$ rpki-client -vvf rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/7564FD08603311EFA997483AC4F9AE02.roa File: 7564FD08603311EFA997483AC4F9AE02.roa (raw, json) Hash identifier: 2uXcB1i8WITKIgLPMfrpkWfwKGuNQ8k1IuvO8N+9V8o= Subject key identifier: DD:6A:66:7E:84:2B:C7:4F:62:DD:BA:11:B5:17:96:3D:A7:20:02:CB Certificate issuer: /CN=A91A657F/serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Certificate serial: DC Authority key identifier: 47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/7564FD08603311EFA997483AC4F9AE02.roa Signing time: Wed 01 Oct 2025 07:04:39 +0000 ROA not before: Wed 01 Oct 2025 07:04:39 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138174 IP address blocks: 103.121.248.0/23 maxlen: 23 103.121.248.0/24 maxlen: 25 103.121.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A657F, serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA Validity Not Before: Oct 1 07:04:39 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dcd287-b83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:d3:21:c5:65:5a:c1:ad:40:ad:92:9b:e2: bc:87:d5:aa:92:78:f1:fd:12:64:6c:f7:3a:07:ca: 7c:7e:d6:49:d4:70:90:10:8d:cc:3a:54:e2:05:dd: 91:70:8f:9f:43:5d:5e:77:a4:b7:9d:85:85:16:8b: 27:57:c5:1b:8f:86:bc:8f:52:3b:25:20:f6:8c:b0: f1:81:10:81:ea:d5:1f:2a:14:d2:51:56:f4:47:a9: 46:47:0c:5a:27:bb:8e:a7:71:a6:ca:23:fa:20:9b: df:f0:9f:e3:03:39:7c:26:17:02:51:37:69:c2:fb: 8f:60:a3:25:1f:9d:af:66:a5:79:8f:76:1a:bd:24: de:4a:a1:4a:87:78:2d:b7:33:4b:d3:12:5f:ce:9f: 5c:37:22:d4:1e:92:c7:d8:c2:91:98:78:41:86:cd: 7f:06:a8:99:72:d0:fd:b2:f8:8a:f6:99:b9:28:41: 10:81:2b:63:c9:4a:54:c4:36:9a:a0:0a:6c:ae:3f: ee:51:ee:63:2c:2c:f9:4b:36:a8:ab:f0:6d:f8:d2: 2a:de:15:62:68:a5:90:a2:44:3e:dd:1e:bf:8e:8d: 83:6d:57:26:ff:44:a6:62:d6:ab:fe:bb:ee:c8:97: ed:2f:96:11:d9:b7:04:37:d5:87:0a:7b:c4:e0:6d: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6A:66:7E:84:2B:C7:4F:62:DD:BA:11:B5:17:96:3D:A7:20:02:CB X509v3 Authority Key Identifier: keyid:47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/7564FD08603311EFA997483AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.248.0/23 Signature Algorithm: sha256WithRSAEncryption 18:38:8e:99:21:e2:1e:c3:40:3c:b7:20:22:1a:cb:ea:e2:05: 5c:17:fe:af:fe:5f:74:e3:6b:4e:84:a0:2d:2e:40:ea:65:d1: 15:fa:3b:0f:26:ec:57:fa:e9:17:72:a4:14:07:4b:41:3c:57: 71:e3:3a:68:9c:b4:5d:a3:47:af:53:de:94:68:02:26:6b:48: 4d:af:85:72:45:bf:21:6a:ce:34:1a:c1:27:71:76:a1:13:89: 47:08:79:5c:7b:02:fb:c7:6a:e7:f9:df:6d:6b:7c:26:cc:e8: fd:67:cc:f9:59:f5:04:8e:dc:5e:c1:e9:32:0b:fc:62:bc:08: bc:d1:c1:f6:86:ef:95:55:49:be:d6:f7:58:eb:1a:b9:fe:f5: 83:99:38:0b:02:52:f5:1e:78:3d:cd:12:f9:55:2d:58:89:2d: ea:ce:36:96:d0:5e:4e:89:22:f7:4f:bf:df:b4:f0:92:4b:4c: 88:e6:ee:37:f7:43:a2:c7:a6:27:d6:a2:5b:74:9c:27:1c:7a: 5e:1e:5a:20:24:53:93:29:68:14:b5:d0:77:ce:7d:95:6c:8a: 9f:db:d2:a8:19:6f:8a:a5:80:85:a3:ff:b5:a2:53:68:9f:9d: ea:dc:7b:b8:59:bd:02:09:d1:34:2d:ee:f6:30:ab:78:52:7d: ec:20:53:03 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1N0YxMTAvBgNVBAUTKDQ3RkFFNjMyMkM1MUIxREQwMjI0OTc2RjdBMUQyQjky MjZEMDkwRUEwHhcNMjUxMDAxMDcwNDM5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjZDI4Ny1iODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTbTIcVlWsGtQK2Sm+K8h9Wqknjx/RJkbPc6B8p8ftZJ1HCQEI3MOlTiBd2R cI+fQ11ed6S3nYWFFosnV8Ubj4a8j1I7JSD2jLDxgRCB6tUfKhTSUVb0R6lGRwxa J7uOp3GmyiP6IJvf8J/jAzl8JhcCUTdpwvuPYKMlH52vZqV5j3YavSTeSqFKh3gt tzNL0xJfzp9cNyLUHpLH2MKRmHhBhs1/BqiZctD9sviK9pm5KEEQgStjyUpUxDaa oApsrj/uUe5jLCz5Szaoq/Bt+NIq3hViaKWQokQ+3R6/jo2DbVcm/0SmYtar/rvu yJftL5YR2bcEN9WHCnvE4G1KxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN1qZn6E K8dPYt26EbUXlj2nIALLMB8GA1UdIwQYMBaAFEf65jIsUbHdAiSXb3odK5Im0JDq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU3Ri9FOTRCQ0M0ODYw MzIxMUVGQTVGOEVFN0VDNEY5QUUwMi9SX3JtTWl4UnNkMENKSmR2ZWgwcmtpYlFr T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jfcm1NaXhSc2QwQ0pKZHZlaDBya2liUWtPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTY1N0YvRTk0QkNDNDg2MDMyMTFFRkE1RjhFRTdFQzRGOUFFMDIvNzU2NEZEMDg2 MDMzMTFFRkE5OTc0ODNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnefgwDQYJKoZIhvcNAQELBQADggEBABg4jpkh4h7DQDy3 ICIay+riBVwX/q/+X3Tja06EoC0uQOpl0RX6Ow8m7Ff66RdypBQHS0E8V3HjOmic tF2jR69T3pRoAiZrSE2vhXJFvyFqzjQawSdxdqETiUcIeVx7AvvHauf5321rfCbM 6P1nzPlZ9QSO3F7B6TIL/GK8CLzRwfaG75VVSb7W91jrGrn+9YOZOAsCUvUeeD3N EvlVLViJLerONpbQXk6JIvdPv9+08JJLTIjm7jf3Q6LHpifWolt0nCccel4eWiAk U5MpaBS10HfOfZVsip/b0qgZb4qlgIWj/7WiU2ifnerce7hZvQIJ0TQt7vYwq3hS fewgUwM= -----END CERTIFICATE-----Generated at Mon Oct 20 21:38:22 2025 by rpki-client