$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6EC548E5FB811F094135B2FC4F9AE02.roa File: C6EC548E5FB811F094135B2FC4F9AE02.roa (raw, json) Hash identifier: vQxvyyxrHRBa4iZJFOrEvTxzuAri97r7swFzpbuyhQg= Subject key identifier: 48:F8:73:4B:CE:8D:B1:C6:02:F5:04:5D:96:EE:50:A4:0E:3B:9D:51 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 1D Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6EC548E5FB811F094135B2FC4F9AE02.roa Signing time: Sun 13 Jul 2025 07:16:09 +0000 ROA not before: Sun 13 Jul 2025 07:16:09 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 20118 IP address blocks: 103.43.70.0/24 maxlen: 24 103.43.71.0/24 maxlen: 24 103.82.142.0/24 maxlen: 24 103.82.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 11:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Jul 13 07:16:09 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68735d39-d116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3b:e6:dc:bc:f0:96:81:78:02:7a:df:d3:61: 3e:6f:de:7e:41:98:85:28:48:4f:07:f4:fe:2e:a6: 7e:ab:61:4c:1a:a0:7b:86:9c:fb:ce:91:20:62:1e: 3b:cb:99:fb:3e:78:96:5b:05:ab:75:79:5a:45:1c: 5d:39:9e:12:41:83:3b:21:82:4f:a5:35:91:d6:63: dc:37:30:a1:b6:83:c6:ff:57:c2:d1:b6:46:02:65: f7:96:65:c8:39:bd:21:a2:ce:46:43:52:60:00:dc: 07:80:e5:ed:68:f1:ab:2b:f0:69:6d:73:60:4a:d6: b7:c5:eb:9d:53:b1:be:57:20:98:83:88:5b:f2:5c: f4:c5:d8:ff:b3:31:a4:99:8c:d3:43:23:92:44:da: 65:14:f1:88:5a:b7:0d:5d:f7:69:9a:15:6d:7c:d4: c4:4b:0e:bc:95:ee:26:88:b9:80:c9:14:b8:94:37: 38:df:fd:42:69:27:74:3d:65:63:69:3a:b0:1f:54: 52:39:87:5c:2a:3e:57:f5:ce:3a:9e:73:1c:5b:f6: d1:e9:73:15:b7:44:0e:80:69:24:51:bc:6c:ae:70: df:53:6d:51:1d:53:03:8f:4d:3e:1c:c0:82:69:ff: cf:7e:05:a0:85:d2:fa:44:cf:46:4c:8e:46:5f:89: 15:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F8:73:4B:CE:8D:B1:C6:02:F5:04:5D:96:EE:50:A4:0E:3B:9D:51 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/C6EC548E5FB811F094135B2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.43.70.0/23 103.82.142.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:1d:15:83:3a:46:08:c5:93:ad:1a:26:26:01:30:9b:f2:d2: 19:39:8a:5c:f6:59:4e:4b:7a:b4:8b:5d:7e:79:9a:e9:da:f6: c6:4d:75:e2:a1:a6:ed:1e:da:13:0c:57:e7:63:16:81:3e:70: d7:9d:db:47:c7:40:12:81:4a:d3:fe:5b:cb:08:23:32:92:3e: 08:60:e5:48:ae:75:e5:88:19:10:69:4f:9d:a1:1f:18:0d:ae: af:c4:61:3a:aa:2a:2b:bb:2a:65:c6:08:11:ea:f6:62:4d:52: f5:f6:22:82:09:2e:da:3d:a8:fa:b7:62:f8:f4:12:41:18:77: 85:77:4b:6e:44:9a:dc:1c:8f:f9:aa:be:8d:29:2e:0f:e1:72: d8:17:48:40:92:0d:8c:9e:51:f3:25:67:f1:f2:c9:c6:00:86: 60:91:7c:66:8b:12:40:98:c4:aa:0e:1a:3b:dd:f5:07:a7:c6: 07:f7:ee:a2:08:54:31:5a:f8:83:ef:a5:87:7b:cf:60:92:8c: 46:36:7b:4b:ab:8b:71:a2:88:3c:b2:50:75:ae:d3:bc:9f:a0: 2e:6d:20:d2:f3:92:75:8e:68:97:90:db:0a:2a:d7:a5:e6:7b: f9:60:14:57:59:63:b7:db:94:b4:25:45:62:de:86:60:9e:70: 82:80:02:cf -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNDdCNTc3QjlDOEFCRTJDMzYwMEM1QjRFNzkzRkY0RDQ3 QjY1MDYyMDAeFw0yNTA3MTMwNzE2MDlaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NzM1ZDM5LWQxMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrO+bcvPCWgXgCet/TYT5v3n5BmIUoSE8H9P4upn6rYUwaoHuGnPvOkSBiHjvL mfs+eJZbBat1eVpFHF05nhJBgzshgk+lNZHWY9w3MKG2g8b/V8LRtkYCZfeWZcg5 vSGizkZDUmAA3AeA5e1o8asr8Gltc2BK1rfF651Tsb5XIJiDiFvyXPTF2P+zMaSZ jNNDI5JE2mUU8Yhatw1d92maFW181MRLDryV7iaIuYDJFLiUNzjf/UJpJ3Q9ZWNp OrAfVFI5h1wqPlf1zjqecxxb9tHpcxW3RA6AaSRRvGyucN9TbVEdUwOPTT4cwIJp /89+BaCF0vpEz0ZMjkZfiRWjAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUSPhzS86N scYC9QRdlu5QpA47nVEwHwYDVR0jBBgwFoAUR7V3ucir4sNgDFtOeT/01HtlBiAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0M1REFCRUVBNUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjdWM3VjaXI0c05nREZ0T2VUXzAxSHRsQmlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzBDOS9DNURBQkVFQTVGQjQxMUYwODIwMzQ0N0RDNEY5QUUwMi9DNkVDNTQ4RTVG QjgxMUYwOTQxMzVCMkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAWcrRgMEAWdSjjANBgkqhkiG9w0BAQsFAAOCAQEAjB0VgzpG CMWTrRomJgEwm/LSGTmKXPZZTkt6tItdfnma6dr2xk114qGm7R7aEwxX52MWgT5w 153bR8dAEoFK0/5bywgjMpI+CGDlSK515YgZEGlPnaEfGA2ur8RhOqoqK7sqZcYI Eer2Yk1S9fYiggku2j2o+rdi+PQSQRh3hXdLbkSa3ByP+aq+jSkuD+Fy2BdIQJIN jJ5R8yVn8fLJxgCGYJF8ZosSQJjEqg4aO931B6fGB/fuoghUMVr4g++lh3vPYJKM RjZ7S6uLcaKIPLJQda7TvJ+gLm0g0vOSdY5ol5DbCirXpeZ7+WAUV1ljt9uUtCVF Yt6GYJ5wgoACzw== -----END CERTIFICATE-----Generated at Sun Oct 26 09:38:13 2025 by rpki-client