$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/26833348954511EFA5D9B90FC4F9AE02.roa File: 26833348954511EFA5D9B90FC4F9AE02.roa (raw, json) Hash identifier: K1UuNBw5WFh1vrFCgINXdCeXsqQDIqc2wdlXDmKdmEY= Subject key identifier: 25:07:7D:EB:14:AA:49:2D:2A:D2:54:6D:10:B5:35:A9:45:D6:9B:6F Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 0838 Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/26833348954511EFA5D9B90FC4F9AE02.roa Signing time: Fri 31 Oct 2025 21:11:21 +0000 ROA not before: Fri 31 Oct 2025 21:11:21 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141149 IP address blocks: 103.155.70.0/23 maxlen: 23 103.155.70.0/24 maxlen: 24 2001:df4:b980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Oct 31 21:11:21 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=690525f9-2166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:82:01:94:c9:45:e5:84:1f:74:bc:e9:6d:69: f8:30:18:da:6d:f8:d0:1e:cc:c5:46:35:a1:40:a4: 56:03:22:c8:bb:3c:31:df:15:68:e3:cb:91:b1:86: 4e:16:26:07:9e:2f:5f:a8:b2:f6:ca:a8:22:5a:db: b3:ac:9f:50:15:7c:ee:72:5b:10:f7:bf:ef:e2:42: ab:8a:bd:a1:7d:85:5d:ea:cc:f4:55:65:20:b0:a3: 4e:6d:57:d9:c6:83:f0:b0:27:b1:9d:68:25:94:1e: 26:33:92:81:7d:e6:e0:db:ed:ac:9b:54:7b:29:3f: 2e:ca:3b:5e:8a:9b:db:04:bd:6a:a1:45:cf:5e:3c: 1a:e6:22:50:42:7b:2d:8e:5b:53:56:36:ec:da:ef: 3b:12:8c:7d:b6:fa:42:e7:a0:00:8a:2c:44:8e:cf: f1:16:81:ab:d1:45:9b:1a:ff:12:7a:99:a3:53:e8: 65:4c:10:29:f9:68:af:22:55:d7:bb:f6:c2:7d:4f: d1:c9:a3:e0:8f:09:2a:ae:ed:c5:1d:5c:76:c5:29: ee:10:de:53:d0:ec:70:09:04:a8:f8:c7:07:f6:7a: b0:7f:d4:57:97:48:9c:e9:6f:2a:eb:7d:b1:bc:86: 19:95:f8:1a:90:b1:45:b8:ca:0a:c6:7f:18:ce:41: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:07:7D:EB:14:AA:49:2D:2A:D2:54:6D:10:B5:35:A9:45:D6:9B:6F X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/26833348954511EFA5D9B90FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.70.0/23 IPv6: 2001:df4:b980::/48 Signature Algorithm: sha256WithRSAEncryption 41:32:55:eb:42:bd:44:ab:6d:b1:41:59:e2:f0:12:d1:ab:07: fd:c1:4e:ed:21:38:cc:1b:f9:e9:67:c7:7f:3a:a2:9f:5e:76: be:34:26:58:c6:62:f3:ee:53:c4:b8:29:ab:0e:81:9f:1d:b5: 96:eb:3d:f7:14:e5:82:fa:ec:cc:f2:b3:08:b5:58:28:b1:e7: 4f:e5:96:8e:1b:f0:4d:c9:ec:f0:4a:d9:f8:01:26:8d:36:c3: fb:75:8e:f2:db:69:c3:8b:51:03:76:e5:31:b0:41:55:f3:3e: e7:38:6f:49:34:6c:a1:64:3b:5d:f7:06:08:cf:9e:64:c8:aa: 68:20:10:8e:ae:f7:88:8f:d8:87:26:0b:a9:6c:e7:9e:55:f4: 0b:78:c3:96:cd:c2:70:97:43:f1:ee:0d:b6:31:c3:bc:98:1f: c4:91:17:b5:bb:47:c6:8c:c9:ec:ff:26:b6:96:bc:60:4a:b1: f8:bd:19:18:55:10:09:25:25:b1:c1:dd:6c:fa:8a:28:27:0d: 8f:aa:a9:db:95:59:07:1a:ac:7f:d3:5c:56:5e:d5:d6:69:17: cb:0f:34:cc:97:e0:ee:23:79:b9:90:e4:dd:f3:63:77:59:e2: 6c:53:9c:1c:b7:89:45:b3:bd:a4:ae:02:98:9c:34:0a:16:f5: be:54:07:cb -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjUxMDMxMjExMTIxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1MjVmOS0yMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IIBlMlF5YQfdLzpbWn4MBjabfjQHszFRjWhQKRWAyLIuzwx3xVo48uRsYZO FiYHni9fqLL2yqgiWtuzrJ9QFXzuclsQ97/v4kKrir2hfYVd6sz0VWUgsKNObVfZ xoPwsCexnWgllB4mM5KBfebg2+2sm1R7KT8uyjteipvbBL1qoUXPXjwa5iJQQnst jltTVjbs2u87Eox9tvpC56AAiixEjs/xFoGr0UWbGv8SepmjU+hlTBAp+WivIlXX u/bCfU/RyaPgjwkqru3FHVx2xSnuEN5T0OxwCQSo+McH9nqwf9RXl0ic6W8q632x vIYZlfgakLFFuMoKxn8YzkGutQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCUHfesU qkktKtJUbRC1NalF1ptvMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA3QjcvQkQ2RkU4NTBGMTc1MTFFQUI1NkIwMDRDQzRGOUFFMDIvMjY4MzMzNDg5 NTQ1MTFFRkE1RDlCOTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnm0YwDwQCAAIwCQMHACABDfS5gDANBgkqhkiG9w0BAQsF AAOCAQEAQTJV60K9RKttsUFZ4vAS0asH/cFO7SE4zBv56WfHfzqin152vjQmWMZi 8+5TxLgpqw6Bnx21lus99xTlgvrszPKzCLVYKLHnT+WWjhvwTcns8ErZ+AEmjTbD +3WO8ttpw4tRA3blMbBBVfM+5zhvSTRsoWQ7XfcGCM+eZMiqaCAQjq73iI/YhyYL qWznnlX0C3jDls3CcJdD8e4NtjHDvJgfxJEXtbtHxozJ7P8mtpa8YEqx+L0ZGFUQ CSUlscHdbPqKKCcNj6qp25VZBxqsf9NcVl7V1mkXyw80zJfg7iN5uZDk3fNjd1ni bFOcHLeJRbO9pK4CmJw0Chb1vlQHyw== -----END CERTIFICATE-----Generated at Wed Nov 5 20:09:24 2025 by rpki-client