$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa File: DA6883FC0F8611F0955A002EC4F9AE02.roa (raw, json) Hash identifier: G2el60zyW5DLxxUiqRoxyHbxi0YhTWGIRCSb/KhXW78= Subject key identifier: 27:0F:CA:33:45:6F:4B:5E:1B:8E:1F:0E:EB:7A:7E:DB:CC:17:4E:99 Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 0220 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa Signing time: Mon 03 Nov 2025 03:48:04 +0000 ROA not before: Mon 03 Nov 2025 03:48:04 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139648 IP address blocks: 103.218.172.0/24 maxlen: 24 103.218.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Nov 3 03:48:04 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690825f3-c7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:61:1b:04:6f:d2:63:ce:31:57:40:68:cf:cb: f3:75:14:50:8b:fe:e4:1d:3c:de:c8:45:30:b6:c9: 04:de:ef:3d:66:18:c3:13:d7:e8:ed:bc:a3:25:0e: 62:be:7b:ec:cf:56:40:08:13:10:dc:a8:ff:de:76: 40:be:61:df:d3:1a:b5:85:d8:5d:fe:af:b0:13:47: fa:2e:74:8a:6b:ab:07:b2:1b:25:27:25:c2:bb:95: 7c:76:b3:62:48:d7:19:19:8e:11:d7:ef:65:7a:19: c2:c8:a0:4c:cf:b5:8f:21:24:37:34:1d:7b:a2:ba: de:9f:9d:ce:93:b6:99:bb:74:8b:64:75:cf:c8:a4: d1:11:45:bb:83:dc:c6:b0:c7:0c:8e:dd:7c:83:2a: 60:ac:98:df:2f:cb:a1:9a:5e:a8:a7:ef:f2:d0:fe: 53:a3:f0:02:94:87:e0:50:1b:6e:0c:e5:26:02:23: e0:b2:40:be:14:5f:0a:e4:ab:45:fa:4c:14:25:71: 2e:7c:bc:82:09:be:7a:cb:52:ad:4d:62:6b:4a:f6: c6:11:a7:7f:88:59:91:01:a7:81:e6:06:30:de:20: 05:4d:6a:d1:86:ef:0e:e9:61:87:ba:10:b1:e8:2a: 4a:64:a5:78:eb:b0:df:f8:86:43:98:f0:07:d9:57: 34:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0F:CA:33:45:6F:4B:5E:1B:8E:1F:0E:EB:7A:7E:DB:CC:17:4E:99 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.218.172.0/23 Signature Algorithm: sha256WithRSAEncryption 75:a6:33:f6:8b:61:f0:1f:40:22:20:bb:ac:e5:29:fa:02:1a: 4b:83:9d:e8:ea:82:b2:40:58:2e:e2:be:b7:3f:a8:3e:e9:16: ba:7b:fe:d6:2b:b3:8a:10:34:b7:50:11:e4:b5:2e:36:cd:2f: 46:28:56:ce:53:76:40:02:fe:3c:5a:2f:b1:ef:b6:eb:69:ca: bd:c6:24:d2:41:90:04:67:ad:c0:73:ab:30:c0:3e:c6:47:f3: b0:86:f0:4e:48:5a:9b:db:36:5b:e3:dc:d3:03:86:7e:85:36: 0b:89:ac:67:86:10:db:db:38:8a:a9:e4:57:94:09:04:27:ae: c9:e5:a0:74:ac:bf:7e:95:3d:b3:bb:6e:56:cd:34:03:02:a9: c8:5d:91:6f:d5:5b:d2:62:10:7e:bd:6c:d9:fb:71:90:e6:66: 15:6e:9a:84:b5:dc:bd:bf:c6:21:46:76:b0:04:38:5c:35:09: ee:57:07:2d:9d:da:f7:d7:a7:6c:70:36:ac:bc:d5:08:e4:cb: 46:01:5c:90:0b:01:61:b6:03:6b:1e:96:25:dd:36:37:25:0e: 6d:06:02:94:45:3a:95:78:29:d7:3a:77:61:41:ce:cc:0e:0a: a9:89:72:78:c8:1f:02:51:da:ac:3a:fb:32:a8:86:d0:9a:36: d8:22:46:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUxMTAzMDM0ODA0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MjVmMy1jN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12EbBG/SY84xV0Boz8vzdRRQi/7kHTzeyEUwtskE3u89ZhjDE9fo7byjJQ5i vnvsz1ZACBMQ3Kj/3nZAvmHf0xq1hdhd/q+wE0f6LnSKa6sHshslJyXCu5V8drNi SNcZGY4R1+9lehnCyKBMz7WPISQ3NB17orren53Ok7aZu3SLZHXPyKTREUW7g9zG sMcMjt18gypgrJjfL8uhml6op+/y0P5To/AClIfgUBtuDOUmAiPgskC+FF8K5KtF +kwUJXEufLyCCb56y1KtTWJrSvbGEad/iFmRAaeB5gYw3iAFTWrRhu8O6WGHuhCx 6CpKZKV467Df+IZDmPAH2Vc0YwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCcPyjNF b0teG44fDut6ftvMF06ZMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvREE2ODgzRkMw Rjg2MTFGMDk1NUEwMDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn2qwwDQYJKoZIhvcNAQELBQADggEBAHWmM/aLYfAfQCIg u6zlKfoCGkuDnejqgrJAWC7ivrc/qD7pFrp7/tYrs4oQNLdQEeS1LjbNL0YoVs5T dkAC/jxaL7Hvtutpyr3GJNJBkARnrcBzqzDAPsZH87CG8E5IWpvbNlvj3NMDhn6F NguJrGeGENvbOIqp5FeUCQQnrsnloHSsv36VPbO7blbNNAMCqchdkW/VW9JiEH69 bNn7cZDmZhVumoS13L2/xiFGdrAEOFw1Ce5XBy2d2vfXp2xwNqy81Qjky0YBXJAL AWG2A2seliXdNjclDm0GApRFOpV4Kdc6d2FBzswOCqmJcnjIHwJR2qw6+zKohtCa NtgiRjc= -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:38 2025 by rpki-client