$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/C4CA725C687011EFA523204EC4F9AE02.roa File: C4CA725C687011EFA523204EC4F9AE02.roa (raw, json) Hash identifier: sLQoRFbBh4I+Q9+Kwgifp5lKDCoMhLma6zjy4BIW7WQ= Subject key identifier: 8A:81:B5:9D:97:F5:22:AF:40:B0:5A:56:8E:56:7D:42:35:2A:3A:42 Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 01A1 Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/C4CA725C687011EFA523204EC4F9AE02.roa Signing time: Sun 21 Sep 2025 03:51:30 +0000 ROA not before: Sun 21 Sep 2025 03:51:30 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137967 IP address blocks: 103.233.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Sep 21 03:51:30 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68cf7642-cbdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:d5:4e:5b:66:87:b0:3b:56:94:da:06:f8: 86:35:45:cd:d7:20:5d:7a:ba:80:15:c0:72:53:55: c4:ad:4f:53:52:c6:46:b6:eb:65:d4:87:b1:59:03: 66:2f:51:b2:fd:65:4d:a4:bd:6c:eb:56:03:ba:05: ae:20:40:8a:87:a1:59:7a:77:f9:c7:f4:9d:c0:fd: af:d9:cc:fb:f6:5f:a2:b4:e0:44:16:93:a0:3a:2b: 92:fa:7a:ec:7e:ec:75:1e:4a:39:3f:39:b0:a5:c9: 15:f5:41:35:80:44:b3:52:64:52:e4:f4:3c:bb:56: 12:82:44:d2:98:13:e7:a3:c9:9e:f9:2b:38:7b:9b: 07:ef:57:d1:94:71:b0:be:0e:d8:ab:2c:03:1f:ec: b8:65:f0:4e:96:d3:27:b9:92:54:c6:67:85:52:db: 7b:93:28:ea:3e:46:37:f1:78:2f:90:7c:bb:5e:66: e2:db:59:ff:3a:68:22:53:26:aa:3a:c7:10:c1:99: 82:c0:21:6e:8f:2a:24:ac:dd:4d:24:42:a5:3c:e4: 73:0f:29:a2:52:72:0b:b6:4c:7c:7c:da:5c:db:8c: 39:d1:46:89:f0:04:8f:c1:6f:0e:22:89:f6:dc:40: 91:f3:ff:ca:f7:92:3d:8c:d2:09:14:63:ae:85:77: f3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:81:B5:9D:97:F5:22:AF:40:B0:5A:56:8E:56:7D:42:35:2A:3A:42 X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/C4CA725C687011EFA523204EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.233.176.0/24 Signature Algorithm: sha256WithRSAEncryption a6:c8:8b:bd:dd:e2:7b:29:73:75:09:c2:e0:6e:67:38:10:3c: 1a:7d:e0:18:b6:92:bf:33:97:51:20:09:4d:34:0b:79:57:6e: b4:b4:ef:ae:45:ca:c9:02:35:ab:c4:10:7b:bc:fc:41:c8:d6: fa:af:10:59:5d:99:0b:11:c2:03:bb:71:b9:f3:8b:a7:30:60: 63:d7:63:77:52:49:6e:b6:98:2b:69:e1:81:c7:d2:2b:a7:b7: 0e:59:55:91:2e:94:28:3d:e7:28:fe:ed:53:08:30:fb:4e:33: 8a:3a:20:d5:45:eb:cf:fe:fd:12:b7:22:57:0b:bc:58:9b:3e: ab:e3:c6:7d:80:64:12:ec:b1:61:a4:b3:49:69:33:ee:68:ce: c5:45:67:e5:49:1e:55:6e:6f:de:f7:2b:4b:cb:99:17:33:be: 03:be:34:4e:7f:17:c5:77:88:16:75:6c:a8:b2:3f:ca:f1:c2: 36:ba:a1:8d:9c:ed:5c:fe:dc:ba:d1:62:81:07:11:e0:02:13: e4:28:1b:26:2e:38:e3:c6:0b:1c:28:27:7d:92:07:93:b0:47: 7e:d1:be:01:2d:67:84:9e:13:8d:1b:e3:b1:47:af:c5:65:f0: 6c:eb:ab:f1:6c:32:cc:30:74:8e:8e:e5:33:18:4f:01:4e:21: fd:ea:09:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjUwOTIxMDM1MTMwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNmNzY0Mi1jYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVDVTltmh7A7VpTaBviGNUXN1yBderqAFcByU1XErU9TUsZGtutl1IexWQNm L1Gy/WVNpL1s61YDugWuIECKh6FZenf5x/SdwP2v2cz79l+itOBEFpOgOiuS+nrs fux1Hko5PzmwpckV9UE1gESzUmRS5PQ8u1YSgkTSmBPno8me+Ss4e5sH71fRlHGw vg7YqywDH+y4ZfBOltMnuZJUxmeFUtt7kyjqPkY38XgvkHy7Xmbi21n/OmgiUyaq OscQwZmCwCFujyokrN1NJEKlPORzDymiUnILtkx8fNpc24w50UaJ8ASPwW8OIon2 3ECR8//K95I9jNIJFGOuhXfzyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIqBtZ2X 9SKvQLBaVo5WfUI1KjpCMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFDODQvREQ1QzlFQkMyQjg2MTFFRUE2OUY0QjE3QzRGOUFFMDIvQzRDQTcyNUM2 ODcwMTFFRkE1MjMyMDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn6bAwDQYJKoZIhvcNAQELBQADggEBAKbIi73d4nspc3UJ wuBuZzgQPBp94Bi2kr8zl1EgCU00C3lXbrS0765FyskCNavEEHu8/EHI1vqvEFld mQsRwgO7cbnzi6cwYGPXY3dSSW62mCtp4YHH0iuntw5ZVZEulCg95yj+7VMIMPtO M4o6INVF68/+/RK3IlcLvFibPqvjxn2AZBLssWGks0lpM+5ozsVFZ+VJHlVub973 K0vLmRczvgO+NE5/F8V3iBZ1bKiyP8rxwja6oY2c7Vz+3LrRYoEHEeACE+QoGyYu OOPGCxwoJ32SB5OwR37RvgEtZ4SeE40b47FHr8Vl8Gzrq/FsMswwdI6O5TMYTwFO If3qCVY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:24 2025 by rpki-client