$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/658C5D24A76B11F0A66F9138C4F9AE02.roa File: 658C5D24A76B11F0A66F9138C4F9AE02.roa (raw, json) Hash identifier: S630ws9prbiv+X73lkiriOtUneLfFYuwhIIx2uOXGSo= Subject key identifier: 29:D7:4B:26:28:9C:72:D1:32:74:F9:C5:16:0E:0F:EE:80:D7:75:64 Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 09E2 Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/658C5D24A76B11F0A66F9138C4F9AE02.roa Signing time: Sun 12 Oct 2025 13:00:16 +0000 ROA not before: Sun 12 Oct 2025 13:00:16 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137868 IP address blocks: 103.151.60.0/24 maxlen: 24 2001:df3:ab80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2530 (0x9e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Oct 12 13:00:16 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68eba65f-996a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:aa:fd:11:91:ec:17:14:f8:2b:2b:02:61: 70:f5:9f:c0:e6:ab:e9:30:b3:d2:7d:05:5c:43:f1: 0b:4b:a7:2c:e6:12:71:bb:b8:7a:a3:60:93:44:17: 1e:e9:99:55:50:55:e5:53:1c:70:f7:24:af:bf:e1: d1:25:4a:9e:32:76:bb:fb:41:cf:3e:c5:d6:f4:3c: 89:b4:f8:ca:a6:3c:c6:2f:dc:98:b6:26:3f:6d:e8: 23:4e:e3:76:bc:77:a1:0b:36:5f:70:5b:e1:14:b3: 3c:4e:b2:30:f7:9b:29:06:82:3f:55:28:86:e2:77: 55:e2:43:03:3b:20:9d:77:a7:de:68:7f:18:10:72: 7f:cb:b2:c8:3b:d8:84:93:72:96:46:ea:03:ac:f3: 5a:88:0d:4b:d5:a3:f4:8a:6b:9c:40:dd:75:b8:c0: 6a:aa:f9:aa:99:2c:1c:b2:9b:bf:e6:19:4e:ec:b5: 5b:43:92:5d:8d:6e:82:aa:4f:87:59:0b:7d:2a:05: ae:bb:32:b1:f9:dd:63:c8:2a:41:a9:f0:8f:2e:f3: 26:b2:0f:b9:d4:5c:74:22:09:81:40:1b:49:f0:9c: 74:04:4f:5a:2f:76:89:0e:55:90:c2:0a:8c:6c:a3: 8b:cf:4b:22:d7:69:26:06:1e:a5:c7:2b:bd:20:65: 29:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D7:4B:26:28:9C:72:D1:32:74:F9:C5:16:0E:0F:EE:80:D7:75:64 X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/658C5D24A76B11F0A66F9138C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.60.0/24 IPv6: 2001:df3:ab80::/48 Signature Algorithm: sha256WithRSAEncryption 3a:be:8b:86:1b:a2:73:7a:6d:5b:2d:f1:ba:2c:79:f5:b7:ea: 48:b1:36:19:a2:a5:a1:f2:8b:02:71:28:5a:ca:f5:27:0a:88: 1a:f9:48:bd:e5:fa:73:80:6b:6f:cc:ae:1b:a7:26:26:a9:44: 5b:18:cb:84:ae:f5:49:05:df:f6:ca:7c:15:6e:c4:58:f3:13: 7e:70:30:d1:79:9f:b3:bb:d1:80:5f:e5:e2:a7:c1:a3:88:1b: e0:0c:a8:8c:8d:6e:a4:42:d2:29:7a:f8:d1:ff:0a:8d:39:3a: 33:e4:a8:05:af:5d:df:0f:31:55:41:dd:b9:ec:16:39:ec:92: 8e:41:44:09:26:3b:32:46:96:7d:21:c6:67:0f:ec:bc:d6:f1: 51:14:72:89:00:7a:50:be:c3:1f:22:57:34:6f:ae:d4:79:d2: 49:28:af:6d:b0:03:81:4f:60:46:c6:4d:e7:18:00:64:05:90: 4f:a8:9f:8a:f7:65:9a:46:8c:e3:b7:aa:0e:c1:b3:01:55:b5: 9f:64:37:f5:b9:9e:43:eb:4c:d5:6b:11:4f:16:ef:9e:1e:25: 43:46:ac:b9:d0:8a:15:1e:5f:57:33:9e:eb:62:50:98:19:67: c6:bb:3f:a6:05:7a:80:78:5c:2f:dc:45:f8:21:6e:cf:37:66: e4:09:2c:e0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjUxMDEyMTMwMDE2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGViYTY1Zi05OTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ciq/RGR7BcU+CsrAmFw9Z/A5qvpMLPSfQVcQ/ELS6cs5hJxu7h6o2CTRBce 6ZlVUFXlUxxw9ySvv+HRJUqeMna7+0HPPsXW9DyJtPjKpjzGL9yYtiY/begjTuN2 vHehCzZfcFvhFLM8TrIw95spBoI/VSiG4ndV4kMDOyCdd6feaH8YEHJ/y7LIO9iE k3KWRuoDrPNaiA1L1aP0imucQN11uMBqqvmqmSwcspu/5hlO7LVbQ5JdjW6Cqk+H WQt9KgWuuzKx+d1jyCpBqfCPLvMmsg+51Fx0IgmBQBtJ8Jx0BE9aL3aJDlWQwgqM bKOLz0si12kmBh6lxyu9IGUpewIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCnXSyYo nHLRMnT5xRYOD+6A13VkMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVDNzAvMjNBMEFDMDY5MTA3MTFFQUEzRTkzQTVCQzRGOUFFMDIvNjU4QzVEMjRB NzZCMTFGMEE2NkY5MTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnlzwwDwQCAAIwCQMHACABDfOrgDANBgkqhkiG9w0BAQsF AAOCAQEAOr6Lhhuic3ptWy3xuix59bfqSLE2GaKlofKLAnEoWsr1JwqIGvlIveX6 c4Brb8yuG6cmJqlEWxjLhK71SQXf9sp8FW7EWPMTfnAw0Xmfs7vRgF/l4qfBo4gb 4AyojI1upELSKXr40f8KjTk6M+SoBa9d3w8xVUHduewWOeySjkFECSY7MkaWfSHG Zw/svNbxURRyiQB6UL7DHyJXNG+u1HnSSSivbbADgU9gRsZN5xgAZAWQT6ifivdl mkaM47eqDsGzAVW1n2Q39bmeQ+tM1WsRTxbvnh4lQ0asudCKFR5fVzOe62JQmBln xrs/pgV6gHhcL9xF+CFuzzdm5Aks4A== -----END CERTIFICATE-----Generated at Thu Oct 23 08:25:25 2025 by rpki-client