$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/E036A33A724711EBAC3F0059C4F9AE02.roa File: E036A33A724711EBAC3F0059C4F9AE02.roa (raw, json) Hash identifier: 13smEXxrx9J8FfXsUtzorOgdvJa8iZ3quk2fsse4QXw= Subject key identifier: 23:9B:5B:A5:AB:DA:DA:84:61:A0:52:8D:1B:D2:D7:C2:F4:72:DC:F7 Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Certificate serial: 06DA Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/E036A33A724711EBAC3F0059C4F9AE02.roa Signing time: Fri 24 Oct 2025 23:11:26 +0000 ROA not before: Fri 24 Oct 2025 23:11:26 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132347 IP address blocks: 103.76.144.0/22 maxlen: 22 103.76.144.0/24 maxlen: 24 103.76.145.0/24 maxlen: 24 103.76.146.0/24 maxlen: 24 103.76.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Validity Not Before: Oct 24 23:11:26 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68fc079d-e8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:b0:0d:01:81:d3:12:cb:32:d5:f5:31:84: b8:0c:5f:08:6e:33:5c:91:11:fc:db:a3:c6:5d:64: 7f:d2:3f:30:ff:10:2c:18:04:6f:ff:60:50:f6:5c: 71:f6:78:3e:5e:32:6c:d2:d3:95:bb:ce:49:a8:9c: 22:3e:aa:0c:a9:d8:ba:3f:f9:35:b7:21:87:c0:57: 32:5d:b0:ce:7e:bf:fb:51:36:7a:da:46:20:d4:7d: 36:9d:df:09:18:fb:31:1c:70:4e:a9:00:76:0f:b8: 7b:e1:e2:d4:cf:08:e1:72:35:3f:e1:1a:3a:5f:3d: 8c:1f:35:8f:da:32:04:8e:68:69:7e:34:f0:85:b6: 1d:40:3d:62:b9:e6:ac:ee:19:d7:a4:3f:e7:94:2f: 60:d7:f2:b6:ae:7c:11:4f:da:8f:66:ac:06:55:e0: 22:a6:5c:19:2f:a1:bb:a5:61:b3:df:13:30:5e:00: 53:74:1e:a7:13:46:b2:e4:e6:d9:39:27:f9:7f:96: de:2b:f8:cf:d2:22:8a:2a:10:45:ac:2f:cb:57:55: 7b:0a:ae:5c:d3:ed:0e:52:e9:e3:60:25:bd:e8:5c: e7:da:67:86:e4:40:cc:70:4a:24:ba:7a:f5:cd:5e: 72:8f:d1:63:0a:18:68:2e:65:81:eb:41:96:d2:e5: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9B:5B:A5:AB:DA:DA:84:61:A0:52:8D:1B:D2:D7:C2:F4:72:DC:F7 X509v3 Authority Key Identifier: keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/E036A33A724711EBAC3F0059C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.144.0/22 Signature Algorithm: sha256WithRSAEncryption 70:e3:f8:e8:06:78:09:3e:6e:b8:aa:2f:3a:88:4e:df:3c:fc: 00:34:08:07:ad:89:f5:51:f0:aa:c4:0d:e9:50:aa:5a:b5:76: 82:d8:97:5e:e5:05:78:0e:56:1b:a7:0c:27:da:1a:1f:a4:00: 02:a7:ff:9a:20:4e:47:05:c3:e7:21:80:ec:2b:0e:8f:33:90: a0:6d:01:65:37:b4:83:7f:b7:c7:15:7b:4e:a6:cb:04:6f:ec: 53:6f:48:b8:7e:c4:17:2b:93:ad:ea:e9:6f:85:60:7b:15:9c: 8b:80:99:5e:be:fd:b4:0b:95:b7:e7:4e:4b:e3:96:4c:97:af: c0:08:2e:55:8a:d6:8c:4c:3d:28:45:79:70:df:31:01:a0:49: 65:92:19:9f:3b:bc:43:a5:c1:64:11:6e:e4:2c:04:41:4c:f1: ba:71:f4:b0:85:34:14:e5:95:75:c9:40:fb:64:48:cd:00:59: ed:35:35:8c:9a:c3:b6:ed:b0:64:2c:8d:5b:ae:1e:c2:85:8f: 04:b8:3f:ec:2d:aa:01:b9:34:c9:28:d9:07:c8:da:47:e7:02: 85:a7:52:d9:d1:95:0f:9d:26:1c:ff:34:29:58:97:14:c0:f1: 08:ed:d2:e3:d0:47:c5:a6:c3:21:32:e2:37:36:20:ee:c9:41: ce:8b:ba:2c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1 MzM3Q0E0ODUwHhcNMjUxMDI0MjMxMTI2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZjMDc5ZC1lOGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJuwDQGB0xLLMtX1MYS4DF8IbjNckRH826PGXWR/0j8w/xAsGARv/2BQ9lxx 9ng+XjJs0tOVu85JqJwiPqoMqdi6P/k1tyGHwFcyXbDOfr/7UTZ62kYg1H02nd8J GPsxHHBOqQB2D7h74eLUzwjhcjU/4Ro6Xz2MHzWP2jIEjmhpfjTwhbYdQD1iueas 7hnXpD/nlC9g1/K2rnwRT9qPZqwGVeAiplwZL6G7pWGz3xMwXgBTdB6nE0ay5ObZ OSf5f5beK/jP0iKKKhBFrC/LV1V7Cq5c0+0OUunjYCW96Fzn2meG5EDMcEokunr1 zV5yj9FjChhoLmWB60GW0uWQGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCObW6Wr 2tqEYaBSjRvS18L0ctz3MB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUUzMDkvQkRCNDJGMzY3MjQ2MTFFQjhBRUREQzU4QzRGOUFFMDIvRTAzNkEzM0E3 MjQ3MTFFQkFDM0YwMDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnTJAwDQYJKoZIhvcNAQELBQADggEBAHDj+OgGeAk+briq LzqITt88/AA0CAetifVR8KrEDelQqlq1doLYl17lBXgOVhunDCfaGh+kAAKn/5og TkcFw+chgOwrDo8zkKBtAWU3tIN/t8cVe06mywRv7FNvSLh+xBcrk63q6W+FYHsV nIuAmV6+/bQLlbfnTkvjlkyXr8AILlWK1oxMPShFeXDfMQGgSWWSGZ87vEOlwWQR buQsBEFM8bpx9LCFNBTllXXJQPtkSM0AWe01NYyaw7btsGQsjVuuHsKFjwS4P+wt qgG5NMko2QfI2kfnAoWnUtnRlQ+dJhz/NClYlxTA8Qjt0uPQR8WmwyEy4jc2IO7J Qc6Luiw= -----END CERTIFICATE-----Generated at Tue Nov 4 13:18:09 2025 by rpki-client