$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/254E9F807D4A11EEABBD1328C4F9AE02.roa File: 254E9F807D4A11EEABBD1328C4F9AE02.roa (raw, json) Hash identifier: E597Ub/8geXywFzvDFSLu6V1fvdFLZTNO5bMkAf850U= Subject key identifier: C1:11:EB:00:F7:2F:86:E8:48:77:40:F9:5A:26:47:E4:70:0E:DF:2F Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: 016F Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/254E9F807D4A11EEABBD1328C4F9AE02.roa Signing time: Thu 09 Oct 2025 04:51:47 +0000 ROA not before: Thu 09 Oct 2025 04:51:47 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 151788 IP address blocks: 103.72.58.0/23 maxlen: 23 103.72.58.0/24 maxlen: 24 103.72.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6, serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: Oct 9 04:51:47 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e73f63-4bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:ea:bf:cc:ad:1f:55:9b:1d:a9:5d:09:0f: d8:05:37:f4:45:b0:6c:27:53:72:f3:2f:6d:34:26: db:d8:47:b7:c7:02:4e:67:42:84:fb:19:1e:5f:9e: 65:88:5d:ff:ed:78:5a:7e:93:3b:55:a2:c9:4a:3f: cb:12:b2:d6:1d:89:b7:2a:c6:11:11:0d:b7:88:33: 44:e7:ef:19:ab:69:c2:a7:af:02:38:e0:93:73:11: 1f:1c:fa:2d:ed:59:02:13:6d:5d:63:58:b5:93:46: b1:fc:83:7a:91:aa:5a:47:4a:3c:81:b6:81:0d:5c: a1:76:1f:f6:5b:28:89:b1:b0:a9:0d:05:74:5f:b3: 1f:60:89:3d:de:d4:78:b1:0b:81:38:83:f4:0e:ba: 25:44:53:e6:15:df:aa:72:c6:35:ad:b9:21:e1:da: ca:05:4e:44:1f:a3:b8:e8:cc:0b:23:28:a4:66:08: 80:fd:8b:ca:d1:93:0d:28:c0:8b:b6:f1:8a:f4:95: 6f:2b:4f:4b:4e:fa:3d:bf:eb:4d:ce:6d:1a:0b:58: e2:40:8a:e5:2e:02:f7:06:95:0b:4e:77:b4:80:5a: 06:31:f8:4e:2d:60:a9:e8:93:e2:5a:a1:db:92:a3: db:09:23:ea:87:3f:27:8e:fd:dd:82:41:ef:28:7b: 1a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:11:EB:00:F7:2F:86:E8:48:77:40:F9:5A:26:47:E4:70:0E:DF:2F X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/254E9F807D4A11EEABBD1328C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.58.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:ff:61:3e:ca:cb:e5:29:ca:8c:32:f9:73:d1:a1:8a:66:2d: 1b:a9:56:97:b4:1a:c5:76:a5:c9:1d:a8:1b:9c:96:2c:cd:21: 76:dc:aa:c5:a0:45:39:73:a7:0d:43:76:dd:76:4e:0e:17:2d: e1:66:ad:85:89:9a:61:e8:c5:ec:fa:24:18:72:0f:6d:fa:dd: 35:48:0e:d9:e8:65:06:ab:6f:bc:0b:8e:3f:f6:40:90:16:07: af:39:dd:11:76:8f:61:83:87:ce:5b:82:97:f2:3f:ab:98:03: 03:1d:c6:63:92:08:5b:6b:1f:41:f3:74:2e:a9:52:7e:36:7d: cc:56:f1:4a:96:5a:2f:c1:36:eb:d6:3a:39:6b:17:e9:5a:1a: 35:02:61:51:d2:71:56:fa:87:e5:3b:16:70:aa:28:1d:9b:31: 51:98:f1:4e:1f:2d:3b:48:ff:6b:3c:03:fb:90:18:f3:4a:17: ef:14:20:b8:ae:2c:31:98:d6:9b:84:22:63:52:cb:00:6f:b2: aa:0b:96:05:28:2b:f7:cd:c1:67:c8:6a:45:7b:93:2d:4d:60: 43:e9:04:2f:8a:75:ca:f9:84:b0:ff:b8:78:08:df:83:3c:d3: 05:5b:b4:08:d4:e1:e4:85:46:30:01:29:b7:76:d7:06:49:59: 95:0d:3c:36 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNEQzYxMTAvBgNVBAUTKEY4NEZCQjQxNUQ5QTQ1NDMzNjJFREY3MjY1RjUzN0Uy Q0ZGOUY4MjAwHhcNMjUxMDA5MDQ1MTQ3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU3M2Y2My00YmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDvqv8ytH1WbHaldCQ/YBTf0RbBsJ1Ny8y9tNCbb2Ee3xwJOZ0KE+xkeX55l iF3/7XhafpM7VaLJSj/LErLWHYm3KsYREQ23iDNE5+8Zq2nCp68COOCTcxEfHPot 7VkCE21dY1i1k0ax/IN6kapaR0o8gbaBDVyhdh/2WyiJsbCpDQV0X7MfYIk93tR4 sQuBOIP0DrolRFPmFd+qcsY1rbkh4drKBU5EH6O46MwLIyikZgiA/YvK0ZMNKMCL tvGK9JVvK09LTvo9v+tNzm0aC1jiQIrlLgL3BpULTne0gFoGMfhOLWCp6JPiWqHb kqPbCSPqhz8njv3dgkHvKHsa0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMER6wD3 L4boSHdA+VomR+RwDt8vMB8GA1UdIwQYMBaAFPhPu0FdmkVDNi7fcmX1N+LP+fgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0RDNi84MDEyOEVDODdE NDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJVTTJMdDl5WmZVMzRzXzUt Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkNEQzYvODAxMjhFQzg3RDQ5MTFFRUI5QzZEQzI2QzRGOUFFMDIvMjU0RTlGODA3 RDRBMTFFRUFCQkQxMzI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnSDowDQYJKoZIhvcNAQELBQADggEBAAr/YT7Ky+Upyowy +XPRoYpmLRupVpe0GsV2pckdqBuclizNIXbcqsWgRTlzpw1Ddt12Tg4XLeFmrYWJ mmHoxez6JBhyD2363TVIDtnoZQarb7wLjj/2QJAWB6853RF2j2GDh85bgpfyP6uY AwMdxmOSCFtrH0HzdC6pUn42fcxW8UqWWi/BNuvWOjlrF+laGjUCYVHScVb6h+U7 FnCqKB2bMVGY8U4fLTtI/2s8A/uQGPNKF+8UILiuLDGY1puEImNSywBvsqoLlgUo K/fNwWfIakV7ky1NYEPpBC+Kdcr5hLD/uHgI34M80wVbtAjU4eSFRjABKbd21wZJ WZUNPDY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:56:49 2025 by rpki-client