$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/6EA6EB5A355011EBAAB1E56EC4F9AE02.roa File: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (raw, json) Hash identifier: vIPNbcJqWxUBjpuSb4YOfnKRdWitZHJvmk+kQLzHWh8= Subject key identifier: BA:18:5D:BC:5D:9F:6C:D9:AD:64:C0:CB:18:AE:0F:F4:BF:0B:B9:CB Certificate issuer: /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931 Certificate serial: 076E Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/6EA6EB5A355011EBAAB1E56EC4F9AE02.roa Signing time: Thu 04 Sep 2025 20:00:36 +0000 ROA not before: Thu 04 Sep 2025 20:00:36 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 137551 IP address blocks: 103.121.188.0/24 maxlen: 24 103.121.189.0/24 maxlen: 24 103.121.190.0/24 maxlen: 24 103.121.191.0/24 maxlen: 24 103.195.0.0/22 maxlen: 24 139.5.132.0/22 maxlen: 22 139.5.132.0/24 maxlen: 24 139.5.133.0/24 maxlen: 24 139.5.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1902 (0x76e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2, serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931 Validity Not Before: Sep 4 20:00:36 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b9efe4-5046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:c3:31:f1:1d:c1:5b:6b:c5:81:28:28:fe: 09:be:11:c3:73:43:a3:1c:a6:0f:61:6e:3b:3b:c8: e1:46:77:65:6d:a5:58:f6:b0:59:5b:6f:a9:80:5f: b7:74:6d:1a:ef:84:a0:10:52:9d:c0:62:e1:1e:5b: d2:17:7c:62:db:a2:86:e1:39:f3:96:34:7e:0c:65: 6d:d5:de:82:80:1e:25:61:da:fe:ba:9f:00:5e:53: 1c:60:97:38:02:a1:87:d5:a4:a2:7b:99:34:c7:d8: 5b:07:96:61:2a:e9:15:5c:55:6e:8c:9f:0a:02:a8: 6b:bf:e9:88:37:74:b6:6f:e7:a6:c3:5d:ee:8d:bc: 43:cd:63:9b:6c:7e:91:60:92:b1:19:22:5a:cd:d6: 48:5d:78:61:46:a9:ee:39:00:4c:40:6c:ad:c9:6f: 9d:ba:fc:13:94:7f:8a:be:57:da:96:a9:f6:ef:8c: 5f:1b:59:db:06:b2:26:bb:c3:ba:86:1d:f2:d8:7e: 7f:cb:e6:46:e1:8b:d5:c8:0b:c1:72:ae:fb:d0:57: 5d:5c:ab:e4:62:3f:96:d6:c1:70:ed:4c:a4:09:bd: 4b:89:ab:37:b7:eb:6c:26:17:9a:d0:ef:8e:5f:49: 90:2f:46:1f:03:02:32:ab:95:03:50:2d:e7:9d:6f: ab:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:18:5D:BC:5D:9F:6C:D9:AD:64:C0:CB:18:AE:0F:F4:BF:0B:B9:CB X509v3 Authority Key Identifier: keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/6EA6EB5A355011EBAAB1E56EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.188.0/22 103.195.0.0/22 139.5.132.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:eb:01:a2:7d:fc:06:fc:fe:38:e2:55:be:9f:38:a4:27:fe: 56:d0:80:9c:30:04:15:fd:0f:ce:6b:b5:58:bd:d3:d4:e1:b4: e4:11:66:d7:3d:c5:89:38:8e:d0:14:fd:3a:63:77:74:43:2d: d9:4c:b7:3b:1b:28:8a:f1:57:6e:0d:30:61:e2:d4:02:7b:57: a4:9e:34:01:95:11:83:a6:7c:4f:49:7d:6b:f9:62:7d:ae:ff: d4:93:89:bd:cb:0c:a3:9c:69:43:5f:85:8a:2d:71:03:7a:32: 4d:8f:0b:19:91:42:34:93:33:35:9f:ea:39:ce:ae:fc:83:a9: c9:13:3b:22:71:0c:53:d7:6a:ff:17:04:5f:63:d6:be:5d:46: e4:12:0c:39:99:8c:93:ee:03:0d:b1:3d:5d:a0:25:a5:e2:05: dc:47:ae:5f:98:56:8a:19:3b:32:18:2e:91:6e:2c:1f:ff:41: 6f:bd:96:29:0a:2d:f6:fd:a5:f7:d8:22:b3:97:a8:db:e3:4b: c5:ca:78:3a:df:e7:92:0b:af:70:5e:86:85:5a:65:7b:71:07: ba:3b:cf:16:c3:e2:22:44:46:7e:cd:55:1c:fc:18:0d:67:6c: b4:a1:dc:bc:db:38:b8:0e:e9:b0:d3:e5:09:44:9f:d2:02:be: dd:da:d5:2b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDkzQTdEODM1RTEzODU4QkI1OTk1MUMzOTlBNUY5RUFC MEUyRUI5MzEwHhcNMjUwOTA0MjAwMDM2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI5ZWZlNC01MDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/fDMfEdwVtrxYEoKP4JvhHDc0OjHKYPYW47O8jhRndlbaVY9rBZW2+pgF+3 dG0a74SgEFKdwGLhHlvSF3xi26KG4TnzljR+DGVt1d6CgB4lYdr+up8AXlMcYJc4 AqGH1aSie5k0x9hbB5ZhKukVXFVujJ8KAqhrv+mIN3S2b+emw13ujbxDzWObbH6R YJKxGSJazdZIXXhhRqnuOQBMQGytyW+duvwTlH+Kvlfalqn274xfG1nbBrImu8O6 hh3y2H5/y+ZG4YvVyAvBcq770FddXKvkYj+W1sFw7UykCb1Lias3t+tsJhea0O+O X0mQL0YfAwIyq5UDUC3nnW+r4wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLoYXbxd n2zZrWTAyxiuD/S/C7nLMB8GA1UdIwQYMBaAFJOn2DXhOFi7WZUcOZpfnqsOLrkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdMdFpsUnc1bWwtZXF3NHV1 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s2ZllOZUU0V0x0WmxSdzVtbC1lcXc0dXVURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTAwQjIvMEFGNkVCMkE3M0U4MTFFQTg4NTFGODdDQzRGOUFFMDIvNkVBNkVCNUEz NTUwMTFFQkFBQjFFNTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnebwDBAJnwwADBAKLBYQwDQYJKoZIhvcNAQELBQADggEB AHvrAaJ9/Ab8/jjiVb6fOKQn/lbQgJwwBBX9D85rtVi909ThtOQRZtc9xYk4jtAU /Tpjd3RDLdlMtzsbKIrxV24NMGHi1AJ7V6SeNAGVEYOmfE9JfWv5Yn2u/9STib3L DKOcaUNfhYotcQN6Mk2PCxmRQjSTMzWf6jnOrvyDqckTOyJxDFPXav8XBF9j1r5d RuQSDDmZjJPuAw2xPV2gJaXiBdxHrl+YVooZOzIYLpFuLB//QW+9likKLfb9pffY IrOXqNvjS8XKeDrf55ILr3BehoVaZXtxB7o7zxbD4iJERn7NVRz8GA1nbLSh3Lzb OLgO6bDT5QlEn9ICvt3a1Ss= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:39 2025 by rpki-client