$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa File: 9E1721445CFB11EAA377D527C4F9AE02.roa (raw, json) Hash identifier: 8T6x03P3VxlYlJgx3O2lmpxNAgzgSpRVJPK28hDgG2A= Subject key identifier: 6D:1E:10:F7:EB:F0:DD:DA:3E:23:EE:59:12:B1:6B:58:36:CB:7C:FF Certificate issuer: /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Certificate serial: 0ABC Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa Signing time: Tue 02 Sep 2025 20:10:17 +0000 ROA not before: Tue 02 Sep 2025 20:10:17 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138025 IP address blocks: 103.120.69.0/24 maxlen: 24 103.146.75.0/24 maxlen: 24 2001:df6:d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2748 (0xabc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA4B, serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Validity Not Before: Sep 2 20:10:17 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b74f29-1709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:61:d7:2d:fe:b2:60:bd:b0:81:f3:e6:00: 81:94:f2:c1:dd:6e:d7:60:b4:10:8d:01:b1:59:aa: 83:18:75:c4:11:42:0d:d0:b4:cb:e0:c0:9a:0c:62: 5d:c8:35:05:4e:e3:01:cd:56:46:1b:b8:3d:82:71: df:3f:f8:de:96:49:74:6f:3e:6c:0c:ed:e3:57:db: c3:ef:92:69:c1:49:eb:10:c8:d4:f5:bb:44:14:72: 19:ac:b6:7f:1f:b0:cb:f8:9b:21:89:bf:f6:34:4e: 00:53:5b:ad:88:85:a6:f3:48:17:5f:54:39:fd:c6: c8:f3:f7:8b:3a:40:bf:14:54:8b:55:da:8b:11:ef: 55:14:25:b3:0d:b3:a6:db:75:d2:74:ff:43:e3:9b: 52:3b:cb:93:17:cf:7e:fb:6d:97:d0:da:92:f1:52: 72:02:b5:05:fe:94:c1:c2:bb:3d:9b:8b:c4:a3:7d: d1:80:c1:82:13:e0:b3:53:7c:f7:45:59:19:6d:47: cf:8c:83:67:62:59:9a:87:47:c7:d1:69:3c:c1:e1: 17:38:07:6d:af:48:1f:d5:3a:9f:27:e8:b3:81:ad: 5d:13:97:3f:31:c9:d9:dd:e3:72:67:49:0f:8b:10: 3a:cb:a7:98:0a:f1:cb:8e:4c:a5:6e:4f:7b:4e:19: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1E:10:F7:EB:F0:DD:DA:3E:23:EE:59:12:B1:6B:58:36:CB:7C:FF X509v3 Authority Key Identifier: keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/9E1721445CFB11EAA377D527C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.69.0/24 103.146.75.0/24 IPv6: 2001:df6:d00::/48 Signature Algorithm: sha256WithRSAEncryption c6:87:a3:e5:eb:09:22:bd:da:d1:5c:5a:0c:c0:27:e9:e4:af: ee:dc:90:0b:1e:66:cb:96:48:f6:33:24:df:ea:44:6f:98:ac: 4c:2b:bf:4b:9b:5c:cb:9c:e0:41:1b:a8:34:22:05:54:34:63: 15:5f:b4:db:61:aa:a3:80:6d:7e:8f:13:5f:f8:87:bf:c7:f3: 83:91:87:59:d5:f3:3c:82:82:47:7a:e4:a0:4f:f3:87:76:3d: 15:22:81:58:3f:ae:e6:78:79:ef:a5:c2:27:eb:2f:72:7f:dc: 5c:b8:5b:b1:ac:47:2f:5d:ba:6d:84:52:27:ca:82:49:c6:a2: 0d:7c:2c:9b:b3:c5:ec:f0:88:01:4c:46:c1:08:ee:ce:d2:22: 48:85:d1:22:ec:43:42:41:7c:30:0b:f6:cc:eb:86:c7:63:dd: 0e:f5:10:fb:1f:6b:ae:32:0f:29:2c:8b:07:11:29:45:23:96: 87:ae:b9:a9:10:cf:23:78:64:5f:b7:8c:c9:21:dc:76:66:95: 09:19:2a:66:5f:c8:cd:8e:02:c2:3b:38:20:fa:4e:ae:fa:44: 7e:0c:95:c0:45:aa:7c:91:d5:45:30:ac:ab:91:26:69:01:b4: fb:1c:4d:f2:90:bd:dd:d5:3b:29:3b:0e:5d:92:fc:89:19:a4: ca:07:e0:3a -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBNEIxMTAvBgNVBAUTKEVGOUU1MkJGOUY0ODY1Q0FGODc4N0FEOTVDRTZERTRG NjQ3Njg0MEQwHhcNMjUwOTAyMjAxMDE3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NGYyOS0xNzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJBh1y3+smC9sIHz5gCBlPLB3W7XYLQQjQGxWaqDGHXEEUIN0LTL4MCaDGJd yDUFTuMBzVZGG7g9gnHfP/jelkl0bz5sDO3jV9vD75JpwUnrEMjU9btEFHIZrLZ/ H7DL+Jshib/2NE4AU1utiIWm80gXX1Q5/cbI8/eLOkC/FFSLVdqLEe9VFCWzDbOm 23XSdP9D45tSO8uTF89++22X0NqS8VJyArUF/pTBwrs9m4vEo33RgMGCE+CzU3z3 RVkZbUfPjINnYlmah0fH0Wk8weEXOAdtr0gf1TqfJ+izga1dE5c/McnZ3eNyZ0kP ixA6y6eYCvHLjkylbk97ThlcVQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFG0eEPfr 8N3aPiPuWRKxa1g2y3z/MB8GA1UdIwQYMBaAFO+eUr+fSGXK+Hh62Vzm3k9kdoQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0E0Qi82RTY0QzQxMDVD RUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpjcjRlSHJaWE9iZVQyUjJo QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1NVN2NTlJWmNyNGVIclpYT2JlVDJSMmhBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkNBNEIvNkU2NEM0MTA1Q0VDMTFFQUE2QjZFODc4QzRGOUFFMDIvOUUxNzIxNDQ1 Q0ZCMTFFQUEzNzdENTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABneEUDBABnkkswDwQCAAIwCQMHACABDfYNADANBgkqhkiG 9w0BAQsFAAOCAQEAxoej5esJIr3a0VxaDMAn6eSv7tyQCx5my5ZI9jMk3+pEb5is TCu/S5tcy5zgQRuoNCIFVDRjFV+022Gqo4Btfo8TX/iHv8fzg5GHWdXzPIKCR3rk oE/zh3Y9FSKBWD+u5nh576XCJ+svcn/cXLhbsaxHL126bYRSJ8qCScaiDXwsm7PF 7PCIAUxGwQjuztIiSIXRIuxDQkF8MAv2zOuGx2PdDvUQ+x9rrjIPKSyLBxEpRSOW h665qRDPI3hkX7eMySHcdmaVCRkqZl/IzY4Cwjs4IPpOrvpEfgyVwEWqfJHVRTCs q5EmaQG0+xxN8pC93dU7KTsOXZL8iRmkygfgOg== -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:45 2025 by rpki-client