$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa File: 76BF01E88EF511F0BA815369C4F9AE02.roa (raw, json) Hash identifier: IWHAsp5GSTIoMqNKo0F2rFXfmQxpgUta2Oi8tYKu1uo= Subject key identifier: C8:C0:E0:E5:91:78:4E:A4:29:EB:A7:0C:2D:51:94:F6:87:06:BB:3C Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C73 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa Signing time: Sat 11 Oct 2025 08:19:42 +0000 ROA not before: Sat 11 Oct 2025 08:19:42 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 40605 IP address blocks: 43.250.88.0/24 maxlen: 24 103.12.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3187 (0xc73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Oct 11 08:19:42 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68ea131d-6663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:18:3e:36:aa:97:91:4b:8b:79:0a:50:1d: ce:a5:1d:d3:32:bf:49:6d:af:58:e2:31:f4:d3:53: f0:8b:4d:25:13:d7:d5:c2:6e:14:0b:02:34:44:d6: a6:0f:85:44:41:01:f1:cf:48:e8:f9:80:4b:b5:55: 93:8c:1b:57:4d:ab:fa:fc:ec:7b:e6:de:2c:4b:f5: d0:67:8b:ca:4b:f1:b9:ff:58:ae:c8:66:80:f0:1f: b4:97:cd:88:b6:5f:43:a6:c4:e8:11:c9:1a:e6:1a: 37:27:a5:e9:bd:80:5d:fc:bb:04:7f:36:87:5f:33: 0b:14:8c:a4:9f:99:9f:6f:f6:04:64:65:75:3d:f9: 45:6f:6d:01:69:d4:f7:9b:f9:56:ed:b4:b2:23:e8: 64:0e:2e:62:86:68:44:1b:e2:ea:b7:38:42:d0:e0: 4d:c3:3f:05:51:7a:63:4c:00:47:6b:4a:d0:1e:62: 84:51:8b:00:61:91:0a:78:fe:70:3f:f2:da:c2:d8: a3:eb:89:bd:fb:fb:62:23:3f:4a:a5:84:e0:48:02: 44:bd:70:b9:95:6c:85:ea:f0:29:51:ec:7e:f2:1e: 60:fd:0a:84:be:19:9f:56:53:1e:a7:ad:bd:11:e5: 59:93:57:a2:1d:74:6c:06:70:08:d9:eb:b3:8c:ca: 45:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C0:E0:E5:91:78:4E:A4:29:EB:A7:0C:2D:51:94:F6:87:06:BB:3C X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/76BF01E88EF511F0BA815369C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.88.0/24 103.12.55.0/24 Signature Algorithm: sha256WithRSAEncryption 43:1f:02:b6:d9:df:07:ff:2b:c6:be:6a:78:ad:e2:81:e8:29: 6e:4e:4b:da:9f:5b:33:3b:c6:df:ab:81:46:43:82:da:f6:84: 07:e5:a9:e2:76:6a:f2:6d:d8:3e:71:81:2d:bc:dc:f5:8e:20: ff:5f:8c:45:01:9e:5a:d2:2e:0d:e9:c7:39:40:4a:13:ea:5b: cd:0a:e8:78:64:fb:eb:cc:6d:ef:81:09:a6:73:9b:d6:88:af: f1:46:f3:51:e6:96:3d:b2:3d:de:fe:e4:12:59:e8:cf:8f:32: fd:df:69:af:9a:62:b0:a0:f7:cf:c5:4a:48:0d:7f:83:56:b0: 9a:d5:7f:07:71:b3:46:62:97:30:df:54:45:cc:54:af:9c:94: 14:f8:10:01:ac:5a:3c:05:cf:e3:6c:d1:63:cc:24:c3:31:f2: 42:21:51:89:b3:a0:a1:1f:cc:8f:0a:a9:24:d9:6d:88:43:89: 90:88:d3:8c:7b:01:81:ff:fe:07:58:60:dd:b2:67:49:f7:0f: 65:bf:98:f4:f9:89:1c:1b:71:ea:89:71:eb:8b:43:e9:8b:49: 59:9c:33:8b:40:63:be:59:cf:d3:e2:66:e5:d9:3e:55:23:10: 6a:69:2e:04:cc:f8:7f:e6:86:47:e1:b2:a5:17:7e:d2:ef:72: 77:91:0e:59 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUxMDExMDgxOTQyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGVhMTMxZC02NjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lQYPjaql5FLi3kKUB3OpR3TMr9Jba9Y4jH001Pwi00lE9fVwm4UCwI0RNam D4VEQQHxz0jo+YBLtVWTjBtXTav6/Ox75t4sS/XQZ4vKS/G5/1iuyGaA8B+0l82I tl9DpsToEcka5ho3J6XpvYBd/LsEfzaHXzMLFIykn5mfb/YEZGV1PflFb20BadT3 m/lW7bSyI+hkDi5ihmhEG+LqtzhC0OBNwz8FUXpjTABHa0rQHmKEUYsAYZEKeP5w P/Lawtij64m9+/tiIz9KpYTgSAJEvXC5lWyF6vApUex+8h5g/QqEvhmfVlMep629 EeVZk1eiHXRsBnAI2euzjMpFlQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMjA4OWR eE6kKeunDC1RlPaHBrs8MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNzZCRjAxRTg4 RUY1MTFGMEJBODE1MzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr+lgDBABnDDcwDQYJKoZIhvcNAQELBQADggEBAEMfArbZ 3wf/K8a+anit4oHoKW5OS9qfWzM7xt+rgUZDgtr2hAflqeJ2avJt2D5xgS283PWO IP9fjEUBnlrSLg3pxzlAShPqW80K6Hhk++vMbe+BCaZzm9aIr/FG81Hmlj2yPd7+ 5BJZ6M+PMv3faa+aYrCg98/FSkgNf4NWsJrVfwdxs0ZilzDfVEXMVK+clBT4EAGs WjwFz+Ns0WPMJMMx8kIhUYmzoKEfzI8KqSTZbYhDiZCI04x7AYH//gdYYN2yZ0n3 D2W/mPT5iRwbceqJceuLQ+mLSVmcM4tAY75Zz9PiZuXZPlUjEGppLgTM+H/mhkfh sqUXftLvcneRDlk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:49:54 2025 by rpki-client