bc:ed:09:0e:bc:fb:51:28: 9b:48:af:ca:29:10:76:28:40:05:2e:dd:f2:39:4d: eb:6a:cf:a2:ec:03:56:32:05:93:fe:01:73:66:d9: 7c:20:b4:99:e3:80:65:e4:70:e2:40:f9:81:7f:74: bd:5d:bd:9a:21:47:8a:48:b8:5f:f9:52:6e:67:4b: e8:97:3d:57:e1:50:15:73:b5:db:ee:1e:76:3c:f4: 13:47:3a:bb:a5:f0:09:52:46:c9:b3:03:a1:39:61: a0:3c:02:c6:7c:e1:1d:09:9f:70:ab:e9:a7:29:71: cd:e3:68:24:63:4e:f6:5d:e9:0a:d4:b9:3c:56:63: 19:c6:17:75:af:c2:b8:23:af:a0:fd:ea:43:7e:5c: 30:e5:ee:84:ce:a1:9b:eb:54:fb:73:fb:68:2c:4b: cd:95:7d:12:4b:05:d3:51:5e:86:1b:00:6b:44:09: 60:1d:1c:67:e7:ff:54:db:84:55:4e:e3:97:3f:16: 98:91:41:29:60:6a:40:a3:7c:df:9c:13:31:cf:4b: fd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:42:37:D0:99:5F:7F:59:CF:36:C9:6D:B0:AC:D4:D8:03:27:CB:80 X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/8E4647E6EB2911EB9891D01DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.80.6.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:c4:2f:97:54:42:a4:82:cf:38:78:25:be:8a:81:c4:4c:bc: c3:21:c5:91:93:36:b6:55:9c:6f:67:e2:2d:2b:ab:c0:01:a9: 52:b6:1e:06:43:ff:cb:3b:a9:a9:79:b7:0d:0e:89:0b:1a:e5: 64:7f:a3:f7:f9:68:55:c6:40:eb:40:a0:23:8a:58:28:e6:e6: b7:76:de:c0:73:a6:5a:32:ea:6b:73:d8:c7:ae:a6:ce:ce:95: 37:c1:cd:27:75:60:52:1f:7a:4c:53:5c:10:10:c3:1a:c3:43: 45:e1:df:43:a5:3f:4b:d9:6a:59:8b:97:56:9f:e0:b2:36:7d: 8b:00:f9:70:f5:fb:2f:9d:cb:01:40:76:0b:a9:56:e3:52:79: 60:e4:c7:1c:ee:b2:2f:70:81:1f:5e:6b:d4:06:6b:ff:bb:f0: 9b:cf:df:78:cb:49:1e:49:0c:3d:aa:29:25:36:e9:f2:2d:28: 48:ae:13:da:b0:af:ec:41:b5:35:ea:cb:07:fa:e4:17:ae:4d: 8c:e1:3f:3a:c5:46:0c:66:7e:b5:f1:01:82:76:fb:dd:fa:01: 6e:b5:ad:d6:63:97:e5:ce:8c:67:2b:c9:f9:5b:03:86:ac:5d: e9:54:de:bc:a1:aa:c0:af:b9:f6:e8:44:f4:4a:0d:bc:da:8b: b9:9b:d7:aa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjUwNzMwMTgyODIwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhNjQ0My0yNTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHrdPxrXXL3Gbgs8mvE7QeCU2w5eRtAUyMcc4EWy0ZekOjRtca9LcMzCADb6 JmauYAChvO0JDrz7USibSK/KKRB2KEAFLt3yOU3ras+i7ANWMgWT/gFzZtl8ILSZ 44Bl5HDiQPmBf3S9Xb2aIUeKSLhf+VJuZ0volz1X4VAVc7Xb7h52PPQTRzq7pfAJ UkbJswOhOWGgPALGfOEdCZ9wq+mnKXHN42gkY072XekK1Lk8VmMZxhd1r8K4I6+g /epDflww5e6EzqGb61T7c/toLEvNlX0SSwXTUV6GGwBrRAlgHRxn5/9U24RVTuOX PxaYkUEpYGpAo3zfnBMxz0v9dwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFRCN9CZ X39ZzzbJbbCs1NgDJ8uAMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTcwRUQvRTYyNzdBM0VFOUUxMTFFOUE1OTg3RTFGQzRGOUFFMDIvOEU0NjQ3RTZF QjI5MTFFQjk4OTFEMDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnUAYwDQYJKoZIhvcNAQELBQADggEBACzEL5dUQqSCzzh4 Jb6KgcRMvMMhxZGTNrZVnG9n4i0rq8ABqVK2HgZD/8s7qal5tw0OiQsa5WR/o/f5 aFXGQOtAoCOKWCjm5rd23sBzploy6mtz2Meups7OlTfBzSd1YFIfekxTXBAQwxrD Q0Xh30OlP0vZalmLl1af4LI2fYsA+XD1+y+dywFAdgupVuNSeWDkxxzusi9wgR9e a9QGa/+78JvP33jLSR5JDD2qKSU26fItKEiuE9qwr+xBtTXqywf65BeuTYzhPzrF RgxmfrXxAYJ2+936AW61rdZjl+XOjGcryflbA4asXelU3ryhqsCvufboRPRKDbza i7mb16o= -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:56 2025 by rpki-client