$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/25C61AECB7ED11ED9CF6A63EC4F9AE02.roa File: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (raw, json) Hash identifier: 8tfqD+unXuAbv+bVv6zO4sePkmiq8lznMwY5d3M/IHk= Subject key identifier: 0F:BA:26:C0:8D:5C:11:5C:EF:19:02:42:B8:30:F0:61:8E:5C:7D:15 Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 04CD Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/25C61AECB7ED11ED9CF6A63EC4F9AE02.roa Signing time: Sat 25 Jul 2026 00:48:28 +0000 ROA not before: Sat 25 Jul 2026 00:48:28 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131306 IP address blocks: 103.47.230.0/24 maxlen: 24 103.47.231.0/24 maxlen: 24 103.69.108.0/24 maxlen: 24 103.152.9.0/24 maxlen: 24 2001:df3:3a00::/48 maxlen: 48 2001:df3:3a01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 22:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: Jul 25 00:48:28 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a6407dc-6f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:08:3c:51:a5:3a:38:91:bf:27:81:75:32:f2: 5d:e6:ea:f7:50:51:2d:29:fd:00:63:05:8c:b0:a3: 1f:95:55:10:3b:57:df:be:4a:d4:a1:43:3b:28:e2: 21:26:fb:f4:3b:0c:d3:0d:5b:4c:4c:43:29:1a:65: 97:1c:37:a6:0b:34:67:90:b0:e7:06:97:b2:66:1c: 25:62:27:bf:a9:ba:f3:1a:3e:b5:f2:6c:fd:ba:94: 0d:75:57:55:b1:75:39:ad:97:62:27:d4:0d:b0:94: 8c:bb:77:06:cc:5b:91:5c:07:00:a1:c5:ea:7b:e9: c9:85:4d:06:13:4b:72:e5:f4:10:1d:80:04:ab:1c: 8f:87:a2:9b:8a:ff:fe:54:c1:ba:2a:e1:a9:8e:67: d8:0f:14:10:82:b3:25:c8:56:69:41:7c:80:0c:bd: 5c:0c:75:1b:1b:f0:16:01:a1:86:c0:61:a8:84:ae: b3:c8:e4:4a:e3:f4:b4:f7:8b:67:cf:8e:d2:92:8d: 32:d6:29:cb:2c:47:7d:69:dc:e2:b0:8d:0c:a4:e1: 85:93:10:fe:b2:8c:db:f3:77:41:ce:87:04:d2:60: b0:2c:d3:16:55:90:61:c1:0d:e6:50:0b:1a:4a:d2: f3:4b:41:fe:d5:9c:c9:57:6a:d3:3a:de:6a:24:a3: 83:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BA:26:C0:8D:5C:11:5C:EF:19:02:42:B8:30:F0:61:8E:5C:7D:15 X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/25C61AECB7ED11ED9CF6A63EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.47.230.0/23 103.69.108.0/24 103.152.9.0/24 IPv6: 2001:df3:3a00::/47 Signature Algorithm: sha256WithRSAEncryption 27:d2:68:89:62:fe:91:c3:dd:70:ea:1f:69:5a:24:fd:62:e0: ae:1e:cd:7a:e6:c8:cc:58:1c:45:fe:0e:09:e4:83:c4:48:e6: 5e:c4:85:2f:11:7e:a5:cf:fb:e3:c3:1b:50:12:f4:49:1d:7f: 44:a4:65:83:98:2d:ec:bb:31:26:8c:f3:9d:1b:23:5e:af:aa: a4:a8:5b:98:9b:c8:3a:9e:87:6c:d3:d5:74:ab:8f:6a:c3:ed: 21:55:39:f6:60:b7:19:55:8b:f1:37:fb:55:cd:f3:2d:6f:08: c4:eb:f8:3a:0f:45:d1:d2:fc:ac:e6:7d:01:dd:70:4b:49:3f: a4:21:f1:c2:5a:0a:8b:16:99:2b:56:74:4d:41:59:f1:ec:ee: 08:ef:a4:b5:49:76:37:9c:dd:e8:a1:6d:a8:ea:32:78:36:84: a9:87:dc:b4:97:65:9e:6d:9c:4d:bd:23:9a:5d:8d:bb:e7:ac: a9:53:b9:69:68:f5:b6:86:53:c1:55:d8:f4:de:b8:31:18:00: 79:aa:ba:18:d3:51:43:d1:4b:76:2a:41:66:0e:6c:a1:6b:c0: 33:dc:a9:c2:46:17:dc:63:06:8f:f3:71:58:d4:42:52:ac:b4: b1:86:20:8c:93:7d:e8:91:23:08:6a:d0:be:c7:33:fe:70:d4: 4d:55:ad:88 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjYwNzI1MDA0ODI4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY0MDdkYy02ZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQg8UaU6OJG/J4F1MvJd5ur3UFEtKf0AYwWMsKMflVUQO1ffvkrUoUM7KOIh Jvv0OwzTDVtMTEMpGmWXHDemCzRnkLDnBpeyZhwlYie/qbrzGj618mz9upQNdVdV sXU5rZdiJ9QNsJSMu3cGzFuRXAcAocXqe+nJhU0GE0ty5fQQHYAEqxyPh6Kbiv/+ VMG6KuGpjmfYDxQQgrMlyFZpQXyADL1cDHUbG/AWAaGGwGGohK6zyORK4/S094tn z47Sko0y1inLLEd9adzisI0MpOGFkxD+sozb83dBzocE0mCwLNMWVZBhwQ3mUAsa StLzS0H+1ZzJV2rTOt5qJKODzQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFA+6JsCN XBFc7xkCQrgw8GGOXH0VMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzc2RkIvOTJGQjcxQTA4M0YyMTFFQ0JCMjUxOTg1QzRGOUFFMDIvMjVDNjFBRUNC N0VEMTFFRDlDRjZBNjNFQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQBZy/mAwQAZ0VsAwQAZ5gJMA8EAgACMAkDBwEgAQ3zOgAwDQYJKoZI hvcNAQELBQADggEBACfSaIli/pHD3XDqH2laJP1i4K4ezXrmyMxYHEX+Dgnkg8RI 5l7EhS8RfqXP++PDG1AS9Ekdf0SkZYOYLey7MSaM850bI16vqqSoW5ibyDqeh2zT 1XSrj2rD7SFVOfZgtxlVi/E3+1XN8y1vCMTr+DoPRdHS/KzmfQHdcEtJP6Qh8cJa CosWmStWdE1BWfHs7gjvpLVJdjec3eihbajqMng2hKmH3LSXZZ5tnE29I5pdjbvn rKlTuWlo9baGU8FV2PTeuDEYAHmquhjTUUPRS3YqQWYObKFrwDPcqcJGF9xjBo/z cVjUQlKstLGGIIyTfeiRIwhq0L7HM/5w1E1VrYg= -----END CERTIFICATE-----Generated at Wed Jul 29 01:42:14 2026 by rpki-client