$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/2CB68FE8943211F0B1116B74C4F9AE02.roa File: 2CB68FE8943211F0B1116B74C4F9AE02.roa (raw, json) Hash identifier: EQNnt+47JakLAicAJpey8kMF4fyXy0EyBy2A09Z/nmU= Subject key identifier: BA:1D:2F:12:69:4F:4A:C8:FB:C4:F9:BB:A3:3F:FF:2A:88:19:CF:7E Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 0689 Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/2CB68FE8943211F0B1116B74C4F9AE02.roa Signing time: Thu 30 Oct 2025 22:42:51 +0000 ROA not before: Thu 30 Oct 2025 22:42:51 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 9304 IP address blocks: 103.143.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Oct 30 22:42:51 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6903e9ea-4424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5e:1e:31:54:f8:2f:e7:25:7b:b4:64:dd:28: c9:42:20:f2:eb:4a:b4:b4:48:b7:93:c5:fe:cc:44: e8:93:c3:42:61:6b:f6:c1:fc:2c:6f:91:23:f9:e8: df:d6:73:fd:50:9a:a0:29:ac:d9:73:99:c7:91:42: a8:00:58:85:1d:8a:b1:ff:8f:ec:dc:5e:ff:9f:21: 20:f7:5f:f9:65:1c:67:00:47:d1:3c:fb:ae:ae:3d: 9b:ab:f1:dd:43:47:c1:6a:9a:df:3a:ef:4b:d0:e2: 4e:cc:5c:9c:ce:88:23:25:32:a3:94:13:31:4c:7e: d3:f3:d5:01:9b:19:9d:ad:5d:90:ec:e7:43:47:a6: a0:6e:14:d3:92:d4:71:fe:77:cd:81:89:2a:d2:6c: 6d:a9:44:86:0e:a0:47:16:d3:53:a8:60:54:22:e6: 06:38:df:d8:9a:bb:36:3e:11:30:31:46:69:5c:4f: ea:94:36:85:8a:a2:33:2b:75:10:c9:6d:b5:6a:57: c1:cf:6d:22:84:bf:f8:22:b2:17:f7:bf:7e:8c:48: 42:f5:27:ca:b8:a8:43:81:af:0d:82:e2:b3:c8:6a: fa:fc:46:f5:d4:34:64:e4:6c:4d:e0:40:06:c2:9f: eb:f6:b4:36:2d:4e:c7:11:4e:11:8b:4d:b7:bf:84: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1D:2F:12:69:4F:4A:C8:FB:C4:F9:BB:A3:3F:FF:2A:88:19:CF:7E X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/2CB68FE8943211F0B1116B74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.13.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:a9:75:fa:d0:0b:56:54:4e:83:ac:fb:f3:e6:da:dc:11:34: e9:bc:6c:4b:4a:d9:98:92:9e:00:aa:64:42:05:69:d7:fc:ab: ad:dc:04:16:02:a8:ef:9f:82:a4:fe:1a:32:9c:39:9f:9b:0f: c7:7b:d5:21:55:d3:ee:01:a5:e1:c1:3c:48:e2:b2:b8:9b:2f: ed:41:3f:4a:43:7f:7a:57:6a:9f:7a:98:2f:d1:e2:a7:12:2f: ff:71:95:79:f0:81:23:fc:65:e0:b9:5c:10:61:0d:27:e3:a6: 37:da:84:65:72:35:02:39:65:08:33:52:62:42:7b:85:4b:df: 32:06:32:90:7e:07:cc:c1:79:56:8c:67:56:38:05:88:bd:dd: e1:14:22:a9:ae:82:a1:08:ac:2d:7d:c6:35:37:ee:37:c3:f3: de:20:3a:65:98:28:b5:bb:ee:fc:d0:af:7d:24:5e:8e:91:b9: b0:92:d7:44:dd:cf:c1:c1:f2:65:c3:92:3f:33:e9:4d:ff:07: 97:5a:00:fb:78:89:e2:6c:3f:48:38:36:4b:07:2a:fd:af:f5: f8:88:e0:bc:11:42:7f:42:14:24:40:81:2a:e2:cc:f6:91:40: bd:3b:5a:07:7d:59:3a:72:a4:05:ad:16:57:a7:72:9a:a8:18: 1a:b5:0f:1a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjUxMDMwMjI0MjUxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzZTllYS00NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA314eMVT4L+cle7Rk3SjJQiDy60q0tEi3k8X+zETok8NCYWv2wfwsb5Ej+ejf 1nP9UJqgKazZc5nHkUKoAFiFHYqx/4/s3F7/nyEg91/5ZRxnAEfRPPuurj2bq/Hd Q0fBaprfOu9L0OJOzFyczogjJTKjlBMxTH7T89UBmxmdrV2Q7OdDR6agbhTTktRx /nfNgYkq0mxtqUSGDqBHFtNTqGBUIuYGON/Ymrs2PhEwMUZpXE/qlDaFiqIzK3UQ yW21alfBz20ihL/4IrIX979+jEhC9SfKuKhDga8NguKzyGr6/Eb11DRk5GxN4EAG wp/r9rQ2LU7HEU4Ri023v4T8xwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLodLxJp T0rI+8T5u6M//yqIGc9+MB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlFQTkvRTY0NkJGMUU5NjgwMTFFQkFBNjRGQTU2QzRGOUFFMDIvMkNCNjhGRTg5 NDMyMTFGMEIxMTE2Qjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnjw0wDQYJKoZIhvcNAQELBQADggEBAEqpdfrQC1ZUToOs +/Pm2twRNOm8bEtK2ZiSngCqZEIFadf8q63cBBYCqO+fgqT+GjKcOZ+bD8d71SFV 0+4BpeHBPEjisribL+1BP0pDf3pXap96mC/R4qcSL/9xlXnwgSP8ZeC5XBBhDSfj pjfahGVyNQI5ZQgzUmJCe4VL3zIGMpB+B8zBeVaMZ1Y4BYi93eEUIqmugqEIrC19 xjU37jfD894gOmWYKLW77vzQr30kXo6RubCS10Tdz8HB8mXDkj8z6U3/B5daAPt4 ieJsP0g4NksHKv2v9fiI4LwRQn9CFCRAgSrizPaRQL07Wgd9WTpypAWtFlencpqo GBq1Dxo= -----END CERTIFICATE-----Generated at Tue Nov 4 22:35:07 2025 by rpki-client