$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/2872E3EEB78511EFACBD807DC4F9AE02.roa File: 2872E3EEB78511EFACBD807DC4F9AE02.roa (raw, json) Hash identifier: kZzMXdkHsbeWhqQo08LJANq63hJpAGNo4uFVGoBwQ/0= Subject key identifier: DC:61:9B:26:50:8A:E6:3E:FF:22:BC:D3:22:91:16:A3:28:C7:F2:4E Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 035D Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/2872E3EEB78511EFACBD807DC4F9AE02.roa Signing time: Sun 03 Aug 2025 01:39:14 +0000 ROA not before: Sun 03 Aug 2025 01:39:14 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137899 IP address blocks: 103.97.176.0/22 maxlen: 24 103.242.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 861 (0x35d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: Aug 3 01:39:14 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=688ebdc2-b631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:67:b2:df:f7:17:ee:27:61:d5:91:f5:d5: fe:f9:ed:54:c1:f8:7b:6d:d1:ab:0a:c0:ed:ae:b8: 66:a1:58:8d:c7:c8:fb:2d:ce:6b:0d:a2:39:c2:03: 3b:87:06:48:54:d2:d4:bf:f8:9d:26:03:7c:db:54: 7b:d7:59:5b:59:b3:3e:5f:18:f0:7f:46:56:56:e9: 8f:b3:1a:4d:4e:50:ab:bb:1c:57:e7:8b:a1:80:55: a7:4e:02:14:83:d5:0f:e5:91:29:fa:c2:f9:82:38: 28:43:a2:12:06:cb:e0:72:f4:48:6a:28:5c:84:d7: aa:c5:8b:38:4d:59:c0:78:5f:17:38:35:09:d1:b3: 01:a0:b4:43:12:6b:6a:55:3a:41:bf:2c:2b:cb:ba: 97:3c:a2:72:6d:40:bd:be:ad:a5:13:56:1a:c1:7e: 14:75:94:ae:38:d0:5a:78:58:39:b5:f9:4f:af:45: e4:ab:92:d7:84:dd:49:36:01:28:ba:2d:3a:36:23: 8b:2d:09:5a:34:84:15:f5:a2:f6:3c:51:2f:9b:5a: 71:bc:46:58:4c:b6:77:44:84:26:14:7f:51:30:99: c0:ff:35:40:63:22:0f:6c:37:1b:f1:ab:4a:94:05: ce:da:ce:f6:fa:c0:98:7e:62:d2:17:a3:d6:d3:32: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:61:9B:26:50:8A:E6:3E:FF:22:BC:D3:22:91:16:A3:28:C7:F2:4E X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/2872E3EEB78511EFACBD807DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.97.176.0/22 103.242.12.0/22 Signature Algorithm: sha256WithRSAEncryption 95:65:e8:1e:d5:c9:fc:06:59:66:d3:fa:6f:43:c5:7c:e9:06: 5f:ed:0b:1d:37:9c:35:31:b3:87:dc:fd:ca:4a:6e:1b:a9:11: 87:4e:1e:56:76:c2:f9:ea:e5:af:5a:b5:ef:44:58:ac:49:53: cf:4d:cc:97:dc:fd:62:34:0e:a3:e7:1d:5a:8a:80:8e:ed:23: e6:db:88:47:27:29:49:55:31:43:fd:42:fa:ee:5d:15:b1:9e: 6b:02:12:2b:28:76:71:01:27:43:0f:7b:41:ac:5e:1b:c1:e6: e2:1b:84:75:9f:4b:9d:0f:8d:cc:38:96:22:bb:fe:ed:2b:11: 3e:2b:9b:46:03:c3:71:56:aa:5f:67:52:7f:af:79:c9:47:2b: db:cc:86:9b:ea:92:0a:02:6a:44:21:8f:93:35:5d:ed:2d:b2: 62:49:ab:58:1a:5e:30:07:c7:a8:5b:f8:12:3f:4e:eb:12:e6: 63:8b:91:d2:f1:6b:15:a6:f5:da:a2:1b:a7:1c:8f:d2:20:b8: e4:21:5e:52:9a:b0:16:be:af:6c:95:25:44:84:87:9e:ad:ab: e3:14:7c:36:34:20:b3:7a:24:59:d5:2f:c4:dc:66:60:d3:44: 23:fc:92:c7:aa:e0:42:04:1a:57:61:75:d8:07:4b:09:c1:b8: 42:d4:d0:7b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjUwODAzMDEzOTE0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlYmRjMi1iNjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkpnst/3F+4nYdWR9dX++e1Uwfh7bdGrCsDtrrhmoViNx8j7Lc5rDaI5wgM7 hwZIVNLUv/idJgN821R711lbWbM+Xxjwf0ZWVumPsxpNTlCruxxX54uhgFWnTgIU g9UP5ZEp+sL5gjgoQ6ISBsvgcvRIaihchNeqxYs4TVnAeF8XODUJ0bMBoLRDEmtq VTpBvywry7qXPKJybUC9vq2lE1YawX4UdZSuONBaeFg5tflPr0Xkq5LXhN1JNgEo ui06NiOLLQlaNIQV9aL2PFEvm1pxvEZYTLZ3RIQmFH9RMJnA/zVAYyIPbDcb8atK lAXO2s72+sCYfmLSF6PW0zJdFQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNxhmyZQ iuY+/yK80yKRFqMox/JOMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg1NzkvMDE3NjAzRkNDRUIyMTFFQ0FFMDAxODIzQzRGOUFFMDIvMjg3MkUzRUVC Nzg1MTFFRkFDQkQ4MDdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnYbADBAJn8gwwDQYJKoZIhvcNAQELBQADggEBAJVl6B7V yfwGWWbT+m9DxXzpBl/tCx03nDUxs4fc/cpKbhupEYdOHlZ2wvnq5a9ate9EWKxJ U89NzJfc/WI0DqPnHVqKgI7tI+bbiEcnKUlVMUP9QvruXRWxnmsCEisodnEBJ0MP e0GsXhvB5uIbhHWfS50Pjcw4liK7/u0rET4rm0YDw3FWql9nUn+veclHK9vMhpvq kgoCakQhj5M1Xe0tsmJJq1gaXjAHx6hb+BI/TusS5mOLkdLxaxWm9dqiG6ccj9Ig uOQhXlKasBa+r2yVJUSEh56tq+MUfDY0ILN6JFnVL8TcZmDTRCP8kseq4EIEGldh ddgHSwnBuELU0Hs= -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:31 2025 by rpki-client