$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa File: EC7311FEE5C311EEBF217685C4F9AE02.roa (raw, json) Hash identifier: iQdab95cXgGlPUuiYO+n8Hk1ialiC4/Jl2j60o0Nj04= Subject key identifier: B3:75:DB:D3:AE:85:FB:93:2A:39:FC:5C:94:02:F7:7E:A5:32:5B:09 Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Certificate serial: 012E Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa Signing time: Sun 19 Oct 2025 07:41:26 +0000 ROA not before: Sun 19 Oct 2025 07:41:26 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133760 IP address blocks: 45.115.50.0/23 maxlen: 23 45.115.50.0/24 maxlen: 24 103.41.58.0/23 maxlen: 23 103.41.59.0/24 maxlen: 24 103.55.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDFF2, serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Validity Not Before: Oct 19 07:41:26 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f49626-d7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:0a:69:18:55:68:e6:04:75:43:91:08:73: 6c:b1:5e:bc:3d:fd:00:5f:f9:f0:07:80:c2:ff:b4: 56:fb:03:8d:53:2a:e5:e8:67:10:90:f0:c8:97:b5: c4:ce:7a:4d:60:d0:58:e6:65:e4:52:35:3c:f5:ae: 3e:16:f6:a5:82:c2:ec:10:d5:bd:37:21:2d:0a:f1: b6:2f:ec:ec:2f:fc:f3:c1:38:79:31:40:c8:e6:0f: 01:30:57:68:26:09:b9:83:9c:20:a1:0a:ae:b2:65: 1f:64:aa:79:87:f6:17:16:be:c9:7d:2a:d7:1c:95: e3:c7:ec:b8:d6:90:db:e9:ef:86:5f:fd:ed:1e:a6: fa:2d:08:b5:da:65:9f:50:cb:db:41:46:f0:98:f9: 98:e2:90:f8:4d:5a:c4:16:59:b6:61:d2:a8:3b:b4: 36:85:76:06:18:5e:f7:0c:28:92:36:84:97:10:49: 8a:62:21:f4:04:ea:f8:38:93:b6:9d:9b:36:fd:1a: ba:66:66:a1:07:45:30:00:db:3b:f6:e1:ae:dc:1a: 63:b1:5f:87:c4:78:b1:0f:22:5c:8c:c0:45:a8:a3: 28:67:be:e9:b7:22:e6:9f:4d:a5:09:e8:f1:56:d6: b9:df:23:b9:34:5a:a8:d4:ad:7b:ae:fc:27:3f:52: bc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:75:DB:D3:AE:85:FB:93:2A:39:FC:5C:94:02:F7:7E:A5:32:5B:09 X509v3 Authority Key Identifier: keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/EC7311FEE5C311EEBF217685C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.50.0/23 103.41.58.0/23 103.55.54.0/23 Signature Algorithm: sha256WithRSAEncryption 30:46:4a:39:ef:bd:a9:2a:e9:2b:be:cc:ef:9f:58:5e:87:29: 28:84:22:66:14:07:ef:40:91:e7:6f:cd:90:6d:96:64:cf:32: e6:9a:6a:d6:3a:27:b4:5a:fb:c0:f7:dd:b8:67:f8:92:31:31: 86:76:7d:29:eb:7e:03:75:81:e5:71:ab:42:d0:58:f0:79:86: ac:7c:c3:4a:e8:1c:c6:04:df:76:b4:67:01:4b:f2:f2:20:8f: 9c:13:89:60:bb:8d:57:81:44:7a:f0:7e:62:93:17:88:53:18: 50:0a:59:19:73:54:ce:3d:69:7f:f3:5f:e1:38:d2:3f:99:82: 66:50:00:fb:bd:7d:b2:cb:db:f0:52:2e:ea:05:34:c9:aa:d2: 11:7f:5f:74:94:19:f2:f3:46:b4:d6:43:b9:60:48:ca:8a:87: 67:6d:d0:f8:2f:36:a3:fa:25:be:6f:fb:66:89:e6:a8:ee:e8: 12:f3:0e:2d:93:a4:64:b8:7c:01:4a:98:46:d9:5e:6e:e1:98: 0d:af:80:7b:f5:42:22:1a:d6:c1:40:1d:1a:57:f3:9a:71:6d: 3a:97:6e:14:d4:b6:15:3e:ad:04:ff:a1:01:43:8a:b2:26:eb: a5:a6:dc:3a:83:eb:d5:91:ec:4c:0d:99:01:c2:98:79:f7:cc: 34:34:b2:1a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERGRjIxMTAvBgNVBAUTKEY4M0RDM0EyNDZEMTIxNTFBQzg3QTc3MkNFQ0EwRURE MjE1Rjg2MkEwHhcNMjUxMDE5MDc0MTI2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY0OTYyNi1kN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhkKaRhVaOYEdUORCHNssV68Pf0AX/nwB4DC/7RW+wONUyrl6GcQkPDIl7XE znpNYNBY5mXkUjU89a4+FvalgsLsENW9NyEtCvG2L+zsL/zzwTh5MUDI5g8BMFdo Jgm5g5wgoQqusmUfZKp5h/YXFr7JfSrXHJXjx+y41pDb6e+GX/3tHqb6LQi12mWf UMvbQUbwmPmY4pD4TVrEFlm2YdKoO7Q2hXYGGF73DCiSNoSXEEmKYiH0BOr4OJO2 nZs2/Rq6ZmahB0UwANs79uGu3BpjsV+HxHixDyJcjMBFqKMoZ77ptyLmn02lCejx Vta53yO5NFqo1K17rvwnP1K8gwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLN129Ou hfuTKjn8XJQC936lMlsJMB8GA1UdIwQYMBaAFPg9w6JG0SFRrIencs7KDt0hX4Yq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREZGMi9DOUFGMjkzNEU1 QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklWR3NoNmR5enNvTzNTRmZo aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERGRjIvQzlBRjI5MzRFNUMxMTFFRTk4REJFOTYyQzRGOUFFMDIvRUM3MzExRkVF NUMzMTFFRUJGMjE3Njg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEtczIDBAFnKToDBAFnNzYwDQYJKoZIhvcNAQELBQADggEB ADBGSjnvvakq6Su+zO+fWF6HKSiEImYUB+9AkedvzZBtlmTPMuaaatY6J7Ra+8D3 3bhn+JIxMYZ2fSnrfgN1geVxq0LQWPB5hqx8w0roHMYE33a0ZwFL8vIgj5wTiWC7 jVeBRHrwfmKTF4hTGFAKWRlzVM49aX/zX+E40j+ZgmZQAPu9fbLL2/BSLuoFNMmq 0hF/X3SUGfLzRrTWQ7lgSMqKh2dt0PgvNqP6Jb5v+2aJ5qju6BLzDi2TpGS4fAFK mEbZXm7hmA2vgHv1QiIa1sFAHRpX85pxbTqXbhTUthU+rQT/oQFDirIm66Wm3DqD 69WR7EwNmQHCmHn3zDQ0sho= -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:46 2025 by rpki-client