$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/EEC2740A08A811EBB9370955C4F9AE02.roa File: EEC2740A08A811EBB9370955C4F9AE02.roa (raw, json) Hash identifier: FiUICsUD+pZFh3JuPdECp+chLymAF7D/LM+qSXAk6Io= Subject key identifier: 56:C7:E8:EE:15:4D:FC:38:52:81:65:39:48:88:68:9E:9A:5E:61:2C Certificate issuer: /CN=A91A3859/serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6 Certificate serial: 07E5 Authority key identifier: 5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/EEC2740A08A811EBB9370955C4F9AE02.roa Signing time: Sat 18 Oct 2025 22:31:41 +0000 ROA not before: Sat 18 Oct 2025 22:31:41 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141236 IP address blocks: 103.157.0.0/23 maxlen: 23 103.157.0.0/24 maxlen: 24 103.157.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021 (0x7e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3859, serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6 Validity Not Before: Oct 18 22:31:41 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=68f4154c-5e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:64:05:21:16:8a:b3:87:ec:13:55:71:c5:46: 3e:ba:83:b6:ca:06:b6:c8:03:96:7b:06:05:0b:8c: 7f:3f:1c:bb:af:50:36:dc:8c:68:1a:b3:cb:da:15: be:ba:31:87:72:dd:63:f5:ac:8f:13:76:31:fd:0f: 6a:d3:de:d7:b8:14:b7:87:91:69:68:88:d1:f1:99: cb:8d:5c:ba:7d:57:e1:ea:e5:a0:94:d8:72:9b:e7: fe:a4:f4:d6:4f:80:60:f1:70:42:af:df:49:06:37: 3e:96:8e:0f:9c:85:2a:b1:92:27:77:5c:61:6b:25: 80:45:ed:c6:7e:5d:3d:0e:c9:a0:b0:d9:b6:a6:7c: b4:26:d3:cd:04:4d:66:07:3d:d1:b1:24:77:6f:78: 04:ae:76:76:44:cd:16:d0:1c:0d:48:cd:9a:f1:67: cf:f0:40:f7:9d:82:ed:d8:12:3e:ca:4c:97:93:b2: 80:da:94:c4:ae:bd:fd:68:e7:41:81:1d:67:fc:b6: 6b:bc:a1:d0:96:b1:be:18:a3:e5:4e:d0:e6:c6:8f: f4:09:d5:09:55:86:16:a6:4a:3e:d0:2c:03:d6:b2: ff:c7:83:bc:b3:83:2d:8b:1f:67:5f:1d:b7:1f:85: ec:97:89:0e:67:ee:08:98:a1:60:32:c4:50:af:6d: 7c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C7:E8:EE:15:4D:FC:38:52:81:65:39:48:88:68:9E:9A:5E:61:2C X509v3 Authority Key Identifier: keyid:5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/EEC2740A08A811EBB9370955C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.0.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:35:df:13:56:5f:1a:f5:a8:e7:26:4b:0c:7e:d7:00:6c:b7: bc:ca:48:76:5d:8e:ed:f9:35:41:92:b2:11:8c:8f:52:68:c4: a7:fd:24:5c:0d:9e:83:5d:ca:9b:44:52:1f:ed:25:dc:ac:5e: 94:14:8b:31:20:ff:59:7b:3b:bb:d5:43:94:3c:31:e9:23:f3: d0:7e:07:73:c9:1d:86:39:53:ce:6c:71:b4:68:38:c3:9f:50: 49:8a:c1:e8:5a:da:1a:3a:d3:2f:64:60:b6:0f:ed:66:9a:4c: fe:48:41:6d:25:ce:6e:14:35:6d:11:88:ee:81:28:11:5d:70: 98:e2:c6:96:79:6b:e8:64:40:bf:90:1d:cf:57:8f:a6:05:e2: 4b:84:59:05:aa:df:9a:33:80:64:b8:1d:c8:12:9c:fd:89:72: 30:42:48:6c:57:1f:2a:17:b5:ab:c1:24:5b:b0:fd:17:cc:b8: 76:58:35:1e:52:f4:08:47:36:f8:e6:7f:3d:ce:3c:cd:64:87: 30:50:4a:66:d5:9a:af:dd:4b:77:03:74:4a:9c:a6:b3:39:63: 4d:ba:ec:cb:07:83:ba:98:7a:af:3a:e8:0a:2e:02:d3:e6:17: 23:9b:d5:e2:17:6a:08:96:5d:d1:29:67:c9:d2:64:c8:c6:b8: ff:d0:92:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4NTkxMTAvBgNVBAUTKDVCMEVBMDk0NTExOUU1M0U5RkI4MjBEOTIyMTAzNTc0 NDFFNEFDRDYwHhcNMjUxMDE4MjIzMTQxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY0MTU0Yy01ZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GQFIRaKs4fsE1VxxUY+uoO2yga2yAOWewYFC4x/Pxy7r1A23IxoGrPL2hW+ ujGHct1j9ayPE3Yx/Q9q097XuBS3h5FpaIjR8ZnLjVy6fVfh6uWglNhym+f+pPTW T4Bg8XBCr99JBjc+lo4PnIUqsZInd1xhayWARe3Gfl09DsmgsNm2pny0JtPNBE1m Bz3RsSR3b3gErnZ2RM0W0BwNSM2a8WfP8ED3nYLt2BI+ykyXk7KA2pTErr39aOdB gR1n/LZrvKHQlrG+GKPlTtDmxo/0CdUJVYYWpko+0CwD1rL/x4O8s4Mtix9nXx23 H4Xsl4kOZ+4ImKFgMsRQr218UwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFbH6O4V Tfw4UoFlOUiIaJ6aXmEsMB8GA1UdIwQYMBaAFFsOoJRRGeU+n7gg2SIQNXRB5KzW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzg1OS9FRTdFMEMwNDA4 QTYxMUVCODdFMjlBMzlDNEY5QUUwMi9XdzZnbEZFWjVUNmZ1Q0RaSWhBMWRFSGty TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d3NmdsRkVaNVQ2ZnVDRFpJaEExZEVIa3JOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTM4NTkvRUU3RTBDMDQwOEE2MTFFQjg3RTI5QTM5QzRGOUFFMDIvRUVDMjc0MEEw OEE4MTFFQkI5MzcwOTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnQAwDQYJKoZIhvcNAQELBQADggEBAE413xNWXxr1qOcm Swx+1wBst7zKSHZdju35NUGSshGMj1JoxKf9JFwNnoNdyptEUh/tJdysXpQUizEg /1l7O7vVQ5Q8Mekj89B+B3PJHYY5U85scbRoOMOfUEmKweha2ho60y9kYLYP7Waa TP5IQW0lzm4UNW0RiO6BKBFdcJjixpZ5a+hkQL+QHc9Xj6YF4kuEWQWq35ozgGS4 HcgSnP2JcjBCSGxXHyoXtavBJFuw/RfMuHZYNR5S9AhHNvjmfz3OPM1khzBQSmbV mq/dS3cDdEqcprM5Y0267MsHg7qYeq866AouAtPmFyOb1eIXagiWXdEpZ8nSZMjG uP/QkmA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:01 2025 by rpki-client