$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/1779BD7C3B2311EE91010B3EC4F9AE02.roa File: 1779BD7C3B2311EE91010B3EC4F9AE02.roa (raw, json) Hash identifier: xUYqVtjGT/IbCxMgEDoRhm8Anp7a4X1koMkSJ4n38OE= Subject key identifier: B8:38:93:0A:00:5C:0A:88:AB:6C:A9:66:26:B2:56:CE:0D:9C:DC:DB Certificate issuer: /CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF Certificate serial: 01A7 Authority key identifier: 1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/1779BD7C3B2311EE91010B3EC4F9AE02.roa Signing time: Mon 03 Nov 2025 03:18:04 +0000 ROA not before: Mon 03 Nov 2025 03:18:04 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132448 IP address blocks: 103.21.17.0/24 maxlen: 24 103.97.230.0/24 maxlen: 24 2001:df1:af00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB35A, serialNumber=1A60725AE4045896E304083003213EEA95267ECF Validity Not Before: Nov 3 03:18:04 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69081eeb-2d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:90:cc:2f:16:fd:6f:1d:56:da:d8:e4:8c: db:b5:52:fc:f9:d8:f7:d4:42:52:fb:cd:91:4d:d2: c5:6b:f6:6e:8f:cd:e1:02:0f:6c:79:43:68:a0:76: e0:16:de:90:63:a4:54:85:9b:52:6c:42:95:77:ad: 57:0a:cf:f0:9d:27:f8:61:7c:9e:95:d8:29:b5:18: ff:fe:bf:90:9a:18:30:09:d2:78:b2:2d:bf:86:49: 42:15:c9:ad:a5:57:fa:d1:cc:2c:15:cd:10:52:ec: e2:9c:94:16:be:06:52:83:f3:e4:c6:fc:b7:96:90: 84:9a:cf:55:cd:8b:bf:99:57:9d:9a:34:db:a8:ee: 2a:60:d6:40:1f:8e:09:26:ab:9a:85:7d:c5:61:ef: 35:45:96:00:00:90:4b:e5:67:89:90:7b:6d:db:9d: cc:e2:9f:02:e4:67:2d:e7:25:3c:1b:84:44:b3:e8: 3b:58:6c:54:3e:e0:a6:88:4d:5e:70:90:be:29:f7: 30:1b:ea:c1:4a:d4:cb:e3:70:ae:8d:d8:ad:3f:0e: 11:a5:9b:42:39:dc:77:34:1a:6f:2d:d6:ab:5d:b2: 0f:93:d4:83:4b:c9:e7:21:86:1a:a5:4e:8c:c2:9a: 93:cf:ee:02:e3:18:15:7f:1b:4e:bb:3e:4c:56:50: 90:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:38:93:0A:00:5C:0A:88:AB:6C:A9:66:26:B2:56:CE:0D:9C:DC:DB X509v3 Authority Key Identifier: keyid:1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/1779BD7C3B2311EE91010B3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.21.17.0/24 103.97.230.0/24 IPv6: 2001:df1:af00::/48 Signature Algorithm: sha256WithRSAEncryption 53:4a:5b:bc:87:ef:5a:10:7f:d9:b9:b1:7c:11:4a:be:26:3a: 8c:6f:b6:5e:d3:1e:42:45:3e:3b:3c:99:da:9d:47:dd:5e:08: 9a:a0:9f:59:c7:7e:40:42:a7:af:f3:8a:3e:53:05:49:a6:ca: 5b:1d:c4:6d:91:62:ae:43:5b:4e:64:03:d8:3d:b6:e7:22:8c: 13:89:c6:da:c8:c0:82:ba:2b:59:fd:b1:f6:61:0d:05:b0:dc: f0:94:6f:87:30:76:93:f6:bd:62:ec:cc:96:2a:42:c2:2d:89: 1f:3c:8b:2e:fa:9f:5c:01:b5:e4:00:a5:eb:aa:1c:70:38:b2: 41:2c:6d:98:38:df:ac:a6:26:91:e2:26:e0:de:a2:44:14:0a: 0f:5a:0a:15:9e:f8:e3:63:b1:71:53:59:3c:2b:57:88:3e:dc: 70:c1:2f:1d:5d:51:6c:3a:18:e9:5e:50:a0:11:e1:75:f2:83: ab:5e:1c:97:39:4b:d4:ee:26:b1:ad:f5:e8:5c:fe:77:b0:84: 33:60:7b:61:c7:e3:ab:d1:2b:c8:6e:a0:c2:de:2f:f9:ed:32: a7:3a:bb:97:b5:04:8c:e0:7e:8b:d2:c1:94:4a:4e:69:eb:42: 57:65:4e:94:36:9c:b4:65:e6:2e:32:5f:3d:0d:59:85:73:d8: 35:25:41:b6 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIzNUExMTAvBgNVBAUTKDFBNjA3MjVBRTQwNDU4OTZFMzA0MDgzMDAzMjEzRUVB OTUyNjdFQ0YwHhcNMjUxMTAzMDMxODA0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MWVlYi0yZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3KQzC8W/W8dVtrY5IzbtVL8+dj31EJS+82RTdLFa/Zuj83hAg9seUNooHbg Ft6QY6RUhZtSbEKVd61XCs/wnSf4YXyeldgptRj//r+QmhgwCdJ4si2/hklCFcmt pVf60cwsFc0QUuzinJQWvgZSg/Pkxvy3lpCEms9VzYu/mVedmjTbqO4qYNZAH44J JquahX3FYe81RZYAAJBL5WeJkHtt253M4p8C5Gct5yU8G4REs+g7WGxUPuCmiE1e cJC+KfcwG+rBStTL43CujditPw4RpZtCOdx3NBpvLdarXbIPk9SDS8nnIYYapU6M wpqTz+4C4xgVfxtOuz5MVlCQtwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFLg4kwoA XAqIq2ypZiayVs4NnNzbMB8GA1UdIwQYMBaAFBpgclrkBFiW4wQIMAMhPuqVJn7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjM1QS8wMDZDRDk0QTNC MjExMUVFODA0QzYzODNDNEY5QUUwMi9HbUJ5V3VRRVdKYmpCQWd3QXlFLTZwVW1m czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtQnlXdVFFV0piakJBZ3dBeUUtNnBVbWZzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkIzNUEvMDA2Q0Q5NEEzQjIxMTFFRTgwNEM2MzgzQzRGOUFFMDIvMTc3OUJEN0Mz QjIzMTFFRTkxMDEwQjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnFREDBABnYeYwDwQCAAIwCQMHACABDfGvADANBgkqhkiG 9w0BAQsFAAOCAQEAU0pbvIfvWhB/2bmxfBFKviY6jG+2XtMeQkU+OzyZ2p1H3V4I mqCfWcd+QEKnr/OKPlMFSabKWx3EbZFirkNbTmQD2D225yKME4nG2sjAgrorWf2x 9mENBbDc8JRvhzB2k/a9YuzMlipCwi2JHzyLLvqfXAG15ACl66occDiyQSxtmDjf rKYmkeIm4N6iRBQKD1oKFZ7442OxcVNZPCtXiD7ccMEvHV1RbDoY6V5QoBHhdfKD q14clzlL1O4msa316Fz+d7CEM2B7Ycfjq9EryG6gwt4v+e0ypzq7l7UEjOB+i9LB lEpOaetCV2VOlDactGXmLjJfPQ1ZhXPYNSVBtg== -----END CERTIFICATE-----Generated at Wed Nov 5 13:51:55 2025 by rpki-client