$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/25C61AECB7ED11ED9CF6A63EC4F9AE02.roa File: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (raw, json) Hash identifier: Yv9ClrwAFACGSqITuh9ooZXNuE+9WgMW5OezB268l+A= Subject key identifier: 7F:C2:48:3B:51:61:BF:DE:CF:61:95:2F:8E:FA:8B:AD:45:2B:36:06 Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 0405 Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/25C61AECB7ED11ED9CF6A63EC4F9AE02.roa Signing time: Sun 03 Aug 2025 01:07:50 +0000 ROA not before: Sun 03 Aug 2025 01:07:50 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131306 IP address blocks: 103.47.230.0/24 maxlen: 24 103.47.231.0/24 maxlen: 24 103.69.108.0/24 maxlen: 24 103.152.9.0/24 maxlen: 24 2001:df3:3a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: Aug 3 01:07:50 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=688eb666-1ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:65:40:79:c9:7a:fc:34:ef:c7:3a:43:02:a1: 83:a8:4d:ab:e5:41:70:20:29:58:25:82:28:81:2f: 4a:18:a8:9a:db:31:cf:97:de:85:42:ae:51:b1:fd: c2:56:47:86:86:65:eb:1b:a2:8e:ba:1c:1c:88:f5: 37:24:dc:f6:df:b4:30:91:90:64:c9:42:a0:8e:51: 37:57:39:44:86:0d:b8:a6:22:86:d1:b4:00:6d:84: ef:9b:ba:fb:3f:91:0e:fe:4a:ec:19:15:f6:91:cf: fc:88:f0:ad:1a:d3:fb:ab:b3:cd:79:66:8e:d3:df: af:ae:82:4f:ca:fc:56:70:ae:95:e9:4e:da:3c:7b: a2:2a:a6:d3:bf:76:74:52:f2:c1:41:5d:72:db:d6: 73:f1:9f:89:fe:5f:38:ba:1d:17:cb:53:db:c3:34: 56:87:31:6b:aa:f0:0b:29:ad:3f:bc:57:18:6d:88: 64:f1:d9:1e:76:c9:32:82:e8:98:aa:7a:18:6b:b8: 69:8f:3a:35:12:98:5e:a7:c0:97:92:6a:15:d5:cd: cc:28:27:57:f3:63:e0:7d:47:fe:1d:2e:80:7b:67: 2d:82:98:19:af:de:cb:07:d9:f5:1b:ad:5c:de:61: c7:2b:38:47:64:9b:19:6d:61:73:6f:a5:89:4a:24: fe:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C2:48:3B:51:61:BF:DE:CF:61:95:2F:8E:FA:8B:AD:45:2B:36:06 X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/25C61AECB7ED11ED9CF6A63EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.47.230.0/23 103.69.108.0/24 103.152.9.0/24 IPv6: 2001:df3:3a00::/48 Signature Algorithm: sha256WithRSAEncryption 2e:23:e8:5d:a5:82:3d:85:ac:8a:42:e4:11:51:9b:5a:34:55: 65:34:04:39:f3:ba:e6:d0:71:3d:b2:a5:d3:2e:4d:44:8a:e5: a1:f0:86:9d:7a:6b:6f:72:02:8c:d6:fa:13:dd:8a:c1:a9:54: 2c:34:8a:7d:61:da:86:57:d0:97:36:a2:f2:c2:93:27:bf:71: 26:40:7e:c1:9d:86:49:7b:8f:ab:95:26:92:aa:a8:49:f2:f1: d6:30:b5:52:3d:b8:10:cb:14:05:c9:b4:0d:98:e2:4c:e3:04: 1f:ca:5d:8c:94:11:26:8f:41:19:44:f6:94:21:24:fb:c8:9c: de:37:00:41:c4:85:28:0d:78:6b:31:06:a7:ab:dd:c8:36:0c: 26:3e:00:40:f1:40:48:f4:85:c2:8c:6d:ff:fb:9a:58:10:b2: 75:e1:e4:9e:f1:1c:6f:ba:c7:27:81:b2:cc:34:6a:77:f3:81: 28:b5:9e:24:c7:9a:6f:f4:7c:4d:9b:f8:b5:94:40:c0:40:16: f0:75:98:74:06:48:e2:bc:78:2a:d4:b0:3c:c1:f3:e6:cc:f9: a6:1d:f7:a1:c6:3f:17:30:cf:93:79:0f:63:f5:b9:ad:e5:7b: 6d:ad:25:1e:f8:71:34:84:db:33:e1:a8:6b:0c:9e:1f:6c:3a: 1f:73:35:7b -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjUwODAzMDEwNzUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlYjY2Ni0xYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WVAecl6/DTvxzpDAqGDqE2r5UFwIClYJYIogS9KGKia2zHPl96FQq5Rsf3C VkeGhmXrG6KOuhwciPU3JNz237QwkZBkyUKgjlE3VzlEhg24piKG0bQAbYTvm7r7 P5EO/krsGRX2kc/8iPCtGtP7q7PNeWaO09+vroJPyvxWcK6V6U7aPHuiKqbTv3Z0 UvLBQV1y29Zz8Z+J/l84uh0Xy1PbwzRWhzFrqvALKa0/vFcYbYhk8dkedskyguiY qnoYa7hpjzo1Ephep8CXkmoV1c3MKCdX82PgfUf+HS6Ae2ctgpgZr97LB9n1G61c 3mHHKzhHZJsZbWFzb6WJSiT+wQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFH/CSDtR Yb/ez2GVL476i61FKzYGMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzc2RkIvOTJGQjcxQTA4M0YyMTFFQ0JCMjUxOTg1QzRGOUFFMDIvMjVDNjFBRUNC N0VEMTFFRDlDRjZBNjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAFnL+YDBABnRWwDBABnmAkwDwQCAAIwCQMHACABDfM6ADAN BgkqhkiG9w0BAQsFAAOCAQEALiPoXaWCPYWsikLkEVGbWjRVZTQEOfO65tBxPbKl 0y5NRIrlofCGnXprb3ICjNb6E92KwalULDSKfWHahlfQlzai8sKTJ79xJkB+wZ2G SXuPq5UmkqqoSfLx1jC1Uj24EMsUBcm0DZjiTOMEH8pdjJQRJo9BGUT2lCEk+8ic 3jcAQcSFKA14azEGp6vdyDYMJj4AQPFASPSFwoxt//uaWBCydeHknvEcb7rHJ4Gy zDRqd/OBKLWeJMeab/R8TZv4tZRAwEAW8HWYdAZI4rx4KtSwPMHz5sz5ph33ocY/ FzDPk3kPY/W5reV7ba0lHvhxNITbM+GoawyeH2w6H3M1ew== -----END CERTIFICATE-----Generated at Mon Aug 11 04:14:18 2025 by rpki-client