$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/48BC2840B0CC11F08FB0892CC4F9AE02.roa File: 48BC2840B0CC11F08FB0892CC4F9AE02.roa (raw, json) Hash identifier: XHcO89/MPgzwW4rGQ9ytEtMm5vtuH3reQ/AQuvNxnSo= Subject key identifier: 30:48:3C:7C:81:7A:EE:F3:79:48:FF:E8:9C:8E:0D:D5:3C:37:1E:8B Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 08F0 Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/48BC2840B0CC11F08FB0892CC4F9AE02.roa Signing time: Fri 24 Oct 2025 11:26:29 +0000 ROA not before: Fri 24 Oct 2025 11:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135030 IP address blocks: 103.111.164.0/23 maxlen: 23 103.111.164.0/24 maxlen: 24 103.111.165.0/24 maxlen: 24 103.111.166.0/24 maxlen: 24 2402:9f40::/32 maxlen: 32 2402:9f40:1::/48 maxlen: 48 2402:9f40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Oct 24 11:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68fb6265-37ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:ac:2b:07:e5:c0:31:9b:36:76:8f:37:a1: a4:d7:86:54:65:7a:98:18:6d:12:86:4a:21:96:24: 48:c2:20:2e:af:c2:f9:c7:30:ab:9f:54:e1:89:4c: 80:ea:85:5b:fe:ff:f2:18:40:39:a1:b6:92:40:4f: 2c:13:76:4e:5e:15:8c:66:ab:bb:06:56:65:2f:f5: 38:78:fb:fc:55:84:14:a0:53:d7:00:ac:0e:11:e7: d0:98:67:8c:54:b3:0b:27:99:91:45:ab:46:83:e3: c6:ef:0a:dd:64:10:56:df:21:b1:27:e8:98:d4:4a: e4:eb:52:0d:a3:60:4d:1f:6f:1a:09:77:25:69:e2: da:74:e4:63:34:47:b3:08:57:8a:b6:03:43:df:49: ab:75:48:f9:38:fb:f7:ef:fe:81:34:86:83:7a:c5: 46:2a:6d:b3:f2:6a:08:b9:6a:45:87:82:90:9f:1a: f0:24:a5:61:2d:9d:19:db:c7:17:5e:8e:32:00:40: 4f:d8:c9:38:1b:2b:9c:19:7e:92:be:19:d6:b5:97: e1:ec:f1:0b:7c:f3:e9:85:4d:c8:1b:7f:4a:b6:3d: 3c:59:34:3f:dd:20:cb:53:48:07:91:d5:56:4d:77: 62:24:47:3f:be:58:28:49:c4:f7:44:02:83:f4:ba: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:48:3C:7C:81:7A:EE:F3:79:48:FF:E8:9C:8E:0D:D5:3C:37:1E:8B X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/48BC2840B0CC11F08FB0892CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.164.0-103.111.166.255 IPv6: 2402:9f40::/32 Signature Algorithm: sha256WithRSAEncryption 9d:0b:d0:93:22:6c:05:fe:d5:01:7a:9c:8d:f0:a3:f1:61:35: be:bf:c9:04:29:80:c7:81:60:2b:8b:8a:2a:44:7c:b4:36:fb: ea:b3:1c:cb:07:35:c5:4a:c0:e9:9e:74:18:f6:7c:ab:9c:f5: bd:e4:af:bd:bf:60:49:b8:a2:95:9a:12:39:8b:63:53:f4:c7: d4:1b:39:15:75:1c:c1:0b:7e:a7:b3:ed:50:5d:65:02:8a:69: 8a:72:d0:6a:8b:f2:ac:51:c6:fb:2c:f9:b2:60:c8:b1:e7:4f: a2:ce:62:83:0e:72:75:9d:3d:c9:2b:0c:7a:8a:72:a1:99:46: cf:6f:85:35:56:60:7b:fd:11:76:33:56:d6:36:5f:88:20:2b: 9d:90:4e:cd:10:aa:dc:7c:83:8e:fa:8f:df:e5:79:d5:e0:17: 9d:86:77:79:bb:78:1d:59:af:af:e6:ed:2a:e9:5d:c6:c1:1a: aa:5d:49:d5:77:00:d4:b5:d2:33:00:fa:c3:2b:b8:94:a3:d4: 3b:e1:8a:75:85:a8:9d:70:ae:a6:cb:65:fa:ca:ea:00:ba:ea: 41:35:64:63:a8:06:c8:9b:81:1c:f0:77:cd:2f:42:cc:1b:12: 62:bf:ec:8f:b8:a6:86:27:f4:e8:ec:0b:6f:52:4d:07:bc:3d: 3f:83:08:d8 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUxMDI0MTEyNjI5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZiNjI2NS0zN2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa6sKwflwDGbNnaPN6Gk14ZUZXqYGG0ShkohliRIwiAur8L5xzCrn1ThiUyA 6oVb/v/yGEA5obaSQE8sE3ZOXhWMZqu7BlZlL/U4ePv8VYQUoFPXAKwOEefQmGeM VLMLJ5mRRatGg+PG7wrdZBBW3yGxJ+iY1Erk61INo2BNH28aCXclaeLadORjNEez CFeKtgND30mrdUj5OPv37/6BNIaDesVGKm2z8moIuWpFh4KQnxrwJKVhLZ0Z28cX Xo4yAEBP2Mk4GyucGX6SvhnWtZfh7PELfPPphU3IG39Ktj08WTQ/3SDLU0gHkdVW TXdiJEc/vlgoScT3RAKD9LrzdwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFDBIPHyB eu7zeUj/6JyODdU8Nx6LMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU2MEQvNjhDM0Y0OUE0MUVFMTFFQTlDRUExRjc1QzRGOUFFMDIvNDhCQzI4NDBC MENDMTFGMDhGQjA4OTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAmdvpAMEAGdvpjANBAIAAjAHAwUAJAKfQDANBgkqhkiG 9w0BAQsFAAOCAQEAnQvQkyJsBf7VAXqcjfCj8WE1vr/JBCmAx4FgK4uKKkR8tDb7 6rMcywc1xUrA6Z50GPZ8q5z1veSvvb9gSbiilZoSOYtjU/TH1Bs5FXUcwQt+p7Pt UF1lAoppinLQaovyrFHG+yz5smDIsedPos5igw5ydZ09ySsMeopyoZlGz2+FNVZg e/0RdjNW1jZfiCArnZBOzRCq3HyDjvqP3+V51eAXnYZ3ebt4HVmvr+btKuldxsEa ql1J1XcA1LXSMwD6wyu4lKPUO+GKdYWonXCupstl+srqALrqQTVkY6gGyJuBHPB3 zS9CzBsSYr/sj7imhif06OwLb1JNB7w9P4MI2A== -----END CERTIFICATE-----Generated at Tue Nov 4 01:01:52 2025 by rpki-client