$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/EBD94A14049A11EBB73A8663C4F9AE02.roa File: EBD94A14049A11EBB73A8663C4F9AE02.roa (raw, json) Hash identifier: ZknxYLcseYgQHA8GKWCkWbIGR6Obm6R2RGgZoA7El3Q= Subject key identifier: B6:28:F4:2E:A7:19:40:36:1F:19:EB:4F:9E:21:C0:BA:FA:4E:F7:FE Certificate issuer: /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Certificate serial: 07C7 Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/EBD94A14049A11EBB73A8663C4F9AE02.roa Signing time: Fri 04 Jul 2025 22:02:01 +0000 ROA not before: Fri 04 Jul 2025 22:02:01 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136900 IP address blocks: 103.60.20.0/24 maxlen: 24 103.126.12.0/22 maxlen: 22 103.126.12.0/24 maxlen: 24 103.126.13.0/24 maxlen: 24 103.126.14.0/24 maxlen: 24 103.126.15.0/24 maxlen: 24 103.151.78.0/24 maxlen: 24 2001:df4:c500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C53, serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Validity Not Before: Jul 4 22:02:01 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68684f58-121a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:28:56:b2:5e:24:3a:32:a5:4f:be:1e:dd:fc: da:f7:ca:e9:5d:7c:6c:d9:b1:8f:0b:b4:b1:85:54: 26:61:91:54:b9:e7:91:86:9b:0e:9e:a6:ef:01:34: 48:c9:3c:8f:c3:3f:5a:d7:ca:8c:49:84:23:85:cc: aa:83:24:5e:42:29:1c:3c:69:1a:aa:82:19:32:91: ca:80:51:99:2d:4f:d5:23:d2:48:ce:7f:fb:8e:d1: 00:45:ac:e3:02:f5:4a:74:b2:2b:67:a8:37:36:34: 77:27:b8:cf:59:b5:0a:7b:df:e3:fc:d2:86:7a:fd: 6b:1b:f6:49:c1:cd:8c:6d:d0:c1:9f:ac:be:19:8d: b2:f9:4f:f7:bd:b8:13:63:13:ab:b7:06:cc:7f:fa: 01:b9:7b:34:a4:c5:4a:af:25:84:1d:f7:7c:34:a7: 7f:6a:bf:77:ba:59:ea:c4:87:57:41:36:8d:05:bc: d7:04:fa:19:db:db:67:62:d5:a1:be:92:89:76:af: 69:29:02:f4:d4:52:c2:f2:34:10:96:73:16:cd:cb: ff:ad:e9:67:53:b5:74:e8:f5:c1:40:09:fe:36:aa: f0:bc:60:7a:49:e9:62:54:27:b2:60:c1:14:9d:b7: 8d:65:95:d2:94:27:aa:20:af:aa:fd:a2:22:fa:82: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:28:F4:2E:A7:19:40:36:1F:19:EB:4F:9E:21:C0:BA:FA:4E:F7:FE X509v3 Authority Key Identifier: keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/EBD94A14049A11EBB73A8663C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.20.0/24 103.126.12.0/22 103.151.78.0/24 IPv6: 2001:df4:c500::/48 Signature Algorithm: sha256WithRSAEncryption 4b:33:ce:42:df:fa:8b:56:32:03:88:02:d0:f8:c9:5b:bd:f1: 35:40:fa:f7:ec:e5:37:63:8c:a0:5d:ca:1a:92:47:cf:6a:39: db:69:eb:80:49:ed:58:55:02:02:88:92:0d:1a:a7:e6:af:f6: cd:5a:e7:f0:04:ce:fd:0c:9b:2f:de:db:fa:51:85:15:e4:c8: c0:8e:55:78:ab:ec:d0:d2:32:f6:f3:a1:d0:66:8e:45:4f:b8: 4c:ae:cd:3b:fd:ae:1f:f5:cf:2c:a3:59:9a:cc:50:72:cd:3c: 03:0a:13:f4:b1:0c:a7:12:7e:47:8a:aa:b1:f1:aa:8d:26:4c: 41:24:30:19:82:58:2b:ea:4c:49:62:11:d5:5a:a9:27:f8:f2: aa:e3:cb:f2:ec:24:07:9d:3a:8a:64:0a:25:04:89:dc:91:6a: 71:49:61:be:1f:4b:ea:3e:bc:91:04:9f:8b:43:57:4b:11:67: c9:6b:63:c2:11:50:df:05:8d:35:cc:e4:a1:ec:df:b4:fe:09: cf:b5:50:88:23:3a:7d:6d:b4:7d:83:86:97:e2:1e:2a:e2:6e: 26:b5:e6:a7:73:f2:fc:02:32:e6:11:92:10:34:6d:6f:d8:8d: eb:e8:f5:11:e7:23:f3:c3:04:d4:8d:6d:83:f8:c2:aa:0b:cd: 38:9f:ee:be -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNTMxMTAvBgNVBAUTKEUzRUIyNzlFRDAxRTgzOUVGMjQ1ODA2RTA0NTFGQzE1 NTAwOTI2QTIwHhcNMjUwNzA0MjIwMjAxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NGY1OC0xMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyShWsl4kOjKlT74e3fza98rpXXxs2bGPC7SxhVQmYZFUueeRhpsOnqbvATRI yTyPwz9a18qMSYQjhcyqgyReQikcPGkaqoIZMpHKgFGZLU/VI9JIzn/7jtEARazj AvVKdLIrZ6g3NjR3J7jPWbUKe9/j/NKGev1rG/ZJwc2MbdDBn6y+GY2y+U/3vbgT YxOrtwbMf/oBuXs0pMVKryWEHfd8NKd/ar93ulnqxIdXQTaNBbzXBPoZ29tnYtWh vpKJdq9pKQL01FLC8jQQlnMWzcv/relnU7V06PXBQAn+NqrwvGB6SeliVCeyYMEU nbeNZZXSlCeqIK+q/aIi+oInuwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFLYo9C6n GUA2HxnrT54hwLr6Tvf+MB8GA1UdIwQYMBaAFOPrJ57QHoOe8kWAbgRR/BVQCSai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM1My9FNzhFNDE2RTA0 OTgxMUVCQjFGRUU4NURDNEY5QUUwMi80LXNubnRBZWc1N3lSWUJ1QkZIOEZWQUpK cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtc25udEFlZzU3eVJZQnVCRkg4RlZBSkpxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJDNTMvRTc4RTQxNkUwNDk4MTFFQkIxRkVFODVEQzRGOUFFMDIvRUJEOTRBMTQw NDlBMTFFQkI3M0E4NjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABnPBQDBAJnfgwDBABnl04wDwQCAAIwCQMHACABDfTFADAN BgkqhkiG9w0BAQsFAAOCAQEASzPOQt/6i1YyA4gC0PjJW73xNUD69+zlN2OMoF3K GpJHz2o522nrgEntWFUCAoiSDRqn5q/2zVrn8ATO/QybL97b+lGFFeTIwI5VeKvs 0NIy9vOh0GaORU+4TK7NO/2uH/XPLKNZmsxQcs08AwoT9LEMpxJ+R4qqsfGqjSZM QSQwGYJYK+pMSWIR1VqpJ/jyquPL8uwkB506imQKJQSJ3JFqcUlhvh9L6j68kQSf i0NXSxFnyWtjwhFQ3wWNNczkoezftP4Jz7VQiCM6fW20fYOGl+IeKuJuJrXmp3Py /AIy5hGSEDRtb9iN6+j1Eecj88ME1I1tg/jCqgvNOJ/uvg== -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:54 2025 by rpki-client