$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E7676A04A13B11F0B587F733C4F9AE02.roa File: E7676A04A13B11F0B587F733C4F9AE02.roa (raw, json) Hash identifier: oawqQy1Pv+77G3a1CKrM3zleGZuJqEu++rzrzzXvl0g= Subject key identifier: AB:55:72:F2:A0:19:B8:0E:4B:D5:4B:E8:E9:8B:F0:F3:52:D4:51:47 Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Certificate serial: 050D Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E7676A04A13B11F0B587F733C4F9AE02.roa Signing time: Thu 23 Oct 2025 01:13:45 +0000 ROA not before: Thu 23 Oct 2025 01:13:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 147175 IP address blocks: 103.174.22.0/23 maxlen: 23 103.174.23.0/24 maxlen: 24 2001:df7:b380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 23:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490 Validity Not Before: Oct 23 01:13:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f98148-877e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:69:9b:7c:b8:57:cb:fc:18:c1:44:d2:a9: 39:31:fc:9a:87:af:b2:73:83:b4:dd:76:cb:3d:2b: 7d:88:c8:b7:c7:ca:ef:ba:f5:1e:55:60:fe:56:c7: f8:e8:8b:27:ff:c5:38:64:06:3b:26:1b:32:77:eb: 0c:18:fe:29:48:44:d4:7c:08:21:bf:c9:51:15:30: 2f:2b:6d:fa:ae:df:d9:2d:74:c6:50:ee:fc:33:77: b4:59:5f:f7:e2:4c:8b:53:47:9d:30:3e:36:bd:b1: 79:19:c7:43:e5:e6:cb:46:ad:ca:a4:81:46:0c:8c: 54:cd:65:4a:a1:d2:3e:f8:72:a7:fa:e6:13:62:3c: 45:c6:1b:d9:97:08:40:80:f6:6b:17:89:70:34:a9: 5f:80:1a:81:05:92:9e:eb:b2:2f:81:7f:3b:00:0b: 08:78:ad:dd:3f:c5:c8:66:31:da:81:16:cb:f1:a0: 62:20:9b:43:5c:3c:2c:6e:98:00:13:6d:3d:dd:86: de:5b:52:3c:ec:d7:90:15:e9:83:eb:6d:7c:28:a8: f2:a5:95:16:f5:ac:92:7a:34:a9:83:e9:ed:b3:f8: 99:e7:20:78:6e:c4:71:bd:73:12:0c:97:c7:6a:50: 60:82:ec:11:9a:bf:ed:6d:9f:30:dd:04:b4:18:53: 00:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:55:72:F2:A0:19:B8:0E:4B:D5:4B:E8:E9:8B:F0:F3:52:D4:51:47 X509v3 Authority Key Identifier: keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E7676A04A13B11F0B587F733C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.22.0/23 IPv6: 2001:df7:b380::/48 Signature Algorithm: sha256WithRSAEncryption c3:58:7e:9b:8f:ef:a2:ac:93:52:e7:e5:32:b1:2a:5b:1a:99: 75:de:0a:46:ef:e5:76:d3:f5:81:8d:9b:60:4a:24:75:2c:32: 72:9d:23:6b:76:0f:fb:60:bd:05:50:78:7e:9e:30:e6:1b:83: 9d:b9:a5:d2:3c:6e:c0:ba:ed:00:11:3e:95:54:7a:47:80:b4: 19:57:34:98:3d:5a:77:ff:50:f7:6c:f7:e9:c3:ac:39:f3:2c: 19:cc:c1:c1:16:82:f0:fe:04:97:8d:0a:85:e4:1f:30:fc:ed: 5f:05:2c:cf:72:fc:ba:0e:42:a5:1c:73:1e:4e:df:e0:45:4f: 8f:0e:6f:53:2f:d8:3d:e8:d4:ca:67:86:22:46:a1:d0:a8:3e: ba:96:8c:d7:fb:91:8c:76:8f:83:c6:e3:87:0d:48:32:21:9e: 55:fd:9e:95:f9:98:bb:4b:04:e5:84:59:d8:2a:41:35:fe:e7: cd:9c:96:fe:fd:06:49:be:2e:16:68:ed:9d:18:0d:5c:e6:be: 8f:f6:29:fb:1b:23:bc:13:6f:15:23:57:73:1c:92:37:d3:9b: 00:52:ce:62:1d:e1:59:5a:42:ed:f2:6a:27:87:a3:90:7f:e8: 63:0c:6e:f0:ca:c1:07:f2:d1:ca:91:07:8f:54:25:45:ba:5c: 5d:ea:a3:09 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyODgxMTAvBgNVBAUTKDEzNzNEN0RCQjMzMUI1M0ZDRjdDMjhEQzBERkIzRTlG REE3RUY0OTAwHhcNMjUxMDIzMDExMzQ1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5ODE0OC04NzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/dpm3y4V8v8GMFE0qk5Mfyah6+yc4O03XbLPSt9iMi3x8rvuvUeVWD+Vsf4 6Isn/8U4ZAY7Jhsyd+sMGP4pSETUfAghv8lRFTAvK236rt/ZLXTGUO78M3e0WV/3 4kyLU0edMD42vbF5GcdD5ebLRq3KpIFGDIxUzWVKodI++HKn+uYTYjxFxhvZlwhA gPZrF4lwNKlfgBqBBZKe67IvgX87AAsIeK3dP8XIZjHagRbL8aBiIJtDXDwsbpgA E2093YbeW1I87NeQFemD6218KKjypZUW9aySejSpg+nts/iZ5yB4bsRxvXMSDJfH alBgguwRmr/tbZ8w3QS0GFMAkQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKtVcvKg GbgOS9VL6OmL8PNS1FFHMB8GA1UdIwQYMBaAFBNz19uzMbU/z3wo3A37Pp/afvSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI4OC8xRkREQTdCMDJD NTkxMUVDQkFGNUY4NkFDNEY5QUUwMi9FM1BYMjdNeHRUX1BmQ2pjRGZzLW45cC05 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzUFgyN014dFRfUGZDamNEZnMtbjlwLTlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjkyODgvMUZEREE3QjAyQzU5MTFFQ0JBRjVGODZBQzRGOUFFMDIvRTc2NzZBMDRB MTNCMTFGMEI1ODdGNzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrhYwDwQCAAIwCQMHACABDfezgDANBgkqhkiG9w0BAQsF AAOCAQEAw1h+m4/voqyTUuflMrEqWxqZdd4KRu/ldtP1gY2bYEokdSwycp0ja3YP +2C9BVB4fp4w5huDnbml0jxuwLrtABE+lVR6R4C0GVc0mD1ad/9Q92z36cOsOfMs GczBwRaC8P4El40KheQfMPztXwUsz3L8ug5CpRxzHk7f4EVPjw5vUy/YPejUymeG Ikah0Kg+upaM1/uRjHaPg8bjhw1IMiGeVf2elfmYu0sE5YRZ2CpBNf7nzZyW/v0G Sb4uFmjtnRgNXOa+j/Yp+xsjvBNvFSNXcxySN9ObAFLOYh3hWVpC7fJqJ4ejkH/o Ywxu8MrBB/LRypEHj1QlRbpcXeqjCQ== -----END CERTIFICATE-----Generated at Wed Oct 29 09:57:10 2025 by rpki-client