$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/60DA0694D9E111EA82120960C4F9AE02.roa File: 60DA0694D9E111EA82120960C4F9AE02.roa (raw, json) Hash identifier: SQf0F6/ovS4nuhxwCqP0bzz663+tFfshESdr8FqByA0= Subject key identifier: 04:05:27:5C:E7:FB:32:F3:A7:8E:4C:C2:24:2E:17:47:53:28:42:F1 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 3506 Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/60DA0694D9E111EA82120960C4F9AE02.roa Signing time: Thu 02 Oct 2025 15:11:22 +0000 ROA not before: Thu 02 Oct 2025 15:11:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 135168 IP address blocks: 103.136.122.0/24 maxlen: 24 103.136.123.0/24 maxlen: 24 103.195.14.0/24 maxlen: 24 103.195.15.0/24 maxlen: 24 2404:8e80:1::/48 maxlen: 48 2404:8e80:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13574 (0x3506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: Oct 2 15:11:22 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68de961a-9907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:3b:d2:6d:dc:03:f8:fa:43:62:3b:9f:14: 64:ed:72:08:b5:bd:aa:3e:66:9e:7d:75:ee:97:f0: 7c:d3:d4:8b:85:1a:25:fa:1b:9c:ba:8e:bb:c1:e2: 4a:5f:6e:91:17:bf:d4:37:7b:9b:6a:6d:36:2d:c7: 05:7f:bb:1b:bd:99:51:dd:a3:8d:71:36:bb:c6:02: 3c:af:cf:03:48:61:cc:ba:6d:57:38:08:b7:22:1a: b4:3d:7d:2d:f4:db:17:e3:17:0f:61:b0:f3:fa:1b: 85:67:6e:f7:62:ee:06:ad:e7:46:d5:f8:67:4b:06: 23:b4:7e:ec:e0:b3:21:60:42:51:c9:92:d4:16:5f: 36:d0:12:f3:33:10:d9:a4:10:71:2e:34:be:bf:f1: d7:bf:b9:da:92:67:5e:91:57:3a:8d:56:06:57:5f: 22:1a:11:ce:6c:76:5e:78:d3:dd:c3:3d:aa:06:57: ea:25:cf:01:37:3c:ff:14:2d:72:ab:59:78:42:bc: 94:75:b9:17:02:fe:0e:a0:63:a2:ad:91:b2:38:88: 42:0e:8c:24:72:de:9a:0f:a4:ba:d1:8b:7e:ed:84: 16:b9:56:79:94:12:09:bf:06:ca:87:0e:b3:b6:41: 6b:01:b9:c1:0c:f5:53:9a:95:ec:17:a6:d3:98:44: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:05:27:5C:E7:FB:32:F3:A7:8E:4C:C2:24:2E:17:47:53:28:42:F1 X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/60DA0694D9E111EA82120960C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.122.0/23 103.195.14.0/23 IPv6: 2404:8e80:1::/48 2404:8e80:3::/48 Signature Algorithm: sha256WithRSAEncryption 32:ac:d5:f9:17:6c:70:a9:70:b9:f6:43:b7:b7:74:58:94:14: 55:b9:2b:d8:ba:57:ed:b6:2a:cf:02:b8:8d:5f:b6:61:cb:c0: 85:69:7c:5a:04:27:dd:1e:e8:f2:ef:d5:bd:30:15:ef:41:a8: 6f:c3:21:9e:ac:00:23:fb:4c:c5:6e:ba:4b:af:44:f9:76:af: 49:73:4a:d0:e9:15:84:bf:07:35:b5:b6:92:0d:72:b8:d0:14: 4d:e3:30:86:98:aa:f4:74:37:23:f1:9d:72:42:31:9d:3e:4a: 6e:5f:26:e0:59:80:5e:c9:55:94:e6:75:19:e5:f3:5f:da:25: a6:92:fc:05:56:1e:89:f1:59:2a:66:f3:05:b8:5d:0f:57:95: c8:49:89:3c:55:42:7a:bd:77:2f:e2:87:89:6a:fc:26:61:e6: 3e:bd:d1:f5:b8:51:a8:dc:b5:c0:8e:9b:e0:1b:13:bd:69:bb: 28:83:bb:92:b2:ff:44:07:27:4e:9b:b5:91:74:02:9b:77:0f: 0a:cd:fc:f9:41:9f:84:b2:fd:22:fa:f8:af:7e:a5:24:b1:7b: d4:fb:e9:17:13:17:48:5e:f3:71:a0:ec:48:66:c2:bd:83:01: 90:6f:58:8f:09:63:0c:cb:3c:09:50:2b:9f:51:3c:af:2e:6b: db:0f:07:08 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICNQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjUxMDAyMTUxMTIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlOTYxYS05OTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIU70m3cA/j6Q2I7nxRk7XIItb2qPmaefXXul/B809SLhRol+hucuo67weJK X26RF7/UN3ubam02LccFf7sbvZlR3aONcTa7xgI8r88DSGHMum1XOAi3Ihq0PX0t 9NsX4xcPYbDz+huFZ273Yu4GredG1fhnSwYjtH7s4LMhYEJRyZLUFl820BLzMxDZ pBBxLjS+v/HXv7nakmdekVc6jVYGV18iGhHObHZeeNPdwz2qBlfqJc8BNzz/FC1y q1l4QryUdbkXAv4OoGOirZGyOIhCDowkct6aD6S60Yt+7YQWuVZ5lBIJvwbKhw6z tkFrAbnBDPVTmpXsF6bTmESHTwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFAQFJ1zn +zLzp45MwiQuF0dTKELxMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVFQjgvOEUwRjJDQjYxREExMTFFMkI5MDZCQzkzMDhCMDJDRDIvNjBEQTA2OTRE OUUxMTFFQTgyMTIwOTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBAFniHoDBAFnww4wGAQCAAIwEgMHACQEjoAAAQMHACQEjoAA AzANBgkqhkiG9w0BAQsFAAOCAQEAMqzV+RdscKlwufZDt7d0WJQUVbkr2LpX7bYq zwK4jV+2YcvAhWl8WgQn3R7o8u/VvTAV70Gob8MhnqwAI/tMxW66S69E+XavSXNK 0OkVhL8HNbW2kg1yuNAUTeMwhpiq9HQ3I/GdckIxnT5Kbl8m4FmAXslVlOZ1GeXz X9olppL8BVYeifFZKmbzBbhdD1eVyEmJPFVCer13L+KHiWr8JmHmPr3R9bhRqNy1 wI6b4BsTvWm7KIO7krL/RAcnTpu1kXQCm3cPCs38+UGfhLL9Ivr4r36lJLF71Pvp FxMXSF7zcaDsSGbCvYMBkG9YjwljDMs8CVArn1E8ry5r2w8HCA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:46:43 2025 by rpki-client