$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/1E7B7BB4996C11EDA107E666C4F9AE02.roa File: 1E7B7BB4996C11EDA107E666C4F9AE02.roa (raw, json) Hash identifier: /ERrUArKmo0KgEQ70S3Uf+U0E1QNCp3+3kkOG/O7FLo= Subject key identifier: 4C:8E:3E:7A:76:2D:D5:84:D8:DD:64:A8:D9:1B:6B:8F:39:45:11:C1 Certificate issuer: /CN=A91AB3E3/serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5 Certificate serial: 019B Authority key identifier: C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/1E7B7BB4996C11EDA107E666C4F9AE02.roa Signing time: Mon 31 Mar 2025 02:31:03 +0000 ROA not before: Mon 31 Mar 2025 02:31:03 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 133112 IP address blocks: 103.72.136.0/24 maxlen: 24 103.72.137.0/24 maxlen: 24 2001:df1:d8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB3E3, serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5 Validity Not Before: Mar 31 02:31:03 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67e9fe67-88bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:93:82:c1:09:26:05:45:d1:0d:ff:d3:53:a4: c7:e2:1c:15:f2:df:a0:42:8a:37:b9:ef:d2:cf:5b: ab:70:f5:87:f8:ea:49:d1:42:5d:35:02:cf:d8:76: 3c:1f:74:5c:92:fb:c8:68:cb:57:e4:31:e8:89:96: be:29:4b:94:bb:36:42:b2:a2:fd:06:ec:2a:94:c7: 96:cc:4c:80:0d:39:5c:a4:d9:fc:0d:e8:92:2b:c5: c9:bb:78:4b:d9:a4:66:97:4c:f7:b2:f8:72:38:e1: ee:7c:66:40:e3:26:d0:f6:ab:0b:2e:3a:71:5d:9b: 78:99:39:fc:f3:95:b7:bb:53:8c:eb:05:3a:47:70: 5c:88:21:da:1f:a8:6d:b7:d2:f0:17:96:c1:03:07: fa:3e:0c:b7:3f:45:20:05:67:bf:25:74:39:c7:05: bd:60:76:e2:40:f4:3b:34:e1:9e:bf:b0:84:c6:f2: 4f:c9:97:35:42:c5:52:34:28:36:d2:2b:3a:da:36: e5:ef:ff:43:ad:88:f0:9f:36:21:9a:b3:d3:81:a0: 50:65:99:0b:d8:80:71:2f:7b:06:1a:8b:40:8e:91: df:7f:f2:01:1a:25:34:e2:f2:e7:8a:c3:0f:ff:00: 5e:e8:8a:4a:ec:0a:63:f5:98:3b:9d:67:3b:6f:9c: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8E:3E:7A:76:2D:D5:84:D8:DD:64:A8:D9:1B:6B:8F:39:45:11:C1 X509v3 Authority Key Identifier: keyid:C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/1E7B7BB4996C11EDA107E666C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.136.0/23 IPv6: 2001:df1:d8c0::/48 Signature Algorithm: sha256WithRSAEncryption aa:f0:40:0f:61:aa:19:f1:97:29:9d:bc:e0:9b:a2:55:e9:80: 14:73:72:d4:76:ce:fe:35:3d:92:c1:e5:37:62:bb:7e:aa:53: 1d:a9:32:6c:44:c4:31:87:40:99:f8:b9:93:c6:a6:ea:a4:bc: 68:b5:df:41:7b:b4:61:45:90:65:39:5b:8e:d6:84:5e:fb:f9: 62:10:b6:ff:8a:97:36:f4:df:d1:07:e5:e7:5d:33:4b:d3:83: 49:22:40:87:8c:58:14:de:70:85:ad:0c:db:1f:cb:b0:89:17: fd:c5:35:42:ad:57:ff:9f:3c:bf:49:5a:d5:c4:de:49:69:ec: 5d:aa:2a:be:ae:bd:3e:37:de:d1:97:e2:dc:23:4d:f1:c7:a7: 6c:8e:f8:d3:5b:73:ad:05:ec:13:4a:23:f9:cb:06:7e:16:a3: 92:e7:62:0d:9a:b1:f0:22:c2:b3:dc:80:ca:7d:e7:43:72:12: cc:70:4a:08:77:01:90:bd:08:9c:d5:fc:95:fc:11:37:c0:0e: 2c:56:18:e0:73:89:50:2f:46:9a:b7:39:a6:39:8b:9c:f9:1b: 8c:e1:30:b9:32:3f:0c:1a:94:05:8e:5d:ec:fe:ec:94:5f:fb: d2:79:b5:d8:66:4a:e5:43:5a:23:af:90:1a:2c:ee:55:0e:43: 78:08:fd:b7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzRTMxMTAvBgNVBAUTKEM4RTA1OTFFN0U1MTdENDE5Q0ZDODYxNzFDRENBOUZE RTYyNkU4RjUwHhcNMjUwMzMxMDIzMTAzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2U5ZmU2Ny04OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05OCwQkmBUXRDf/TU6TH4hwV8t+gQoo3ue/Sz1urcPWH+OpJ0UJdNQLP2HY8 H3RckvvIaMtX5DHoiZa+KUuUuzZCsqL9BuwqlMeWzEyADTlcpNn8DeiSK8XJu3hL 2aRml0z3svhyOOHufGZA4ybQ9qsLLjpxXZt4mTn885W3u1OM6wU6R3BciCHaH6ht t9LwF5bBAwf6Pgy3P0UgBWe/JXQ5xwW9YHbiQPQ7NOGev7CExvJPyZc1QsVSNCg2 0is62jbl7/9DrYjwnzYhmrPTgaBQZZkL2IBxL3sGGotAjpHff/IBGiU04vLnisMP /wBe6IpK7Apj9Zg7nWc7b5zs3QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEyOPnp2 LdWE2N1kqNkba485RRHBMB8GA1UdIwQYMBaAFMjgWR5+UX1BnPyGFxzcqf3mJuj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjNFMy9BOTQ2MjRCNDk5 NjgxMUVEQjE2MkY4NjFDNEY5QUUwMi95T0JaSG41UmZVR2NfSVlYSE55cF9lWW02 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPQlpIbjVSZlVHY19JWVhITnlwX2VZbTZQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIzRTMvQTk0NjI0QjQ5OTY4MTFFREIxNjJGODYxQzRGOUFFMDIvMUU3QjdCQjQ5 OTZDMTFFREExMDdFNjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnSIgwDwQCAAIwCQMHACABDfHYwDANBgkqhkiG9w0BAQsF AAOCAQEAqvBAD2GqGfGXKZ284JuiVemAFHNy1HbO/jU9ksHlN2K7fqpTHakybETE MYdAmfi5k8am6qS8aLXfQXu0YUWQZTlbjtaEXvv5YhC2/4qXNvTf0Qfl510zS9OD SSJAh4xYFN5wha0M2x/LsIkX/cU1Qq1X/588v0la1cTeSWnsXaoqvq69Pjfe0Zfi 3CNN8cenbI7401tzrQXsE0oj+csGfhajkudiDZqx8CLCs9yAyn3nQ3ISzHBKCHcB kL0InNX8lfwRN8AOLFYY4HOJUC9Gmrc5pjmLnPkbjOEwuTI/DBqUBY5d7P7slF/7 0nm12GZK5UNaI6+QGizuVQ5DeAj9tw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:11:08 2025 by rpki-client