$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/16F7FB3E8FAF11EA96738C46C4F9AE02.roa File: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (raw, json) Hash identifier: FDVevWofhV4OBWCY3mCV+bPsuc2xoyahcfyBo3UC3vE= Subject key identifier: 3D:06:B3:CC:CA:6C:4A:06:32:13:18:98:B6:59:8D:5A:6F:33:F1:3B Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Certificate serial: 0947 Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/16F7FB3E8FAF11EA96738C46C4F9AE02.roa Signing time: Tue 04 Feb 2025 20:19:11 +0000 ROA not before: Tue 04 Feb 2025 20:19:11 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 136030 IP address blocks: 103.127.36.0/22 maxlen: 22 103.127.36.0/24 maxlen: 24 103.127.37.0/24 maxlen: 24 103.127.38.0/24 maxlen: 24 103.127.39.0/24 maxlen: 24 2404:1940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Validity Not Before: Feb 4 20:19:11 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a2763e-9f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:06:10:3a:48:c9:c1:4c:ef:3a:42:10:82:c0: f4:0d:7f:7a:6b:eb:93:20:cc:bb:58:ba:05:cc:70: af:84:25:12:9e:89:88:a5:4d:0d:04:36:52:d6:d7: e3:b3:53:b6:1e:d0:cd:f3:7b:cf:04:e8:af:3a:2d: 5d:eb:46:b8:46:1a:e7:8d:8b:65:79:be:cc:db:03: 81:c1:1a:fa:74:b8:4c:a3:af:37:8d:b8:02:5a:74: 34:da:28:13:1c:c7:99:1a:cf:14:35:59:94:be:1f: 98:c8:8b:a6:13:6d:d3:a0:a5:ff:59:4c:1b:62:97: f4:b2:44:af:83:a7:a6:49:8c:ed:32:54:98:25:cc: ec:db:e4:b6:45:da:0a:cd:45:9d:86:62:d1:c3:86: c2:77:cb:ce:cc:f1:59:98:a9:f8:d7:6d:cd:f9:c3: 83:c3:4a:07:a5:1d:35:f5:a5:c3:91:4e:46:05:19: 68:f8:d5:0b:c4:28:74:5d:ef:b2:90:68:29:2c:63: a5:68:fd:d1:ac:6a:02:9e:a5:9a:d0:90:d8:1c:bd: 0c:75:6d:cb:63:43:d5:54:37:da:32:40:dc:e0:9d: 19:5e:0f:87:44:c4:99:55:51:f0:1a:a6:4e:15:9c: e8:ce:0f:37:8e:00:74:34:e7:5b:52:6a:6c:af:ca: 59:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:06:B3:CC:CA:6C:4A:06:32:13:18:98:B6:59:8D:5A:6F:33:F1:3B X509v3 Authority Key Identifier: keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/16F7FB3E8FAF11EA96738C46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.36.0/22 IPv6: 2404:1940::/32 Signature Algorithm: sha256WithRSAEncryption 26:1b:49:a7:59:b0:8f:8f:04:e3:1e:62:17:8e:4f:57:aa:13: 17:55:33:2a:c1:de:b6:7b:c2:9c:fd:80:a0:56:53:c2:6e:05: 3b:31:fb:e6:5b:c2:5d:ee:13:0a:3d:57:df:b7:65:fd:59:44: 2f:5e:6a:c3:3b:c1:41:29:3f:90:44:a8:9b:23:60:d1:3b:e6: e2:9f:a1:da:42:66:d7:46:e3:73:6d:9b:5d:f1:b6:45:38:b7: ea:f4:4e:9f:68:c4:04:2f:3b:7c:e8:5b:b5:ed:77:cf:05:fd: 5f:14:ae:8d:b9:5d:42:a1:31:0e:30:3d:2c:df:2a:a9:1b:5f: 22:11:a6:83:87:cf:4c:6f:21:f2:b8:53:da:b9:07:58:cf:79: 8c:8b:aa:f9:6a:2c:ab:2e:f8:f0:a6:aa:e3:2f:64:61:eb:10: 7a:58:e0:2c:f9:0e:1a:c4:54:f2:57:4f:36:e0:8d:66:8f:cd: 9c:7b:8c:bc:38:a3:5b:43:ef:83:63:6d:6c:5c:d9:c5:73:a6: 5e:47:01:52:40:f3:65:09:49:45:39:36:42:39:31:a4:27:3d: 15:3d:51:b8:f8:9e:6b:1a:90:f4:69:10:b6:e8:7a:1d:bb:f7: 74:11:42:5a:cc:4e:87:12:7d:14:84:f3:b2:39:e7:55:1f:6e: 24:41:69:c6 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThFQUQxMTAvBgNVBAUTKEYzNzYwOTBERDc5Q0Y2QTI1OUFFMkExNzAyMDM3MkU5 RTYxNjBCQjYwHhcNMjUwMjA0MjAxOTExWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyNzYzZS05ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AYQOkjJwUzvOkIQgsD0DX96a+uTIMy7WLoFzHCvhCUSnomIpU0NBDZS1tfj s1O2HtDN83vPBOivOi1d60a4RhrnjYtleb7M2wOBwRr6dLhMo683jbgCWnQ02igT HMeZGs8UNVmUvh+YyIumE23ToKX/WUwbYpf0skSvg6emSYztMlSYJczs2+S2RdoK zUWdhmLRw4bCd8vOzPFZmKn4123N+cODw0oHpR019aXDkU5GBRlo+NULxCh0Xe+y kGgpLGOlaP3RrGoCnqWa0JDYHL0MdW3LY0PVVDfaMkDc4J0ZXg+HRMSZVVHwGqZO FZzozg83jgB0NOdbUmpsr8pZsQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFD0Gs8zK bEoGMhMYmLZZjVpvM/E7MB8GA1UdIwQYMBaAFPN2CQ3XnPaiWa4qFwIDcunmFgu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEVBRC8zQzI0REFEMjhG QUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlxSlpyaW9YQWdOeTZlWVdD N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzWUpEZGVjOXFKWnJpb1hBZ055NmVZV0M3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThFQUQvM0MyNERBRDI4RkFEMTFFQTkyRDFGNjQyQzRGOUFFMDIvMTZGN0ZCM0U4 RkFGMTFFQTk2NzM4QzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnfyQwDQQCAAIwBwMFACQEGUAwDQYJKoZIhvcNAQELBQAD ggEBACYbSadZsI+PBOMeYheOT1eqExdVMyrB3rZ7wpz9gKBWU8JuBTsx++Zbwl3u Ewo9V9+3Zf1ZRC9easM7wUEpP5BEqJsjYNE75uKfodpCZtdG43Ntm13xtkU4t+r0 Tp9oxAQvO3zoW7Xtd88F/V8Uro25XUKhMQ4wPSzfKqkbXyIRpoOHz0xvIfK4U9q5 B1jPeYyLqvlqLKsu+PCmquMvZGHrEHpY4Cz5DhrEVPJXTzbgjWaPzZx7jLw4o1tD 74NjbWxc2cVzpl5HAVJA82UJSUU5NkI5MaQnPRU9Ubj4nmsakPRpELboeh2793QR QlrMTocSfRSE87I551UfbiRBacY= -----END CERTIFICATE-----Generated at Tue Nov 4 17:02:18 2025 by rpki-client