$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa File: EE44E774314411EF956C0046C4F9AE02.roa (raw, json) Hash identifier: tpBZHVCLnDE9hPXx1rzX1HnhPRZpMRzJTTstJm0BIGI= Subject key identifier: 32:3C:B0:8F:13:B0:27:DE:F5:52:BA:B9:F9:4E:44:B7:AE:09:2D:0E Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Certificate serial: 014B Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa Signing time: Sat 07 Jun 2025 04:32:58 +0000 ROA not before: Sat 07 Jun 2025 04:32:58 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 61414 IP address blocks: 103.93.76.0/22 maxlen: 22 103.93.76.0/24 maxlen: 24 103.93.77.0/24 maxlen: 24 103.93.78.0/24 maxlen: 24 103.93.79.0/24 maxlen: 24 103.225.68.0/23 maxlen: 23 123.253.108.0/22 maxlen: 22 123.253.108.0/24 maxlen: 24 123.253.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Validity Not Before: Jun 7 04:32:58 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6843c0fa-0688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:d2:67:a9:99:c1:12:41:47:96:94:49:62: 61:5d:df:79:85:1f:9b:c6:eb:2d:eb:fb:7f:29:3c: 1e:e7:8d:e9:02:84:1e:62:ef:45:76:5b:2d:89:e9: f8:93:01:66:96:72:e0:93:c3:8e:be:2a:2d:79:fb: 3c:05:59:42:78:e7:4a:2e:c2:a7:6e:2b:a3:42:28: 3a:51:e6:05:79:49:44:8e:fc:64:e6:b5:4f:ac:79: 49:6b:9e:c2:68:1c:00:d6:0a:05:86:1c:a1:1e:a5: 09:23:1a:ba:0a:5a:81:25:9c:ec:39:1e:58:8b:1b: 70:88:5c:be:05:fd:b6:2d:b7:6a:7d:56:36:16:06: 54:dc:5b:33:b4:d3:4e:d4:c2:f0:fd:96:6b:f0:c8: 38:bc:61:07:17:df:e8:a8:8b:23:80:62:66:8b:fc: 04:8b:c0:bf:e5:3f:1d:55:19:f3:e6:a7:b0:41:3b: 2b:cc:ca:b9:77:26:40:a4:d2:ce:fa:6c:9b:f0:73: 7f:90:21:ab:39:a0:c9:99:ce:f3:72:2d:5f:c6:1d: 56:cc:59:a3:dd:bf:f0:07:4e:3f:0d:43:1d:45:10: ab:74:7e:6f:46:b8:9f:14:2b:73:17:2c:fd:9c:a8: 4d:de:2d:c7:c4:5a:93:dd:c3:e1:dc:02:5f:5e:ee: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3C:B0:8F:13:B0:27:DE:F5:52:BA:B9:F9:4E:44:B7:AE:09:2D:0E X509v3 Authority Key Identifier: keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/EE44E774314411EF956C0046C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.93.76.0/22 103.225.68.0/23 123.253.108.0/22 Signature Algorithm: sha256WithRSAEncryption 54:3e:ab:37:26:76:dd:5b:65:7b:03:40:9e:97:21:9e:03:a5: 91:cd:d7:71:84:52:94:df:66:4a:da:c5:de:8c:c1:be:90:90: 5b:1b:64:70:3d:59:eb:cc:9c:de:3f:34:8e:ee:f2:55:31:32: 79:a3:93:51:14:cd:05:a0:9b:46:bf:44:a7:61:73:67:e8:4b: 73:84:e5:e6:6e:ce:0a:fb:ea:8d:d4:cc:95:54:a3:3a:0f:3d: 7f:45:06:96:5c:b4:55:f5:5f:6e:18:6f:75:d4:12:dc:d1:95: fc:e0:36:ed:f9:02:c1:61:9e:a5:d6:66:cd:5a:ed:3b:fb:da: eb:82:53:32:d9:6d:b0:dd:80:6e:7a:f0:00:6c:30:a0:e4:f9: 20:aa:73:32:2d:e8:4a:22:c9:87:a4:4b:62:92:2f:19:5f:ef: 3d:13:3d:78:17:5a:fb:09:a6:b7:da:6e:8a:59:de:48:37:f0: 02:cb:70:2d:84:91:b9:83:0d:e7:f9:bc:8d:1a:b4:61:b2:bf: 95:83:b3:e5:33:24:69:0c:45:bf:59:ad:90:b4:65:77:34:99: b5:2b:33:6f:0c:b0:02:89:3b:3b:dc:31:23:20:25:a9:b1:a8: e3:b5:c7:67:3e:8a:1a:72:1f:85:be:48:28:ad:2b:90:24:e0: 98:86:c2:a9 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5QTUxMTAvBgNVBAUTKDU2RjkyOEM3MkE1NzI4QzE3QTk4MjUxMDlCQkJCNzIx MDMxM0JCQ0EwHhcNMjUwNjA3MDQzMjU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQzYzBmYS0wNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDTSZ6mZwRJBR5aUSWJhXd95hR+bxust6/t/KTwe543pAoQeYu9Fdlstien4 kwFmlnLgk8OOviotefs8BVlCeOdKLsKnbiujQig6UeYFeUlEjvxk5rVPrHlJa57C aBwA1goFhhyhHqUJIxq6ClqBJZzsOR5YixtwiFy+Bf22LbdqfVY2FgZU3FsztNNO 1MLw/ZZr8Mg4vGEHF9/oqIsjgGJmi/wEi8C/5T8dVRnz5qewQTsrzMq5dyZApNLO +myb8HN/kCGrOaDJmc7zci1fxh1WzFmj3b/wB04/DUMdRRCrdH5vRrifFCtzFyz9 nKhN3i3HxFqT3cPh3AJfXu4MLQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDI8sI8T sCfe9VK6uflORLeuCS0OMB8GA1UdIwQYMBaAFFb5KMcqVyjBepglEJu7tyEDE7vK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjlBNS9FMjlFNzM2MDdB MTMxMUVFQUJBMTUwNjlDNEY5QUUwMi9WdmtveHlwWEtNRjZtQ1VRbTd1M0lRTVR1 OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z2a294eXBYS01GNm1DVVFtN3UzSVFNVHU4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjI5QTUvRTI5RTczNjA3QTEzMTFFRUFCQTE1MDY5QzRGOUFFMDIvRUU0NEU3NzQz MTQ0MTFFRjk1NkMwMDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnXUwDBAFn4UQDBAJ7/WwwDQYJKoZIhvcNAQELBQADggEB AFQ+qzcmdt1bZXsDQJ6XIZ4DpZHN13GEUpTfZkraxd6Mwb6QkFsbZHA9WevMnN4/ NI7u8lUxMnmjk1EUzQWgm0a/RKdhc2foS3OE5eZuzgr76o3UzJVUozoPPX9FBpZc tFX1X24Yb3XUEtzRlfzgNu35AsFhnqXWZs1a7Tv72uuCUzLZbbDdgG568ABsMKDk +SCqczIt6EoiyYekS2KSLxlf7z0TPXgXWvsJprfabopZ3kg38ALLcC2EkbmDDef5 vI0atGGyv5WDs+UzJGkMRb9ZrZC0ZXc0mbUrM28MsAKJOzvcMSMgJamxqOO1x2c+ ihpyH4W+SCitK5Ak4JiGwqk= -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:20 2025 by rpki-client