$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/64A7FFE2F74811E8A07B9609C4F9AE02.roa File: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (raw, json) Hash identifier: GKqNBD5V71h0LJHoO121osmAczldGj86vre7flmyl/s= Subject key identifier: 28:4F:38:76:CC:45:78:6A:5C:66:9D:A8:81:7F:4E:AE:67:0D:0F:12 Certificate issuer: /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Certificate serial: 1A60 Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/64A7FFE2F74811E8A07B9609C4F9AE02.roa Signing time: Mon 22 Sep 2025 16:35:19 +0000 ROA not before: Mon 22 Sep 2025 16:35:19 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 36351 IP address blocks: 103.241.84.0/24 maxlen: 24 103.241.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6752 (0x1a60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029 Validity Not Before: Sep 22 16:35:19 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d17ac7-770f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:fb:b1:c7:f8:34:33:83:a1:bd:c0:6b:bc: c9:4d:91:c2:17:9e:38:72:ea:5c:c8:fa:35:db:fc: 51:d7:6c:76:76:4a:e7:ee:88:c7:a7:d4:fb:18:8f: 57:a7:f2:ad:73:4c:94:cb:b4:10:32:68:0e:a4:75: 71:f0:08:5d:b3:03:af:df:04:48:84:89:6f:52:6f: 2e:f4:53:c0:10:80:99:ac:68:19:00:42:62:55:ae: dd:12:7d:88:79:3e:e9:2b:ea:78:9c:03:90:d2:12: 7e:9e:7b:15:b2:32:07:b4:1f:6c:fe:79:fa:b6:93: 4e:71:80:39:c8:cb:b0:3f:78:57:26:fa:c1:f7:37: 2e:44:12:fd:4c:d1:05:bf:73:1b:73:90:bc:d2:b1: f3:6d:34:65:2e:93:37:4d:82:3d:9f:8e:6a:37:40: 85:da:7f:86:d0:18:8d:57:71:fb:58:f4:2a:fa:1d: cf:bc:21:90:81:81:ed:88:85:4b:f0:bd:3e:68:6f: 0a:94:1f:c9:99:f2:36:73:1a:a2:b0:5c:75:30:97: db:8f:1e:96:4f:a3:cd:d1:d8:67:ab:2a:bb:1f:db: ef:38:71:06:69:9d:cf:d4:ed:03:9e:20:44:9d:9e: 83:ed:19:b1:01:22:37:61:2a:69:3f:c3:40:70:7d: ce:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4F:38:76:CC:45:78:6A:5C:66:9D:A8:81:7F:4E:AE:67:0D:0F:12 X509v3 Authority Key Identifier: keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/64A7FFE2F74811E8A07B9609C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.241.84.0/24 103.241.87.0/24 Signature Algorithm: sha256WithRSAEncryption 88:1c:37:49:29:67:89:4d:31:38:e8:35:c7:97:c5:78:e1:04: 61:ab:63:81:1d:f1:0f:db:bc:f8:d4:07:bb:1b:7c:46:4d:75: bf:bd:c0:2f:4b:0e:89:48:7f:55:b5:e6:d7:3e:39:a6:23:78: 5c:8e:24:7c:09:be:69:b8:d1:e9:55:5d:ac:b7:81:e5:de:87: be:db:ee:b0:10:4d:b2:db:7c:a0:2c:bf:ae:7d:3a:b4:2f:0e: 4f:36:f3:96:05:59:8b:9f:bd:e6:90:4d:e8:44:45:dc:9b:56: 06:6f:b6:a2:0c:aa:c4:e7:a7:eb:7f:e0:d4:54:ac:f6:ab:d6: 11:f0:e2:0d:6f:03:cd:3e:fc:52:9b:90:46:23:f3:41:fe:c9: f8:da:7a:59:95:3b:ec:0a:78:d5:63:98:b4:9c:58:76:fb:69: dc:90:15:5d:8b:69:8d:23:6a:c1:79:88:72:24:6b:40:29:02: b1:4a:68:ec:ad:c4:ba:fa:fe:8b:c5:8f:35:5a:44:c9:68:b5: 1d:54:ba:95:43:b3:83:af:ad:83:a9:e5:cf:c7:8d:d6:40:5f: 36:07:4e:80:99:40:8f:05:87:8a:6c:13:af:15:a6:94:4a:21: b8:d5:d3:23:69:ec:ed:98:f0:87:52:10:e1:9d:6c:f0:0e:8b: 66:9d:4d:d6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB NzQzQTIwMjkwHhcNMjUwOTIyMTYzNTE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxN2FjNy03NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMD7scf4NDODob3Aa7zJTZHCF544cupcyPo12/xR12x2dkrn7ojHp9T7GI9X p/Ktc0yUy7QQMmgOpHVx8AhdswOv3wRIhIlvUm8u9FPAEICZrGgZAEJiVa7dEn2I eT7pK+p4nAOQ0hJ+nnsVsjIHtB9s/nn6tpNOcYA5yMuwP3hXJvrB9zcuRBL9TNEF v3Mbc5C80rHzbTRlLpM3TYI9n45qN0CF2n+G0BiNV3H7WPQq+h3PvCGQgYHtiIVL 8L0+aG8KlB/JmfI2cxqisFx1MJfbjx6WT6PN0dhnqyq7H9vvOHEGaZ3P1O0DniBE nZ6D7RmxASI3YSppP8NAcH3OBQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFChPOHbM RXhqXGadqIF/Tq5nDQ8SMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0 ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvMkY4Qjg1NTI1NDg1MTFFN0IxRDg0NzEzQzRGOUFFMDIvNjRBN0ZGRTJG NzQ4MTFFOEEwN0I5NjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn8VQDBABn8VcwDQYJKoZIhvcNAQELBQADggEBAIgcN0kp Z4lNMTjoNceXxXjhBGGrY4Ed8Q/bvPjUB7sbfEZNdb+9wC9LDolIf1W15tc+OaYj eFyOJHwJvmm40elVXay3geXeh77b7rAQTbLbfKAsv659OrQvDk8285YFWYufveaQ TehERdybVgZvtqIMqsTnp+t/4NRUrPar1hHw4g1vA80+/FKbkEYj80H+yfjaelmV O+wKeNVjmLScWHb7adyQFV2LaY0jasF5iHIka0ApArFKaOytxLr6/ovFjzVaRMlo tR1UupVDs4OvrYOp5c/HjdZAXzYHToCZQI8Fh4psE68VppRKIbjV0yNp7O2Y8IdS EOGdbPAOi2adTdY= -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:28 2025 by rpki-client