$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/FB6D5292263C11EEB9F5DB43C4F9AE02.roa File: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (raw, json) Hash identifier: G0XDicBivTci9J26AZ/2/duDqrP/HgCJvt3Hf4+FoMs= Subject key identifier: E8:97:55:67:0F:50:F3:5F:F4:36:CF:D7:2F:67:0E:8D:5C:EC:08:60 Certificate issuer: /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Certificate serial: 0B78 Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/FB6D5292263C11EEB9F5DB43C4F9AE02.roa Signing time: Wed 10 Sep 2025 19:29:50 +0000 ROA not before: Wed 10 Sep 2025 19:29:50 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132438 IP address blocks: 103.73.44.0/23 maxlen: 24 2406:ec80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2936 (0xb78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF8B6, serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Validity Not Before: Sep 10 19:29:50 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c1d1ae-d881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:cc:83:4d:8e:bd:c7:90:b4:38:f7:cb:5b: e2:de:a8:2a:35:12:76:e2:6d:99:63:9c:f1:3f:8f: 4e:2c:d1:02:71:ad:04:9c:5a:f3:1b:09:90:42:73: 38:e4:0b:d0:86:7d:70:aa:fa:6f:c3:50:f3:56:4b: dd:29:cd:56:fd:c1:17:48:b4:df:91:19:5f:54:fc: 80:a9:84:5a:3e:9d:53:00:af:ba:ae:2a:f4:78:5b: c3:c9:9e:b9:20:4f:30:6f:49:bc:06:f3:d5:03:8b: 3b:f9:01:99:ee:da:73:b1:e3:ea:db:85:2e:c4:59: 26:7f:1d:ff:95:f7:c5:85:18:95:d8:89:d1:8f:3f: 2f:cc:41:c4:33:21:81:60:f7:13:a2:46:8d:a9:90: ca:ce:ba:c6:4a:ac:62:02:b0:4a:db:c1:bd:6b:24: 84:ab:19:5e:34:87:65:fb:2f:85:b6:06:53:b0:b3: 98:24:cf:2e:92:7a:80:4d:ef:e6:4d:37:f2:15:5b: ea:7c:09:88:f6:18:04:e0:ab:f5:ad:17:f7:cb:44: 46:a8:60:2b:91:49:f3:0e:f8:9e:93:a8:1f:2f:4f: b9:7a:a9:d3:b1:85:3b:d0:6f:e4:13:8d:cf:69:0a: e4:10:a8:f4:cb:eb:dc:c1:d0:81:21:70:6f:27:6a: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:97:55:67:0F:50:F3:5F:F4:36:CF:D7:2F:67:0E:8D:5C:EC:08:60 X509v3 Authority Key Identifier: keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/FB6D5292263C11EEB9F5DB43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.44.0/23 IPv6: 2406:ec80::/32 Signature Algorithm: sha256WithRSAEncryption 6f:f1:d8:f4:cf:c6:e9:12:e2:83:fc:cf:71:6b:8c:e0:77:31: 54:00:6d:6d:38:66:ca:5a:19:02:e6:41:17:01:f9:ed:6e:66: 36:e2:dc:a3:25:2d:2a:83:ed:a1:bd:37:a8:de:b1:9b:97:aa: 1c:d4:17:4f:71:04:59:36:e4:d1:e3:af:17:47:b4:c8:85:ed: da:81:65:7d:16:ec:48:4e:ba:1a:ef:5f:e0:f4:6e:be:81:21: 0d:f4:f2:38:47:15:3c:01:f1:93:6a:03:44:8a:62:4d:87:90: 86:67:d9:5d:3d:2b:59:32:14:69:a7:57:f2:fb:42:2d:8b:6d: b8:2e:7f:15:ab:ba:36:b7:75:a5:d8:40:7a:f0:4d:71:c9:51: c7:ea:82:01:cd:a1:c0:55:c9:f3:04:0c:25:1d:03:53:2a:b1: e8:25:a3:42:04:ed:67:e8:a8:0f:6e:fe:60:19:6b:85:19:87: 11:70:a1:75:65:6c:f7:6a:c3:45:81:48:cb:cf:6e:1d:d4:03: 1a:02:4d:f4:e3:23:12:02:27:62:b9:34:6c:b0:c7:26:ff:c8: 5d:88:68:34:c9:69:c6:a5:ee:e0:12:96:48:7b:b5:ca:b0:82: 3f:8e:fb:49:b5:89:91:44:7b:11:65:bf:ac:84:96:9d:bb:ed: 88:2a:d5:67 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY4QjYxMTAvBgNVBAUTKEFEODRGNEJDQkVCM0M5MzY1RjI4MjcxNTNCQTY5Q0VE MkE5OTEyRTIwHhcNMjUwOTEwMTkyOTUwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMxZDFhZS1kODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLrMg02OvceQtDj3y1vi3qgqNRJ24m2ZY5zxP49OLNECca0EnFrzGwmQQnM4 5AvQhn1wqvpvw1DzVkvdKc1W/cEXSLTfkRlfVPyAqYRaPp1TAK+6rir0eFvDyZ65 IE8wb0m8BvPVA4s7+QGZ7tpzsePq24UuxFkmfx3/lffFhRiV2InRjz8vzEHEMyGB YPcTokaNqZDKzrrGSqxiArBK28G9aySEqxleNIdl+y+FtgZTsLOYJM8uknqATe/m TTfyFVvqfAmI9hgE4Kv1rRf3y0RGqGArkUnzDviek6gfL0+5eqnTsYU70G/kE43P aQrkEKj0y+vcwdCBIXBvJ2pjhwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOiXVWcP UPNf9DbP1y9nDo1c7AhgMB8GA1UdIwQYMBaAFK2E9Ly+s8k2XygnFTumnO0qmRLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhCNi80MEU3RkFCQTNB QTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlUWmZLQ2NWTzZhYzdTcVpF dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVDB2TDZ6eVRaZktDY1ZPNmFjN1NxWkV1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUY4QjYvNDBFN0ZBQkEzQUE2MTFFQUFDOEYxODc1QzRGOUFFMDIvRkI2RDUyOTIy NjNDMTFFRUI5RjVEQjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnSSwwDQQCAAIwBwMFACQG7IAwDQYJKoZIhvcNAQELBQAD ggEBAG/x2PTPxukS4oP8z3FrjOB3MVQAbW04ZspaGQLmQRcB+e1uZjbi3KMlLSqD 7aG9N6jesZuXqhzUF09xBFk25NHjrxdHtMiF7dqBZX0W7EhOuhrvX+D0br6BIQ30 8jhHFTwB8ZNqA0SKYk2HkIZn2V09K1kyFGmnV/L7Qi2LbbgufxWruja3daXYQHrw TXHJUcfqggHNocBVyfMEDCUdA1Mqseglo0IE7WfoqA9u/mAZa4UZhxFwoXVlbPdq w0WBSMvPbh3UAxoCTfTjIxICJ2K5NGywxyb/yF2IaDTJacal7uASlkh7tcqwgj+O +0m1iZFEexFlv6yElp277Ygq1Wc= -----END CERTIFICATE-----Generated at Fri Sep 19 16:43:28 2025 by rpki-client