$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/AB68CE76346511EDAC41E081C4F9AE02.roa File: AB68CE76346511EDAC41E081C4F9AE02.roa (raw, json) Hash identifier: ENwpRdEuucpLR199wMX1ovh0yufktlvsonosnrFa6n4= Subject key identifier: F4:78:17:A4:7B:0A:53:B3:CC:98:EC:90:79:A6:7B:C8:8C:20:85:CB Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 0278 Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/AB68CE76346511EDAC41E081C4F9AE02.roa Signing time: Wed 01 Oct 2025 02:28:44 +0000 ROA not before: Wed 01 Oct 2025 02:28:44 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 21734 IP address blocks: 103.99.4.0/24 maxlen: 24 103.99.5.0/24 maxlen: 24 103.99.6.0/24 maxlen: 24 103.99.7.0/24 maxlen: 24 103.196.140.0/24 maxlen: 24 103.196.141.0/24 maxlen: 24 103.196.142.0/24 maxlen: 24 103.196.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Oct 1 02:28:44 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68dc91dc-2505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:a9:db:18:05:2b:5e:85:b9:f6:b3:df:38: 87:77:18:fd:ba:b8:a5:05:35:8a:23:14:e9:e8:17: 93:5f:2d:ce:30:fb:37:98:73:15:8a:4b:84:29:2e: a1:b9:15:48:f4:30:f5:e1:fd:dc:25:08:31:f2:49: 72:af:9c:33:e6:13:19:22:6b:13:1b:4e:d3:10:d7: 0d:ee:f6:42:63:39:bf:0e:1b:0a:05:e2:29:73:a7: 30:7a:29:38:e5:36:00:74:bc:9a:5c:49:c9:6a:e3: 4a:f1:4f:41:b3:73:7a:b1:0c:b0:a3:09:fb:71:38: 9c:2b:4c:34:51:fe:3f:2d:2c:3c:59:d4:64:48:16: 65:ed:0f:63:5b:25:32:51:12:c6:19:6b:96:e8:e3: f7:42:be:5e:18:d7:7e:86:04:8c:4c:a1:16:66:70: 9d:89:62:5a:87:e3:16:8b:f9:67:91:43:2a:8e:b5: 78:e7:fe:5a:9b:90:62:04:04:3c:e6:e4:66:5b:75: 3c:9e:b8:33:ed:f8:d4:8e:9b:f6:f2:cf:22:50:d0: ec:86:e2:b2:e6:23:10:74:f4:bd:84:6e:18:79:7c: 4e:a9:67:30:33:44:00:7c:02:6c:fa:77:ca:79:c1: ea:dc:6c:93:48:ac:fb:fa:b5:4b:2b:24:e8:d9:a6: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:78:17:A4:7B:0A:53:B3:CC:98:EC:90:79:A6:7B:C8:8C:20:85:CB X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/AB68CE76346511EDAC41E081C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.4.0/22 103.196.140.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:53:84:8a:7c:c1:1f:2e:06:ab:0f:b8:81:b7:6b:5d:99:aa: e6:3f:4b:89:39:a5:20:e6:95:4a:ec:22:23:86:89:73:4d:46: b9:2f:6b:a9:01:91:c2:07:f1:48:87:36:aa:f6:86:81:8a:20: 34:d8:a4:16:94:60:0a:08:cd:1a:3b:4a:16:d2:81:47:13:9b: 4c:e9:6b:43:ad:99:16:63:18:24:47:b2:0b:d4:aa:97:8f:57: 47:20:71:93:de:9b:ec:55:10:bc:02:ec:72:48:95:10:14:fe: d5:1c:c6:b9:7a:67:3d:df:2a:a2:ae:a0:06:d4:16:59:12:c6: b8:d2:89:38:aa:0d:b5:63:83:51:5d:a8:ea:1e:8d:bc:67:55: 96:04:ac:db:e5:b9:59:71:37:75:93:b0:d0:7e:11:1b:60:1a: da:ef:1b:e6:f3:fb:3d:93:82:b3:50:ec:ca:4e:29:0e:3e:fa: c2:a9:3f:33:0c:27:da:06:43:ea:48:81:4f:52:ff:58:a8:d4: b2:00:6e:92:32:b0:ce:e1:fb:eb:d1:58:f7:87:fc:71:ca:76: e1:03:b5:29:25:d6:64:71:12:cc:67:cc:17:94:2a:a7:66:af: 1b:20:7e:e3:fd:b7:3b:eb:41:06:73:c0:e4:6b:9a:66:b0:a3: 4c:84:d3:9b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUxMDAxMDIyODQ0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjOTFkYy0yNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBmp2xgFK16Fufaz3ziHdxj9urilBTWKIxTp6BeTXy3OMPs3mHMVikuEKS6h uRVI9DD14f3cJQgx8klyr5wz5hMZImsTG07TENcN7vZCYzm/DhsKBeIpc6cweik4 5TYAdLyaXEnJauNK8U9Bs3N6sQywown7cTicK0w0Uf4/LSw8WdRkSBZl7Q9jWyUy URLGGWuW6OP3Qr5eGNd+hgSMTKEWZnCdiWJah+MWi/lnkUMqjrV45/5am5BiBAQ8 5uRmW3U8nrgz7fjUjpv28s8iUNDshuKy5iMQdPS9hG4YeXxOqWcwM0QAfAJs+nfK ecHq3GyTSKz7+rVLKyTo2abBpwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPR4F6R7 ClOzzJjskHmme8iMIIXLMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQ0N0YvRDVDRTYyNkEzNDYxMTFFRDlERUU4RTdBQzRGOUFFMDIvQUI2OENFNzYz NDY1MTFFREFDNDFFMDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnYwQDBAJnxIwwDQYJKoZIhvcNAQELBQADggEBAFxThIp8 wR8uBqsPuIG3a12ZquY/S4k5pSDmlUrsIiOGiXNNRrkva6kBkcIH8UiHNqr2hoGK IDTYpBaUYAoIzRo7ShbSgUcTm0zpa0OtmRZjGCRHsgvUqpePV0cgcZPem+xVELwC 7HJIlRAU/tUcxrl6Zz3fKqKuoAbUFlkSxrjSiTiqDbVjg1FdqOoejbxnVZYErNvl uVlxN3WTsNB+ERtgGtrvG+bz+z2TgrNQ7MpOKQ4++sKpPzMMJ9oGQ+pIgU9S/1io 1LIAbpIysM7h++vRWPeH/HHKduEDtSkl1mRxEsxnzBeUKqdmrxsgfuP9tzvrQQZz wORrmmawo0yE05s= -----END CERTIFICATE-----Generated at Mon Oct 20 00:22:39 2025 by rpki-client