$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73FFDABAA3F711F0B7D2CC77C4F9AE02.roa File: 73FFDABAA3F711F0B7D2CC77C4F9AE02.roa (raw, json) Hash identifier: 8fB5mxz3IujgtVp3tSK0uAcjSIg5ASJWd6b5PNO0Tnk= Subject key identifier: CF:0F:E6:B3:4D:8E:A6:D1:D7:0D:68:F3:8B:A2:09:31:B7:52:8D:BE Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4F09 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73FFDABAA3F711F0B7D2CC77C4F9AE02.roa Signing time: Mon 27 Oct 2025 08:27:24 +0000 ROA not before: Mon 27 Oct 2025 08:27:24 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150895 IP address blocks: 36.50.26.0/24 maxlen: 24 36.50.27.0/24 maxlen: 24 103.67.162.0/23 maxlen: 23 103.72.56.0/23 maxlen: 23 103.75.76.0/23 maxlen: 23 103.78.2.0/23 maxlen: 23 103.116.52.0/23 maxlen: 24 103.152.164.0/23 maxlen: 24 103.161.172.0/24 maxlen: 24 103.173.66.0/23 maxlen: 24 103.237.86.0/23 maxlen: 24 163.61.72.0/23 maxlen: 24 163.223.210.0/23 maxlen: 23 163.227.230.0/23 maxlen: 24 2401:3560::/48 maxlen: 48 2401:37e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20233 (0x4f09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 27 08:27:24 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ff2cec-7e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:72:ba:a3:08:7b:e8:6a:ea:57:48:40:16: 20:6c:74:dc:b1:14:a0:75:99:16:e1:64:13:71:a6: 20:8a:c8:77:97:20:db:1d:35:0a:c3:9a:8a:db:64: c4:4a:05:29:57:d8:7f:1c:d5:d7:96:25:a3:2e:c9: b8:27:de:58:ee:e3:18:cb:69:d4:78:c1:26:09:de: 27:50:d1:fd:07:f9:98:87:ec:16:97:01:8a:7d:e6: 0a:14:51:5d:4c:e4:b1:7d:ce:63:6b:30:a0:b7:2a: ac:12:fd:17:e7:a1:c0:f7:d3:82:7e:90:e6:ec:64: e8:1c:29:4b:0b:18:b5:df:1c:92:22:09:3e:e5:a4: 96:84:96:98:67:40:c5:80:74:7c:3b:02:6f:26:b9: 87:b7:d8:d5:93:7e:de:79:11:0f:26:d8:f6:1c:b3: 6a:5b:b1:02:37:5c:01:30:c0:27:05:1c:9e:4c:e3: 5c:05:da:c5:83:98:5f:2e:e7:87:59:5b:ef:0b:f2: e9:f2:4c:46:6e:a0:3d:f2:7a:c0:9b:1e:60:bb:75: e3:b5:a8:cf:38:f3:e0:01:2d:96:48:f6:b8:83:38: d3:4a:89:e6:b4:73:e1:75:a3:18:73:08:bf:49:4c: d3:d1:6f:05:9c:b6:39:30:36:60:8c:b8:21:15:15: 0a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0F:E6:B3:4D:8E:A6:D1:D7:0D:68:F3:8B:A2:09:31:B7:52:8D:BE X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73FFDABAA3F711F0B7D2CC77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.26.0/23 103.67.162.0/23 103.72.56.0/23 103.75.76.0/23 103.78.2.0/23 103.116.52.0/23 103.152.164.0/23 103.161.172.0/24 103.173.66.0/23 103.237.86.0/23 163.61.72.0/23 163.223.210.0/23 163.227.230.0/23 IPv6: 2401:3560::/48 2401:37e0::/48 Signature Algorithm: sha256WithRSAEncryption 5a:5c:7b:b0:19:16:68:e0:c4:51:5d:4f:ba:1e:f2:2f:6c:b3: 1f:08:1b:fa:07:6d:64:c0:49:66:90:a1:5b:85:76:41:e9:37: 91:88:2b:da:9e:e6:c9:df:54:09:35:1c:59:4a:fb:31:6a:d4: 15:f9:8e:85:d2:49:8f:f4:8c:fc:3d:08:c3:a3:eb:63:9e:b2: 00:e5:ac:7e:34:52:3d:21:8f:97:8e:27:73:5a:35:21:ad:92: cd:9b:72:fa:0d:00:00:98:e0:f8:f9:55:04:78:2e:65:91:29: 6b:ea:2c:c1:88:7d:69:a4:c8:1d:f1:c0:3b:c7:44:dc:47:e1: 52:7d:fe:f5:7c:97:67:b6:1f:6a:a0:0b:0e:84:dd:61:c4:9d: 11:9d:41:ae:93:93:7c:42:ac:f7:b1:9f:25:f6:6d:6c:45:e5: 25:cb:6d:d0:16:9b:76:7d:e9:f1:e5:bf:15:8a:33:ce:48:b7: 92:5b:1d:a7:7e:70:d1:4b:67:46:25:7f:0c:af:34:7e:3a:3d: bd:93:d1:c2:64:d5:4b:00:43:df:62:57:92:66:3c:8c:c9:00: af:00:c4:88:aa:7a:7e:77:a2:fc:e0:52:eb:63:4a:e3:83:76: ed:54:14:df:f0:eb:e0:32:ee:d1:91:bb:4f:e6:60:4e:61:92: 61:12:ca:37 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgICTwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUxMDI3MDgyNzI0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZmMmNlYy03ZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqylyuqMIe+hq6ldIQBYgbHTcsRSgdZkW4WQTcaYgish3lyDbHTUKw5qK22TE SgUpV9h/HNXXliWjLsm4J95Y7uMYy2nUeMEmCd4nUNH9B/mYh+wWlwGKfeYKFFFd TOSxfc5jazCgtyqsEv0X56HA99OCfpDm7GToHClLCxi13xySIgk+5aSWhJaYZ0DF gHR8OwJvJrmHt9jVk37eeREPJtj2HLNqW7ECN1wBMMAnBRyeTONcBdrFg5hfLueH WVvvC/Lp8kxGbqA98nrAmx5gu3XjtajPOPPgAS2WSPa4gzjTSonmtHPhdaMYcwi/ SUzT0W8FnLY5MDZgjLghFRUKfQIDAQABo4IC+DCCAvQwHQYDVR0OBBYEFM8P5rNN jqbR1w1o84uiCTG3Uo2+MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNzNGRkRBQkFB M0Y3MTFGMEI3RDJDQzc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYEGCCsGAQUFBwEHAQH/ BHIwcDBUBAIAATBOAwQBJDIaAwQBZ0OiAwQBZ0g4AwQBZ0tMAwQBZ04CAwQBZ3Q0 AwQBZ5ikAwQAZ6GsAwQBZ61CAwQBZ+1WAwQBoz1IAwQBo9/SAwQBo+PmMBgEAgAC MBIDBwAkATVgAAADBwAkATfgAAAwDQYJKoZIhvcNAQELBQADggEBAFpce7AZFmjg xFFdT7oe8i9ssx8IG/oHbWTASWaQoVuFdkHpN5GIK9qe5snfVAk1HFlK+zFq1BX5 joXSSY/0jPw9CMOj62OesgDlrH40Uj0hj5eOJ3NaNSGtks2bcvoNAACY4Pj5VQR4 LmWRKWvqLMGIfWmkyB3xwDvHRNxH4VJ9/vV8l2e2H2qgCw6E3WHEnRGdQa6Tk3xC rPexnyX2bWxF5SXLbdAWm3Z96fHlvxWKM85It5JbHad+cNFLZ0YlfwyvNH46Pb2T 0cJk1UsAQ99iV5JmPIzJAK8AxIiqen53ovzgUutjSuODdu1UFN/w6+Ay7tGRu0/m YE5hkmESyjc= -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:21 2025 by rpki-client