$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7A97D2F2174311EFAA4B5762C4F9AE02.roa File: 7A97D2F2174311EFAA4B5762C4F9AE02.roa (raw, json) Hash identifier: 2LU2kXGp5EWAt98D0+OWBHo4gLhboNnOR5ayZb+/nEs= Subject key identifier: 66:B2:39:98:0A:9D:19:DF:D0:F2:CD:D9:0F:C5:8D:8C:2D:45:1F:E5 Certificate issuer: /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Certificate serial: 01A9 Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7A97D2F2174311EFAA4B5762C4F9AE02.roa Signing time: Sun 05 Oct 2025 03:58:35 +0000 ROA not before: Sun 05 Oct 2025 03:58:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136557 IP address blocks: 103.72.62.0/24 maxlen: 24 103.72.63.0/24 maxlen: 24 2401:7fa0:1::/48 maxlen: 48 2401:7fa0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F715C, serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Validity Not Before: Oct 5 03:58:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e1ecea-1dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:73:6f:19:52:57:61:04:75:f5:4f:0c:e0: eb:5a:e2:f7:14:83:74:3f:9b:22:19:5c:99:ad:5e: e0:39:b0:06:ae:0b:52:60:f1:73:4c:06:56:ca:a4: 57:cd:55:5b:d3:cc:2c:10:54:65:30:a0:ee:f7:11: 6b:3b:02:83:af:af:3e:76:7d:ce:46:0b:75:8b:40: ae:8e:57:7d:6c:9c:85:fc:61:6c:89:93:c9:54:0f: 5b:de:15:82:0e:8e:fc:69:17:7c:e0:09:39:64:92: fd:74:00:2a:89:69:4b:4b:66:f0:41:7d:56:41:87: 87:a4:27:d0:76:d0:5a:86:60:e5:51:3e:3f:aa:fc: 6c:a5:f8:d8:08:19:3d:14:b8:44:bd:0d:22:49:05: 7d:be:f3:17:a5:bc:88:83:dd:9e:07:7f:78:f4:5f: 41:cb:06:89:4a:c5:c0:07:a4:fa:8d:bc:59:76:3a: 62:0d:5a:09:d0:44:ac:36:6d:e9:41:1d:55:b1:84: b3:c7:a4:69:21:93:e8:91:a1:28:d8:f2:19:74:e2: 49:84:95:95:75:99:3c:94:21:36:a7:f9:11:89:86: 55:b7:8f:80:af:c3:2e:1f:6f:ef:a6:e0:84:37:1b: 6a:cc:e4:b1:8b:67:f9:4e:d1:3b:42:a1:7a:3f:e0: ee:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B2:39:98:0A:9D:19:DF:D0:F2:CD:D9:0F:C5:8D:8C:2D:45:1F:E5 X509v3 Authority Key Identifier: keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/7A97D2F2174311EFAA4B5762C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.62.0/23 IPv6: 2401:7fa0:1::-2401:7fa0:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 73:53:fb:93:a9:7b:aa:51:21:27:f4:17:cd:6a:c4:99:2b:35: 9d:b2:5c:cf:8d:f3:38:ab:6e:11:4b:84:25:1f:af:32:ef:b7: 2c:ae:09:64:b5:44:c9:fc:2c:eb:b2:78:07:3e:bf:e4:e5:65: f8:83:8e:49:90:66:b2:0d:b3:d7:47:ba:cf:32:6e:b4:90:4d: 67:97:d8:b8:81:3e:1d:85:34:a3:e8:cf:6f:8c:b6:94:9c:1e: d0:99:e9:62:d0:97:1b:01:df:6b:85:79:9c:b1:ab:26:33:85: 0e:7b:59:8e:28:4b:d1:e9:10:41:50:46:b6:3d:56:d4:f9:4c: 3e:2b:b1:e1:59:61:75:46:c4:bb:46:34:6f:2a:5e:2c:26:97: 9b:a6:a3:42:6e:40:8b:fd:ab:53:c4:ba:68:c6:c8:38:da:df: 7f:a3:cd:cd:28:2c:69:ba:b4:54:70:13:50:24:24:c4:10:47: b9:6d:77:8c:cd:3c:23:1e:07:86:ce:ad:88:10:f6:cb:e1:b5: 60:a1:81:58:ac:86:4e:28:f8:60:4b:81:de:f5:78:03:ac:c3: 81:be:0b:88:92:01:6b:50:6e:b0:a3:9b:97:19:30:bd:83:f3: f0:dc:52:da:d7:a4:3b:90:2e:60:2b:a6:a0:41:0c:8c:98:e7: 6a:f3:eb:84 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNUMxMTAvBgNVBAUTKEU3NzEzMkU0RkVBRDA0RUVENEZFOTQ2RDYwN0EwRENC NTdBNDIwNjUwHhcNMjUxMDA1MDM1ODM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxZWNlYS0xZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxJzbxlSV2EEdfVPDODrWuL3FIN0P5siGVyZrV7gObAGrgtSYPFzTAZWyqRX zVVb08wsEFRlMKDu9xFrOwKDr68+dn3ORgt1i0Cujld9bJyF/GFsiZPJVA9b3hWC Do78aRd84Ak5ZJL9dAAqiWlLS2bwQX1WQYeHpCfQdtBahmDlUT4/qvxspfjYCBk9 FLhEvQ0iSQV9vvMXpbyIg92eB3949F9BywaJSsXAB6T6jbxZdjpiDVoJ0ESsNm3p QR1VsYSzx6RpIZPokaEo2PIZdOJJhJWVdZk8lCE2p/kRiYZVt4+Ar8MuH2/vpuCE NxtqzOSxi2f5TtE7QqF6P+DuoQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFGayOZgK nRnf0PLN2Q/FjYwtRR/lMB8GA1UdIwQYMBaAFOdxMuT+rQTu1P6UbWB6DctXpCBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE1Qy81RjA3MjYzODRG MzMxMUVFOTY2RTBGNzJDNEY5QUUwMi81M0V5NVA2dEJPN1VfcFJ0WUhvTnkxZWtJ R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzRXk1UDZ0Qk83VV9wUnRZSG9OeTFla0lHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjcxNUMvNUYwNzI2Mzg0RjMzMTFFRTk2NkUwRjcyQzRGOUFFMDIvN0E5N0QyRjIx NzQzMTFFRkFBNEI1NzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMAwEAgABMAYDBAFnSD4wGgQCAAIwFDASAwcAJAF/oAABAwcAJAF/oAACMA0G CSqGSIb3DQEBCwUAA4IBAQBzU/uTqXuqUSEn9BfNasSZKzWdslzPjfM4q24RS4Ql H68y77csrglktUTJ/CzrsngHPr/k5WX4g45JkGayDbPXR7rPMm60kE1nl9i4gT4d hTSj6M9vjLaUnB7Qmeli0JcbAd9rhXmcsasmM4UOe1mOKEvR6RBBUEa2PVbU+Uw+ K7HhWWF1RsS7RjRvKl4sJpebpqNCbkCL/atTxLpoxsg42t9/o83NKCxpurRUcBNQ JCTEEEe5bXeMzTwjHgeGzq2IEPbL4bVgoYFYrIZOKPhgS4He9XgDrMOBvguIkgFr UG6wo5uXGTC9g/Pw3FLa16Q7kC5gK6agQQyMmOdq8+uE -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:20 2025 by rpki-client