$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/1E76B980C4BA11E78E05EE70C4F9AE02.roa File: 1E76B980C4BA11E78E05EE70C4F9AE02.roa (raw, json) Hash identifier: kY7WrwiPhs1fDNCyRkQ41kcloEeYNo1b3npHenwsZo8= Subject key identifier: 9F:B1:F9:5A:FA:FB:24:85:A4:C8:FD:4F:EF:64:8A:8C:E2:4A:57:5E Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Certificate serial: 1845 Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/1E76B980C4BA11E78E05EE70C4F9AE02.roa Signing time: Sun 28 Sep 2025 00:30:41 +0000 ROA not before: Sun 28 Sep 2025 00:30:41 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 135636 IP address blocks: 103.77.76.0/22 maxlen: 22 103.77.76.0/23 maxlen: 23 103.77.76.0/24 maxlen: 24 103.77.77.0/24 maxlen: 24 103.77.78.0/24 maxlen: 24 2407:8f80::/32 maxlen: 32 2407:8f80:88::/48 maxlen: 48 2407:8f80:99::/48 maxlen: 48 2407:8f80:12ac::/48 maxlen: 48 2407:8f80:8000::/36 maxlen: 36 2407:8f80:8003::/48 maxlen: 48 2407:8f80:8080::/48 maxlen: 48 2407:8f80:a51a::/48 maxlen: 48 2407:8f80:b003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6213 (0x1845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Validity Not Before: Sep 28 00:30:41 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68d881b0-cf31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:6f:c7:1b:3c:98:54:d5:36:82:c1:9e:98: c4:64:99:49:b6:c7:29:7f:3a:42:a2:d2:c5:87:c8: 7a:bb:88:13:0f:9a:28:92:63:77:d8:fb:a7:1b:d6: fd:26:f1:d0:95:02:5a:e3:0a:9f:42:88:6c:a6:f7: 31:a1:73:da:7a:42:6e:37:9d:f1:62:cf:cb:70:6a: 49:fb:03:77:43:76:ce:d2:6a:5b:30:41:80:87:69: 08:ed:f8:cb:31:76:51:c7:8f:9d:dc:57:69:a0:44: 95:b7:58:f6:73:76:84:76:98:38:1f:db:65:4e:43: 53:26:8f:3e:47:c5:66:22:53:52:92:68:69:51:e2: 5a:c7:4c:98:74:a3:13:ea:93:f2:9e:50:fd:a7:ca: 83:44:f3:da:7c:02:9f:ac:27:a0:0f:f5:e5:4f:a1: f5:14:0a:82:f1:83:dc:52:f0:e9:37:7b:bb:fe:9f: f2:b6:cb:50:83:57:ae:1b:4d:79:a6:bd:1f:b6:6a: f3:f3:6f:e2:a2:3f:cb:3a:ca:34:c5:56:db:fb:f6: fd:fd:48:fe:c4:80:14:0d:ba:b4:fd:43:ff:ef:cb: 84:2b:89:5f:b0:17:d8:47:e1:b5:64:a0:e4:21:15: 3e:4a:45:e9:92:fc:d8:92:5d:c8:02:a7:93:d3:b8: 6b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B1:F9:5A:FA:FB:24:85:A4:C8:FD:4F:EF:64:8A:8C:E2:4A:57:5E X509v3 Authority Key Identifier: keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/1E76B980C4BA11E78E05EE70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.76.0/22 IPv6: 2407:8f80::/32 Signature Algorithm: sha256WithRSAEncryption 7d:36:1f:fa:43:52:7f:9e:5e:ea:f4:3d:9c:69:9f:eb:a8:88: f4:b2:3c:d4:32:c1:64:db:92:07:41:90:bc:6c:3c:95:94:f6: 12:8c:53:31:fe:a5:19:e6:46:ad:1d:d0:1b:aa:5c:e1:9f:7a: 33:3c:a1:f0:71:8a:bd:fc:37:e6:ad:d4:59:7f:fe:85:ec:99: 52:4f:aa:88:b9:12:12:9b:e3:5c:04:52:b5:e6:a0:f4:ff:0c: 86:7f:32:65:d3:1f:36:10:1a:bb:04:7a:9a:9b:83:7c:7d:ee: c4:71:10:98:e5:05:cc:79:70:8c:54:6c:39:ec:5d:2f:ec:49: 5d:bc:20:c3:b9:26:cb:9e:a7:b4:09:dc:c2:72:30:f9:96:fa: 6e:5b:81:36:d8:0f:3a:ca:af:04:80:46:df:e4:b9:ec:ee:ca: 77:fb:6e:75:f4:e3:68:05:53:d3:0f:25:73:ea:3c:36:95:df: f4:97:ba:e1:5b:68:ac:41:4c:2e:28:bd:92:6f:c2:58:cf:c0: 36:17:e0:e6:61:3a:e6:a4:e5:14:0c:52:99:ab:7d:87:89:bd: 58:2b:d0:c4:31:b1:0d:5e:8a:04:65:c7:0a:22:3f:76:ad:02: c8:67:b2:04:55:03:51:e1:39:f9:42:08:fd:15:39:8b:2b:59: e3:fd:59:6f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICGEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2 MDFEN0M4NUYwHhcNMjUwOTI4MDAzMDQxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ4ODFiMC1jZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGJvxxs8mFTVNoLBnpjEZJlJtscpfzpCotLFh8h6u4gTD5ookmN32PunG9b9 JvHQlQJa4wqfQohspvcxoXPaekJuN53xYs/LcGpJ+wN3Q3bO0mpbMEGAh2kI7fjL MXZRx4+d3FdpoESVt1j2c3aEdpg4H9tlTkNTJo8+R8VmIlNSkmhpUeJax0yYdKMT 6pPynlD9p8qDRPPafAKfrCegD/XlT6H1FAqC8YPcUvDpN3u7/p/ytstQg1euG015 pr0ftmrz82/ioj/LOso0xVbb+/b9/Uj+xIAUDbq0/UP/78uEK4lfsBfYR+G1ZKDk IRU+SkXpkvzYkl3IAqeT07hr4QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJ+x+Vr6 +ySFpMj9T+9kioziSldeMB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc1RkIvRkREQjg4RENDMjEwMTFFNzkyMEE5NTVEQzRGOUFFMDIvMUU3NkI5ODBD NEJBMTFFNzhFMDVFRTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnTUwwDQQCAAIwBwMFACQHj4AwDQYJKoZIhvcNAQELBQAD ggEBAH02H/pDUn+eXur0PZxpn+uoiPSyPNQywWTbkgdBkLxsPJWU9hKMUzH+pRnm Rq0d0BuqXOGfejM8ofBxir38N+at1Fl//oXsmVJPqoi5EhKb41wEUrXmoPT/DIZ/ MmXTHzYQGrsEepqbg3x97sRxEJjlBcx5cIxUbDnsXS/sSV28IMO5Jsuep7QJ3MJy MPmW+m5bgTbYDzrKrwSARt/kuezuynf7bnX042gFU9MPJXPqPDaV3/SXuuFbaKxB TC4ovZJvwljPwDYX4OZhOuak5RQMUpmrfYeJvVgr0MQxsQ1eigRlxwoiP3atAshn sgRVA1HhOflCCP0VOYsrWeP9WW8= -----END CERTIFICATE-----Generated at Tue Nov 4 22:06:16 2025 by rpki-client