$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa File: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (raw, json) Hash identifier: i9keOrGgDPDdpLU7sFp0e9zDGCL/M7UVsmnKpkq7UPk= Subject key identifier: 1F:5F:59:C0:21:BC:AE:62:34:DA:5B:CE:A2:7A:2C:3C:4C:64:06:CA Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Certificate serial: 0564 Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa Signing time: Sun 28 Sep 2025 23:56:41 +0000 ROA not before: Sun 28 Sep 2025 23:56:41 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 142623 IP address blocks: 103.171.36.0/24 maxlen: 24 103.171.37.0/24 maxlen: 24 2001:df7:3580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1380 (0x564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Validity Not Before: Sep 28 23:56:41 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d9cb39-960a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:2e:2d:2f:dc:57:7d:d1:fe:91:79:3d:52: be:be:2e:25:20:44:b4:7f:b2:d1:0e:df:44:c3:b3: 6c:68:af:b5:1b:54:df:6f:46:db:6d:dc:12:e2:cd: 9d:a5:70:41:70:3e:45:10:57:e9:2e:59:a8:7b:29: 5a:b3:ac:7f:a4:fc:bf:97:d2:f5:5b:2d:eb:61:b1: d7:05:42:cf:88:03:0d:d9:53:63:d3:aa:31:ce:66: 14:96:74:0a:3f:7f:02:cd:39:d4:36:3c:f7:10:c3: 94:9d:3e:de:f4:6c:1e:d2:de:aa:c7:a7:4c:ed:a0: 68:8d:a1:58:1c:f7:d7:c4:78:20:53:ac:e9:89:00: 66:f4:6d:10:69:87:72:1e:87:20:0b:cd:2c:42:bd: e7:93:fc:b2:8d:12:3d:4c:41:1f:d0:40:6c:d4:64: 5a:15:77:b1:58:a5:81:a7:6f:9d:36:5e:3b:9e:c7: 6e:74:3e:8d:4f:33:b4:47:b2:cb:ae:ad:75:ae:a5: c4:40:69:e2:f6:ea:00:db:5c:f8:2e:ef:bc:9a:9f: ce:58:2b:19:63:b9:e1:98:83:48:4f:f6:3d:d4:b8: c8:d9:82:0f:9e:34:2c:6a:7e:62:30:ed:b4:bb:cc: 19:e9:d2:b3:8c:e2:0c:2f:98:a6:d4:44:46:c2:ec: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5F:59:C0:21:BC:AE:62:34:DA:5B:CE:A2:7A:2C:3C:4C:64:06:CA X509v3 Authority Key Identifier: keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/7C05ACEE75B311EF83EC6F78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.36.0/23 IPv6: 2001:df7:3580::/48 Signature Algorithm: sha256WithRSAEncryption 8c:19:d4:e0:3c:e4:aa:8a:3d:ba:5f:9c:49:c1:d8:6b:e4:d0: 16:fd:31:e8:a7:52:99:13:b1:3d:fb:8a:f4:e7:a6:96:bf:21: 75:61:45:23:b4:3c:3a:8c:61:7c:89:d8:8f:70:27:be:6e:76: a2:44:aa:d3:26:db:6a:18:45:ce:52:bc:e1:5c:d9:ba:c5:6a: 05:38:7e:08:31:0e:89:32:1b:9a:a3:7d:b5:55:16:ca:39:ea: e0:ed:33:cf:ca:01:0e:bd:79:e2:19:bb:fc:7c:b6:44:07:ec: 10:38:ef:e0:18:50:05:48:2f:9d:99:be:1c:d1:a1:75:3b:d2: 2d:76:8a:90:2a:3b:79:c5:69:2a:cf:d6:85:53:0f:07:d3:fc: 4b:60:01:13:15:f2:c9:ab:94:74:de:a3:9f:67:f0:7e:6f:aa: 8a:f9:87:65:71:30:f1:12:62:15:f5:41:13:80:4d:0f:bb:f4: 4b:6f:76:de:a3:00:05:59:82:35:58:79:67:f9:24:d3:c3:77: 8d:4b:c4:6b:2a:7c:c7:f6:84:8c:45:40:4c:b3:3f:9c:6d:98: 61:91:6a:82:12:f7:63:0e:46:d0:63:24:6d:ef:d3:42:f2:1a: ba:38:95:51:a2:08:a9:cd:49:e8:02:38:e3:52:fb:a0:90:6f: 4e:99:94:93 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc5NUIxMTAvBgNVBAUTKDA1QkVGM0I3NjQ2MzU2Q0U0MDlGQzU2M0YyQTY5MDc4 Njc3OTVFRjcwHhcNMjUwOTI4MjM1NjQxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ5Y2IzOS05NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9suLS/cV33R/pF5PVK+vi4lIES0f7LRDt9Ew7NsaK+1G1Tfb0bbbdwS4s2d pXBBcD5FEFfpLlmoeylas6x/pPy/l9L1Wy3rYbHXBULPiAMN2VNj06oxzmYUlnQK P38CzTnUNjz3EMOUnT7e9Gwe0t6qx6dM7aBojaFYHPfXxHggU6zpiQBm9G0QaYdy HocgC80sQr3nk/yyjRI9TEEf0EBs1GRaFXexWKWBp2+dNl47nsdudD6NTzO0R7LL rq11rqXEQGni9uoA21z4Lu+8mp/OWCsZY7nhmINIT/Y91LjI2YIPnjQsan5iMO20 u8wZ6dKzjOIML5im1ERGwuzroQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB9fWcAh vK5iNNpbzqJ6LDxMZAbKMB8GA1UdIwQYMBaAFAW+87dkY1bOQJ/FY/KmkHhneV73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzk1Qi9BODhGQjNFMjAw QzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZzNUFuOFZqOHFhUWVHZDVY dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JiN3p0MlJqVnM1QW44Vmo4cWFRZUdkNVh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc5NUIvQTg4RkIzRTIwMEMwMTFFQzk2QzJENTgzQzRGOUFFMDIvN0MwNUFDRUU3 NUIzMTFFRjgzRUM2Rjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqyQwDwQCAAIwCQMHACABDfc1gDANBgkqhkiG9w0BAQsF AAOCAQEAjBnU4Dzkqoo9ul+cScHYa+TQFv0x6KdSmROxPfuK9Oemlr8hdWFFI7Q8 OoxhfInYj3Anvm52okSq0ybbahhFzlK84VzZusVqBTh+CDEOiTIbmqN9tVUWyjnq 4O0zz8oBDr154hm7/Hy2RAfsEDjv4BhQBUgvnZm+HNGhdTvSLXaKkCo7ecVpKs/W hVMPB9P8S2ABExXyyauUdN6jn2fwfm+qivmHZXEw8RJiFfVBE4BND7v0S2923qMA BVmCNVh5Z/kk08N3jUvEayp8x/aEjEVATLM/nG2YYZFqghL3Yw5G0GMkbe/TQvIa ujiVUaIIqc1J6AI441L7oJBvTpmUkw== -----END CERTIFICATE-----Generated at Mon Oct 20 02:41:14 2025 by rpki-client