$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/06F73C70ABD011F0977C9F10C4F9AE02.roa File: 06F73C70ABD011F0977C9F10C4F9AE02.roa (raw, json) Hash identifier: zU0ivsUwwPcioIh+SJNEn0/D/vk8mXy+zIutWbBZmTo= Subject key identifier: 41:34:23:09:20:DB:23:DF:F6:25:4E:48:E6:6D:95:14:17:36:B2:FE Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: E1 Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/06F73C70ABD011F0977C9F10C4F9AE02.roa Signing time: Sat 18 Oct 2025 03:10:41 +0000 ROA not before: Sat 18 Oct 2025 03:10:41 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 26658 IP address blocks: 103.197.168.0/22 maxlen: 24 220.158.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Oct 18 03:10:41 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68f30531-4c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:98:00:29:73:60:f5:8b:0e:25:ac:07:27: e0:41:ce:fe:d4:49:58:86:28:8b:85:10:eb:6e:a7: 2c:aa:8b:1d:5e:6e:03:d6:36:97:85:ee:32:5b:a8: 20:2c:7e:40:b5:75:d3:3b:3c:74:e2:a4:b4:1c:f3: db:37:4e:8e:81:8e:ce:bb:04:d7:a4:0b:b0:b3:97: 52:73:ed:1b:bd:a7:70:06:7d:53:6e:ac:a1:84:04: 56:81:1d:7a:76:22:8c:56:3c:f0:0f:3b:a3:f8:3b: 9a:a1:93:b0:d8:a2:46:29:aa:86:6d:8b:e2:7b:33: a9:6a:aa:5a:a8:3c:8b:5f:c3:2f:86:78:90:32:59: 4b:91:a0:1e:5c:59:58:43:99:46:63:27:17:3a:af: 64:06:14:df:a8:ae:e2:3c:a4:08:32:d3:e5:96:bb: 02:54:5c:3f:3e:71:27:4d:84:56:a7:da:77:34:bc: a5:47:59:55:af:b0:c1:24:c5:67:a1:19:34:18:5b: ec:12:ea:2e:82:f4:91:a0:40:ea:fb:81:15:97:ac: 9b:cc:38:2d:20:40:c3:9e:e3:06:0c:21:d3:b8:d6: c0:33:f9:59:70:b3:5a:e6:ca:f6:c7:5c:ff:99:32: b7:8d:97:b5:e8:95:44:0d:25:2d:0a:e7:e4:8a:63: 21:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:34:23:09:20:DB:23:DF:F6:25:4E:48:E6:6D:95:14:17:36:B2:FE X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/06F73C70ABD011F0977C9F10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.168.0/22 220.158.224.0/22 Signature Algorithm: sha256WithRSAEncryption a4:42:ac:a4:b2:d4:14:a9:d8:fd:05:72:ce:47:20:a1:f3:0b: 49:86:90:a2:76:13:aa:b4:7b:a4:72:b6:08:54:ce:eb:6b:e4: d4:cd:1c:e3:8d:b5:40:9c:87:94:42:d2:68:8d:de:5e:a0:e7: 61:c2:e1:4b:65:51:0f:0b:1d:f0:e7:d2:68:ea:2c:f5:ed:7e: 44:1a:e1:40:83:09:6c:ed:28:3d:49:f8:d6:39:02:ea:d1:99: e4:07:31:5f:9f:4c:ca:88:01:13:99:7f:3d:5e:db:cf:c2:be: 48:ac:cf:98:75:ec:85:3d:d6:c8:b3:cb:2f:a8:4f:c3:23:ba: f3:48:ce:1d:73:cd:c1:01:61:4f:65:60:c2:40:df:c9:83:20: 3d:7c:aa:0f:d5:b3:63:86:16:1e:fe:c0:6e:37:b4:ef:09:bc: 42:f5:f0:5c:f7:a8:17:e7:53:22:ec:2e:c9:92:fb:bd:a5:e0: f7:08:0f:3b:e6:41:8e:19:fc:cf:fa:1f:62:f1:65:33:2e:7a: 88:e6:e5:c6:b0:91:ea:32:25:f6:db:45:9b:2a:11:48:d4:e5: b9:9b:b9:dc:aa:38:a7:54:0a:c7:31:28:04:22:c7:2e:22:ad: 11:a1:ef:fa:ab:a8:96:7c:ac:1e:3c:96:3f:02:9d:23:17:2a: 0b:0d:9a:b8 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUxMDE4MDMxMDQxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYzMDUzMS00YzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4T2YAClzYPWLDiWsByfgQc7+1ElYhiiLhRDrbqcsqosdXm4D1jaXhe4yW6gg LH5AtXXTOzx04qS0HPPbN06OgY7OuwTXpAuws5dSc+0bvadwBn1TbqyhhARWgR16 diKMVjzwDzuj+DuaoZOw2KJGKaqGbYviezOpaqpaqDyLX8MvhniQMllLkaAeXFlY Q5lGYycXOq9kBhTfqK7iPKQIMtPllrsCVFw/PnEnTYRWp9p3NLylR1lVr7DBJMVn oRk0GFvsEuougvSRoEDq+4EVl6ybzDgtIEDDnuMGDCHTuNbAM/lZcLNa5sr2x1z/ mTK3jZe16JVEDSUtCufkimMhmQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEE0Iwkg 2yPf9iVOSOZtlRQXNrL+MB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlFQkEvRkEzMjBDREE1QURDMTFFRkI1NjA2NjM3QzRGOUFFMDIvMDZGNzNDNzBB QkQwMTFGMDk3N0M5RjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnxagDBALcnuAwDQYJKoZIhvcNAQELBQADggEBAKRCrKSy 1BSp2P0Fcs5HIKHzC0mGkKJ2E6q0e6RytghUzutr5NTNHOONtUCch5RC0miN3l6g 52HC4UtlUQ8LHfDn0mjqLPXtfkQa4UCDCWztKD1J+NY5AurRmeQHMV+fTMqIAROZ fz1e28/Cvkisz5h17IU91sizyy+oT8MjuvNIzh1zzcEBYU9lYMJA38mDID18qg/V s2OGFh7+wG43tO8JvEL18Fz3qBfnUyLsLsmS+72l4PcIDzvmQY4Z/M/6H2LxZTMu eojm5cawkeoyJfbbRZsqEUjU5bmbudyqOKdUCscxKAQixy4irRGh7/qrqJZ8rB48 lj8CnSMXKgsNmrg= -----END CERTIFICATE-----Generated at Tue Oct 28 06:43:38 2025 by rpki-client