$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/6C83604E1E2711EDAA33DF76C4F9AE02.roa File: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (raw, json) Hash identifier: wYfrxBgpnREsPiR0qsIaHokVToTMzCIKH0+74g0LVvA= Subject key identifier: BB:A7:76:B2:EE:3D:19:3E:6D:44:CD:60:7A:B4:98:B7:37:BE:8A:D9 Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Certificate serial: 02AD Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/6C83604E1E2711EDAA33DF76C4F9AE02.roa Signing time: Fri 17 Oct 2025 04:07:28 +0000 ROA not before: Fri 17 Oct 2025 04:07:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139642 IP address blocks: 103.141.200.0/23 maxlen: 23 103.141.200.0/24 maxlen: 24 103.141.201.0/24 maxlen: 24 2001:df1:23c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Validity Not Before: Oct 17 04:07:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f1c100-dff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:de:18:41:8b:79:11:84:3c:44:08:e8:1d: 63:25:36:fa:76:16:4b:e9:37:2e:ca:d6:66:dc:99: c9:a1:51:bf:7d:f3:73:91:c6:6a:a1:e1:02:80:d2: b2:3b:9b:d0:21:ac:a6:32:c8:f5:93:f6:05:38:f7: 20:a2:fa:fe:8e:e7:29:ee:f9:46:cd:e8:4f:d9:e6: c1:a6:47:1a:22:c1:c6:4d:a5:54:c8:61:a0:8e:71: 2f:fe:ed:19:23:db:77:e2:af:71:12:09:e2:54:62: 85:03:5e:04:59:93:7d:63:59:25:72:23:c4:20:9f: 3f:18:96:f8:9d:b2:24:cb:29:48:98:2e:be:25:79: c7:f5:83:9e:2b:2e:c7:d9:c3:dc:59:78:f4:af:38: 0e:e9:85:22:25:d6:93:f3:89:92:cd:5a:fd:4b:7a: 47:32:87:71:a4:3b:41:e4:e8:e8:42:f9:f1:7a:45: a5:bc:0a:44:a1:bc:3f:84:72:e1:0a:db:a1:47:0f: 05:eb:fe:47:48:a4:48:aa:1e:2d:28:79:1d:14:c5: 6b:0d:5d:63:4c:2b:74:f0:97:6c:21:43:f4:be:b4: a0:b3:f2:f3:67:69:f3:52:88:95:b7:4c:9f:8a:24: d4:9e:e9:0a:d4:03:7d:55:9b:b7:28:3e:0f:90:0c: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A7:76:B2:EE:3D:19:3E:6D:44:CD:60:7A:B4:98:B7:37:BE:8A:D9 X509v3 Authority Key Identifier: keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/6C83604E1E2711EDAA33DF76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.200.0/23 IPv6: 2001:df1:23c0::/48 Signature Algorithm: sha256WithRSAEncryption a7:0f:b1:57:2e:a1:d7:88:c6:d5:45:f1:d4:ad:12:1b:d3:87: ae:50:ad:c8:55:fe:11:56:c0:1e:ad:4c:78:f2:f7:a0:bf:b3: 89:e7:a1:a2:4b:98:ae:60:5c:c9:9e:94:57:32:56:fe:9b:78: 57:f1:64:6f:5a:17:63:ab:1f:bc:8b:0b:dd:f9:e1:90:b8:b6: 8d:8a:e8:55:59:60:34:d1:8f:c2:74:0d:03:e1:d7:c3:29:78: 8b:28:4c:0b:8b:54:b0:83:37:db:06:e5:ae:3b:12:6b:60:b7: 08:32:54:ca:ff:49:38:8d:66:41:ae:aa:07:22:2c:20:97:6b: 36:97:55:a3:44:4f:68:6d:d8:4f:40:49:67:7c:39:a8:84:e4: 34:92:3a:83:78:eb:7e:e4:af:81:dc:ea:b6:16:3a:20:33:fc: 8b:bc:70:51:0d:1b:5e:1d:86:46:9c:e7:76:d1:48:d0:c8:40: f1:a5:cc:38:72:4a:b0:f8:77:bd:5a:a7:8e:15:02:aa:88:a8: b5:81:1c:4b:84:9f:16:ed:73:5b:38:3d:9d:c8:1d:4f:3b:e2: dc:a3:a8:88:45:53:8e:ce:5e:9e:8e:a0:bf:93:ba:7d:9c:c1: 2f:6e:92:12:86:ea:51:82:a3:eb:eb:87:ff:1e:13:74:99:ee: b4:05:28:11 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc4OTcxMTAvBgNVBAUTKDJBQTI3ODk0NEI0MTBGQTJDODNCN0MyQUYzMkM2NkFG QTIwQzEyN0IwHhcNMjUxMDE3MDQwNzI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYxYzEwMC1kZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrfeGEGLeRGEPEQI6B1jJTb6dhZL6TcuytZm3JnJoVG/ffNzkcZqoeECgNKy O5vQIaymMsj1k/YFOPcgovr+jucp7vlGzehP2ebBpkcaIsHGTaVUyGGgjnEv/u0Z I9t34q9xEgniVGKFA14EWZN9Y1klciPEIJ8/GJb4nbIkyylImC6+JXnH9YOeKy7H 2cPcWXj0rzgO6YUiJdaT84mSzVr9S3pHModxpDtB5OjoQvnxekWlvApEobw/hHLh CtuhRw8F6/5HSKRIqh4tKHkdFMVrDV1jTCt08JdsIUP0vrSgs/LzZ2nzUoiVt0yf iiTUnukK1AN9VZu3KD4PkAyxxQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLundrLu PRk+bUTNYHq0mLc3vorZMB8GA1UdIwQYMBaAFCqieJRLQQ+iyDt8KvMsZq+iDBJ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzg5Ny9CNkM1OTQxQzFE MzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2TElPM3dxOHl4bXI2SU1F bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0txSjRsRXRCRDZMSU8zd3E4eXhtcjZJTUVucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc4OTcvQjZDNTk0MUMxRDM1MTFFREE1RTYzMDdEQzRGOUFFMDIvNkM4MzYwNEUx RTI3MTFFREFBMzNERjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjcgwDwQCAAIwCQMHACABDfEjwDANBgkqhkiG9w0BAQsF AAOCAQEApw+xVy6h14jG1UXx1K0SG9OHrlCtyFX+EVbAHq1MePL3oL+zieehokuY rmBcyZ6UVzJW/pt4V/Fkb1oXY6sfvIsL3fnhkLi2jYroVVlgNNGPwnQNA+HXwyl4 iyhMC4tUsIM32wblrjsSa2C3CDJUyv9JOI1mQa6qByIsIJdrNpdVo0RPaG3YT0BJ Z3w5qITkNJI6g3jrfuSvgdzqthY6IDP8i7xwUQ0bXh2GRpzndtFI0MhA8aXMOHJK sPh3vVqnjhUCqoiotYEcS4SfFu1zWzg9ncgdTzvi3KOoiEVTjs5eno6gv5O6fZzB L26SEobqUYKj6+uH/x4TdJnutAUoEQ== -----END CERTIFICATE-----Generated at Mon Oct 20 08:38:17 2025 by rpki-client