$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa File: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (raw, json) Hash identifier: KrqWlA/SDiqH7tPY3/giTqCFhbQU+NxKtLCfFdknyhE= Subject key identifier: A2:35:70:01:D1:95:B5:B2:E3:40:73:A1:B0:56:EB:B4:92:85:A6:48 Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Certificate serial: 0573 Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa Signing time: Wed 08 Oct 2025 23:27:47 +0000 ROA not before: Wed 08 Oct 2025 23:27:47 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 142628 IP address blocks: 103.171.42.0/24 maxlen: 24 2001:df7:3680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1395 (0x573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Validity Not Before: Oct 8 23:27:47 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e6f373-31f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:32:96:1c:cd:c2:6f:84:69:53:15:e2:1a: 0c:48:df:6c:4d:c8:80:a8:db:19:6f:74:21:b1:d8: 51:30:e2:e0:b5:0b:bf:36:62:eb:e8:be:05:2a:96: d1:87:cc:6d:35:35:91:42:f4:c2:e4:8d:7e:be:23: ff:85:23:84:77:a2:7f:d5:96:ff:95:33:da:77:a7: 88:59:18:40:b7:cf:f9:dd:ae:29:a9:7a:d3:38:01: e8:3e:17:a7:71:bd:0c:13:6b:28:51:f8:66:e7:e0: 23:18:88:54:5d:89:f4:5a:ca:b6:93:1b:99:5c:9f: 19:d8:ff:e5:b2:37:1e:47:ed:84:b3:95:37:d2:da: 22:85:4f:64:3b:e9:c6:7f:9e:d6:ee:78:c3:8c:2c: 69:1e:4a:d7:57:66:78:a9:7a:22:a0:4f:e2:c7:77: 18:1b:c3:1d:f0:c8:fd:95:7b:0c:a7:fd:63:00:e5: 8c:66:8c:da:ee:21:ad:21:d3:71:ac:20:86:f7:51: ea:71:64:5a:28:5f:2e:1f:8b:92:78:1f:a2:eb:12: 83:f0:37:9d:da:ed:5f:71:a5:a2:aa:fc:4a:8d:83: e6:e2:de:7b:03:f7:f5:96:ec:ba:ea:64:a4:2c:c1: 8a:a6:a6:44:03:36:db:5a:e6:f1:da:6d:46:e1:87: 0f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:35:70:01:D1:95:B5:B2:E3:40:73:A1:B0:56:EB:B4:92:85:A6:48 X509v3 Authority Key Identifier: keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.42.0/24 IPv6: 2001:df7:3680::/48 Signature Algorithm: sha256WithRSAEncryption 1c:2b:b3:3b:94:0b:d3:ed:04:f9:99:cf:12:7c:99:5c:8f:e4: 20:0f:f0:b3:e8:34:d3:a1:62:3e:e3:64:9b:51:e3:63:b5:7f: 51:3b:2e:75:b7:27:32:36:aa:fa:a7:a6:a6:ec:7e:33:43:d6: 99:44:4f:52:a0:51:90:26:da:51:a5:7f:e9:92:70:ad:b4:ed: 85:48:d6:a9:78:73:ca:e0:c5:02:0c:58:cf:4b:80:03:5b:6c: e4:93:52:99:43:9b:12:41:c2:67:63:be:6c:88:ce:8d:05:c0: 4c:dc:7c:93:7b:65:8d:81:54:ef:51:d5:ae:18:c8:42:ca:be: 3c:c6:3f:79:d6:07:12:54:e8:35:09:72:cc:a7:a3:6d:45:14: 12:e6:2e:e6:92:5d:87:d6:cf:24:89:e5:0a:37:cc:14:a4:43: 8e:00:31:8b:d4:9a:a3:0b:97:df:1c:2b:5e:58:21:8a:2c:9b: 3b:98:39:d2:cb:d2:cf:63:ab:1f:8d:9d:88:3d:9b:1e:16:4e: 11:1d:65:ae:67:eb:3c:5e:ca:1e:9b:c9:aa:e1:01:7d:34:7b: 36:4c:41:5f:92:bb:38:cc:86:eb:ec:b8:c4:e9:60:ae:de:3c: 96:f2:cb:a4:38:ef:26:be:10:e5:7e:00:3d:b5:86:8f:77:ec: db:f2:34:81 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzQzcxMTAvBgNVBAUTKDgyNkI1NTkyQUMzOEIwMTJCN0U3QzI3MzBERDA2MDdF MTBEQjgxMDIwHhcNMjUxMDA4MjMyNzQ3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZjM3My0zMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMsylhzNwm+EaVMV4hoMSN9sTciAqNsZb3QhsdhRMOLgtQu/NmLr6L4FKpbR h8xtNTWRQvTC5I1+viP/hSOEd6J/1Zb/lTPad6eIWRhAt8/53a4pqXrTOAHoPhen cb0ME2soUfhm5+AjGIhUXYn0Wsq2kxuZXJ8Z2P/lsjceR+2Es5U30toihU9kO+nG f57W7njDjCxpHkrXV2Z4qXoioE/ix3cYG8Md8Mj9lXsMp/1jAOWMZoza7iGtIdNx rCCG91HqcWRaKF8uH4uSeB+i6xKD8Ded2u1fcaWiqvxKjYPm4t57A/f1luy66mSk LMGKpqZEAzbbWubx2m1G4YcPYQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKI1cAHR lbWy40BzobBW67SShaZIMB8GA1UdIwQYMBaAFIJrVZKsOLASt+fCcw3QYH4Q24EC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNDNy83QjJGNTM4QUZF NjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNCSzM1OEp6RGRCZ2ZoRGJn UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtdFZrcXc0c0JLMzU4SnpEZEJnZmhEYmdRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDIzQzcvN0IyRjUzOEFGRTY4MTFFQjg4Q0MwRTQxQzRGOUFFMDIvMjVCNzEzQTRG RTZCMTFFQkI1REQxNzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnqyowDwQCAAIwCQMHACABDfc2gDANBgkqhkiG9w0BAQsF AAOCAQEAHCuzO5QL0+0E+ZnPEnyZXI/kIA/ws+g006FiPuNkm1HjY7V/UTsudbcn Mjaq+qempux+M0PWmURPUqBRkCbaUaV/6ZJwrbTthUjWqXhzyuDFAgxYz0uAA1ts 5JNSmUObEkHCZ2O+bIjOjQXATNx8k3tljYFU71HVrhjIQsq+PMY/edYHElToNQly zKejbUUUEuYu5pJdh9bPJInlCjfMFKRDjgAxi9SaowuX3xwrXlghiiybO5g50svS z2OrH42diD2bHhZOER1lrmfrPF7KHpvJquEBfTR7NkxBX5K7OMyG6+y4xOlgrt48 lvLLpDjvJr4Q5X4APbWGj3fs2/I0gQ== -----END CERTIFICATE-----Generated at Mon Oct 20 16:26:16 2025 by rpki-client