$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ED4F22B083F211F0BF43E721C4F9AE02.roa File: ED4F22B083F211F0BF43E721C4F9AE02.roa (raw, json) Hash identifier: pCKJS8T7xeLtb+JHDjAwjH092du2jwCh5YUQFYtRJWw= Subject key identifier: AA:11:EF:6E:2C:8E:68:F3:D2:F5:66:21:C2:99:CC:80:12:1B:ED:5A Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Certificate serial: 0759 Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ED4F22B083F211F0BF43E721C4F9AE02.roa Signing time: Thu 28 Aug 2025 17:36:33 +0000 ROA not before: Thu 28 Aug 2025 17:36:33 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152723 IP address blocks: 103.137.108.0/24 maxlen: 24 103.137.109.0/24 maxlen: 24 2001:df6:700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Validity Not Before: Aug 28 17:36:33 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b093a0-a77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:31:31:48:3c:7c:62:b7:fb:05:db:5c:85: 49:91:55:94:23:a5:88:bd:05:f2:0b:e5:87:bf:19: 77:ca:62:d5:54:a5:c8:1c:1b:9d:79:f4:18:45:61: 82:9e:49:f1:ae:b2:37:c3:40:57:12:0f:fb:99:ac: 27:52:a7:87:c9:7d:13:f6:e5:29:a0:ca:48:b1:4e: c5:2e:0a:66:48:d0:5e:df:c9:98:b5:a4:48:0b:66: 8a:1f:e4:02:9f:cb:4c:d0:fc:03:b1:ff:32:69:ed: 89:e4:88:ef:82:9c:a6:d3:e5:12:60:ad:63:37:07: 78:a4:62:0b:c0:ed:a7:fb:46:ba:16:72:c4:6b:5a: 6e:92:54:7b:62:3a:7b:20:61:ef:a3:28:e6:54:f8: ef:f3:53:ec:66:3d:f5:2e:7c:a3:3b:bd:ec:d0:4b: 11:49:e2:15:47:69:55:6e:d7:e8:a7:59:fe:93:45: 48:67:e8:2b:f4:af:2f:01:a5:42:a9:f8:4c:61:98: 60:d1:b6:cf:30:c4:36:18:b2:55:4e:f9:a8:bf:d9: 2d:c3:09:fd:bd:2a:a7:fb:cf:dd:a3:8a:50:54:df: 12:a7:21:3f:84:28:00:d7:83:c3:02:5f:7d:26:bb: d7:db:ff:1e:51:ae:fe:92:6d:f3:8b:cf:34:db:de: 03:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:11:EF:6E:2C:8E:68:F3:D2:F5:66:21:C2:99:CC:80:12:1B:ED:5A X509v3 Authority Key Identifier: keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ED4F22B083F211F0BF43E721C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.108.0/23 IPv6: 2001:df6:700::/48 Signature Algorithm: sha256WithRSAEncryption ab:e5:59:7d:96:43:3e:16:62:5b:32:fb:a9:2c:85:6a:0e:5c: e3:47:a2:ba:bb:e7:d0:e5:7d:d9:77:32:44:89:6e:af:b1:b3: be:da:fb:33:68:ab:fc:7c:7e:79:2a:51:25:be:95:88:aa:a5: 03:c8:0b:ae:90:63:7c:33:c1:f4:b5:92:ae:23:d5:31:bf:84: 45:ad:94:b9:c3:3d:91:8c:e6:d5:d7:57:dd:5c:ea:f8:68:c6: ff:ef:99:81:b2:d5:f2:4d:e4:9c:8b:92:dc:60:ab:1b:dc:3f: 87:be:10:9e:2d:e8:69:38:f7:28:c3:91:d4:2d:2b:e3:27:19: 3d:b0:e4:b2:71:25:16:6d:c8:07:ee:3a:3d:94:f2:6c:f8:b5: b1:72:68:79:37:27:1c:19:9c:d1:f2:c1:b0:f6:79:9a:fb:09: a7:f3:24:a7:7f:bf:b6:78:f6:cf:dc:5a:81:86:b0:b6:82:c1: bd:81:c4:5a:b8:3e:83:32:7c:a7:26:43:e9:7a:31:67:bd:dc: 8e:97:8a:f0:02:cc:ab:c2:4c:4d:02:2d:43:31:2a:6f:ee:67: 5c:a5:09:1c:63:eb:cb:e7:7c:5b:22:2d:7b:6c:b0:e7:2a:f3: 3a:4d:34:ae:29:11:00:1d:11:43:76:38:79:31:be:ba:61:a0: a9:cb:5d:69 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3 NERFRDQ2NkUwHhcNMjUwODI4MTczNjMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwOTNhMC1hNzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHoxMUg8fGK3+wXbXIVJkVWUI6WIvQXyC+WHvxl3ymLVVKXIHBudefQYRWGC nknxrrI3w0BXEg/7mawnUqeHyX0T9uUpoMpIsU7FLgpmSNBe38mYtaRIC2aKH+QC n8tM0PwDsf8yae2J5Ijvgpym0+USYK1jNwd4pGILwO2n+0a6FnLEa1puklR7Yjp7 IGHvoyjmVPjv81PsZj31LnyjO73s0EsRSeIVR2lVbtfop1n+k0VIZ+gr9K8vAaVC qfhMYZhg0bbPMMQ2GLJVTvmov9ktwwn9vSqn+8/do4pQVN8SpyE/hCgA14PDAl99 JrvX2/8eUa7+km3zi880294DTQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKoR724s jmjz0vVmIcKZzIASG+1aMB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5 NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0FBNEUvNTVFOTc5NUFBOTRGMTFFOEFBMEM5MDBFQzRGOUFFMDIvRUQ0RjIyQjA4 M0YyMTFGMEJGNDNFNzIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFniWwwDwQCAAIwCQMHACABDfYHADANBgkqhkiG9w0BAQsF AAOCAQEAq+VZfZZDPhZiWzL7qSyFag5c40eiurvn0OV92XcyRIlur7Gzvtr7M2ir /Hx+eSpRJb6ViKqlA8gLrpBjfDPB9LWSriPVMb+ERa2UucM9kYzm1ddX3Vzq+GjG /++ZgbLV8k3knIuS3GCrG9w/h74Qni3oaTj3KMOR1C0r4ycZPbDksnElFm3IB+46 PZTybPi1sXJoeTcnHBmc0fLBsPZ5mvsJp/Mkp3+/tnj2z9xagYawtoLBvYHEWrg+ gzJ8pyZD6XoxZ73cjpeK8ALMq8JMTQItQzEqb+5nXKUJHGPry+d8WyIte2yw5yrz Ok00rikRAB0RQ3Y4eTG+umGgqctdaQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:55:27 2025 by rpki-client