$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/FA66BA00BD1311EEBC015623C4F9AE02.roa File: FA66BA00BD1311EEBC015623C4F9AE02.roa (raw, json) Hash identifier: y81/Bm4goLn9P37Big7/CzEV9a1Uz1uENuSDaA4pS5U= Subject key identifier: 57:D0:12:3E:52:22:96:FC:12:FE:96:DF:6D:DE:3D:9C:32:AD:66:C4 Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 0133 Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/FA66BA00BD1311EEBC015623C4F9AE02.roa Signing time: Sun 03 Aug 2025 05:12:20 +0000 ROA not before: Sun 03 Aug 2025 05:12:20 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 18013 IP address blocks: 103.141.220.0/24 maxlen: 24 103.141.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Aug 3 05:12:20 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=688eefb4-dc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:81:e7:28:19:63:1c:2f:97:9f:7e:12:40:2b: 67:32:29:fc:be:9a:39:dd:40:85:27:bd:9e:38:67: 98:b4:6c:95:c8:f6:77:f0:b4:e3:64:ba:11:e1:b7: 12:0c:ae:5a:cb:66:20:a8:0c:eb:30:ff:96:80:df: 02:12:82:41:9f:9f:ca:1c:f2:68:72:f1:27:0d:f9: a3:63:c6:52:53:26:95:c0:bc:62:9f:63:9a:68:b4: a5:2b:2a:99:3f:43:0a:af:cd:50:2e:b8:1a:ee:bb: 17:37:1a:91:77:4f:f0:d9:d7:73:68:e5:f0:15:fe: bb:11:fa:8e:2a:80:39:a6:4e:b6:b3:9d:55:7b:6d: 4d:3e:dd:d8:ee:af:73:67:fe:05:97:78:a6:00:d2: 06:cc:b7:56:cb:5d:bb:fe:4d:62:83:8b:4e:cf:77: e7:43:37:bd:11:ed:21:02:72:5e:79:20:92:1c:1a: de:99:bc:04:de:76:60:8d:74:7f:a2:95:3e:b0:6b: 9f:fe:a2:81:bd:95:30:1c:d0:ea:7d:b0:90:01:e2: 52:19:2e:9a:4d:8d:fd:06:e2:82:65:60:93:3d:c0: 0a:da:6f:ae:b5:67:cf:13:d6:5c:57:5d:65:3e:54: 7c:e4:fc:05:64:86:08:7c:19:34:19:b0:9d:81:7d: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D0:12:3E:52:22:96:FC:12:FE:96:DF:6D:DE:3D:9C:32:AD:66:C4 X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/FA66BA00BD1311EEBC015623C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.141.220.0/23 Signature Algorithm: sha256WithRSAEncryption a7:a4:c2:eb:fa:32:51:c1:9a:8e:c0:93:73:54:0e:5d:4a:9c: 52:16:96:ec:58:6d:63:08:e3:6b:37:95:02:6e:a4:74:a5:a4: b3:fe:11:f1:dd:e1:0b:a3:00:e8:b7:1a:61:c0:6b:c8:83:05: 51:fa:5d:c6:8d:96:54:e6:19:89:60:82:25:da:c6:ad:9c:b5: 20:52:57:5a:17:96:e9:c9:a3:a1:6f:23:0a:90:2a:89:85:90: 26:37:b3:c9:45:87:66:1c:b1:3e:d9:3d:45:2e:d4:99:a0:44: ef:da:b5:54:f1:25:0c:ce:eb:70:bb:a6:11:89:03:02:5f:68: 58:7a:08:e5:f4:74:d6:0a:2e:0c:75:2b:42:fe:6a:b2:93:5e: 8f:a6:3c:d5:3a:fe:06:7e:3c:4d:62:73:78:e8:a1:11:cf:52: 81:c8:2e:16:4d:c7:75:5f:ab:65:4b:8d:59:e7:0e:51:92:de: 52:57:22:f3:e2:5e:43:38:7b:ee:87:72:74:41:64:5e:53:34: 9a:21:b9:54:76:5a:4e:62:7c:49:99:7f:ad:68:94:ed:55:c1: c6:15:92:a0:33:1c:fa:8b:a6:38:f0:d4:ae:84:ae:6b:2f:3b: cc:f9:50:cb:5b:7f:1f:cf:96:21:ce:93:95:c1:6c:68:57:89: c2:f4:07:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjUwODAzMDUxMjIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlZWZiNC1kYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4HnKBljHC+Xn34SQCtnMin8vpo53UCFJ72eOGeYtGyVyPZ38LTjZLoR4bcS DK5ay2YgqAzrMP+WgN8CEoJBn5/KHPJocvEnDfmjY8ZSUyaVwLxin2OaaLSlKyqZ P0MKr81QLrga7rsXNxqRd0/w2ddzaOXwFf67EfqOKoA5pk62s51Ve21NPt3Y7q9z Z/4Fl3imANIGzLdWy127/k1ig4tOz3fnQze9Ee0hAnJeeSCSHBrembwE3nZgjXR/ opU+sGuf/qKBvZUwHNDqfbCQAeJSGS6aTY39BuKCZWCTPcAK2m+utWfPE9ZcV11l PlR85PwFZIYIfBk0GbCdgX3v9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFfQEj5S Ipb8Ev6W323ePZwyrWbEMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTExQTEvQTlCNzNDQThCMDVGMTFFRTk5QzY1NDc3QzRGOUFFMDIvRkE2NkJBMDBC RDEzMTFFRUJDMDE1NjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjdwwDQYJKoZIhvcNAQELBQADggEBAKekwuv6MlHBmo7A k3NUDl1KnFIWluxYbWMI42s3lQJupHSlpLP+EfHd4QujAOi3GmHAa8iDBVH6XcaN llTmGYlggiXaxq2ctSBSV1oXlunJo6FvIwqQKomFkCY3s8lFh2YcsT7ZPUUu1Jmg RO/atVTxJQzO63C7phGJAwJfaFh6COX0dNYKLgx1K0L+arKTXo+mPNU6/gZ+PE1i c3jooRHPUoHILhZNx3Vfq2VLjVnnDlGS3lJXIvPiXkM4e+6HcnRBZF5TNJohuVR2 Wk5ifEmZf61olO1VwcYVkqAzHPqLpjjw1K6ErmsvO8z5UMtbfx/PliHOk5XBbGhX icL0BxY= -----END CERTIFICATE-----Generated at Tue Nov 4 17:18:17 2025 by rpki-client