$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E7676A04A13B11F0B587F733C4F9AE02.roa File: E7676A04A13B11F0B587F733C4F9AE02.roa (raw, json) Hash identifier: 1ktTKLaHDR+wG+DGC+Do5GbZiT98DyxymaKRoe63e+A= Subject key identifier: 61:EF:74:8D:47:17:42:3F:70:C0:F1:08:62:C1:8C:6D:F3:33:4F:CB Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 04FE Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E7676A04A13B11F0B587F733C4F9AE02.roa Signing time: Sat 04 Oct 2025 16:05:10 +0000 ROA not before: Sat 04 Oct 2025 16:05:10 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 147175 IP address blocks: 103.174.22.0/23 maxlen: 23 103.174.23.0/24 maxlen: 24 2001:df7:b380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Oct 4 16:05:10 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68e145b6-b1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:57:98:85:a0:b3:94:f4:f9:da:ce:79:b1: 5f:de:b7:45:a0:98:e9:aa:d7:05:d0:98:ee:71:2f: 97:9c:15:c3:ac:b1:36:b6:7e:de:a1:af:f9:a7:64: 0d:96:65:74:d1:06:30:56:7b:5f:7f:b9:88:7f:eb: 74:4d:ed:04:86:94:c1:76:29:a7:6f:68:46:0c:9b: 0a:b6:1e:b4:cf:bb:22:08:0c:1f:12:6f:16:d3:b1: c7:4a:81:d1:96:e7:dc:b7:be:5b:a2:d1:c9:a1:21: a2:52:ef:ba:3b:df:7f:d6:49:e7:e5:8f:83:c6:4e: 44:9d:02:72:50:0f:cb:50:88:38:14:06:3c:8d:a8: 83:0b:71:03:f6:d3:6e:8f:8e:63:76:b5:13:2b:e5: 27:11:5d:df:3d:5d:be:3e:a7:dd:38:1c:88:4a:ad: 55:57:35:74:a7:30:0f:c8:6d:85:e5:45:33:03:61: f9:29:f1:bd:09:64:86:b3:9a:c0:54:48:6c:32:9d: 38:1f:51:98:73:24:ee:3f:73:ca:96:19:52:79:4c: ef:cb:d1:0b:28:73:cb:05:5d:6b:37:5a:48:18:9e: a0:b7:cc:bb:75:48:aa:a8:7a:b9:0b:84:3b:8c:4a: ac:f4:d7:23:48:2a:9c:d4:66:92:3a:e4:a1:6a:7e: ab:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EF:74:8D:47:17:42:3F:70:C0:F1:08:62:C1:8C:6D:F3:33:4F:CB X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E7676A04A13B11F0B587F733C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.22.0/23 IPv6: 2001:df7:b380::/48 Signature Algorithm: sha256WithRSAEncryption d4:dd:dc:19:eb:15:90:27:85:32:8d:5b:e6:b2:83:f7:df:07: bf:34:67:84:3f:9c:33:e2:e1:4e:5f:58:61:db:26:b4:bb:33: 59:94:5f:7f:eb:ee:a9:f2:f6:ce:bc:db:7b:cd:4f:f9:d7:48: 8c:29:46:fc:b4:39:33:d3:1c:a8:49:ac:dd:9a:ef:8a:03:f8: b1:32:0b:38:fd:b9:84:5b:6e:1d:86:5b:a9:a7:8b:55:b5:14: 08:38:17:56:8e:00:cd:d1:68:8a:ef:03:d5:a5:89:e0:f0:4b: d1:f3:f5:07:ad:75:08:b6:7f:b8:ef:3c:f0:ea:8c:3f:c0:51: 86:e9:c6:34:82:56:54:c8:8e:96:4a:79:c6:63:9b:df:9f:ca: 83:6a:d0:b1:be:40:84:c2:f5:21:94:a0:9a:a8:cb:b2:d8:df: 21:55:3a:11:3a:0a:b9:be:5c:7e:c2:f7:dc:bd:0b:41:c5:15: 4c:1a:07:20:43:5e:56:57:04:80:da:ac:27:e2:27:3f:dc:42: af:77:df:a5:5e:ad:f5:9b:3d:88:a1:b2:2f:34:da:fc:4e:0e: 3b:2d:7c:22:53:23:24:28:fa:fa:0a:5b:37:e5:1b:04:ec:21: 4c:8b:1d:d1:db:43:a6:8f:fc:15:10:0c:41:6e:20:b1:b3:ad: 8b:5c:1b:aa -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUxMDA0MTYwNTEwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxNDViNi1iMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovpXmIWgs5T0+drOebFf3rdFoJjpqtcF0JjucS+XnBXDrLE2tn7eoa/5p2QN lmV00QYwVntff7mIf+t0Te0EhpTBdimnb2hGDJsKth60z7siCAwfEm8W07HHSoHR lufct75botHJoSGiUu+6O99/1knn5Y+Dxk5EnQJyUA/LUIg4FAY8jaiDC3ED9tNu j45jdrUTK+UnEV3fPV2+PqfdOByISq1VVzV0pzAPyG2F5UUzA2H5KfG9CWSGs5rA VEhsMp04H1GYcyTuP3PKlhlSeUzvy9ELKHPLBV1rN1pIGJ6gt8y7dUiqqHq5C4Q7 jEqs9NcjSCqc1GaSOuShan6rUQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGHvdI1H F0I/cMDxCGLBjG3zM0/LMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjkyODgvMUZEREE3QjAyQzU5MTFFQ0JBRjVGODZBQzRGOUFFMDIvRTc2NzZBMDRB MTNCMTFGMEI1ODdGNzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrhYwDwQCAAIwCQMHACABDfezgDANBgkqhkiG9w0BAQsF AAOCAQEA1N3cGesVkCeFMo1b5rKD998HvzRnhD+cM+LhTl9YYdsmtLszWZRff+vu qfL2zrzbe81P+ddIjClG/LQ5M9McqEms3ZrvigP4sTILOP25hFtuHYZbqaeLVbUU CDgXVo4AzdFoiu8D1aWJ4PBL0fP1B611CLZ/uO888OqMP8BRhunGNIJWVMiOlkp5 xmOb35/Kg2rQsb5AhML1IZSgmqjLstjfIVU6EToKub5cfsL33L0LQcUVTBoHIENe VlcEgNqsJ+InP9xCr3ffpV6t9Zs9iKGyLzTa/E4OOy18IlMjJCj6+gpbN+UbBOwh TIsd0dtDpo/8FRAMQW4gsbOti1wbqg== -----END CERTIFICATE-----Generated at Mon Oct 20 21:14:49 2025 by rpki-client