$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa File: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (raw, json) Hash identifier: 1uyPmOr/eQOh4UTqlVB7yYLSOK5/gKpoGojSsMkgGQk= Subject key identifier: 67:41:EB:0A:12:FD:D7:44:C0:57:3E:0A:98:5B:F3:A4:AF:F8:45:99 Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 0252 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa Signing time: Mon 03 Nov 2025 02:16:24 +0000 ROA not before: Mon 03 Nov 2025 02:16:24 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136522 IP address blocks: 103.91.185.128/25 maxlen: 25 103.91.193.0/24 maxlen: 24 202.124.202.0/24 maxlen: 24 203.22.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Nov 3 02:16:24 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69081077-a39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:15:93:de:da:8f:38:15:9c:30:f1:4c:1a: a8:9b:ea:51:1c:be:eb:fd:fa:33:c5:8b:40:53:f0: 6d:38:cd:28:96:77:31:8c:52:46:79:af:0b:40:83: bc:96:d2:8a:a7:c4:d6:77:cd:5e:45:3d:7e:21:22: e5:8b:d6:98:88:a7:8e:a0:7a:fa:49:a3:bc:65:25: 17:36:26:c1:c6:5e:b4:1a:6d:66:9e:8a:93:22:7c: bb:2f:1c:bd:05:e7:14:5a:b8:e6:97:ec:f0:5b:aa: 46:29:c1:ef:d4:4a:55:cd:75:74:ea:b7:57:71:cf: 33:11:d3:af:b6:84:24:a9:e8:d3:45:b3:a7:ed:73: 17:c6:d2:c1:5a:3c:af:58:ac:9f:87:0a:b5:9d:05: a4:33:be:6a:00:7f:83:23:c2:57:2b:f5:97:36:f0: e5:fa:22:34:cb:d8:fd:c2:8c:d6:07:5e:05:45:5e: b8:c0:25:3a:54:bb:41:9d:56:4d:c4:67:36:58:3e: d1:e2:0c:84:0b:b6:ca:0b:3b:05:86:13:62:d7:f3: 86:c6:fb:36:0c:3e:70:99:5c:4e:4c:69:27:29:1f: ac:99:d7:4a:7b:a0:78:92:a2:bc:a1:0a:68:a7:14: 8c:f4:67:2d:09:c2:58:97:30:aa:56:a2:83:19:7a: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:41:EB:0A:12:FD:D7:44:C0:57:3E:0A:98:5B:F3:A4:AF:F8:45:99 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.185.128/25 103.91.193.0/24 202.124.202.0/24 203.22.208.0/22 Signature Algorithm: sha256WithRSAEncryption b1:ad:87:5a:0b:cf:6c:f0:d0:48:8d:56:f5:f4:70:9a:6f:ce: 33:86:2c:6e:8f:68:87:c2:74:92:8e:dd:16:3c:68:a2:2d:9e: a2:c4:ac:5d:5d:de:16:57:13:28:3e:f3:6d:79:75:43:d4:f3: 04:c6:fc:f5:7d:5a:bd:9d:54:95:58:6f:44:e1:e0:33:e4:73: a4:06:37:b9:f8:32:1f:8f:6f:60:52:ab:63:21:a3:78:77:39: 64:77:18:33:dc:6c:b6:1c:ac:bb:03:c0:52:c6:0a:8f:82:cf: 5b:d1:84:0d:6e:50:8a:33:af:32:c3:c6:cb:78:86:53:11:6e: 4e:27:10:f0:06:f2:a3:e3:21:de:5a:f6:67:ed:cc:d0:2c:2f: 97:10:39:bd:e4:b8:de:a7:cb:e7:f9:07:58:d0:17:f3:cc:04: d2:42:25:ab:5f:ac:a2:2f:6b:a7:65:01:e0:a5:49:e9:b2:40: 24:97:2a:77:5c:08:f7:d1:10:90:72:fd:5c:88:77:9e:7d:55: a1:ca:28:38:c1:e5:38:12:c4:6f:44:c5:d1:f6:09:26:ec:1a: 88:cc:04:fa:00:34:64:20:e5:a2:bd:2b:2b:d6:e4:0e:30:c9: c0:65:09:ad:0f:bb:b5:63:30:46:63:51:7d:f0:f1:19:db:5a: 9b:45:4e:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjUxMTAzMDIxNjI0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MTA3Ny1hMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsoVk97ajzgVnDDxTBqom+pRHL7r/fozxYtAU/BtOM0olncxjFJGea8LQIO8 ltKKp8TWd81eRT1+ISLli9aYiKeOoHr6SaO8ZSUXNibBxl60Gm1mnoqTIny7Lxy9 BecUWrjml+zwW6pGKcHv1EpVzXV06rdXcc8zEdOvtoQkqejTRbOn7XMXxtLBWjyv WKyfhwq1nQWkM75qAH+DI8JXK/WXNvDl+iI0y9j9wozWB14FRV64wCU6VLtBnVZN xGc2WD7R4gyEC7bKCzsFhhNi1/OGxvs2DD5wmVxOTGknKR+smddKe6B4kqK8oQpo pxSM9GctCcJYlzCqVqKDGXrwCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdB6woS /ddEwFc+Cphb86Sv+EWZMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUJEMjUvNTI3REQyNUE0RUFDMTFFREI0RjcxRTM4QzRGOUFFMDIvRTdGQzZBMUE0 RUFFMTFFREJGMEQ4MjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMB8EAgABMBkDBQdnW7mAAwQAZ1vBAwQAynzKAwQCyxbQMA0GCSqGSIb3DQEB CwUAA4IBAQCxrYdaC89s8NBIjVb19HCab84zhixuj2iHwnSSjt0WPGiiLZ6ixKxd Xd4WVxMoPvNteXVD1PMExvz1fVq9nVSVWG9E4eAz5HOkBje5+DIfj29gUqtjIaN4 dzlkdxgz3Gy2HKy7A8BSxgqPgs9b0YQNblCKM68yw8bLeIZTEW5OJxDwBvKj4yHe WvZn7czQLC+XEDm95Ljep8vn+QdY0BfzzATSQiWrX6yiL2unZQHgpUnpskAklyp3 XAj30RCQcv1ciHeefVWhyig4weU4EsRvRMXR9gkm7BqIzAT6ADRkIOWivSsr1uQO MMnAZQmtD7u1YzBGY1F98PEZ21qbRU46 -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:50 2025 by rpki-client