$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa File: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (raw, json) Hash identifier: Kmb540TuRA2tDqqWRgz9hrAljHHHHmzFl7Y1Ysy+4gE= Subject key identifier: 65:D4:7E:C8:BE:59:B3:E1:91:F8:D6:23:2F:41:B5:0E:5D:72:81:F4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 08EE Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa Signing time: Wed 22 Oct 2025 10:00:13 +0000 ROA not before: Wed 22 Oct 2025 10:00:13 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 140879 IP address blocks: 103.152.218.0/24 maxlen: 24 2400:8ca0::/32 maxlen: 32 2400:8ca0::/48 maxlen: 48 2400:8ca0:1::/48 maxlen: 48 2400:8ca0:2::/48 maxlen: 48 2400:8ca0:3::/48 maxlen: 48 2400:8ca0:4::/48 maxlen: 48 2400:8ca0:5::/48 maxlen: 48 2400:8ca0:6::/48 maxlen: 48 2400:8ca0:7::/48 maxlen: 48 2400:8ca0:8::/48 maxlen: 48 2400:8ca0:9::/48 maxlen: 48 2400:8ca0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Oct 22 10:00:13 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68f8ab2d-3ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:4a:d6:88:d0:ac:70:ec:56:f6:78:c2:5f: 56:0e:f1:e2:1c:6c:0b:a3:ac:0e:36:30:21:7d:ed: f9:be:59:96:80:c4:61:ad:4e:fa:f4:ba:20:c2:71: 30:b8:5c:37:a8:44:7a:64:1d:3a:81:27:3a:98:9b: 01:8f:79:59:fe:f3:06:e5:87:7a:d5:9b:99:4b:0b: 8f:a1:29:a3:42:4e:eb:d9:53:72:7b:ff:2b:94:a1: 02:84:4e:50:8b:d9:9b:22:6d:71:c8:bb:29:7b:54: 69:d9:c5:7f:2f:9d:4f:1a:2a:8e:ad:9e:fd:29:cf: 9e:dc:32:9a:c5:58:0b:7b:09:74:c5:b7:a5:f2:be: 9c:13:22:52:98:68:c3:03:53:70:07:4a:d6:9e:d1: c1:43:5e:87:6e:27:1e:29:f8:ab:00:f5:ea:b9:e3: 44:0d:1f:52:ea:b6:ae:6e:7e:ef:6c:83:2a:ee:6e: eb:95:a0:7d:1e:b2:57:17:d6:95:c2:8a:85:5c:42: d2:10:0d:97:23:ac:08:41:ce:ac:f4:5a:bd:62:9b: 14:50:66:2c:ed:8a:79:6c:23:52:5d:b4:a6:cf:1e: d8:9d:a3:54:a5:27:36:bd:82:6c:56:83:40:96:7c: 29:48:22:75:d3:83:54:47:ff:a8:13:ec:ed:67:43: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D4:7E:C8:BE:59:B3:E1:91:F8:D6:23:2F:41:B5:0E:5D:72:81:F4 X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.218.0/24 IPv6: 2400:8ca0::/32 Signature Algorithm: sha256WithRSAEncryption 99:5e:86:a1:8e:07:64:57:76:22:bf:45:75:12:e4:07:74:21: de:eb:cf:c0:55:b0:db:bc:4d:11:b9:f4:d1:6b:d9:3f:87:a1: 4c:16:22:e3:26:af:4b:9d:2f:b7:2d:09:74:35:28:33:40:12: 42:03:44:93:d9:9e:db:17:4c:99:d9:6c:e3:f3:1b:00:76:4a: 1d:3a:8d:b2:29:c4:4d:82:88:8b:e6:3d:f7:7e:c6:da:d8:bc: 87:bc:8c:81:71:7d:a4:f8:b9:ac:75:d8:52:75:86:13:67:1c: ab:03:07:f4:e6:a7:68:8f:79:39:a2:58:53:28:77:8c:fa:8d: 22:e3:6f:c9:51:66:2a:b6:e3:21:38:7f:57:c1:11:3f:f5:69: 61:57:77:73:ed:a6:42:eb:86:2f:d7:27:94:26:32:18:be:3d: c4:6a:98:9b:85:75:fc:ba:80:a3:39:c7:f6:32:ad:9e:22:fd: 61:9e:04:5a:2b:4c:f7:2e:ef:3f:09:5c:cf:13:eb:01:73:13: 54:5b:4f:88:f0:c1:8b:0c:aa:c4:a7:92:8b:6a:37:04:ea:bc: b3:48:67:10:26:53:e4:c8:33:cc:df:85:4d:2e:fe:3e:f2:24: c8:f0:b0:95:df:af:dd:b5:b9:b6:18:f8:84:60:07:01:fa:b3: 94:b6:f5:a5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjUxMDIyMTAwMDEzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY4YWIyZC0zYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx5K1ojQrHDsVvZ4wl9WDvHiHGwLo6wONjAhfe35vlmWgMRhrU769LogwnEw uFw3qER6ZB06gSc6mJsBj3lZ/vMG5Yd61ZuZSwuPoSmjQk7r2VNye/8rlKEChE5Q i9mbIm1xyLspe1Rp2cV/L51PGiqOrZ79Kc+e3DKaxVgLewl0xbel8r6cEyJSmGjD A1NwB0rWntHBQ16HbiceKfirAPXqueNEDR9S6raubn7vbIMq7m7rlaB9HrJXF9aV woqFXELSEA2XI6wIQc6s9Fq9YpsUUGYs7Yp5bCNSXbSmzx7YnaNUpSc2vYJsVoNA lnwpSCJ104NUR/+oE+ztZ0OrnQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGXUfsi+ WbPhkfjWIy9BtQ5dcoH0MB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRGMUIvMjNGMzA1NTBCQzRGMTFFQUJBOEM5NjJGQzRGOUFFMDIvRTZDN0QzRUFB RjJEMTFGMDgxMUJCODNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnmNowDQQCAAIwBwMFACQAjKAwDQYJKoZIhvcNAQELBQAD ggEBAJlehqGOB2RXdiK/RXUS5Ad0Id7rz8BVsNu8TRG59NFr2T+HoUwWIuMmr0ud L7ctCXQ1KDNAEkIDRJPZntsXTJnZbOPzGwB2Sh06jbIpxE2CiIvmPfd+xtrYvIe8 jIFxfaT4uax12FJ1hhNnHKsDB/Tmp2iPeTmiWFMod4z6jSLjb8lRZiq24yE4f1fB ET/1aWFXd3PtpkLrhi/XJ5QmMhi+PcRqmJuFdfy6gKM5x/YyrZ4i/WGeBForTPcu 7z8JXM8T6wFzE1RbT4jwwYsMqsSnkotqNwTqvLNIZxAmU+TIM8zfhU0u/j7yJMjw sJXfr921ubYY+IRgBwH6s5S29aU= -----END CERTIFICATE-----Generated at Sun Nov 2 05:02:28 2025 by rpki-client