$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa File: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (raw, json) Hash identifier: 7yUDpuvZHp5QBz3hhy/vTUHq3B8un1JwIKUsswRBXgQ= Subject key identifier: 4E:E9:BA:7C:95:08:61:D6:42:AF:EF:97:38:2D:EB:56:68:D3:D0:1F Certificate issuer: /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Certificate serial: 06AD Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa Signing time: Fri 17 Oct 2025 00:02:59 +0000 ROA not before: Fri 17 Oct 2025 00:02:59 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139592 IP address blocks: 103.142.32.0/24 maxlen: 24 103.164.6.0/24 maxlen: 24 2400:e5a0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Validity Not Before: Oct 17 00:02:59 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f187b3-1406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e1:64:13:33:3e:65:7a:66:97:8f:1a:81:0a: 9d:21:16:d3:e7:cb:8c:7b:35:5a:d8:19:f1:a2:51: 8c:2a:4d:0f:64:b4:35:23:ca:e4:08:77:e0:27:75: 00:5c:19:d3:5a:10:b3:27:74:31:ec:3e:4a:ae:ce: 47:85:2f:78:8e:22:87:cb:9f:12:84:27:fe:b6:21: 44:a3:d6:a1:b8:88:f9:ae:cc:e5:8f:79:0a:f7:ad: 2d:26:49:e4:b6:cf:53:71:a1:be:aa:bb:df:e1:ed: e8:03:f0:14:77:36:bd:ba:cb:6d:e3:cb:17:c2:d5: 9b:7c:c8:b4:5e:8f:89:be:2b:45:30:1d:60:93:0a: 4d:70:72:6a:86:e2:5b:47:d4:dd:dc:3e:8e:b1:31: b7:2c:b7:ef:f5:26:11:08:97:40:db:5f:9c:4f:a9: 34:8e:c0:8b:e1:91:a8:60:30:09:8a:b5:d3:a5:88: d0:1e:f5:a2:48:4f:dc:7e:5f:44:86:9f:ec:90:f8: 10:f9:5f:2b:c7:e5:08:aa:4a:7b:6f:a0:70:20:38: aa:9e:0f:00:5c:73:6c:12:5a:06:c6:46:5e:ca:31: 03:5e:74:e5:7e:1e:8f:7d:86:4c:4e:aa:97:cd:88: 39:e1:3f:32:12:89:51:32:3e:38:21:8e:39:16:a1: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E9:BA:7C:95:08:61:D6:42:AF:EF:97:38:2D:EB:56:68:D3:D0:1F X509v3 Authority Key Identifier: keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.32.0/24 103.164.6.0/24 IPv6: 2400:e5a0::/32 Signature Algorithm: sha256WithRSAEncryption 57:95:2e:8d:43:b3:46:81:83:6f:aa:b5:25:cb:04:83:df:a4: 65:73:12:5b:2a:1c:72:4a:e4:28:b9:72:30:15:e8:44:05:9d: 5d:6e:84:46:62:82:12:fe:ba:62:29:83:45:47:75:a8:5e:d5: 00:4e:da:a3:02:a8:30:de:51:a4:82:a8:08:af:20:7b:a6:b1: 7a:82:40:a1:23:44:5e:a3:d5:08:d9:2a:35:02:b0:07:ae:ff: 17:0c:7b:cf:97:8d:1c:78:a1:9c:90:4f:35:fb:af:c7:09:a2: f7:cb:f2:5a:67:22:f4:e5:69:10:d2:33:9c:5d:d0:f9:f7:fe: 3e:d2:15:0f:92:59:5f:b3:88:b3:c2:a8:dd:9b:5b:73:b3:36: 6f:ad:5f:6a:86:b1:14:f2:33:e8:82:ee:1c:a2:fa:98:2c:77: a8:90:1b:50:88:77:95:8c:8f:73:63:b0:27:bb:76:e3:8c:f0: 34:78:c8:3e:a0:4e:a6:ff:c8:2f:42:59:df:1d:60:f3:0a:3a: c0:4c:a5:60:4f:5c:2f:a8:6c:0f:66:e2:ed:fb:ad:f7:53:64: 0e:33:4a:24:c8:f2:32:f5:a2:ff:79:fe:9d:4a:a6:52:2a:62: d6:24:08:68:2b:05:dc:da:13:01:12:fe:bc:6c:1a:57:a3:71: 79:1b:ec:d9 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCRDQxMTAvBgNVBAUTKDVEQzAzMDMzMzE4OThBRUZEQjg1RTREOTE0MDA2Qjg5 Mzc2QkVGRTEwHhcNMjUxMDE3MDAwMjU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYxODdiMy0xNDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OFkEzM+ZXpml48agQqdIRbT58uMezVa2BnxolGMKk0PZLQ1I8rkCHfgJ3UA XBnTWhCzJ3Qx7D5Krs5HhS94jiKHy58ShCf+tiFEo9ahuIj5rszlj3kK960tJknk ts9TcaG+qrvf4e3oA/AUdza9ustt48sXwtWbfMi0Xo+JvitFMB1gkwpNcHJqhuJb R9Td3D6OsTG3LLfv9SYRCJdA21+cT6k0jsCL4ZGoYDAJirXTpYjQHvWiSE/cfl9E hp/skPgQ+V8rx+UIqkp7b6BwIDiqng8AXHNsEloGxkZeyjEDXnTlfh6PfYZMTqqX zYg54T8yEolRMj44IY45FqHKHQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFE7punyV CGHWQq/vlzgt61Zo09AfMB8GA1UdIwQYMBaAFF3AMDMxiYrv24Xk2RQAa4k3a+/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JENC80RTg3QTQ2QTg2 QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1X2JoZVRaRkFCcmlUZHI3 LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjQXdNekdKaXVfYmhlVFpGQUJyaVRkcjctRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdCRDQvNEU4N0E0NkE4NkIxMTFFQkI4QkUyMTdDQzRGOUFFMDIvODFFM0Y0QUNC QkRBMTFFRDhGREI0RTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnjiADBABnpAYwDQQCAAIwBwMFACQA5aAwDQYJKoZIhvcN AQELBQADggEBAFeVLo1Ds0aBg2+qtSXLBIPfpGVzElsqHHJK5Ci5cjAV6EQFnV1u hEZighL+umIpg0VHdahe1QBO2qMCqDDeUaSCqAivIHumsXqCQKEjRF6j1QjZKjUC sAeu/xcMe8+XjRx4oZyQTzX7r8cJovfL8lpnIvTlaRDSM5xd0Pn3/j7SFQ+SWV+z iLPCqN2bW3OzNm+tX2qGsRTyM+iC7hyi+pgsd6iQG1CId5WMj3NjsCe7duOM8DR4 yD6gTqb/yC9CWd8dYPMKOsBMpWBPXC+obA9m4u37rfdTZA4zSiTI8jL1ov95/p1K plIqYtYkCGgrBdzaEwES/rxsGlejcXkb7Nk= -----END CERTIFICATE-----Generated at Mon Oct 20 05:47:11 2025 by rpki-client