$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/425BF5FE7A4711EBAD125258C4F9AE02.roa File: 425BF5FE7A4711EBAD125258C4F9AE02.roa (raw, json) Hash identifier: OQe13tIv3uovK7+LLI22t0SruIOPUw/wbyXtMiDbVn4= Subject key identifier: 04:E0:5B:4B:3E:64:11:C6:D3:1B:8B:2F:E2:3C:23:63:10:5F:FA:6E Certificate issuer: /CN=A91BC6B4/serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Certificate serial: 0FE1 Authority key identifier: 6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/425BF5FE7A4711EBAD125258C4F9AE02.roa Signing time: Tue 30 Sep 2025 17:46:11 +0000 ROA not before: Tue 30 Sep 2025 17:46:11 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132825 IP address blocks: 103.99.40.0/23 maxlen: 24 103.132.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4065 (0xfe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6B4, serialNumber=6CA6B2AC1DD17B014DB6C767279D08C66E4EFC05 Validity Not Before: Sep 30 17:46:11 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dc1763-3149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:0d:19:ae:9f:ad:35:b5:1a:5c:43:33:0a: 82:ba:5c:ff:a8:ae:73:f6:f2:cf:6d:78:3a:59:aa: c4:50:d3:b7:01:a2:1d:cc:74:d1:22:f7:31:81:ab: dc:4e:87:d7:33:49:02:ef:7b:d7:4e:a1:30:84:5f: 39:74:7d:79:9e:53:be:64:8b:42:25:de:59:32:a3: b9:08:90:fb:b6:13:44:78:89:d3:0f:42:98:32:59: a7:0e:9b:ed:b9:2c:88:bf:f3:3e:94:99:14:24:46: 09:0a:b1:5a:af:8a:be:63:7a:fd:b5:50:53:a9:0f: 6b:d0:7b:54:b4:3d:dd:ba:73:bb:1e:07:b9:a6:50: 6c:d2:a1:65:36:14:5d:89:20:89:a4:1e:20:6d:16: 0a:20:89:50:a3:cd:92:bd:80:66:eb:55:f7:c5:25: 98:d9:6a:8e:ea:80:5b:c3:69:72:e3:fd:d8:a9:f9: 6a:5e:30:0e:37:09:2a:68:ae:76:a4:41:fc:7b:ef: 6b:21:13:8f:7a:ba:1f:c0:62:0e:f5:40:15:4d:86: 5f:8e:96:b7:cf:cb:b9:8c:22:d7:8a:48:f6:e2:d8: 27:7c:50:6e:f0:1b:7a:9c:19:03:a2:9a:a2:82:aa: f2:33:bc:6e:07:f7:83:fb:bf:55:b3:0e:84:19:a5: 37:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E0:5B:4B:3E:64:11:C6:D3:1B:8B:2F:E2:3C:23:63:10:5F:FA:6E X509v3 Authority Key Identifier: keyid:6C:A6:B2:AC:1D:D1:7B:01:4D:B6:C7:67:27:9D:08:C6:6E:4E:FC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/bKayrB3RewFNtsdnJ50Ixm5O_AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKayrB3RewFNtsdnJ50Ixm5O_AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6B4/726F51C263F211E9BB20DD45C4F9AE02/425BF5FE7A4711EBAD125258C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.40.0/23 103.132.234.0/23 Signature Algorithm: sha256WithRSAEncryption b0:32:55:24:e1:61:e6:aa:8c:b5:98:14:e0:a2:f3:34:34:de: 95:00:1f:ce:f9:ea:af:66:c1:a2:25:b3:ef:a9:c1:63:35:28: 22:88:0b:01:d8:bb:7d:a6:3e:49:3b:00:d8:38:97:3d:24:3e: 6b:83:36:a0:af:05:fd:c5:8f:e5:cb:22:d7:d5:ed:e9:64:b0: 82:40:ea:9c:e5:03:b7:e4:0a:de:7d:ab:38:c6:82:c4:65:9a: 45:ba:92:65:3a:f0:bf:50:68:b6:9a:ee:56:78:37:dd:b4:fe: a2:4a:39:80:8c:68:0c:64:a6:f3:cb:14:ef:6f:84:7e:e0:5a: bb:dc:fa:75:c3:ab:b7:0c:36:1f:05:d9:5f:a7:28:a8:06:d6: f3:7f:d7:09:5d:24:f7:f1:71:43:bf:01:1b:e2:ab:15:2c:aa: 7c:91:a6:76:3a:61:65:8a:3c:dc:ce:ee:7e:5a:79:5e:a7:d1: ea:94:55:74:b7:d5:0f:74:e5:9b:c1:4c:ea:8c:fc:07:15:ff: 8d:3d:d4:44:60:12:f2:12:ef:8c:e9:86:03:38:8f:71:01:f6: 7a:5a:cd:00:cf:f5:39:34:a7:99:ff:f7:92:e6:46:b0:a1:0a: 80:9a:c0:44:4f:09:7e:15:64:43:6e:70:05:f8:49:7e:6c:bb: f4:c8:03:09 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICD+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2QjQxMTAvBgNVBAUTKDZDQTZCMkFDMUREMTdCMDE0REI2Qzc2NzI3OUQwOEM2 NkU0RUZDMDUwHhcNMjUwOTMwMTc0NjExWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjMTc2My0zMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiYNGa6frTW1GlxDMwqCulz/qK5z9vLPbXg6WarEUNO3AaIdzHTRIvcxgavc TofXM0kC73vXTqEwhF85dH15nlO+ZItCJd5ZMqO5CJD7thNEeInTD0KYMlmnDpvt uSyIv/M+lJkUJEYJCrFar4q+Y3r9tVBTqQ9r0HtUtD3dunO7Hge5plBs0qFlNhRd iSCJpB4gbRYKIIlQo82SvYBm61X3xSWY2WqO6oBbw2ly4/3YqflqXjAONwkqaK52 pEH8e+9rIROPerofwGIO9UAVTYZfjpa3z8u5jCLXikj24tgnfFBu8Bt6nBkDopqi gqryM7xuB/eD+79Vsw6EGaU3OwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFATgW0s+ ZBHG0xuLL+I8I2MQX/puMB8GA1UdIwQYMBaAFGymsqwd0XsBTbbHZyedCMZuTvwF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZCNC83MjZGNTFDMjYz RjIxMUU5QkIyMERENDVDNEY5QUUwMi9iS2F5ckIzUmV3Rk50c2RuSjUwSXhtNU9f QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLYXlyQjNSZXdGTnRzZG5KNTBJeG01T19BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM2QjQvNzI2RjUxQzI2M0YyMTFFOUJCMjBERDQ1QzRGOUFFMDIvNDI1QkY1RkU3 QTQ3MTFFQkFEMTI1MjU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnYygDBAFnhOowDQYJKoZIhvcNAQELBQADggEBALAyVSTh YeaqjLWYFOCi8zQ03pUAH8756q9mwaIls++pwWM1KCKICwHYu32mPkk7ANg4lz0k PmuDNqCvBf3Fj+XLItfV7elksIJA6pzlA7fkCt59qzjGgsRlmkW6kmU68L9QaLaa 7lZ4N920/qJKOYCMaAxkpvPLFO9vhH7gWrvc+nXDq7cMNh8F2V+nKKgG1vN/1wld JPfxcUO/ARviqxUsqnyRpnY6YWWKPNzO7n5aeV6n0eqUVXS31Q905ZvBTOqM/AcV /4091ERgEvIS74zphgM4j3EB9npazQDP9Tk0p5n/95LmRrChCoCawERPCX4VZENu cAX4SX5su/TIAwk= -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:56 2025 by rpki-client